last executing test programs: 2.769802909s ago: executing program 3 (id=269): r0 = syz_open_dev$evdev(&(0x7f0000000480), 0x3d, 0x2400) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x40880}, 0x2014) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) r2 = socket$tipc(0x1e, 0x5, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x55, 0xd79, 0x0, {0x7fff, 0xec}, {0x8a6, 0x8a}, @ramp={0x1, 0x280, {0xfffe, 0x22b, 0xfffc, 0x55}}}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="dc53713c"]) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000c40)=ANY=[@ANYBLOB="0380c2000000bbbbbb64ef2c07b26add94bbbbbb0800450000300000000000019078ac1e00e4ab1414aa030490781200183f2500000000000000000100007f0000017f000001"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000780)={r0, &(0x7f0000000ac0)='\x03\x00\xea\xe2\xa7\xc5\xca\xa7t\r\xa6\xd0\xdc\xe8\xf4\xc3A\xb8\x04\x05G\xf9\xe6\x83zl\xf2\xe3\"\xe4\xa1\xed\x99\xe9\r\n\x0e\x91\x12\xe9\x9aO\xc50~\xe7\x93\x92\xa2l\x17ER\x1d8\x19s\xc8E\xad\xceS\xdd\x98\x9d\xf5\x97\x1d\xd5\x7f\x0fl\x19P\xc1\'\xf7\xe5\xd2\"\x13\xed\xda\xaa\xcd\xfc\x8d\x81K6\xa7_t\xf6\xea\xc2\r\xad\x1b$$\x00\xb0\xfd\xadr\v\xc6\x18\xb3(hO]\'\xc38i\x16\xb1Cl&\"\xa81F\x1c&\xb3\x9c\xd4y\xa5\xdeBe*\xe2v\xdb\x81\xa7\x98$\xa0\x88\xa3\x02\xa4\x81\xb3\xa5|\xf1(\xf7pt\xeff\xf8\x17rI\xf6\x1a\v\xcd\xe7\x92]\xfas8\xa7\x97\xb6', 0x20801, &(0x7f00000006c0)={@_ha_fsid={[0x200, 0x5]}, {0x9, 0x81, 0xe1da, 0x335}}, 0x3fc, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0xfffffffb}) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x0, r2}, 0x18) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="02000000ff0f000021000000090000008f4400800000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000300"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000140)=@raw=[@generic={0xff, 0x8, 0x7, 0x7, 0x11b}], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xd4, &(0x7f00000004c0)=""/212, 0x41100, 0x8, '\x00', 0x0, 0x17, r5, 0x8, &(0x7f00000005c0)={0x10000, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x9, 0x6, 0x3}, 0x10, 0x203f2, r3, 0x3, &(0x7f0000000980)=[r5, r6, r9, r10, r11], &(0x7f00000009c0)=[{0x5, 0x2, 0x7, 0xb}, {0x3, 0x5, 0xa, 0x2}, {0x2, 0x5, 0xe, 0x9}], 0x10, 0xc68}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r12, 0x114, 0x6, &(0x7f0000000180), 0x4) connect$tipc(r2, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10) 2.308698119s ago: executing program 3 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000001ac0)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x81}, @broadcast, @broadcast, @random="0d25a9039da1", {0x9, 0x4}, @value=@ver_80211n={0x0, 0x5, 0x0, 0x3, 0x0, 0x1}}, 0x4000, 0x8, @default, @void, @val={0x2d, 0x1a, {0xc, 0x3, 0x7, 0x0, {0x397d, 0x4, 0x0, 0x3f8}, 0x8, 0x5, 0x5}}, [{0xdd, 0x17, "900db43ae4f119b6e35a3b1f13707d400d1b325e8d6bb1"}]}, 0x57) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7ffe}, @random="6ec62acb3454", @broadcast, @device_a, {0x4, 0x569}}, @a_msdu=[{@device_a, @device_a, 0x85, "15b04cf5a8b2487a6fee8f27dcd9763dbc06d6d4772bdbb4ba18964fe8598c8b63e8856809e8e396e24f45422915ca59762f6642c30c6f85e35ee34f39519b905e56936db29f29976c7bc13ba674b4b7c64501036a8bcd5def40e51e8b3573af06eb4bb82d79fcc471dc51b4c467deabd7f8986d6cf84f8e44ea10d9d45405e5216b51f70e"}, {@broadcast, @device_a, 0x4f, "5e99f0739c5230ab6a860c078c2c3b6c2903970235fa55a9eba4adfff500145cfbcf7c9baa4ce9239267b8a93a0a6cc3b815040479312ee8568800f23c4dbaf1ff501c00b96e120ca498b0bc9d02f0"}, {@broadcast, @broadcast, 0x98, "12353d7e13cf225d25c937c59e176fe4c6d2eb98488d3a387432721e55af014392ce567faae2f0ee87094a5987fe1860f0c8a52d8103a0c23e7ff2c136847d25ac2a3524c03b33e1819904402b898fbb3195d6f6b0c8b8624750339d9ac6286d1da3c263f967e1e26c4d56c58fc5d1690a865824f1e8222f7306b23e128ace6539c0095bdc97a5972721b32b7b328746301cdb09bac3b026"}, {@broadcast, @broadcast, 0x96, "81211e7aac839034682fbadc538e96a9731ea3c1086d16045cf2b6ecccec7a55e9645c2cf32038e97a25930221dc9f503a1de15777a408fc2b8ca5a56742054ec956882629de5a53372358020bda7a10d1ff6e6eaa9f8212786f543a54795f4814f62c6627083dbaf88c550b65101a1fa4702cc0f733677ec274b1cef55fddfaaf5bb5ea48ab11b1d2d7a55a3eb05fc65bd2794c9f1a"}, {@device_a, @device_a, 0xb2, "428f0e8edc46ab77c83be5c934e4b25bdd1c575dcd97ef7db2a1ee082e84b878acf13c210afb6c212af7bfa12b044e89daf5cbbed998318e49dca6434005bd5211d90aac1851ae577fbad34dcca3319c9e6295d91beb010b224096ddd208725a5240b70314d5bf13a919a14312a2a647090da7abf97f61db984de1ef469ca4ee1219bfa3c7e745037df9547620b52df45e31ae0892ef09a12ba12ef78bc4b7d714d3e84068d5c4e923cda230d181f8effe82"}, {@device_b, @device_a, 0x1000, "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"}, {@device_b, @broadcast, 0x8f, "01517187bfc689a6d82263bc5746c62b3890e53f65f48d53c8016fbb4971edb6815db295d220eb5e672f449ee658ca0066a5ebc67eb2ebf28957ffebd0407f1cdee96b5a06cc7655ef6e7a12adc7489a95637bdd5821b05ff0b62b9fd6457cabd013fb11ea7f17ed22a524bbe51fb8b80b80cc5c980e0331cd2aa8c6f78ead9faae02788679c636998d807d771a4ed"}, {@device_a, @device_a, 0xf1, "c1495faee93dbf1646eb3bfbe20258b9330e88871a1b8678cfff19918c5c12d76b072fcfb65af3c6639f5664cc82af33f1c5ea5e142fd93714dfe7af2b8283624d12f6d14c0b88008108b2be9b2e8d717d2e4a83c6555f26638832260ee7cac93d849a277907f59f285e119f939bf9244d0a5f1350e50cb66b8354777183c8877986c3f7bb8e51f045367fc1eb8eac9c45a3d1437ef78ebab05c413e28bfd6fa73149fc3e42c09c482602eba7f6ac453fb907cb34cf3542df90b666942acd430cd4c6b49999441970b10a904321b8a0fd16be3ce9388c89093bde5ca571ff0bfcfe2c06daf6f67e5eba2da2c0a4058f96c"}, {@device_b, @device_a, 0x86, "46e4c3785d4aed4c5ec25078c7c93481fe088f35e46ea0e61db45650bef774fbe9ce1891a06d73a59f33a711f5c6183fcd5ed1c3a2821392a420a7fe17019062c3eaf0106c3d075beb5e500fc1b8c7e721d1d1460ebaacba0184060fa3e0249e7c01c4f8be6a54845394c40b5647d05cf076d73126720c87bd86f865259177876ec6561b00fd"}]}, 0x155c) 1.54774324s ago: executing program 3 (id=293): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno', 0xa) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 1.544536188s ago: executing program 3 (id=295): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a00831300000000fcdbcf25000000000000000008000500d47021fb"], 0x20}}, 0xe598e532f5609d3c) 1.479384593s ago: executing program 3 (id=297): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000080)) r1 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x4915, 0x0) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r1, 0x6f44, 0x81) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x4c080, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000140)=0x4) close_range(r1, r2, 0x2) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r1, 0x6f44, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000001c0)={@mcast1, 0x53, r3}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x401, 0x16, 0x8004, 0x26d, 0x0, 0x3ff, 0x8, 0x4, r4}, 0x20) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x8) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000300)=0x7) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000340)={r2, 0x0, 0x7, 0x5}) ioctl$sock_ifreq(r5, 0x4489, &(0x7f0000000380)={'pim6reg0\x00', @ifru_map={0x401, 0x401, 0xfff, 0x7f, 0x40, 0x3}}) sendmsg$nl_route(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@dellink={0x6c, 0x11, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_PHYS_SWITCH_ID={0x6, 0x24, "9e43"}, @IFLA_AF_SPEC={0x44, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x21, 0x0, 0x0, 0x1b}, {0x8, 0x20, 0x0, 0x0, 0xd}, {0x8, 0x1e, 0x0, 0x0, 0x2}, {0x8, 0x1c, 0x0, 0x0, 0x80000001}, {0x8, 0x1, 0x0, 0x0, 0x81}]}}, @AF_BRIDGE={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x100}, 0x8040) setsockopt$MRT_DEL_MFC(r5, 0x0, 0xcd, &(0x7f0000000500)={@multicast1, @broadcast, 0x1, "6ecd27a34269ccbb404f17d54bda164a98d1092ed8b0b2822cba446e7bc3a90b", 0x6, 0x1, 0x7ff, 0xe}, 0x3c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000540)={r4, 0xce}, &(0x7f0000000580)=0x8) sendmsg$nl_generic(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x2a, 0xb32, 0x70bd27, 0x25dfdbfd, {0x1}, [@typed={0x8, 0x132, 0x0, 0x0, @u32=0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x800) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f00000006c0)={0x2, 0x5, 0x800}) pipe2$watch_queue(&(0x7f0000000700), 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x108, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x44, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x80}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}]}]}, @NL802154_ATTR_SEC_KEY={0xb0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6c1f70ab22af6bc672c78c0b50a30633be8ffe2b1998f5ae6cf85cec2c0b3dc3"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fd53107209cd1a60daf519415f2e7cd2088f9fc1f6eea72fd8bfd484a73ba365"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "76db2233d8139147694d552d8a4eadae97297ca1e9461467ffe19248ff652ca4"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "545eff95ec3eea36aa8db3236a35d3e5b6721c20f0b003d01c9169c361c1edcb"}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000040}, 0x44) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000940), 0x600, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) ppoll(&(0x7f0000000980)=[{r7, 0x2000}], 0x1, &(0x7f0000000a00)={r8, r9+60000000}, &(0x7f0000000a40)={[0x80000000]}, 0x8) ioctl$TIOCCBRK(r7, 0x5428) 1.412642728s ago: executing program 2 (id=298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000004ec0), 0x2, 0x0) poll(&(0x7f0000004f00)=[{}, {r2, 0x4}, {0xffffffffffffffff, 0x204}], 0x3, 0x7e) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) (async, rerun: 64) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x24, 0x64, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0x0, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 1.146224266s ago: executing program 2 (id=300): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r0 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x101042, 0x0) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) syz_open_dev$dri(&(0x7f00000002c0), 0x85, 0x96000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffff}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0xa}, {0x0, 0x9}, {0x3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0xfff, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) io_setup(0x8, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f00000001c0)={0x6, 0x3}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = fsopen(&(0x7f0000000100)='jfs\x00', 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='erspan0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000), 0x4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='gid', &(0x7f0000000740)='0\x00M\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbd\t\x00\x00\x00\x00\x00\x00\x00\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xffNh\x19\xee#\xcc\x0f\xee\xfea\xdc\x88\xcb%bW\xd35\xda=\xc6\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x90\xf4\xb7\xdf\xae\xf3\x02\x19_\xe1.f>>\xa5\xc7@\xfb\"\xab\xdb\x06\x12e\x14\x11~\xa8\xdfRL \xf0\xee>(\xb1\xa2\xe8\a\xb8-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\'\x13', 0x0) chroot(&(0x7f0000000100)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 1.145235547s ago: executing program 0 (id=302): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "e0a7603e3f0782c572ca05925079e23754c7996faf748a85bcbc75e2d771471b428467235abb72c38661925c05fc385389ed57b429615d6f17d5bdebce1f1c9a", 0x3f}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r0, 0x82, 0xb3}, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'nhpoly1305-sse2\x00'}}, &(0x7f00000001c0)="40f475d6e99fff393d7427e686387142ae89d7ced7063cf3d85c8194964d7a2e01815d1ca7324dd5d5c72aa19fda4fd23e7c1f69ff2d8e8dcc8f757ee2cd9de9a2a29b0533bc6c46572ac38a976f4f7bee775b8681f9c8934792e9f2de7fc692cf349bba0416b40bc1204f8d2b0a5c8333679c51115a7515f5ae329d6321f209c444", &(0x7f0000000280)=""/179) keyctl$link(0x8, r0, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000340)={r0, 0xc, 0x41}, &(0x7f0000000380)={'enc=', 'raw', ' hash=', {'sha512-ce\x00'}}, &(0x7f0000000400)="70e5a500d447aa1a460d0fa2", &(0x7f0000000440)=""/65) keyctl$update(0x2, r0, &(0x7f00000004c0)="5ec189aea42628ed6729f0688b4276b84fc939f7a7381422a4e70a02aae362e75e1a89257ffef3e28d418a766c923c4871e87e48375961d82ee248f73e7d57151a18d8577824e75338f36c800284562e6d63b8f834000c35550d71698080cc5ebc43e73737157dd5a1dda8bced05d169eab595ea179a3433c9b7a30f4a3d3da91ef036fac933d7f6242b37f9966a3a902851c0bfe16f215f908f515938e7400afc1d3c50db5887c1a0de747ff0f3567afbabe02b609b4e22a6d55f", 0xbb) r1 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @auto=[0x65, 0x36, 0x62, 0x54, 0x37, 0x32, 0x65, 0x32, 0x36, 0x37, 0x65, 0x37, 0x39, 0x33, 0x32, 0x63]}, &(0x7f0000000600)={0x0, "93ddbf6cd0ce6599c2080a2c99a58200db37d8778c41f5b70f60493ae1681ba2c3d7c894adad6e151d8196ad289d7b7837997a02fcad95b5276c9fe6fba659cb", 0x27}, 0x48, r0) keyctl$negate(0xd, r1, 0xba, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000680)={r1, 0xe8, 0x84}, &(0x7f00000006c0)={'enc=', 'raw', ' hash=', {'sha256-avx\x00'}}, &(0x7f0000000740)="f318017e6212fb95ed0f52953ee2d17ca49bf7785deeaacd4cb888887f12db398911924daebd2aa9fc567ac5023e0ef911202308c7c12e80379fb988e230e56f21036078edad52f1136fff9ec4a6bfe7bbea5f5b1dbf725348b3facaa855e51c5943ae7d87796e64922d7b05dfa9cc46b9b0f749bf66f2283705ca25888503c55961926b3291561523ac9e5778c0dec3403ebd1a7375777c682866aab13a58b4d0c83015c4d54d56daf3bb9f429f91099592b3d7d904b336ae5a0e3ce72812a87cc969f558885c2a903999e8df4a356394386463325113e8f54e8b21ce47327083df8731bb2c9e25", &(0x7f0000000840)=""/132) syz_emit_vhci(&(0x7f0000000900)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc8}}}, 0x4) keyctl$search(0xa, r1, &(0x7f0000000940)='asymmetric\x00', &(0x7f0000000980)={'syz', 0x3}, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000009c0)={r1, 0x30, 0x29}, &(0x7f0000000a00)={'enc=', 'raw', ' hash=', {'blake2b-160-generic\x00'}}, &(0x7f0000000a80)="eb577fd5772c146e4488777c921ac5e8259d7ccf8b5b0e8645ed8994b468e8aaf39212190c7a6d91348e9042d7e0eba1", &(0x7f0000000ac0)="da31ace41521b753bc15fa9c13304e9db597cb42270e393276bbcaeb1fb480ca95ade7c31407946aeb") r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000b00)={[0x1]}, 0x8, 0x80800) ioctl$KVM_CAP_SYNC_REGS(r2, 0x4068aea3, &(0x7f0000000b40)) r3 = add_key$fscrypt_provisioning(&(0x7f0000000bc0), &(0x7f0000000c00)={'syz', 0x0}, &(0x7f0000000c40)={0x0, 0x0, @auto=[0x37, 0x1d, 0x2d, 0x29]}, 0xc, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000c80)={r3, 0x7, 0xe}, 0x0, &(0x7f0000000cc0)="c862cc9c982ff0", &(0x7f0000000d00)=""/14) add_key$keyring(&(0x7f0000000d40), &(0x7f0000000d80)={'syz', 0x1}, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x20010, r4, 0x80000000) r5 = add_key$fscrypt_provisioning(&(0x7f0000000dc0), &(0x7f0000000e00)={'syz', 0x2}, &(0x7f0000000e40)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r5, 0x7) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000e80)) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) r6 = pidfd_getfd(r2, r2, 0x0) keyctl$describe(0x6, r3, &(0x7f0000000ec0)=""/64, 0x40) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f0000000f00)) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f0000000f40)) add_key$keyring(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x0}, 0x0, 0x0, r1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000001000)={0x0, @aes256, 0x0, @desc1}) 1.14426327s ago: executing program 0 (id=303): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) ioctl$KVM_CAP_DISABLE_QUIRKS2(r0, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x10}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000000c0)=0x2, 0x4) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x100, 0x6, {{0x2a, 0x4, 0x1, 0x4, 0xa8, 0x66, 0x0, 0x9, 0x4, 0x0, @remote, @empty, {[@noop, @cipso={0x86, 0x4d, 0x0, [{0x5, 0x2}, {0x1, 0x8, "cdf88dc05808"}, {0x5, 0x8, "9e7b1080c518"}, {0x6, 0xf, "c78dc5c5aeb8623d57bcb8dcf3"}, {0x1, 0x9, "a42044e2f91f5d"}, {0x6, 0x11, "1ade591d782bf3240d7915363ca102"}, {0x0, 0xc, "31da2bedba95c566ef1e"}]}, @timestamp_prespec={0x44, 0x1c, 0x11, 0x3, 0xb, [{@rand_addr=0x64010100, 0x7}, {@broadcast, 0x3}, {@rand_addr=0x64010101, 0xffff741f}]}, @lsrr={0x83, 0x1b, 0x55, [@broadcast, @loopback, @empty, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x34}]}, @noop, @ssrr={0x89, 0x7, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @noop]}}}}}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x8001, 0x1, 0xc3, r2, 0x1ba}, 0xc) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000000280)={0xeeee6000, 0x1000}) ioctl$KVM_CAP_PMU_CAPABILITY(r0, 0x4068aea3, &(0x7f00000002c0)={0xd4, 0x0, 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000340)={0x10200, 0x6, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000380)) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x20400, 0x0) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000480)) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r3, 0xffffffffffffffff, 0x12, 0x0, @void}, 0x10) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000500)="c3b60934b34036dc34caf0928b74f931f73fd98f33b63ecaf88f9c0198bb66de716e229180af659170590d9d635acc06cbd95c51c42c18b05ca7615a70fdfbfae453f3f8610b2037", 0x48}, {&(0x7f0000000580)="f4a859a70a503f4e774cca40de3c3eb48fbc508a3669c8c48698f4091a9f338e32e8", 0x22}], 0x2) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x5, 0x0, 0x6, 0x8, 0x8, 0x3d, 0x6, 0x8, 0x2a, 0x3f, 0x8, 0x45, 0x6, 0x7, 0x9, 0x81}}) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000840)={0x2480000000000000, 0xddddf000, 0x9, 0x4, 0x4}) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000008c0)={0x9, &(0x7f0000000880)=[{0x1}, {0x415d, 0x2}, {0x8, 0x5}, {0x2, 0xb448}, {0xf, 0xfffd}, {0x200, 0x8}, {0xef3, 0x1}, {0x81, 0x4}, {0x8, 0x4}]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000900)={[{0x5, 0x0, 0x6, 0x1, 0x9, 0x6, 0x2, 0xf7, 0x2, 0xec, 0x11, 0x7, 0x4}, {0x2, 0xfff, 0x4, 0xed, 0x19, 0x7, 0x9, 0x9, 0x8, 0x2, 0x89, 0x0, 0x2}, {0x6, 0x8, 0x2, 0x9, 0x1, 0x6, 0x2, 0xa6, 0x7, 0xf8, 0x2, 0x1, 0xfffffffffffffff9}], 0xf1}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x17) r5 = syz_open_dev$usbmon(&(0x7f0000000980), 0x2, 0x80) pread64(r5, &(0x7f00000009c0)=""/34, 0x22, 0x10) ioctl$KVM_TDX_INIT_VM(r1, 0xc008aeba, &(0x7f0000000c80)={0x1, 0x0, &(0x7f0000000a00)={0x80000000, 0x200, [0xc, 0x8, 0x7, 0xffffffff, 0x8, 0xd4], [0xf3ee, 0x5, 0x2, 0x647, 0x3, 0xe], [0x9, 0x2, 0x7, 0x200, 0x2, 0xd], '\x00', {0x8, 0x0, [{0x6, 0xb, 0x1, 0x8, 0x4, 0x2, 0x7}, {0xc0000001, 0x4, 0x6, 0x2, 0xfffffffc, 0x0, 0x6}, {0xc0000000, 0x8, 0x1, 0x3, 0x8, 0xfc5, 0xd}, {0x0, 0x5, 0x0, 0x800, 0x1a9, 0x3, 0x5}, {0x80000008, 0x4, 0x4, 0xfff, 0x1, 0x505, 0x1}, {0x0, 0xb, 0x2, 0xa4b0, 0x6, 0x3, 0x4}, {0x7, 0xf5, 0x0, 0x0, 0x8, 0xffff8001, 0x1}, {0xc0000000, 0x6, 0x4, 0x406, 0xfffffffb, 0x44, 0x2}]}}}) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000cc0)={{r4}, "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"}) fstat(r1, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, r6, &(0x7f0000001d40)) pipe(&(0x7f0000001dc0)) 1.089192068s ago: executing program 2 (id=304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f00000003c0)={0x2, 0x26, 0xd, 0x5, 0x10, 0x6, @lba=0x80000001, @lba=0xfe}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x604ae000) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/86, 0x56) 1.007963811s ago: executing program 2 (id=305): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x8, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x103f}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x4000000000001e1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.007561134s ago: executing program 2 (id=306): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101600, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000040)={0x0, 0x100000001, 0x1, 0x1}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={r1, 0x81, 0x0, [0xea9, 0x100000001, 0x6, 0x8, 0x6], [0x1000, 0x2, 0xa, 0x2, 0x800, 0x2, 0x8000000, 0x0, 0x7, 0x5, 0x1, 0x7fffffff, 0x7fffffff, 0x7, 0x4, 0x400, 0x1b04, 0x40, 0x10000, 0x4, 0xffffffffffffff00, 0x60, 0x71, 0xf9a, 0x47, 0x100, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x1, 0x132, 0x8, 0x100, 0x81, 0x6, 0x1, 0x3, 0x2, 0x9, 0x7, 0x542, 0x1e1f, 0x100000001, 0x2, 0x2, 0x1, 0x7fffffff, 0x9, 0x8, 0x2, 0xd8, 0x401, 0x1, 0x48, 0x5, 0x0, 0x7, 0x1, 0xf, 0x4, 0x15, 0x400, 0xe7, 0x6, 0x5, 0x0, 0x8, 0x9, 0x0, 0x2, 0x4, 0xfffffffffffffffe, 0x4, 0xfff, 0x1, 0x80, 0x2ea, 0x101, 0x3, 0x4, 0x7f, 0xd527, 0x100000001, 0x0, 0x1, 0x2, 0x286c, 0x6, 0xfffffffffffffff4, 0x0, 0x2, 0xfffffffffffffffd, 0x3, 0xfffffffffffffffc, 0xd22d, 0xa0d, 0x5, 0x7, 0x100000000000000, 0x0, 0x6, 0xff, 0x2, 0x3, 0x6, 0x9, 0x5, 0x401, 0x1, 0xffffffffffffffff, 0x7, 0x3, 0x8, 0x2, 0x9, 0x7ff, 0x6, 0x3, 0x5, 0x100000001]}) 919.331715ms ago: executing program 2 (id=307): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000480)={0x900000000000000, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100000e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000020013"], 0x70}}, 0x0) signalfd4(r0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x8, 0x80000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0x10, 0xb}, {0x0, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r13 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r13, 0x107, 0xf, 0x0, &(0x7f0000000080)) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000180)) r14 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r14, 0xc01864c6, &(0x7f00000000c0)={0x0}) 608.91778ms ago: executing program 3 (id=312): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 459.759098ms ago: executing program 1 (id=315): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x3, 0xfffffff8, 0x2, @private2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1, 0x8, 0x4, 0x8e}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=@updpolicy={0x128, 0x19, 0x4, 0x70bd2b, 0x25dfdbff, {{@in=@remote, @in=@rand_addr=0x64010102, 0x4e22, 0x4, 0x4e24, 0x400, 0xa, 0x0, 0xa0, 0x67, r1, r3}, {0x83, 0x9, 0xffffffffffff8001, 0x216, 0x7fffffffffffffff, 0x0, 0x6, 0x7}, {0x7, 0x9, 0xffffffff00000001, 0x8}, 0x3, 0x6e6bb7, 0x0, 0x1, 0x1, 0x3}, [@algo_crypt={0x6d, 0x2, {{'cbc-cast5-avx\x00'}, 0x128, "a6e458f2c77d01e174d0c5b76546c8a3ea2699a71205ec63cb0e9442f593bbfc1f978c498e"}}]}, 0x128}, 0x1, 0x0, 0x0, 0x50}, 0x40040) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000440)={0x638, 0x13, 0x8, 0x70bd25, 0x25dfdbff, {0x22, 0x6, 0x4, 0x26, {0x4e22, 0x4e20, [0x5, 0x1, 0x7fffffff, 0xd9a2], [0x215, 0x9, 0x16e, 0x1], r1, [0xffffffff, 0x7]}, 0x9, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "96f73959e7c685aed347595e2c259f7102207365b99f097144ac125aaa628f561e9ae09aa2fa24df6b86c855569ecc382438c627140cbad84101a215734833e8b6ee0c63157af4d2096e8dc6a4648a507354487216a7aed40ecc46f2b159076248b1471295c9a66048d5e8b233f4be1133eb12baa3671c57d522535698ef25ee27a26a64c1a5cf62404053d5b1a71241d5ff6f23afb76c04aa2e7058d7fbe37bbeedc263abcc01bd54e01460af0964c9c90369b73e8a7ca0201d23905af6a848ac0dee8b5062f374314c9c351759f8238aa5b9f9c961f8dfc781da3c3168fbab"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "1bf7854c7be59e653c9e33c685c85d9f1187bbcec67da0f4749db3499dec34f894a89a214e1fd3807b9c413a64fa797fb217622a1a4dc7a7d03218d4cfc19abd2b5dd26b6911b47877ef4541f3933e5db8e5f7b165cb70fcb95262533d9b37b7fd1e9d961b7fc5dc9a1a2a4b72f9df4fad0ef1466c2c7cecbcca6c8c697ff5d529b5e4"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "da77ec2f0a9a3a1b01386b7df9f2b7379f0d6e759910f0f073e0060143eeff71e57068cbbcb6efb2198ea4fc2b19dd774447619d84765bc7a0d79ee7a6be21f866062020c587623ea5478696f953c023cb00c20e850cba11fdc87f1cace587b7773bc18965b8587d8de3ae0b7cca57"}, @INET_DIAG_REQ_BYTECODE={0xf, 0x1, "1f06683b2a86b1c31abfc3"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "1ddbdc735ab3f71ef54f51683525d0cbbbe855b3e50671e7e5ed67197a91fa102f4f63c019bd46ab22e5b50d8fa6f26ffa6b571187aff1610a70581002649a5fd25bf9aa9fc559e496b1c6571239fa0e23646257e8139f3a99cde7e843fec803cc55766e099659e0d3bd311163a55abf64fd80554aa598521c5ebeebdff223"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "0814a7c43f8d745886d104be19868701c0d498beef5bd7d49689a5cac83274831b748c21e828d37ccbe136abc2bb871b6ba08fa42eea988fd4b42b252fd66c1d909900c58441174e32b68e2dc2877a3038c9ee12d256b6137db1ed2912e7201cd5b59c0b76df1aa5264a0b88babdcd3683bc24dc992283330a4cc38b0b12699ade88befe3a820a210aa14881db30bd88bb630082be1955d2ec635b485b0872d67560688f2e9a750705e25d04a381b05d4ed5a0a3466f5ac7886f5468da33d8ebc3e0595db648e5b5137f1e7ac9e146268564bf2035e58dddda979a1fab1f301d65b493af368030863033c19775f097bc2869da5b6ffe6c"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "60ab70986d3f224e7693bba08ce14b5c1ad9cb08bd8c1fb484cf68ecc52fbda41137edcc31d0511052af146fce41a2e966c99002e051263b12734675ab30e3b9b402f347e78c4c6f9a76020fca8a55da1485d662c6826fa0fb2d4658cdf0a92ffbf2f82a2b8125b1dfc52cac8ea2dd9cf3ed215fc3b50df0e647e5"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "61c9629d9a9b20e08421b781a78b2be2b051409caab76441a22be79203872722b653820e24244ebedb6458f91e6c4524888f835be81f07695cfe6dbe3ada91862fbbda182ded270957"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "04b989aedea01d7a15efda31939cfa573d3bfa1da3590f729e1ab2aea65282745e05378f4d99811650fac280406211fa35095503d38cc0107d8e1268cd1945ca8de75b61fa78b07a5e79f756005f3c4406b99e25ed543ee50c970963fae8941ffbf94a8d07ca9d38f996addd729a9619576f5feae3b30e574d7618a0350f2e640ffea78c9904ea0a5a7a68262ec8d1c33b0b8dea0a8ac1fd1553b4185d8c0a30b7fcb3"}]}, 0x638}, 0x1, 0x0, 0x0, 0x4c084}, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000c00)={&(0x7f0000000b00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r5, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008044}, 0x804) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000cc0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d00)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d80)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x60, r6, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000004) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r11, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xc4, r12, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc4}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000001200)={&(0x7f00000010c0), 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x84, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x58, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffc01}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8c}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x4000800) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r11) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r11, &(0x7f00000014c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001480)={&(0x7f0000001300)={0x170, r13, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001500), r4) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc891}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r11, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x70, r15, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040004}, 0x1) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000001800), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001840)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001880)=0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f00000019c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x28000414}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x64, r16, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x18}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x68}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 348.832897ms ago: executing program 0 (id=316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r3, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0x9, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1002, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x8, 0x4, 0x8000005, 0x3, 0x4b62, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x1c, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x28, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x31, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x2000, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x0, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x5, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[0x80], 0x0, 0x3, 0x1, 0x1}}, 0x40) ioctl$KVM_RUN(r5, 0xae80, 0x0) 270.273352ms ago: executing program 1 (id=317): r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe}, "812345865798e3daea4282cac056"}, 0x12) r1 = syz_open_dev$media(&(0x7f0000000000), 0x100000001, 0x40000) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000480)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000280)=[{}], 0x2, 0x0, &(0x7f0000000300)=[{}, {}], 0x8, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}]}) syncfs(r0) 269.530382ms ago: executing program 1 (id=318): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0xf2, 0x0, 0x7, 0x3c, @private0, @remote, 0x8090, 0x700, 0x4, 0x8}}) 189.567557ms ago: executing program 0 (id=319): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0x1e, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000900)={{'\x00', 0x3}, {}, 0xa0, 0x0, 0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000640)="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", 0x10b, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x153}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFLUSH(r4, &(0x7f0000000300)={0x7, 0x6d, 0x2}, 0x7) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}], 0x18}, 0x0) r5 = socket$inet(0x2, 0x6, 0x6) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000080000000300000003000000e0ffffff3d00f13424a4f2bfcf6ec6531b39a16157a102c149db7ef915b8732bf89f3e8f", @ANYRES32=r8, @ANYBLOB="0b1b050000000000300012800b00010069703667726500002000028014000700fe8000000000000000000000000000bb08000d00ffffff7f"], 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r6, &(0x7f0000000580)='o', 0x5b4, 0x4, &(0x7f0000000180)={0x11, 0x8100, r8, 0x1, 0xe9, 0x6, @local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'sit0\x00', r8, 0x1, 0x7, 0x88, 0x4, {{0xa, 0x4, 0x3, 0x5, 0x28, 0x65, 0x0, 0x8, 0x4, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x14, 0x3d, 0x0, 0xd, [0x75a, 0x1, 0x0, 0x3]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) r9 = fsopen(&(0x7f00000003c0)='cramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x0) fchdir(r10) r11 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000980)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @netfilter=0x2d, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r13 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r12, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) dup(r13) 189.068416ms ago: executing program 1 (id=320): prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x20, 0x3e, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x33}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYBLOB="2d2d4b5d54606d0949484ea9ab236bbfe10dd869f101f7475d03e1a04b2d52de5ed002475ed3f13ccac519383bd04dfc8d8b242cdfa6558b5176205260d5c13820605fb52917cfde6398cc5cf4d0edcde2e5d9c2c0f521bf821c1ba9323c92b724622aef7d59525c670f3f57bd391a30a1c200dcecf4045b29634476cf1aa8d5125c3aebb7f9f276b0b70f21", @ANYBLOB="10d40000b1eb502a200012800b00010067656e65766500001000028004000e"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x50) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x20, 0x3e, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x33}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) write(r2, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYBLOB="2d2d4b5d54606d0949484ea9ab236bbfe10dd869f101f7475d03e1a04b2d52de5ed002475ed3f13ccac519383bd04dfc8d8b242cdfa6558b5176205260d5c13820605fb52917cfde6398cc5cf4d0edcde2e5d9c2c0f521bf821c1ba9323c92b724622aef7d59525c670f3f57bd391a30a1c200dcecf4045b29634476cf1aa8d5125c3aebb7f9f276b0b70f21", @ANYBLOB="10d40000b1eb502a200012800b00010067656e65766500001000028004000e"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x50) (async) 134.688214ms ago: executing program 1 (id=321): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x800) (rerun: 32) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 59.016128ms ago: executing program 0 (id=322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f00000001c0), &(0x7f00000005c0)}, 0x20) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101600, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) 58.651762ms ago: executing program 1 (id=323): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') (async) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2008085}, 0x41) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r5, r3, 0xb, 0x20}, 0x20) write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[], 0xe) (async) write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[], 0xe) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x80, 0x0) (async) splice(r7, 0x0, r8, 0x0, 0x80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0xd00, 0x4, 0x10001, 0x0, 0x3, 0xcc7, 0x8, 0x7, 0x5, 0xff, 0x2, 0x1, 0x1, 0x2, 0x9, 0x9, 0xbc36146, 0x9, 0x43, 0x0, 0x8c, 0x8, 0x5, 0x6, 0x800c, 0x6, 0x5, 0x6, 0xd, 0x1, 0x86]}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x12, r10, 0xfa687000) 0s ago: executing program 0 (id=324): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$kcm(0x2d, 0xa, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getqdisc={0x48, 0x26, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x9, 0x8}, {0x1, 0xb}, {0x10, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000cc9bd62d880a0b4a9950128c9eb1000000000000000d000000000000000000"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000080)={0xf400, 0x1}, 0xf4240}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r8, 0x80045300, 0xfffffffffffffffe) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r9 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000e71000010000000000000000000000000a4c000000060a0904800000000000000002000000090032000000000900010073797a3000010000200004801c00018000000011000100000000000000000000000047d230122150"], 0x74}}, 0x0) r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r11, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x3, 0xe56, 0x1, 0x3ca}}) write$cgroup_subtree(r9, &(0x7f0000000440)=ANY=[@ANYBLOB="2b6e65745b636c73202b726c696d697420cc2b95608af16a168f2fd1461fed3c50db1cf35316b5f8c9ceb2a7a726364cb4d6f025a8201b6efa6da375e6a989cc16333a405838d253fa79"], 0x11) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) kernel console output (not intermixed with test programs): [ 43.819917][ T40] audit: type=1400 audit(1775270391.103:59): avc: denied { write } for pid=5832 comm="sh" path="pipe:[5621]" dev="pipefs" ino=5621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 43.829760][ T40] audit: type=1400 audit(1775270391.103:60): avc: denied { rlimitinh } for pid=5832 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.838056][ T40] audit: type=1400 audit(1775270391.103:61): avc: denied { siginh } for pid=5832 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:56811' (ED25519) to the list of known hosts. [ 45.809806][ T40] audit: type=1400 audit(1775270393.103:62): avc: denied { name_bind } for pid=5875 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.841267][ T40] audit: type=1400 audit(1775270393.133:63): avc: denied { execute } for pid=5876 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.850082][ T40] audit: type=1400 audit(1775270393.133:64): avc: denied { execute_no_trans } for pid=5876 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.064550][ T40] audit: type=1400 audit(1775270395.363:65): avc: denied { mounton } for pid=5876 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.074634][ T40] audit: type=1400 audit(1775270395.373:66): avc: denied { mount } for pid=5876 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.076343][ T5876] cgroup: Unknown subsys name 'net' [ 48.267912][ T5876] cgroup: Unknown subsys name 'cpuset' [ 48.273565][ T5876] cgroup: Unknown subsys name 'rlimit' [ 48.490571][ T5914] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.147013][ T5876] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.603075][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 52.603087][ T40] audit: type=1400 audit(1775270399.893:82): avc: denied { execmem } for pid=5922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.777841][ T40] audit: type=1400 audit(1775270400.073:83): avc: denied { create } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.785179][ T40] audit: type=1400 audit(1775270400.073:84): avc: denied { read write } for pid=5928 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.794103][ T40] audit: type=1400 audit(1775270400.073:85): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.802374][ T40] audit: type=1400 audit(1775270400.083:86): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="socket:[2710]" dev="sockfs" ino=2710 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.823563][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.827433][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.830370][ T5936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.831607][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.832833][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.836343][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.837777][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.839990][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.844548][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.845289][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.846896][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.847760][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.848287][ T5943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.851240][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.854279][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.856985][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.858959][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.861968][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.870320][ T40] audit: type=1400 audit(1775270400.163:87): avc: denied { read } for pid=5939 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.876208][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.882772][ T40] audit: type=1400 audit(1775270400.163:88): avc: denied { open } for pid=5939 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.891004][ T40] audit: type=1400 audit(1775270400.163:89): avc: denied { mounton } for pid=5939 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.900731][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.117276][ T40] audit: type=1400 audit(1775270400.413:90): avc: denied { module_request } for pid=5929 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.160583][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 53.302153][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 53.379732][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 53.396203][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.398454][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.400801][ T5929] bridge_slave_0: entered allmulticast mode [ 53.403533][ T5929] bridge_slave_0: entered promiscuous mode [ 53.408148][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.410451][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.412803][ T5929] bridge_slave_1: entered allmulticast mode [ 53.415714][ T5929] bridge_slave_1: entered promiscuous mode [ 53.441128][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 53.517016][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.553271][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.588357][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.590782][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.594171][ T5939] bridge_slave_0: entered allmulticast mode [ 53.597417][ T5939] bridge_slave_0: entered promiscuous mode [ 53.624309][ T5929] team0: Port device team_slave_0 added [ 53.636553][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.639772][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.642916][ T5939] bridge_slave_1: entered allmulticast mode [ 53.647091][ T5939] bridge_slave_1: entered promiscuous mode [ 53.664118][ T5929] team0: Port device team_slave_1 added [ 53.706863][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.711185][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.714665][ T5931] bridge_slave_0: entered allmulticast mode [ 53.718676][ T5931] bridge_slave_0: entered promiscuous mode [ 53.722405][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.725819][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.728816][ T5928] bridge_slave_0: entered allmulticast mode [ 53.732911][ T5928] bridge_slave_0: entered promiscuous mode [ 53.738739][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.741804][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.745481][ T5928] bridge_slave_1: entered allmulticast mode [ 53.749400][ T5928] bridge_slave_1: entered promiscuous mode [ 53.767114][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.773940][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.779072][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.782112][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.793106][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.799454][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.801877][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.805003][ T5931] bridge_slave_1: entered allmulticast mode [ 53.807718][ T5931] bridge_slave_1: entered promiscuous mode [ 53.839671][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.842582][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.853946][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.873447][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.890785][ T5939] team0: Port device team_slave_0 added [ 53.894786][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.906117][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.912153][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.916928][ T5939] team0: Port device team_slave_1 added [ 53.935443][ T5928] team0: Port device team_slave_0 added [ 53.945634][ T5928] team0: Port device team_slave_1 added [ 53.994583][ T5929] hsr_slave_0: entered promiscuous mode [ 53.997089][ T5929] hsr_slave_1: entered promiscuous mode [ 54.000298][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.002942][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.011842][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.019017][ T5931] team0: Port device team_slave_0 added [ 54.035603][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.038448][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.049309][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.055127][ T5931] team0: Port device team_slave_1 added [ 54.057720][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.060454][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.069280][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.074072][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.076381][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.084661][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.125601][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.127763][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.136452][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.162004][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.164463][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.172583][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.215594][ T5939] hsr_slave_0: entered promiscuous mode [ 54.217889][ T5939] hsr_slave_1: entered promiscuous mode [ 54.219949][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 54.221920][ T5939] Cannot create hsr debugfs directory [ 54.228302][ T5928] hsr_slave_0: entered promiscuous mode [ 54.231000][ T5928] hsr_slave_1: entered promiscuous mode [ 54.233180][ T5928] debugfs: 'hsr0' already exists in 'hsr' [ 54.235068][ T5928] Cannot create hsr debugfs directory [ 54.328413][ T5931] hsr_slave_0: entered promiscuous mode [ 54.330717][ T5931] hsr_slave_1: entered promiscuous mode [ 54.333229][ T5931] debugfs: 'hsr0' already exists in 'hsr' [ 54.335249][ T5931] Cannot create hsr debugfs directory [ 54.560235][ T5929] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.569134][ T5929] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.575606][ T5929] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.588810][ T5929] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.656759][ T5931] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.674448][ T5931] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.681704][ T5931] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.699621][ T5931] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.747048][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.756203][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.761717][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.766961][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.783088][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.843317][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.849197][ T5928] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.863669][ T1248] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.866421][ T1248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.872429][ T5928] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.884841][ T5928] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.892393][ T5928] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.894693][ T5944] Bluetooth: hci1: command tx timeout [ 54.898195][ T5944] Bluetooth: hci3: command tx timeout [ 54.898487][ T63] Bluetooth: hci2: command tx timeout [ 54.922183][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.924732][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.969356][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.983942][ T5934] Bluetooth: hci0: command tx timeout [ 55.006423][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.011367][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.027861][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.030182][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.033465][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.035782][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.066586][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.070533][ T40] audit: type=1400 audit(1775270402.363:91): avc: denied { sys_module } for pid=5929 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.080800][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.083857][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.089246][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.092261][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.128917][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.142820][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.161028][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.168887][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.171333][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.184787][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.187099][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.232214][ T5929] veth0_vlan: entered promiscuous mode [ 55.238908][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.258048][ T5929] veth1_vlan: entered promiscuous mode [ 55.263606][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.296271][ T5929] veth0_macvtap: entered promiscuous mode [ 55.302248][ T5931] veth0_vlan: entered promiscuous mode [ 55.307248][ T5929] veth1_macvtap: entered promiscuous mode [ 55.324626][ T5939] veth0_vlan: entered promiscuous mode [ 55.329556][ T5931] veth1_vlan: entered promiscuous mode [ 55.336016][ T5939] veth1_vlan: entered promiscuous mode [ 55.340420][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.348628][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.356472][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.361558][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.365223][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.372142][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.399350][ T5939] veth0_macvtap: entered promiscuous mode [ 55.415824][ T5931] veth0_macvtap: entered promiscuous mode [ 55.421387][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.425851][ T5939] veth1_macvtap: entered promiscuous mode [ 55.432836][ T5931] veth1_macvtap: entered promiscuous mode [ 55.462833][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.464034][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.467238][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.468603][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.476404][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.494252][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.498057][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.502023][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.510543][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.521725][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.545789][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.554523][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.557973][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.558513][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.560610][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.572897][ T5928] veth0_vlan: entered promiscuous mode [ 55.577730][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.603226][ T5928] veth1_vlan: entered promiscuous mode [ 55.624770][ T5929] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.634719][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.638111][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.645987][ T5928] veth0_macvtap: entered promiscuous mode [ 55.664348][ T5928] veth1_macvtap: entered promiscuous mode [ 55.693003][ T1248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.694372][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.697604][ T1248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.712918][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.732482][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.743787][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.752902][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.764895][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.770179][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.772738][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.786015][ T6016] netlink: 'syz.1.5': attribute type 39 has an invalid length. [ 55.799558][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.803301][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.870464][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.873257][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.900616][ T1248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.903155][ T1248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.964682][ T6022] unsupported nla_type 4111 [ 55.980149][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.983488][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.017016][ T5998] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.025708][ T5998] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 56.070731][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 56.224860][ T1343] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.363232][ T6045] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 56.366523][ T6045] overlayfs: failed to set xattr on upper [ 56.370002][ T6045] overlayfs: ...falling back to redirect_dir=nofollow. [ 56.372949][ T6045] overlayfs: ...falling back to index=off. [ 56.374534][ T1343] usb 5-1: Using ep0 maxpacket: 8 [ 56.375817][ T6045] overlayfs: ...falling back to uuid=null. [ 56.381126][ T6045] overlayfs: maximum fs stacking depth exceeded [ 56.381611][ T1343] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 56.387938][ T1343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.405430][ T1343] pvrusb2: Hardware description: Terratec Grabster AV400 [ 56.408551][ T1343] pvrusb2: ********** [ 56.410257][ T1343] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 56.418241][ T1343] pvrusb2: Important functionality might not be entirely working. [ 56.422483][ T1343] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 56.427485][ T1343] pvrusb2: ********** [ 56.599838][ T2488] pvrusb2: Invalid write control endpoint [ 56.637319][ T2488] pvrusb2: Invalid write control endpoint [ 56.640163][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 56.645537][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 56.647957][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 56.651073][ T2488] pvrusb2: Device being rendered inoperable [ 56.655153][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 56.657524][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 56.665354][ T2488] pvrusb2: Attached sub-driver cx25840 [ 56.667196][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 56.670382][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 56.779328][ T6062] sctp: [Deprecated]: syz.3.15 (pid 6062) Use of int in maxseg socket option. [ 56.779328][ T6062] Use struct sctp_assoc_value instead [ 56.780972][ T6064] netlink: 'syz.2.16': attribute type 64 has an invalid length. [ 56.788816][ T6064] netlink: 'syz.2.16': attribute type 4 has an invalid length. [ 56.792061][ T6064] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16'. [ 56.803559][ T6024] Zero length message leads to an empty skb [ 56.810506][ T5988] usb 5-1: USB disconnect, device number 2 [ 56.974459][ T5934] Bluetooth: hci3: command tx timeout [ 56.976878][ T5934] Bluetooth: hci1: command tx timeout [ 56.979259][ T5934] Bluetooth: hci2: command tx timeout [ 57.054351][ T63] Bluetooth: hci0: command tx timeout [ 57.128106][ T6079] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 57.188060][ T6081] 9pnet_virtio: no channels available for device syz [ 57.232062][ T6086] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22'. [ 57.335252][ T6088] syz.1.23 uses obsolete (PF_INET,SOCK_PACKET) [ 57.342519][ T6088] 9pnet_virtio: no channels available for device syz [ 57.347760][ T6091] netlink: 'syz.3.24': attribute type 1 has an invalid length. [ 57.612846][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 57.613186][ T40] audit: type=1400 audit(1775270404.903:178): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.668267][ T6110] tmpfs: Bad value for 'mpol' [ 57.668603][ T40] audit: type=1400 audit(1775270404.963:179): avc: denied { mounton } for pid=6109 comm="syz.0.30" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 57.670340][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 57.680730][ T40] audit: type=1400 audit(1775270404.963:180): avc: denied { read write } for pid=6109 comm="syz.0.30" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.681884][ T6112] netlink: 'syz.3.31': attribute type 30 has an invalid length. [ 57.690264][ T40] audit: type=1400 audit(1775270404.963:181): avc: denied { open } for pid=6109 comm="syz.0.30" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.705988][ T1149] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.706218][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 57.712988][ T1149] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.714079][ T6112] netlink: 'syz.3.31': attribute type 30 has an invalid length. [ 57.718685][ T1149] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.725794][ T1149] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.835068][ T6118] Bluetooth: MGMT ver 1.23 [ 57.837444][ T40] audit: type=1400 audit(1775270405.133:182): avc: denied { write } for pid=6117 comm="syz.0.33" path="socket:[10523]" dev="sockfs" ino=10523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.851238][ T40] audit: type=1400 audit(1775270405.133:183): avc: denied { create } for pid=6117 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.864003][ T40] audit: type=1400 audit(1775270405.133:184): avc: denied { ioctl } for pid=6117 comm="syz.0.33" path="socket:[9128]" dev="sockfs" ino=9128 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.869277][ T6122] random: crng reseeded on system resumption [ 57.872599][ T40] audit: type=1400 audit(1775270405.153:185): avc: denied { sys_module } for pid=6117 comm="syz.0.33" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.883149][ T40] audit: type=1400 audit(1775270405.163:186): avc: denied { read } for pid=6121 comm="syz.3.34" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.892000][ T40] audit: type=1400 audit(1775270405.163:187): avc: denied { open } for pid=6121 comm="syz.3.34" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.925406][ T6127] Cannot find add_set index 0 as target [ 57.998570][ T6138] netlink: 156 bytes leftover after parsing attributes in process `syz.3.39'. [ 58.044926][ T6140] qrtr: Invalid version 0 [ 58.173472][ T6148] [U]  [ 58.176201][ T6148] [U] + [ 58.178643][ T6148] [U] $܁P~ƊQrAe`G-Rij笨mA)߀No4gV;uQ` [ 58.182529][ T6148] [U] Wg-u]}FyȘeƮ)>,>f}a&\msOHn'Ä=#$Ǧ&g C.,jP^{"Oiňo;pʪ6qwS_{CWfs+R~qu›ŸNn! [ 58.189909][ T6148] [U] Zph5Laӝ8H [ 58.191907][ T6148] [U] V)*Gr [ 58.193571][ T6148] [U] g©MD9i^g[&TXd}y^#"Z&|JiYDX~reGiUMNkqGJcӔ0 r088D<U0P9=>ȪU[ƒuW9jl"hZG+EĖ#LY`z2 [ 58.201328][ T6148] [U] }{_S|j\ptژ1b-S4!{9C5->M [ 58.204677][ T6148] [U] UXBH,~nmIM/a [ 58.207293][ T6148] [U] VS6e^ SHk"(*:$}<^YD?rnHEX#X3Ys6 [ 58.210669][ T6148] [U] [ 58.213309][ T6148] [U] 71D%}7G\4'Kp7U,"^|-B g&@bWRY [ 58.217292][ T6148] [U] p~ [ 58.218919][ T6148] [U] hQVOK) ƵZ>uY`XԶޖQtBhvMdR/%F8`yǥY䦈Fؾx@-d֛ 0ʩz;D")tRgiL()d6"BnBf?ӛ,ѧ`'Lq 6t2t@F@p6v]t4NξyRΓvP':J۫ۆE*̣];M4TqB_5pM [ 58.237287][ T6148] [U] _mֱ9KU""^s6rP [ 58.239905][ T6148] [U] ¥U[m j0zOoF|:! /$@RH(Η1K@ǚ/w4|xJ3: [ 58.258462][ T6148] [U] V :p\U 5V"cd:nb3Ob,%ǯe j9>\rCˉiVE<\7;娍+ȏ"IƔ/6FNhgw~xcWö}H6TI؆6aA耹C1v]ba9xT  [ 58.266413][ T6148] [U] ۼuJD⠙("wZ[(s1yXNׯtAc/piǎj Ѕ#{0`y,Hp+̄j54?@պNa^!4^3" [ 58.272108][ T6148] [U] I\xezW80ܚPfzqi^@O [ 58.274805][ T6148] [U] gڑ/P+ؒb=pYY1gJd!xKTa;PaoFlu 8:!VD G\zwi=)m)o!Җ>08jͻ*( sLQ@0KeVszKP?e/K MRlya?'EtU{R]ֈS$9Ou(ŀ~le/I8# a ?,#p;R{4Hw"X{\\ .KV2$Ēΐ܀6< [ 58.314525][ T6148] [U] q Oulv~-_8?O6$z«eAO_NO/C .byrˋ<[DxҿWWX [ 58.320089][ T6148] [U] ܲ|9$n`i(RǿDtA4o/̈́eV2Bln| :KYW&;l1; [ 58.323802][ T6148] [U] ;JO6P [ 58.331874][ T6147] [U] q1n#G4Y›rMnUf[Xi^='ډz;:Q7,E [ 58.373960][ T5998] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.385982][ T6155] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 58.389486][ T6155] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 58.398691][ T6155] input: syz0 as /devices/virtual/input/input5 [ 58.413267][ T6155] befs: (loop2): No write support. Marking filesystem read-only [ 58.417545][ T6155] befs: (loop2): unable to read superblock [ 58.537859][ T5998] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 58.541593][ T5998] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.547829][ T5998] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 58.552424][ T5998] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 58.556191][ T5998] usb 6-1: Manufacturer: syz [ 58.561573][ T5998] usb 6-1: config 0 descriptor?? [ 58.625802][ T5998] rc_core: IR keymap rc-hauppauge not found [ 58.630825][ T5998] Registered IR keymap rc-empty [ 58.635957][ T5998] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 58.647452][ T5998] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input6 [ 58.742586][ T6178] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 58.753293][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 58.757912][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 58.775324][ T6146] QAT: failed to copy from user cfg_data. [ 58.794927][ T6180] netlink: 40 bytes leftover after parsing attributes in process `syz.3.52'. [ 58.815045][ T50] e1000 0000:00:06.0 eth0: Reset adapter [ 58.836009][ T6182] capability: warning: `syz.0.53' uses 32-bit capabilities (legacy support in use) [ 58.847544][ T6189] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 58.852726][ T39] usb 6-1: USB disconnect, device number 2 [ 58.947873][ T50] e1000 0000:00:06.0 eth0: Reset adapter [ 59.011330][ T6202] netlink: 'syz.3.58': attribute type 5 has an invalid length. [ 59.062515][ T6203] netlink: 'syz.3.58': attribute type 5 has an invalid length. [ 59.063927][ T63] Bluetooth: hci2: command tx timeout [ 59.063990][ T5934] Bluetooth: hci1: command tx timeout [ 59.064010][ T5934] Bluetooth: hci3: command tx timeout [ 59.135075][ T63] Bluetooth: hci0: command tx timeout [ 61.134649][ T63] Bluetooth: hci3: command tx timeout [ 61.134699][ T5944] Bluetooth: hci2: command tx timeout [ 61.134760][ T5934] Bluetooth: hci1: command tx timeout [ 61.135227][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 61.216541][ T5944] Bluetooth: hci0: command tx timeout [ 72.606591][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 72.606602][ T40] audit: type=1400 audit(1775270419.903:232): avc: denied { create } for pid=6247 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 72.620193][ T40] audit: type=1400 audit(1775270419.913:233): avc: denied { setopt } for pid=6247 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 72.628857][ T40] audit: type=1400 audit(1775270419.913:234): avc: denied { ioctl } for pid=6247 comm="syz.2.61" path="socket:[12363]" dev="sockfs" ino=12363 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.638359][ T6253] FAT-fs (sr0): bogus number of reserved sectors [ 72.639571][ T40] audit: type=1400 audit(1775270419.913:235): avc: denied { create } for pid=6247 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 72.641702][ T6253] FAT-fs (sr0): Can't find a valid FAT filesystem [ 72.649425][ T40] audit: type=1400 audit(1775270419.913:236): avc: denied { connect } for pid=6247 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 72.649466][ T40] audit: type=1400 audit(1775270419.923:237): avc: denied { create } for pid=6249 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.649502][ T40] audit: type=1400 audit(1775270419.923:238): avc: denied { ioctl } for pid=6249 comm="syz.1.60" path="socket:[10592]" dev="sockfs" ino=10592 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.649539][ T40] audit: type=1400 audit(1775270419.923:239): avc: denied { module_load } for pid=6248 comm="syz.3.62" path="/sys/kernel/hardlockup_count" dev="sysfs" ino=70989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 72.691420][ T40] audit: type=1400 audit(1775270419.983:240): avc: denied { write } for pid=6247 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 72.699814][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 72.708122][ T40] audit: type=1400 audit(1775270419.983:241): avc: denied { write } for pid=6247 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.749970][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.65'. [ 72.753025][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.65'. [ 72.970039][ T6292] netlink: 32 bytes leftover after parsing attributes in process `syz.2.74'. [ 73.114748][ T6309] netlink: 180 bytes leftover after parsing attributes in process `syz.1.78'. [ 73.118603][ T6309] netlink: 180 bytes leftover after parsing attributes in process `syz.1.78'. [ 73.227562][ T6321] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.242562][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 73.246618][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 73.284496][ T6325] process 'syz.3.84' launched './file0' with NULL argv: empty string added [ 73.307878][ T6329] usb usb9: usbfs: process 6329 (syz.0.85) did not claim interface 48 before use [ 73.318848][ T6329] loop7: detected capacity change from 0 to 6 [ 73.326003][ T6329] Dev loop7: unable to read RDB block 6 [ 73.328079][ T6329] loop7: unable to read partition table [ 73.330435][ T6329] loop7: partition table beyond EOD, truncated [ 73.332887][ T6329] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 73.342409][ C0] operation not supported error, dev loop7, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 73.447057][ T6338] SELinux: failed to load policy [ 73.486983][ T6342] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 73.851409][ T6360] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 73.853744][ T6360] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 73.958918][ T6363] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 73.963294][ T6362] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 74.117848][ T6382] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 74.245601][ T6391] bond0: (slave nr0): Error: Device can not be enslaved while up [ 74.252485][ T6391] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 74.506631][ T50] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.655260][ T50] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 74.663532][ T50] usb 5-1: config 0 has no interfaces? [ 74.667251][ T50] usb 5-1: config 0 has no interfaces? [ 74.669913][ T50] usb 5-1: config 0 has no interfaces? [ 74.673600][ T50] usb 5-1: config 0 has no interfaces? [ 74.678139][ T50] usb 5-1: config 0 has no interfaces? [ 74.678893][ T6430] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.681369][ T50] usb 5-1: config 0 has no interfaces? [ 74.691884][ T50] usb 5-1: config 0 has no interfaces? [ 74.705586][ T50] usb 5-1: config 0 has no interfaces? [ 74.709907][ T50] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 74.712880][ T50] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 74.720039][ T50] usb 5-1: Product: syz [ 74.722009][ T50] usb 5-1: Manufacturer: syz [ 74.724925][ T50] usb 5-1: SerialNumber: syz [ 74.732063][ T6440] random: crng reseeded on system resumption [ 74.735010][ T50] usb 5-1: config 0 descriptor?? [ 74.756857][ T6430] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.761401][ T6443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6443 comm=syz.3.118 [ 74.768233][ T6443] netlink: 'syz.3.118': attribute type 1 has an invalid length. [ 74.830472][ T6430] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.887212][ T6430] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.954097][ T50] usb 5-1: USB disconnect, device number 3 [ 75.025503][ T54] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.042246][ T74] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.052096][ T74] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.064565][ T74] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.109867][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.113259][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.116166][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.118988][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.121974][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.125408][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.128264][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.131099][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.135931][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.138067][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.140194][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.142285][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.145135][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.147822][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.149967][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.152202][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.154703][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.156870][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.159026][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.161165][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.163268][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.166067][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.168367][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.170956][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.173154][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.175555][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.178374][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.180556][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.182744][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.185355][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.187624][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.189835][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.191932][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.194504][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.196673][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.199176][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.201339][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.203459][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.206270][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.208691][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.210917][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.213492][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.217203][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.220090][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.223070][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.224446][ T5998] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.226304][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.226345][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.226367][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.231992][ T5998] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 75.232124][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.245754][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.248028][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.250243][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.252869][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.256889][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.259992][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.262954][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.267550][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.270402][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.273229][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.276600][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.279750][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.282735][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.285933][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.288715][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.291579][ T6464] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000 [ 75.476142][ T6480] netlink: 'syz.3.123': attribute type 1 has an invalid length. [ 75.497409][ T6480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.513944][ T6480] bond2: (slave gretap1): making interface the new active one [ 75.518696][ T6480] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 75.554705][ T10] cfg80211: failed to load regulatory.db [ 75.583825][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 75.597691][ T6485] netlink: 'syz.3.124': attribute type 5 has an invalid length. [ 75.610865][ T6484] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 75.677017][ T10] kernel read not supported for file 123/task/124/numa_maps (pid: 10 comm: kworker/0:1) [ 75.706707][ T6497] netlink: 'syz.0.129': attribute type 3 has an invalid length. [ 75.709492][ T6497] netlink: 236 bytes leftover after parsing attributes in process `syz.0.129'. [ 75.743967][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 75.748301][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 75.751068][ T9] usb 7-1: config 179 has no interface number 0 [ 75.753108][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 75.756841][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 75.760381][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 75.765745][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 75.769315][ T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 75.773480][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 75.776797][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.782305][ T6475] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 75.931675][ T6499] infiniband sy1: set active [ 75.937451][ T6499] infiniband sy1: added bond0 [ 75.984404][ T6499] RDS/IB: sy1: added [ 75.986261][ T6499] smc: adding ib device sy1 with port count 1 [ 75.988376][ T6499] smc: ib device sy1 port 1 has no pnetid [ 76.004812][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input7 [ 76.253057][ T6475] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 76.256024][ T6475] SELinux: failed to load policy [ 76.418860][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.421083][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.819847][ T6524] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 76.842421][ T6521] program syz.3.135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.983517][ T6531] ======================================================= [ 76.983517][ T6531] WARNING: The mand mount option has been deprecated and [ 76.983517][ T6531] and is ignored by this kernel. Remove the mand [ 76.983517][ T6531] option from the mount to silence this warning. [ 76.983517][ T6531] ======================================================= [ 76.994573][ T6531] new mount options do not match the existing superblock, will be ignored [ 77.041196][ T6536] netlink: 'syz.3.139': attribute type 10 has an invalid length. [ 77.046060][ T6536] veth0_macvtap: left promiscuous mode [ 77.224741][ T6552] raw_sendmsg: syz.0.142 forgot to set AF_INET. Fix it! [ 77.529644][ T6559] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.967307][ T40] kauditd_printk_skb: 91 callbacks suppressed [ 77.967323][ T40] audit: type=1400 audit(1775270425.263:333): avc: denied { create } for pid=6569 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.980109][ T40] audit: type=1400 audit(1775270425.273:334): avc: denied { setopt } for pid=6569 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.990097][ T40] audit: type=1400 audit(1775270425.283:335): avc: denied { ioctl } for pid=6569 comm="syz.1.149" path="socket:[11751]" dev="sockfs" ino=11751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.000687][ T40] audit: type=1400 audit(1775270425.283:336): avc: denied { write } for pid=6569 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.039500][ T40] audit: type=1400 audit(1775270425.333:337): avc: denied { read } for pid=6569 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.083870][ T40] audit: type=1400 audit(1775270425.373:338): avc: denied { create } for pid=6574 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.091737][ T40] audit: type=1400 audit(1775270425.373:339): avc: denied { write } for pid=6574 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.122684][ T40] audit: type=1400 audit(1775270425.413:340): avc: denied { nlmsg_read } for pid=6578 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.122755][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 78.136855][ T6580] unsupported nlmsg_type 40 [ 78.232945][ T6593] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.299169][ T6593] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.365677][ T6593] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.395628][ T6598] faux_driver vgem: [drm] Unknown color mode 728; guessing buffer size. [ 78.398948][ T40] audit: type=1400 audit(1775270425.693:341): avc: denied { write } for pid=6597 comm="syz.3.155" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 78.459379][ T6593] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.499306][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 78.499310][ T1343] usb 7-1: USB disconnect, device number 2 [ 78.505074][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 78.510023][ T40] audit: type=1400 audit(1775270425.803:342): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 78.561528][ T6617] netlink: 'syz.2.157': attribute type 13 has an invalid length. [ 78.631255][ T6617] team_slave_1: Caught tx_queue_len zero misconfig [ 78.635640][ T1149] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.663160][ T1149] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.679865][ T1149] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.699864][ T1149] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.707290][ T6600] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.832948][ T6600] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.903946][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 78.908040][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 78.911953][ T6639] netlink: 'syz.3.163': attribute type 7 has an invalid length. [ 78.916631][ T6639] netlink: 'syz.3.163': attribute type 13 has an invalid length. [ 78.981678][ T6600] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.066374][ T6600] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.090020][ T6657] overlayfs: failed to resolve './file0': -2 [ 79.107417][ T6659] overlay: Unknown parameter '' [ 79.177969][ T6666] netlink: 'syz.2.167': attribute type 25 has an invalid length. [ 79.183295][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 79.191525][ T54] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.194721][ T6666] netlink: 'syz.2.167': attribute type 25 has an invalid length. [ 79.197249][ T54] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.197327][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 79.199902][ T54] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.205494][ T54] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.284578][ T6669] vxlan0: entered promiscuous mode [ 79.288073][ T6669] vxlan0: entered allmulticast mode [ 79.941676][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 79.947253][ T6676] openvswitch: netlink: Flow key attr not present in new flow. [ 80.194486][ T6693] bond3: option xmit_hash_policy: invalid value (6) [ 80.197699][ T6696] binder: 6695:6696 unknown command 0 [ 80.199584][ T6696] binder: 6695:6696 ioctl c0306201 200000000280 returned -22 [ 80.203029][ T6693] bond3 (unregistering): Released all slaves [ 80.217192][ T6696] netlink: 116 bytes leftover after parsing attributes in process `syz.0.177'. [ 80.223403][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 80.237628][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 80.240512][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 80.328467][ T6699] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.348403][ T6699] QAT: failed to copy from user cfg_data. [ 80.453833][ T6708] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 80.456147][ T6708] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 80.465751][ T6708] vhci_hcd vhci_hcd.0: Device attached [ 80.469689][ T6710] vhci_hcd: connection closed [ 80.470822][ T74] vhci_hcd vhci_hcd.3: stop threads [ 80.475837][ T74] vhci_hcd vhci_hcd.3: release socket [ 80.477582][ T74] vhci_hcd vhci_hcd.3: disconnect device [ 80.789070][ T6730] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 80.808819][ T6730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.851712][ T6730] bond1: (slave veth3): Enslaving as an active interface with a down link [ 80.865511][ T6730] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 80.876845][ T6730] vlan2: entered allmulticast mode [ 80.879048][ T6730] bond1: entered allmulticast mode [ 80.882581][ T6730] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 81.632204][ T6757] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.303833][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 82.369336][ T74] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.372867][ T74] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.388197][ T74] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.402571][ T74] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.450833][ T6805] ntfs3(sr0): Primary boot signature is not NTFS. [ 82.453779][ T10] usb 8-1: device descriptor read/64, error -71 [ 82.456069][ T6805] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 82.465086][ T6804] binder: 6803:6804 unknown command 167772161 [ 82.469218][ T6804] binder: 6803:6804 ioctl c0306201 2000000003c0 returned -22 [ 82.527247][ T6809] bond0: entered allmulticast mode [ 82.529683][ T6809] bond_slave_0: entered allmulticast mode [ 82.532097][ T6809] bond_slave_1: entered allmulticast mode [ 82.583866][ T1466] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.703777][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 82.735370][ T1466] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 82.738816][ T1466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.743767][ T1466] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 82.747287][ T1466] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 82.761081][ T1466] usb 5-1: Manufacturer: syz [ 82.765497][ T1466] usb 5-1: config 0 descriptor?? [ 82.815199][ T1466] rc_core: IR keymap rc-hauppauge not found [ 82.817716][ T1466] Registered IR keymap rc-empty [ 82.820657][ T1466] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 82.828277][ T1466] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 82.833779][ T10] usb 8-1: device descriptor read/64, error -71 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xd0000) [ 82.914440][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 82.916579][ T1115] ata1: failed to read log page 10h (errno=-5) [ 82.918519][ T1115] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 82.920907][ T1115] ata1.00: irq_stat 0x41000000 [ 82.922421][ T1115] ata1.00: failed command: READ FPDMA QUEUED [ 82.924702][ T1115] ata1.00: cmd 60/80:70:ee:59:01/06:00:00:00:00/40 tag 14 ncq dma 851968 in [ 82.924702][ T1115] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 82.930016][ T1115] ata1.00: status: { DRDY } [ 82.931809][ T1115] ata1.00: error: { ABRT } [ 82.933616][ T1115] ata1.00: failed command: READ FPDMA QUEUED [ 82.936325][ T1115] ata1.00: cmd 60/00:78:ee:60:01/01:00:00:00:00/40 tag 15 ncq dma 131072 in [ 82.936325][ T1115] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 82.941746][ T1115] ata1.00: status: { DRDY } [ 82.943205][ T1115] ata1.00: error: { ABRT } [ 82.943974][ T10] usb usb8-port1: attempt power cycle [ 82.945837][ T1115] ata1.00: configured for UDMA/100 [ 82.948225][ T1115] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 82.951663][ T1115] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 82.954437][ T1115] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 82.957050][ T1115] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 59 ee 00 06 80 00 [ 82.959647][ T1115] I/O error, dev sda, sector 88558 op 0x0:(READ) flags 0x80700 phys_seg 13 prio class 2 [ 82.963626][ T1115] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 82.968496][ T1115] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 82.971355][ T6801] openvswitch: netlink: Flow actions attr not present in new flow. [ 82.971496][ T1115] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 82.971518][ T1115] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 01 60 ee 00 01 00 00 [ 82.971532][ T1115] I/O error, dev sda, sector 90350 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 82.985018][ T1115] ata1: EH complete [ 82.997811][ T9] usb 5-1: USB disconnect, device number 4 [ 83.013747][ T5998] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 83.178197][ T5998] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 83.181540][ T5998] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 83.186077][ T5998] usb 6-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 83.188953][ T5998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.191451][ T5998] usb 6-1: Product: syz [ 83.192853][ T5998] usb 6-1: Manufacturer: syz [ 83.194621][ T5998] usb 6-1: SerialNumber: syz [ 83.293841][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 83.314502][ T10] usb 8-1: device descriptor read/8, error -71 [ 83.405312][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 83.405322][ T40] audit: type=1400 audit(1775270430.693:369): avc: denied { read write } for pid=6819 comm="syz.1.216" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 83.415948][ T1343] usb 6-1: USB disconnect, device number 3 [ 83.422152][ T40] audit: type=1400 audit(1775270430.693:370): avc: denied { open } for pid=6819 comm="syz.1.216" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 83.429600][ T40] audit: type=1400 audit(1775270430.703:371): avc: denied { ioctl } for pid=6819 comm="syz.1.216" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 83.553833][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 83.574358][ T10] usb 8-1: device descriptor read/8, error -71 [ 83.694557][ T10] usb usb8-port1: unable to enumerate USB device [ 83.712058][ T6825] __nla_validate_parse: 13 callbacks suppressed [ 83.712074][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'. [ 83.765325][ T6832] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 83.775928][ T6832] romfs: unable to set blocksize [ 83.775928][ T6832] [ 83.782271][ T6832] fuse: Unknown parameter 'dont_measure' [ 83.844142][ T6835] fuse: blksize only supported for fuseblk [ 83.895019][ T6837] netlink: 'syz.2.222': attribute type 10 has an invalid length. [ 83.897642][ T6837] veth1_macvtap: left promiscuous mode [ 83.942640][ T6839] netlink: 'syz.2.223': attribute type 1 has an invalid length. [ 83.947481][ T40] audit: type=1400 audit(1775270431.243:372): avc: denied { append } for pid=6840 comm="syz.1.224" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.013152][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 84.020379][ T6848] Failed to initialize the IGMP autojoin socket (err -2) [ 84.244144][ T6865] fuseblk: Bad value for 'group_id' [ 84.245834][ T6865] fuseblk: Bad value for 'group_id' [ 84.427134][ T6879] EXT4-fs (nbd2): unable to read superblock [ 84.444069][ T6877] netlink: 'syz.1.235': attribute type 1 has an invalid length. [ 84.475893][ T6877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.486275][ T40] audit: type=1400 audit(1775270431.783:373): avc: denied { checkpoint_restore } for pid=6881 comm="syz.2.237" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.499887][ T6877] bond1: (slave ip6erspan0): making interface the new active one [ 84.500345][ T6882] netlink: 5 bytes leftover after parsing attributes in process `syz.2.237'. [ 84.514907][ T6877] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 84.586358][ T6884] syz.2.239 uses old SIOCAX25GETINFO [ 84.596416][ T40] audit: type=1400 audit(1775270431.893:374): avc: denied { ioctl } for pid=6885 comm="syz.0.238" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 84.624365][ T40] audit: type=1400 audit(1775270431.923:375): avc: denied { ioctl } for pid=6892 comm="syz.2.240" path="socket:[14542]" dev="sockfs" ino=14542 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.637039][ T40] audit: type=1400 audit(1775270431.923:376): avc: denied { write } for pid=6892 comm="syz.2.240" path="socket:[14542]" dev="sockfs" ino=14542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.650071][ T6895] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 84.716207][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 84.719297][ T40] audit: type=1400 audit(1775270432.013:377): avc: denied { connect } for pid=6894 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.831632][ T40] audit: type=1400 audit(1775270432.123:378): avc: denied { accept } for pid=6906 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.069281][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.073123][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.079516][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.082943][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.086801][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.090099][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.093091][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 85.093314][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.097562][ T6921] netlink: 7 bytes leftover after parsing attributes in process `syz.3.250'. [ 85.099566][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.106596][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.109857][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.113171][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.116726][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.120829][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.124649][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.128031][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.131226][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.131240][ T6923] binder: 6914:6923 ioctl c0306201 200000001440 returned -11 [ 85.134682][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.141352][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.145086][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.148293][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.151645][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.155251][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.158526][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.161873][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7ebd0 returned -22 [ 85.161951][ T6915] binder: 6914:6915 ioctl 4020ae46 7ff478f7e8d0 returned -22 [ 85.162026][ T6915] binder: 6914:6915 ioctl 8138ae83 7ff478f7ea90 returned -22 [ 85.193668][ T6927] bridge0: port 3(ipvlan2) entered blocking state [ 85.198755][ T6927] bridge0: port 3(ipvlan2) entered disabled state [ 85.201241][ T6927] ipvlan2: entered allmulticast mode [ 85.203054][ T6927] bridge0: entered allmulticast mode [ 85.206314][ T6927] ipvlan2: left allmulticast mode [ 85.208270][ T6927] bridge0: left allmulticast mode [ 85.636170][ T6946] SQUASHFS error: Failed to read block 0x0: -5 [ 85.642155][ T6946] unable to read squashfs_super_block [ 85.685589][ T6950] No control pipe specified [ 85.730863][ T6952] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.261'. [ 85.735799][ T6952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.261'. [ 85.811155][ T6956] devpts: Bad value for 'max' [ 85.851092][ T6964] comedi: valid board names for 8255 driver are: [ 85.853309][ T6964] 8255 [ 85.859984][ T6964] comedi: valid board names for vmk80xx driver are: [ 85.864325][ T6964] vmk80xx [ 85.865755][ T6964] comedi: valid board names for usbduxsigma driver are: [ 85.867970][ T6964] usbduxsigma [ 85.869187][ T6964] comedi: valid board names for usbduxfast driver are: [ 85.874147][ T6964] usbduxfast [ 85.875260][ T6964] comedi: valid board names for usbdux driver are: [ 85.877552][ T6964] usbdux [ 85.878519][ T6964] comedi: valid board names for ni6501 driver are: [ 85.880782][ T6964] ni6501 [ 85.881003][ T6966] netlink: 32 bytes leftover after parsing attributes in process `syz.0.267'. [ 85.881741][ T6964] comedi: valid board names for dt9812 driver are: [ 85.887853][ T6964] dt9812 [ 85.888820][ T6964] comedi: valid board names for ni_labpc_cs driver are: [ 85.891137][ T6964] ni_labpc_cs [ 85.892456][ T6964] comedi: valid board names for ni_daq_700 driver are: [ 85.895076][ T6964] ni_daq_700 [ 85.896187][ T6964] comedi: valid board names for labpc_pci driver are: [ 85.898398][ T6964] labpc_pci [ 85.899475][ T6964] comedi: valid board names for adl_pci9118 driver are: [ 85.903461][ T6964] pci9118dg [ 85.906650][ T6964] pci9118hg [ 85.907859][ T6964] pci9118hr [ 85.909053][ T6964] comedi: valid board names for 8255_pci driver are: [ 85.911475][ T6964] 8255_pci [ 85.913580][ T6964] comedi: valid board names for s526 driver are: [ 85.931613][ T6964] s526 [ 85.932606][ T6964] comedi: valid board names for multiq3 driver are: [ 85.935748][ T6964] multiq3 [ 85.936864][ T6964] comedi: valid board names for pcmuio driver are: [ 85.939018][ T6964] pcmuio48 [ 85.940155][ T6964] pcmuio96 [ 85.941181][ T6964] comedi: valid board names for pcmmio driver are: [ 85.943328][ T6964] pcmmio [ 85.944851][ T6964] comedi: valid board names for pcmda12 driver are: [ 85.947080][ T6964] pcmda12 [ 85.948111][ T6964] comedi: valid board names for pcmad driver are: [ 85.950251][ T6964] pcmad12 [ 85.951250][ T6964] pcmad16 [ 85.952312][ T6964] comedi: valid board names for ni_labpc driver are: [ 85.954863][ T6964] lab-pc-1200 [ 85.956087][ T6964] lab-pc-1200ai [ 85.957291][ T6964] lab-pc+ [ 85.958296][ T6964] comedi: valid board names for atmio16 driver are: [ 85.960483][ T6964] atmio16 [ 85.961491][ T6964] atmio16d [ 85.963354][ T6964] comedi: valid board names for ni_at_ao driver are: [ 85.967747][ T6964] at-ao-6 [ 85.968830][ T6964] at-ao-10 [ 85.970172][ T6964] comedi: valid board names for ni_at_a2150 driver are: [ 85.972962][ T6964] ni_at_a2150 [ 85.974337][ T6964] comedi: valid board names for adq12b driver are: [ 85.976784][ T6964] adq12b [ 85.978031][ T6976] bond3: (slave gretap0): Device is not bonding slave [ 85.978290][ T6964] comedi: valid board names for mpc624 driver are: [ 85.980953][ T6976] bond3: option active_slave: invalid value (gretap0) [ 85.983057][ T6964] mpc624 [ 85.987026][ T6964] comedi: valid board names for c6xdigio driver are: [ 85.988869][ T6976] bond3 (unregistering): Released all slaves [ 85.989350][ T6964] c6xdigio [ 85.992284][ T6964] comedi: valid board names for aio_iiro_16 driver are: [ 85.994696][ T6964] aio_iiro_16 [ 85.995934][ T6964] comedi: valid board names for aio_aio12_8 driver are: [ 85.998196][ T6964] aio_aio12_8 [ 85.998673][ T6981] tmpfs: Bad value for 'uid' [ 85.999368][ T6964] aio_ai12_8 [ 86.000847][ T6981] tmpfs: Bad value for 'uid' [ 86.003508][ T6964] aio_ao12_4 [ 86.005218][ T6964] comedi: valid board names for fl512 driver are: [ 86.007215][ T6983] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 86.007385][ T6964] fl512 [ 86.010271][ T6983] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 86.011236][ T6964] comedi: valid board names for dmm32at driver are: [ 86.017443][ T6964] dmm32at [ 86.018523][ T6964] comedi: valid board names for dt282x driver are: [ 86.020629][ T6964] dt2821 [ 86.021618][ T6964] dt2821-f [ 86.022723][ T6964] dt2821-g [ 86.024023][ T6964] dt2823 [ 86.024984][ T6964] dt2824-pgh [ 86.026205][ T6964] dt2824-pgl [ 86.027399][ T6964] dt2825 [ 86.028427][ T6964] dt2827 [ 86.029421][ T6964] dt2828 [ 86.030376][ T6964] dt2829 [ 86.031331][ T6964] dt21-ez [ 86.032359][ T6964] dt23-ez [ 86.033445][ T6964] dt24-ez [ 86.034945][ T6964] dt24-ez-pgl [ 86.036098][ T6964] comedi: valid board names for dt2817 driver are: [ 86.038131][ T6964] dt2817 [ 86.039163][ T6964] comedi: valid board names for dt2815 driver are: [ 86.041880][ T6964] dt2815 [ 86.042848][ T6964] comedi: valid board names for dt2814 driver are: [ 86.045337][ T6964] dt2814 [ 86.046301][ T6964] comedi: valid board names for dt2811 driver are: [ 86.048637][ T6964] dt2811-pgh [ 86.049826][ T6964] dt2811-pgl [ 86.050900][ T6964] comedi: valid board names for dt2801 driver are: [ 86.052962][ T6964] dt2801 [ 86.054249][ T6964] comedi: valid board names for das6402 driver are: [ 86.057196][ T6964] das6402-12 [ 86.058294][ T6964] das6402-16 [ 86.059390][ T6964] comedi: valid board names for das1800 driver are: [ 86.061539][ T6964] das-1701st [ 86.062621][ T6964] das-1701st-da [ 86.064153][ T6964] das-1702st [ 86.065245][ T6964] das-1702st-da [ 86.066394][ T6964] das-1702hr [ 86.067506][ T6964] das-1702hr-da [ 86.068691][ T6964] das-1701ao [ 86.069832][ T6964] das-1702ao [ 86.070899][ T6964] das-1801st [ 86.072069][ T6964] das-1801st-da [ 86.073223][ T6964] das-1802st [ 86.074789][ T6964] das-1802st-da [ 86.075985][ T6964] das-1802hr [ 86.077068][ T6964] das-1802hr-da [ 86.078224][ T6964] das-1801hc [ 86.079334][ T6964] das-1802hc [ 86.080680][ T6964] das-1801ao [ 86.081778][ T6964] das-1802ao [ 86.082936][ T6964] comedi: valid board names for das800 driver are: [ 86.085382][ T6964] das-800 [ 86.086389][ T6964] cio-das800 [ 86.087462][ T6964] das-801 [ 86.088492][ T6964] cio-das801 [ 86.089850][ T6964] das-802 [ 86.091091][ T6964] cio-das802 [ 86.092438][ T6964] cio-das802/16 [ 86.094342][ T6964] comedi: valid board names for isa-das08 driver are: [ 86.097150][ T6964] isa-das08 [ 86.098451][ T6964] das08-pgm [ 86.099765][ T6964] das08-pgh [ 86.100832][ T6964] das08-pgl [ 86.102177][ T6964] das08-aoh [ 86.103489][ T6964] das08-aol [ 86.105256][ T6964] das08-aom [ 86.106566][ T6964] das08/jr-ao [ 86.107943][ T6964] das08jr-16-ao [ 86.109367][ T6964] pc104-das08 [ 86.110723][ T6964] das08jr/16 [ 86.112061][ T6964] comedi: valid board names for das16m1 driver are: [ 86.115437][ T6964] das16m1 [ 86.116763][ T6964] comedi: valid board names for dac02 driver are: [ 86.119336][ T6964] dac02 [ 86.120530][ T6964] comedi: valid board names for rti802 driver are: [ 86.123085][ T6964] rti802 [ 86.124608][ T6964] comedi: valid board names for rti800 driver are: [ 86.126765][ T6964] rti800 [ 86.127749][ T6964] rti815 [ 86.128927][ T6964] comedi: valid board names for pcm3724 driver are: [ 86.131521][ T6964] pcm3724 [ 86.132776][ T6964] comedi: valid board names for pcl818 driver are: [ 86.135771][ T6964] pcl818l [ 86.137309][ T6964] pcl818h [ 86.138554][ T6964] pcl818hd [ 86.139751][ T6964] pcl818hg [ 86.140937][ T6964] pcl818 [ 86.142086][ T6964] pcl718 [ 86.143047][ T6964] pcm3718 [ 86.145419][ T6964] comedi: valid board names for pcl816 driver are: [ 86.148123][ T6964] pcl816 [ 86.149343][ T6964] pcl814b [ 86.150624][ T6964] comedi: valid board names for pcl812 driver are: [ 86.152883][ T6964] pcl812 [ 86.154027][ T6964] pcl812pg [ 86.155355][ T6964] acl8112pg [ 86.156525][ T6964] acl8112dg [ 86.157639][ T6964] acl8112hg [ 86.158804][ T6964] a821pgl [ 86.159906][ T6964] a821pglnda [ 86.161065][ T6964] a821pgh [ 86.162083][ T6964] a822pgl [ 86.163156][ T6964] a822pgh [ 86.164288][ T6964] a823pgl [ 86.165289][ T6964] a823pgh [ 86.166341][ T6964] pcl813 [ 86.167301][ T6964] pcl813b [ 86.168427][ T6964] acl8113 [ 86.169628][ T6964] iso813 [ 86.170605][ T6964] acl8216 [ 86.171713][ T6964] a826pg [ 86.172669][ T6964] comedi: valid board names for pcl730 driver are: [ 86.175109][ T6964] pcl730 [ 86.176224][ T6964] iso730 [ 86.177232][ T6964] acl7130 [ 86.178372][ T6964] pcm3730 [ 86.179542][ T6964] pcl725 [ 86.180676][ T6964] p8r8dio [ 86.181748][ T6964] acl7225b [ 86.183261][ T6964] p16r16dio [ 86.184635][ T6964] pcl733 [ 86.185661][ T6964] pcl734 [ 86.186624][ T6964] opmm-1616-xt [ 86.187825][ T6964] pearl-mm-p [ 86.188974][ T6964] ir104-pbf [ 86.190116][ T6964] comedi: valid board names for pcl726 driver are: [ 86.192970][ T6964] pcl726 [ 86.194108][ T6964] pcl727 [ 86.195081][ T6964] pcl728 [ 86.196077][ T6964] acl6126 [ 86.197089][ T6964] acl6128 [ 86.198087][ T6964] comedi: valid board names for pcl724 driver are: [ 86.200177][ T6964] pcl724 [ 86.201123][ T6964] pcl722 [ 86.202083][ T6964] pcl731 [ 86.203139][ T6964] acl7122 [ 86.204232][ T6964] acl7124 [ 86.205235][ T6964] pet48dio [ 86.206260][ T6964] pcmio48 [ 86.207264][ T6964] onyx-mm-dio [ 86.208373][ T6964] comedi: valid board names for pcl711 driver are: [ 86.210458][ T6964] pcl711 [ 86.211418][ T6964] pcl711b [ 86.212431][ T6964] acl8112hg [ 86.213579][ T6964] acl8112dg [ 86.214770][ T6964] comedi: valid board names for amplc_pc263 driver are: [ 86.216982][ T6964] pc263 [ 86.217935][ T6964] comedi: valid board names for amplc_pc236 driver are: [ 86.220198][ T6964] pc36at [ 86.221161][ T6964] comedi: valid board names for amplc_dio200 driver are: [ 86.223369][ T6964] pc212e [ 86.224465][ T6964] pc214e [ 86.225424][ T6964] pc215e [ 86.226379][ T6964] pc218e [ 86.227332][ T6964] pc272e [ 86.228292][ T6964] comedi: valid board names for comedi_parport driver are: [ 86.230595][ T6964] comedi_parport [ 86.231824][ T6964] comedi: valid board names for comedi_test driver are: [ 86.234128][ T6964] comedi_test [ 86.235313][ T6964] comedi: valid board names for comedi_bond driver are: [ 86.237517][ T6964] comedi_bond [ 86.296451][ T6985] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 86.321030][ T6988] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 86.385862][ T6999] netlink: 32 bytes leftover after parsing attributes in process `syz.0.274'. [ 86.423923][ T5944] Bluetooth: hci1: command tx timeout [ 86.439638][ T7003] wg2: Caught tx_queue_len zero misconfig [ 86.465623][ T7002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.515463][ T9] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 86.524706][ T9] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 86.526898][ T7002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.562622][ T7014] macvlan2: entered promiscuous mode [ 86.581969][ T7002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium P-( [ 86.652692][ T7032] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 86.724670][ T7040] netlink: 'syz.0.286': attribute type 12 has an invalid length. [ 87.138518][ T7057] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3170034004 (101441088128 ns) > initial count (92024169792 ns). Using initial count to start timer. [ 87.347034][ T7081] openvswitch: netlink: Flow key attr not present in new flow. [ 87.399256][ T7086] tun0: tun_chr_ioctl cmd 1074025672 [ 87.401085][ T7086] tun0: ignored: set checksum enabled [ 87.408050][ T7086] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 87.774571][ T46] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 87.778128][ T46] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 87.780960][ T46] wlan1: authentication with 08:02:11:00:00:00 timed out [ 87.789203][ T7104] tipc: Started in network mode [ 87.791553][ T7104] tipc: Node identity b6ea68f2d8c2, cluster identity 4711 [ 87.795823][ T7104] tipc: Enabled bearer , priority 0 [ 87.799518][ T7104] syzkaller0: entered promiscuous mode [ 87.801909][ T7104] syzkaller0: entered allmulticast mode [ 87.814539][ T7104] tipc: Resetting bearer [ 87.994094][ T7114] capability: warning: `syz.1.310' uses deprecated v2 capabilities in a way that may be insecure [ 88.063787][ T39] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 88.235381][ T39] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.238463][ T39] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.241735][ T39] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.245377][ T39] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.250031][ T39] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.252977][ T39] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.257101][ T39] usb 7-1: Product: syz [ 88.258519][ T39] usb 7-1: Manufacturer: syz [ 88.266158][ T39] cdc_wdm 7-1:1.0: skipping garbage [ 88.267937][ T39] cdc_wdm 7-1:1.0: skipping garbage [ 88.274238][ T39] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 88.276499][ T39] cdc_wdm 7-1:1.0: Unknown control protocol [ 88.470332][ T40] kauditd_printk_skb: 9395 callbacks suppressed [ 88.470411][ T40] audit: type=1400 audit(1775270435.763:9774): avc: denied { read write } for pid=7103 comm="syz.2.307" name="cdc-wdm0" dev="devtmpfs" ino=2904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 88.484823][ T40] audit: type=1400 audit(1775270435.763:9775): avc: denied { open } for pid=7103 comm="syz.2.307" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 88.499829][ T39] usb 7-1: USB disconnect, device number 3 [ 88.509650][ T7103] tipc: Resetting bearer [ 88.529023][ T7103] tipc: Disabling bearer [ 88.573645][ T7144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=7144 comm=syz.0.319 [ 88.688003][ T40] audit: type=1400 audit(1775270435.983:9776): avc: denied { create } for pid=7162 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 88.825754][ T5944] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 88.830313][ T5944] Bluetooth: hci3: Injecting HCI hardware error event [ 88.836171][ T5944] Bluetooth: hci3: hardware error 0x00 [ 88.857136][ T5944] ------------[ cut here ]------------ [ 88.860013][ T5944] refcount_t: underflow; use-after-free. [ 88.862532][ T5944] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xf4/0x130, CPU#2: kworker/u33:7/5944 [ 88.867082][ T5944] Modules linked in: [ 88.869124][ T5944] CPU: 2 UID: 0 PID: 5944 Comm: kworker/u33:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.873949][ T5944] Tainted: [L]=SOFTLOCKUP [ 88.875995][ T5944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.880358][ T5944] Workqueue: hci3 hci_error_reset [ 88.882575][ T5944] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 88.885288][ T5944] Code: cc e8 a0 e3 11 fd 48 8d 3d 59 27 ed 0b 67 48 0f b9 3a e8 8f e3 11 fd 5b 5d e9 48 42 9d 06 e8 83 e3 11 fd 48 8d 3d 4c 27 ed 0b <67> 48 0f b9 3a e8 72 e3 11 fd 5b 5d c3 cc cc cc cc e8 66 e3 11 fd [ 88.893811][ T5944] RSP: 0018:ffffc9000398f8e8 EFLAGS: 00010293 [ 88.896470][ T5944] RAX: 0000000000000000 RBX: ffff88802fa46078 RCX: ffffffff84f7190b [ 88.899857][ T5944] RDX: ffff88802d328000 RSI: ffffffff84f7199d RDI: ffffffff90e440f0 [ 88.903262][ T5944] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 88.906821][ T5944] R10: 0000000000000003 R11: 000000000000761b R12: ffff88802fa84400 [ 88.910206][ T5944] R13: ffff88802fa46078 R14: ffffffff86304340 R15: dffffc0000000000 [ 88.913766][ T5944] FS: 0000000000000000(0000) GS:ffff8880d6539000(0000) knlGS:0000000000000000 [ 88.917878][ T5944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.920702][ T5944] CR2: 0000000000000000 CR3: 0000000037d51000 CR4: 0000000000352ef0 [ 88.924140][ T5944] Call Trace: [ 88.925618][ T5944] [ 88.926940][ T5944] klist_put+0x18a/0x1d0 [ 88.929064][ T5944] klist_remove+0x14c/0x2e0 [ 88.931091][ T5944] ? __pfx_klist_remove+0x10/0x10 [ 88.933251][ T5944] ? __pfx_kobject_move+0x10/0x10 [ 88.935492][ T5944] ? kobject_put+0xb9/0x640 [ 88.937452][ T5944] device_move+0x12d/0x1140 [ 88.939521][ T5944] hci_conn_del_sysfs+0x86/0x1a0 [ 88.941687][ T5944] hci_conn_del+0x506/0x1180 [ 88.943795][ T5944] hci_conn_hash_flush+0x186/0x280 [ 88.945995][ T5944] hci_dev_close_sync+0x5a7/0x1240 [ 88.948195][ T5944] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 88.950543][ T5944] hci_dev_do_close+0x2e/0xb0 [ 88.952568][ T5944] hci_error_reset+0xbf/0x380 [ 88.954674][ T5944] process_one_work+0xa23/0x19a0 [ 88.956985][ T5944] ? __pfx_process_one_work+0x10/0x10 [ 88.959292][ T5944] ? __pfx_hci_error_reset+0x10/0x10 [ 88.961561][ T5944] worker_thread+0x5ef/0xe50 [ 88.963557][ T5944] ? __pfx_worker_thread+0x10/0x10 [ 88.965863][ T5944] ? kthread+0x13a/0x450 [ 88.967746][ T5944] ? __pfx_worker_thread+0x10/0x10 [ 88.969940][ T5944] kthread+0x370/0x450 [ 88.971711][ T5944] ? __pfx_kthread+0x10/0x10 [ 88.973782][ T5944] ret_from_fork+0x754/0xd80 [ 88.975937][ T5944] ? __pfx_ret_from_fork+0x10/0x10 [ 88.978144][ T5944] ? __switch_to+0x7b4/0x1120 [ 88.980322][ T5944] ? __pfx_kthread+0x10/0x10 [ 88.982372][ T5944] ret_from_fork_asm+0x1a/0x30 [ 88.984656][ T5944] [ 88.986023][ T5944] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.989113][ T5944] CPU: 2 UID: 0 PID: 5944 Comm: kworker/u33:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.993654][ T5944] Tainted: [L]=SOFTLOCKUP [ 88.995531][ T5944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.999796][ T5944] Workqueue: hci3 hci_error_reset [ 89.001915][ T5944] Call Trace: [ 89.003350][ T5944] [ 89.004648][ T5944] dump_stack_lvl+0x100/0x190 [ 89.006721][ T5944] vpanic+0x552/0x970 [ 89.008558][ T5944] ? __pfx_vpanic+0x10/0x10 [ 89.010545][ T5944] panic+0xd1/0xe0 [ 89.012184][ T5944] ? __pfx_panic+0x10/0x10 [ 89.014123][ T5944] ? check_panic_on_warn+0x1f/0x90 [ 89.016337][ T5944] check_panic_on_warn.cold+0x19/0x34 [ 89.018618][ T5944] ? refcount_warn_saturate+0xf4/0x130 [ 89.020939][ T5944] __warn.cold+0x191/0x348 [ 89.022849][ T5944] __report_bug+0x296/0x3d0 [ 89.024820][ T5944] ? refcount_warn_saturate+0xf4/0x130 [ 89.027153][ T5944] ? __pfx___report_bug+0x10/0x10 [ 89.029325][ T5944] ? refcount_warn_saturate+0xed/0x130 [ 89.031696][ T5944] ? refcount_warn_saturate+0x5b/0x130 [ 89.034095][ T5944] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 89.036818][ T5944] report_bug_entry+0xe1/0x290 [ 89.038891][ T5944] ? refcount_warn_saturate+0xf4/0x130 [ 89.041255][ T5944] handle_bug+0x1cd/0x2a0 [ 89.043116][ T5944] exc_invalid_op+0x17/0x50 [ 89.045081][ T5944] asm_exc_invalid_op+0x1a/0x20 [ 89.047206][ T5944] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 89.049834][ T5944] Code: cc e8 a0 e3 11 fd 48 8d 3d 59 27 ed 0b 67 48 0f b9 3a e8 8f e3 11 fd 5b 5d e9 48 42 9d 06 e8 83 e3 11 fd 48 8d 3d 4c 27 ed 0b <67> 48 0f b9 3a e8 72 e3 11 fd 5b 5d c3 cc cc cc cc e8 66 e3 11 fd [ 89.057906][ T5944] RSP: 0018:ffffc9000398f8e8 EFLAGS: 00010293 [ 89.060544][ T5944] RAX: 0000000000000000 RBX: ffff88802fa46078 RCX: ffffffff84f7190b [ 89.064087][ T5944] RDX: ffff88802d328000 RSI: ffffffff84f7199d RDI: ffffffff90e440f0 [ 89.067635][ T5944] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 89.070992][ T5944] R10: 0000000000000003 R11: 000000000000761b R12: ffff88802fa84400 [ 89.074223][ T5944] R13: ffff88802fa46078 R14: ffffffff86304340 R15: dffffc0000000000 [ 89.077664][ T5944] ? __pfx_klist_children_put+0x10/0x10 [ 89.080071][ T5944] ? refcount_warn_saturate+0x5b/0x130 [ 89.082407][ T5944] ? refcount_warn_saturate+0xed/0x130 [ 89.084740][ T5944] ? refcount_warn_saturate+0xed/0x130 [ 89.087075][ T5944] klist_put+0x18a/0x1d0 [ 89.088966][ T5944] klist_remove+0x14c/0x2e0 [ 89.091132][ T5944] ? __pfx_klist_remove+0x10/0x10 [ 89.093488][ T5944] ? __pfx_kobject_move+0x10/0x10 [ 89.095715][ T5944] ? kobject_put+0xb9/0x640 [ 89.097671][ T5944] device_move+0x12d/0x1140 [ 89.099623][ T5944] hci_conn_del_sysfs+0x86/0x1a0 [ 89.101755][ T5944] hci_conn_del+0x506/0x1180 [ 89.103757][ T5944] hci_conn_hash_flush+0x186/0x280 [ 89.105939][ T5944] hci_dev_close_sync+0x5a7/0x1240 [ 89.108144][ T5944] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 89.110589][ T5944] hci_dev_do_close+0x2e/0xb0 [ 89.112741][ T5944] hci_error_reset+0xbf/0x380 [ 89.114859][ T5944] process_one_work+0xa23/0x19a0 [ 89.117047][ T5944] ? __pfx_process_one_work+0x10/0x10 [ 89.119375][ T5944] ? __pfx_hci_error_reset+0x10/0x10 [ 89.121707][ T5944] worker_thread+0x5ef/0xe50 [ 89.123820][ T5944] ? __pfx_worker_thread+0x10/0x10 [ 89.126057][ T5944] ? kthread+0x13a/0x450 [ 89.127882][ T5944] ? __pfx_worker_thread+0x10/0x10 [ 89.130120][ T5944] kthread+0x370/0x450 [ 89.131960][ T5944] ? __pfx_kthread+0x10/0x10 [ 89.134065][ T5944] ret_from_fork+0x754/0xd80 [ 89.136102][ T5944] ? __pfx_ret_from_fork+0x10/0x10 [ 89.138320][ T5944] ? __switch_to+0x7b4/0x1120 [ 89.140560][ T5944] ? __pfx_kthread+0x10/0x10 [ 89.142762][ T5944] ret_from_fork_asm+0x1a/0x30 [ 89.144914][ T5944] [ 89.147022][ T5944] Kernel Offset: disabled [ 89.148865][ T5944] Rebooting in 86400 seconds..