last executing test programs: 48.81099029s ago: executing program 0 (id=84): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='local_lock\x00', &(0x7f0000000200)='all\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000006328b535272445", @ANYRES16=r4, @ANYBLOB="05002abd7000ffdbdf250600000008000300", @ANYRES32=r5, @ANYBLOB="08000500060000001c00e700920a05e6d238c53ebd60f6ffe8d166b53026e3fab7bdafd00800178004000600"], 0x48}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) syz_emit_ethernet(0x2ee, &(0x7f00000008c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "bac26c", 0x2b8, 0x3a, 0x1, @remote, @remote, {[@hopopts={0x2b, 0x9, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x5, 0xe, [0x8ed]}}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x4, [0xffffffffffffffff, 0x4, 0x8, 0x69b3]}}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x2}]}, @routing={0x29, 0x4, 0x2, 0x4, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @srh={0x3a, 0x6, 0x4, 0x3, 0x81, 0x40, 0x6, [@loopback, @private0, @local]}, @routing={0x73, 0xe, 0x1, 0x7, 0x0, [@empty, @local, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x42}]}, @routing={0x84, 0xa, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @dev={0xfe, 0x80, '\x00', 0x40}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @time_exceed={0x3, 0x1, 0x0, 0x1, '\x00', {0x6, 0x6, "d1d9d9", 0x6, 0x5c, 0xff, @mcast1, @empty, [@fragment={0x3b, 0x0, 0x2, 0x0, 0x0, 0x6, 0x65}, @hopopts={0xc, 0x5, '\x00', [@enc_lim, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x20, {0x2, 0x6, 0xfc, 0x4, [0x348, 0x67056f28, 0x8]}}, @generic={0x7}, @enc_lim={0x4, 0x1, 0x8}]}], "ef178dea89055c6ea55ce42dfe4a0bffbf638897daf4e8d4b4d735e8167ae8e04eef95cf90775407b8559a174318155a1e9de72300f3792db630fcce383b9b4218d290a64c55486f73d13310be6c559e17a1f2d0e04bd5cd0f48a88ee435f5f9363e0c7ed7eb30a1622eb73430c94911ba6f96ac6256a350be2f23bbcca724e18962eb5b243a649d2113d7460399ecca938345e73ae9f0e08d089d96be9168d8e22c33a3ce60d164e8f216a544f5c784a4f8d26b9295c03c1c94cb583ed399b2"}}}}}}}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000340)) read(r6, &(0x7f0000000700), 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002410000133ea8078031743a00000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b0000000000"], 0x30}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56349, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xffff}, {0x8001, 0x9}}, [@qdisc_kind_options=@q_qfg]}, 0x3f}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xffff, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x5c0, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8, 0x1}, {0x5, 0x2, 0x2}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200410d1}, 0x0) r10 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) read(r6, &(0x7f0000000310), 0x6) 47.911762032s ago: executing program 0 (id=94): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000fff5000000000000000001", @ANYRES8], 0x340a) 47.761215078s ago: executing program 0 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000e00)={0xc, {"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", 0x1000}}, 0x1006) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf250500000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x24044014) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x10, &(0x7f00000002c0), 0x4) fsopen(&(0x7f00000001c0)='9p\x00', 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000007987f967c2b50f7500000000000000000000000062011800000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8902, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xed) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x3c}, @in=@loopback, {}, {}, {}, 0x1, 0x0, 0x2, 0x4, 0x0, 0x60}}, 0xf0}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='U!Ab', @ANYRES16=r10, @ANYBLOB="010030bd7000fddbdf250f00000008000300", @ANYRES32=r11, @ANYBLOB="080034003fe00000"], 0x24}}, 0x0) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) r12 = socket$tipc(0x1e, 0x5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) connect$tipc(r12, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04022420"], 0x7) (async) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 47.760951802s ago: executing program 0 (id=100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000340)=0x6, 0x4) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x80) r2 = fanotify_init(0x20, 0x48002) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./bus\x00', &(0x7f00000000c0)='vfat\x00', 0x4000c0, &(0x7f00000001c0)='discard') fanotify_mark(r2, 0x105, 0x8971, r1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x30, r1, 0x10111000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) r4 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000080)={&(0x7f0000000100)={0x2d, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20014081}, 0x0) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x10001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000f, 0x8041) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0) syz_clone(0x11, 0x0, 0x3e, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) read(r5, &(0x7f0000000b00), 0x64) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1400000010000100000000000000000000e8000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a010200ffffffffffffffff0000020900010073797a30000000000900030073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) r8 = getpgid(0x0) syz_pidfd_open(r8, 0x0) unshare(0x2040400) 47.492526591s ago: executing program 0 (id=106): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = io_uring_setup(0x1883, &(0x7f0000000780)={0x0, 0xb14, 0x400, 0x2, 0x400}) io_uring_enter(r0, 0x35, 0x99d7, 0xd2, &(0x7f0000000940)={[0x6435]}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000800)={@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @broadcast}, 0x2, 0x2, 0x2, 0x4}}, {&(0x7f0000000440)=""/39, 0x27}, &(0x7f0000000740), 0xa}, 0xa0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x18c, 0x0, &(0x7f0000000500)="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", 0x0, 0x2037ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000010600002f"]) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket(0x2, 0x80805, 0x0) (async) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000003c0)={r9, 0x0, 0x20}, 0xc) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000980)={r9, @in={{0x2, 0x4e24, @local}}, 0x1, 0x7, 0x7, 0x0, 0x0, 0x0, 0xb}, 0x9c) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r11, 0x80685600, &(0x7f00000001c0)) (async) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtaction={0x74, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x60, 0x1, [@m_ctinfo={0x5c, 0x1e, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x3, 0x3, 0xfa, 0x1}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x325e}]}, {0xd, 0x6, "c4e2cca950dd0a60e1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x74}}, 0x20040000) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14], 0x90}}, 0x0) (async) futex(&(0x7f0000000100)=0x1, 0x1, 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000300)=0x2, 0x1) (async) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r15, 0x705, 0x70bd30, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000810) (async) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="04d5ba440db0720026bd7000fedbdf25230000000500260000000000050072f07e092f4e9b81f4c84d67c92f796c3782df1016584dff9cf24e1058e0a774595b01149c2be183edd9ccc5836eb8bd7d77bd81551867a9cd5c4f9063db4cfd0eb30f75220aef99d552208abcde2c72bfbaaf9239545ca44fbaa16c19ffd3e52b3da7552e554b48c8680c8d8b4807191d2cc9281f46a474ab6fea5abde432da02201b7882492575c4ce19ac76c059c2ada8addf3b177f7a375d5295bb78264aa97add28a63d36f36e9ba45f98f949576503c75c513277a44b84ed2ef50ceec49c65939916"], 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000020) 46.97393453s ago: executing program 0 (id=115): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r1, 0xe72b6000) madvise(&(0x7f0000afc000/0x4000)=nil, 0x4000, 0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 46.934267512s ago: executing program 32 (id=115): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r1, 0xe72b6000) madvise(&(0x7f0000afc000/0x4000)=nil, 0x4000, 0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 34.503033608s ago: executing program 2 (id=312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000007000001", @ANYRES8], 0x340a) 34.343266727s ago: executing program 2 (id=315): ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0x3, 0x1000, 0x7f, 0x6, 0x1, "fe1d00003413000000000020b42717e47f00"}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) connect$can_j1939(r1, &(0x7f0000000240)={0x1d, r2, 0x0, {0x1, 0xf0, 0x3}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x23, 0x790, 0x80000000002, 0x180, 0x2000000400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x385310}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)=0xe0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b45, 0x0) io_submit(0x0, 0x1, &(0x7f0000000ac0)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x77, 0xffffffffffffffff, 0x0, 0x0, 0x503, 0x0, 0x3}]) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x641, 0x101001) write$evdev(r8, &(0x7f0000000300)=[{{0x77359400}, 0x2, 0x10, 0xb}, {{}, 0x0, 0x97, 0x10}, {{0x0, 0xea60}, 0x14, 0xa, 0x2eca}], 0xfed1) syz_emit_ethernet(0x1173, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x0) 34.052067459s ago: executing program 2 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000020000001", @ANYRES8], 0x340a) 33.912415875s ago: executing program 2 (id=324): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x51) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90012000e00050015090a"], 0x17) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x7, 0x6, 0x0, 0x0, 0x4, 0x540000, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) (async) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$xdp(r6, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4) recvmsg$can_j1939(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001600)=""/4097, 0x1001}], 0x1}, 0x10021) (async) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r3}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) (async) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0xe, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x2000c000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x4, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x1108040, 0x0) (async) r9 = socket$inet6(0xa, 0x4, 0x7) recvfrom(r9, &(0x7f0000000040)=""/48, 0x30, 0x40010000, &(0x7f0000000100)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80) 33.843885887s ago: executing program 2 (id=325): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket(0x10, 0x2, 0x0) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x800, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x18}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x4008000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x3ff, 0x20, 0x4, 0x8}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r4, 0x1}, 0x8) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0xa, 0xffffffff, 0x1, 0xffffff89, 0x800, 0x9, 0x48d4}, {0x40000000, 0x4, 0x1, 0x7, 0x7, 0x7, 0x5}, {0x8000000e, 0x8, 0x1, 0x3ff, 0x7ffffdff, 0x7f, 0xffff}, {0x80000019, 0x2, 0x1, 0x40007, 0xdf1, 0x2, 0x80000001}, {0xc0000000, 0x2bb, 0x1, 0xd, 0x3, 0x7fc, 0x8}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x2, 0xe, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r6, 0x2f, 0x3, 0x6, 0x5, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x40, 0x3, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r6, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x6, 0x3d, @private1, @loopback, 0x40, 0x7800, 0xfffffffc}}) 33.604199761s ago: executing program 2 (id=327): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x200, 0x1, 0x352}, &(0x7f0000000240), &(0x7f0000001880), 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) fsync(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_getrule={0x1c, 0x22, 0x200, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x409d}, 0x0) 33.57235403s ago: executing program 33 (id=327): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x200, 0x1, 0x352}, &(0x7f0000000240), &(0x7f0000001880), 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) fsync(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_getrule={0x1c, 0x22, 0x200, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x409d}, 0x0) 12.452735307s ago: executing program 1 (id=589): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) (async) r6 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000001380)) (async, rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) (rerun: 64) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0086202, &(0x7f0000000540)=0x1) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000fbdbdf250600000008000300", @ANYRES32=r10, @ANYBLOB="080e058003000400ebb21e2a27e4c2d5065311e147b36eb7d91737c4e377f9fb42b121ddabb25e7c3cb12eaf"], 0x24}}, 0x0) 12.333403202s ago: executing program 1 (id=590): r0 = socket(0x10, 0x3, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x20, 0x9, 0xba, {0xba, 0x21, "4eb6e629179990ca20632dda98350a16cccb667fe73477c7c7cdc868ce5006abd0073815a91cc2d595942cac20d309129df1ef895a57eb86a02fdc0d501e30600bf23eeb5d9b149ecba51a619f384db3aabae433ed29e9b3edb995eb77fa7b56c9b5104b6f331506f224b48bf0ebcdf7643ccf8b3ed6d8d6c5d65e944b6c3861e5e6b3abf0daf5f5d78f01b54fb8219c9a32d987993382e00cd705c00a1a71640f56916ab23b97d84da709436d414d7d4d0ec6b1bf53dc1d"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f0000000200)={0x0, 0x22, 0x17, {[@global=@item_012={0x1, 0x1, 0x8, "0f"}, @global=@item_4={0x3, 0x1, 0x9, "1cb9a936"}, @global=@item_4={0x3, 0x1, 0x3, ',?VY'}, @local=@item_4={0x3, 0x2, 0x7, "c86a7bf0"}, @main=@item_012={0x1, 0x0, 0x9, "85"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x2, 0x1, 0x9, "e3e5"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4800, 0x2, 0x1, {0x22, 0xa4f}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x20, 0x7, 0x35, "57de13808202920de90355fff6f919abd12441067ffe9fab4bc1957d8afce7b68964241105929cb29adaab37f0632e92ac3e740ce8"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000003c0)={0x20, 0x1, 0x2c, "3647843ae19a08635408b3afda65c7e57974bf9b89f7acbce815691cfcaa9c6fe069cf4b6afc408cfa7c0b99"}, &(0x7f0000000400)={0x20, 0x3, 0x1}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x800, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x18}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x4008000) 11.783189813s ago: executing program 1 (id=598): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000040)={{0x0, 0x7fffffffffffffff, 0x4, 0x5, 0x5, 0x5, 0x1, 0x2, 0xfffffffd, 0x6, 0xffffffff, 0x400, 0x18000000000000, 0x9, 0x4}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64", 0x19}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x5605744c5c979ce6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001000010400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="000000001100000024000e000100008000000000ffff000000000000ffff000000000000f3ff0205000000001400350076657468315f746f5f6272696467650008000a00", @ANYRES32=r4, @ANYBLOB="f7c7b0aa736fe501f5dcb12562baeff9ee5ed2eec8980cc9cdd6178f96e0a302a6fe945de1e9cab0e86ac0a51e260ff86fee8ae0be866079a6ffb47b6e2fc67e7c87a320c1f61d7fb5faf7b622932447ab9778fa05698dfd96a0aa4cbf0f64a870974bf086195c0364712884b947d223d5fbac48252a5c031e14b141cd5a9964133c4145576856fcf690b6558b81"], 0x60}, 0x1, 0x0, 0x0, 0x2204d808}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_ublk_setup_io_uring(0x3b51, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4401c010400010902"], 0x0) r8 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595c, 0x10000, 0x3, 0x1000004f, 0x0, r7}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r8, 0x382a, 0x9286, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000100)={0x9, r7, 0x34, {0x2, 0x5}, 0x6}, 0x1) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="9a036864e000"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000980)={{r2, 0xc4, 0x2, 0x1d8, 0x3, 0x6, 0x7, 0x3, 0x7cd2, 0x7, 0x7c68, 0xae, 0x9, 0x2, 0x10001}}) recvmmsg(r1, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x10001, &(0x7f0000003640)) readahead(r0, 0x7ceff907, 0x80000000) r12 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r13 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000000140)={r13}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback=r6, 0x32, 0x0, 0x400, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000300000500"/28], 0x50) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000580)={0x2, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32=r16, @ANYRES32=r0, @ANYBLOB="684dbf65a1719ff172df8754ef32ce762ebe41b247c4e710cae054bc3ccce44de8f412f58f6a6072c0b9972e8257d7e438d8abaff4925c856b39b8b8c77686b91c7dfd6614c951228e90c84ebbffca478aa2215745331a8ab419d1ecca47ba6668bf95e7653fb2d555cc6d909891f6bc5fc1f8ad51da6cbc52efe9b9afcb", @ANYRES32=r17, @ANYRES64=r15], 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d84a56bd0d001c00180081064e32e82331734c368cc79100", 0x18}], 0x1}, 0x804) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f00000005c0)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r14, 0x89e3, &(0x7f0000000180)={r13, r12}) 10.563483608s ago: executing program 1 (id=615): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2081, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000380)=@multiplanar_fd={0x101, 0xa, 0x4, 0xe000, 0xa, {0x0, 0x2710}, {0x1, 0x0, 0xb4, 0x0, 0x9, 0xd, "012ddf9b"}, 0x0, 0x4, {&(0x7f0000000180)=[{0x6, 0x4, {r0}, 0x6}, {0x8000, 0x5, {}, 0x61c5}]}, 0x8, 0x0, r0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @multicast2, 0x4e20, 0x3, 'lblc\x00', 0x1, 0x80003, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 10.510329032s ago: executing program 1 (id=616): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./proc_mnt\x00', &(0x7f0000000300)='proc\x00', 0x800002, &(0x7f0000000140)='\x00\x06\xc5\xd0Ve\xaf\xfej\x92\xbeo\xf6\x99<$\xde}I\x8c\'*\xee\xc8\xb3\xe4 \x87\xee*\xc0A\x03\\1\x80\xebU\x10N{[\x00\xa5\xc6\xa8\x8cj\b\x01a\x85\x16\x96\x8e\x1fDRq\xea\xca\xb0\xc4\x9cEFRg#\x9c\xd0\x96sf\xbf\xf1\xa29\x8b\xea\xeb\x87\xc7\xcfp\xf6\xa9\xec\x0f\vP\v\x93\xd4\x887\x98*\xd6\xf4\x82>\xf6\xd7)\xcfe\x12\xe4F&\xbf}\x04\x14E\xadx\x04\xeaIM\xb7\xce\xd7\xdd\x8a\x1e(\x1f4m\xcf`^\x88\xa7\xfc\x90\x0f\x8d#\xe0w\xa5h\xf2\x14w0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000002740)={@multicast, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3d}, {[], {{0x0, 0xce23, 0x41424344, 0x41424344, 0x0, 0x0, 0x4000019f, 0x2, 0x0, 0x0, 0x2}}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) (async) syz_emit_ethernet(0x4a, &(0x7f0000002740)={@multicast, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3d}, {[], {{0x0, 0xce23, 0x41424344, 0x41424344, 0x0, 0x0, 0x4000019f, 0x2, 0x0, 0x0, 0x2}}}}}}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) (async) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) (async) 3.983360154s ago: executing program 3 (id=687): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) close_range(r0, r0, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x23}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004881}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@getae={0x50, 0x1f, 0x10, 0x70bd2b, 0x25dfdbfe, {{@in=@private=0xa010102, 0x4d6, 0xa, 0x2b}, @in=@loopback, 0x224}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @proto={0x5, 0x19, 0xff}]}, 0x50}}, 0x20004090) 3.91347934s ago: executing program 3 (id=688): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x1170, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [0xffffff00, 0xffffffff, 0x80, 0xffffff00], [0xffffffff, 0x0, 0xffffff00, 0xff0000ff], 'lo\x00', 'vlan0\x00', {}, {0xff}, 0x3a, 0x7, 0x0, 0x20}, 0x0, 0x1108, 0x1170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x1, './cgroup/syz0\x00', 0x4f6, {0xd}}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x10, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400) 3.831766113s ago: executing program 3 (id=692): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000002000010028bd7000fcdbdf350a8003000800000317000000080018004e224e2414000200fc0000000000000000000000000000001400010020010000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) r2 = memfd_secret(0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r2, 0xf, 0x0, 0x80000001, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) linkat(r3, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 3.760567889s ago: executing program 3 (id=695): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = socket$inet6(0xa, 0xa, 0x400) connect$inet6(r2, &(0x7f0000001340)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c) socket(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) pipe2$9p(&(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40242) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f0000000440)) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) unshare(0x22020600) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4], 0x74) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f00000012c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x1060}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 2.793570739s ago: executing program 3 (id=707): select(0x0, 0x0, &(0x7f0000000040)={0x4, 0x472, 0x1, 0x25, 0x101, 0x8000000000000001, 0x0, 0x3}, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x10, 0x1, 0x400, 0x8, {{0x3b, 0x4, 0x0, 0x4, 0xec, 0x64, 0x0, 0x0, 0x29, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x17, 0xb3, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x17}, @local, @multicast2]}, @cipso={0x86, 0x1f, 0x3, [{0x5, 0xd, "5cd42e54d82fe23cf6df12"}, {0x7, 0xc, "d54b22e4f1ce3f5cdddd"}]}, @ssrr={0x89, 0xf, 0xe6, [@local, @empty, @empty]}, @timestamp_addr={0x44, 0x34, 0x2b, 0x1, 0xe, [{@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x2}, {@rand_addr=0x64010102, 0xe}, {@local, 0x8}, {@broadcast, 0x40}, {@local, 0x9}]}, @timestamp={0x44, 0x10, 0xea, 0x0, 0x0, [0xc, 0x1, 0x8]}, @rr={0x7, 0xf, 0xe3, [@loopback, @empty, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x34, 0x12, 0x1, 0x9, [{@empty, 0x7}, {@loopback, 0x100}, {@multicast1, 0x4}, {@multicast2, 0x5}, {@local, 0x394a}, {@empty}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2b, &(0x7f0000000700)=ANY=[@ANYRES16=r0, @ANYRES64, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183b000003000000550000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000120000008500000006000000b5b3feff100000000f948100000000008500000051000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff0000000ac9760e00bfa100000000000007010000f8ffffffbfa400000000000007f7ffffefffffffb702000008000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x8, 0xdf, &(0x7f00000004c0)=""/223, 0x41000, 0x12, '\x00', r1, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x0, 0x4, 0x4, 0x1ff}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[{0x4, 0x4, 0x5}, {0x0, 0x404, 0x4, 0x2}, {0x5, 0x2, 0x7, 0xe}, {0x2, 0x3, 0x5, 0x6}], 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r1, 0x25, 0x4, @void}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r3) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000340)=0x1) ioctl$TCGETA(r6, 0x8926, &(0x7f0000000080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[], 0x118}}, 0x0) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3, 0x10, "3eccd8010000000000000010000000040100"}) 2.090519027s ago: executing program 4 (id=720): r0 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000040)={0x6, 0x1, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000001600)=""/4096}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0800000006020400280012800b00010062726b6467650000180002800c002e0003000000030000000500070008000000"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xa000, 0x0) (async) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) 1.992682887s ago: executing program 4 (id=722): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xa0) symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000180)='.\x00') fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) fchdir(r3) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000004140)={0x18, 0x0, r4, {0x7}}, 0x18) close(0x3) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r5, &(0x7f00000016c0)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000029000000390000000802020100000000fe800000481539653959ef915000000000000000000000bb28000000000000002900000039000000bf02020100000000fe80000100000000000000000000000c"], 0x50}}], 0x1, 0x4040084) 1.992387201s ago: executing program 5 (id=723): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80880) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0x9c, 0x0, &(0x7f0000001600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/82, 0x52, 0x0, 0x16}, @flat=@weak_binder={0x77622a85, 0x1001, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000140)={0x0, 0x28, 0x40}}}, @enter_looper, @clear_death={0x400c630f, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001540)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x22}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000015c0)={0x0, 0x18, 0x40}}}], 0xac, 0x0, &(0x7f00000016c0)="3457b14741d515046b855ab52d66047ced63e9aff8ce38e0b9c979b82db3113715f1a69ddd39a7d64bb25a23779a63e9ee9d504da7ffa09cf46d5f74c4274fbcc7c54293730a6f4656f8890d95d231b129fc84dae981368bcb1f06c4a9ca60cf724a3ade90efbd4cbd9609685f77a002dd68126a9ffdfee24b86c54331321bb4decca70a8641feb6f1c17943d45c031e82dad8125c2e728d40c714cd39a03a7616ecccf0fa066f96c025485a"}) 1.913372868s ago: executing program 5 (id=724): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fcntl$addseals(r3, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x200, 0xf24}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b08"], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000001300)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x10000, 0x7ffffffe, 0xfffffffe, 0x7a, 0x0, 0x6, 0x1, 0xdffffffe, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x4665, 0x1, 0xf250, 0x80, 0x4800, 0x300000, 0x9, 0xe, 0x5, 0x0, 0x10005, 0x6, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x0, 0x4fc5, 0x2, 0xa, 0x2, 0x100004, 0xd, 0x2, 0x5, 0x6f, 0x8, 0x9, 0x5, 0x19a0, 0x6, 0x2, 0x7, 0xffffffff, 0x4, 0x406, 0x1, 0x5, 0x3c, 0x108, 0xa, 0x5], [0x7, 0x1e, 0x400, 0x7ffe, 0xfffffffd, 0x7f, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x2287, 0x1c32, 0x8, 0x5, 0xfff9, 0x3, 0x7ffd, 0x3, 0x8, 0x297, 0xbb2f, 0x0, 0x981, 0x4, 0x9, 0x10000, 0xc7d, 0xfffffffe, 0x8, 0x1000001, 0x2a9, 0xfffffff9, 0xfffffffe, 0xeb, 0x4, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x92, 0xfffffff9, 0x2, 0x0, 0x8000, 0x9, 0x0, 0x3, 0x0, 0x9, 0xe, 0x5, 0x7, 0x4, 0x2, 0x1, 0x5, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xf7ffffff, 0x7, 0x9, 0x406, 0x4, 0x4008, 0xc, 0x3, 0x9, 0xe88, 0x200005, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x5, 0x1000, 0xb, 0x45, 0x4, 0x5, 0x4, 0x2, 0x5, 0x80, 0x209, 0x8001, 0x10001, 0x80000000, 0x3, 0x400004, 0x1, 0x6d7e, 0x3, 0xfffffff8, 0x5, 0x100, 0x2, 0x4, 0x956, 0x0, 0x3ff, 0x12, 0x8, 0x41, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0xffffffff, 0x5, 0x401, 0x5], [0x6, 0xffff, 0x3, 0x3, 0xfffffc03, 0x2, 0x4000000, 0x3, 0x50, 0x2, 0x9, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3faa, 0x4, 0xfffffffe, 0x5, 0x3, 0x4, 0x8, 0x44, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x200, 0x4, 0x86, 0x20044, 0x409, 0x6, 0x0, 0x4, 0x11, 0x7f, 0xffffffff, 0x7ffe, 0xfeff8a33, 0xfffffff8, 0x401, 0xffffffff, 0xe, 0x7, 0x4, 0x0, 0xfffffffb, 0x7, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r5, 0x3b65, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) read(r4, &(0x7f0000000100)=""/225, 0xe1) timer_create(0x6, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x9}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008004) r6 = socket(0x29, 0xf, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x62f, 0x7ffffd, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980200000000001800128008000100677265000c00028008000100", @ANYRES16=r1], 0x44}}, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x80000003, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000280)={0x10, 0x1}) sendto$packet(r0, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x11, 0xc, r7, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) 1.103810338s ago: executing program 4 (id=725): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x2140) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12121, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7c, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB='/\x00\x00\x004 \x00\x00', @ANYRES32=r5, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="c509c10ce70f4f34767aedfa4332dc43139ecaac916d6dd972e9cd07bc61976d3a27b4c85f2d512bcd946df447ff9ce5a84cd5979f58e4485da24fc6bdc6cd33276c651e90bee4a5b6f07e24021b70a07880d3a41dc640b59a8985350b68e92fbc157fdba8c4406d4f88dd52a1cca88495d24c2903", @ANYRES64=0x0], 0x20) 1.008701924s ago: executing program 5 (id=726): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x64}, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x7fffffff}, 0x8) 1.008228406s ago: executing program 4 (id=727): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xcd099000) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000080)) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3401) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x60000, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x5, 0x1}, 0x8, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0d042bbd7000ffdbdf257600000008000300", @ANYRES32=r6, @ANYBLOB="042002000000000000affee3cdb7005139883f46d799e70fdf760672a5b024c88a870130db0c4f3dfefc5c768e0860340e06b1f31016e526349031ef7d8f66a3259d8c6bd5602eac10f816144df5d4706b862b20b95d16bbbf39747cec207cc307ce8b4e"], 0x1c}, 0x1, 0x0, 0x0, 0x20042844}, 0x800) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r7, 0xfffffffc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a3c000000120a09000000090000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000914"], 0x64}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="07000000000000000000352b5fc62990176adead64a85d57f2c3ff4b12cdd81487dea7a9bd020000001400018093bddb276a7649ab5faa9addeaa69a41a35f356bebae9c417ee7208d4b7d568b5173d0b11bae9264481ad0dba3f696934d3806739a24e84e7352ffa2149496e9c0ed4a8d4ddc9e4ecf2d9432922c070bbbf233ec418a105034cd0cb2f1b8a27a99571cfbdf9266d9c4d9150d49b7d051fba339ae5de97289ffe9c2ad425617ed6e42943def4539a2789202e1ad95c7e27fb52a71d774a3d8177c05de4b816b"], 0x28}}, 0x40080) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="c469255131eaa4e28b86e5b47af839ef406fe9974b914bfb1e468ea98a2b5f39176e2049a40c14df12849ea9307efa295e96f3c9fdeb19aac8b65d162d5ff6b7be8b0b6873675b5b8ad3c8218321ae2a81ccb43999b294be1e667cd1f5bd0434d3e481a0456bc4f6a3a8e7edb5fd4c", @ANYRES16=r10, @ANYBLOB="01002cbd700000000001010000001c000180060001000200000008000300ac1414370800060003000000"], 0x30}, 0x1, 0xff07}, 0x2000000) (async) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000c00)='cramfs\x00', 0x4418, 0x0) (async) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') 891.156969ms ago: executing program 5 (id=728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 633.198923ms ago: executing program 5 (id=729): syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x20, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, "090086ddffff0000"}}}}}, 0x0) 508.893168ms ago: executing program 5 (id=730): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r1 = syz_socket_connect_nvme_tcp() r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000080)={0x6}) recvmsg$inet_nvme(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @private}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1, &(0x7f0000000140)=""/33, 0x21}, 0x120) write(r0, &(0x7f0000000800)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='1', 0x1) 342.306717ms ago: executing program 4 (id=731): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000000c0)="420f38f0ae213b0000c4017a7fb3cd650000f30f009a00500000b9360800000f3266ba400066b8f80066efc461cdc649330566ba610066ed8ed00f014e003e3e650fe58d00000000", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000040)={0x30, &(0x7f0000000100)=[{0x33, '\x00', @st={0x4, [{0x7, @svalue=0xde6}, {0x1, @svalue=0x81}, {0x3, @svalue=0x9}, {0x0, @svalue=0x9}]}}]}) 0s ago: executing program 4 (id=732): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756", 0xe, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000b1a994bad01b1034c09e4c1c8c183af6dea7d406aa13576c52f621c4b256cd00b913c1ac38190b4879cda6549d68104031d8475d4e4fa88293b759ffe8eaf0aa8768a3489586a7700000000000000000000a000000000062ce53fe89e37f63db66962a436c6a024bd75a97d87e137df258603beac367ab9e9b59a04b4831faa81c6d8e335d9c46cf4fa57d669cdf78789872efc9dca7e9d6dee66965932bb969eda267a6e8be409158ece881b310d2a0e64f4749abd6fa6b8dd2d8319466c566eac5c8c86418bb96cd459b904f904a5d46b43c04e9c7b8f0c6ba75e12096c0ffa0be677e6241348c17066006633feee41553410501d2a39124d6a1bd28e878ce5af42a4393eec958e761f48a347115434b335379832f3d82a6de3c3bbfda6841c233d6c1f2c156c290e45715d860c0546db1", @ANYRES16=r1, @ANYBLOB="020025bd7000fddbdf250c00000008000300", @ANYRES32=r7, @ANYBLOB="04000b00050008000000000011000700c8df376b0cf042b8b7bc9e3c9200000009000700bfaf97bca20000000800090005ac0f00"], 0x50}}, 0x4000080) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r10, @ANYBLOB="20000280", @ANYRES32=r9, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r10], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r12, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r13) getsockname$packet(r13, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) kernel console output (not intermixed with test programs): T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.838434][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.846003][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.849030][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.858258][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.861285][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.881272][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.884449][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.904231][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.948893][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.961564][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.964655][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.995165][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.997943][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.041899][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.076262][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.088752][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.091084][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.109061][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.112131][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.273298][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.298350][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.334248][ T5743] veth0_vlan: entered promiscuous mode [ 49.351362][ T5743] veth1_vlan: entered promiscuous mode [ 49.382335][ T5736] veth0_vlan: entered promiscuous mode [ 49.388761][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.399865][ T5736] veth1_vlan: entered promiscuous mode [ 49.412906][ T5743] veth0_macvtap: entered promiscuous mode [ 49.420952][ T5743] veth1_macvtap: entered promiscuous mode [ 49.438498][ T5736] veth0_macvtap: entered promiscuous mode [ 49.464719][ T5736] veth1_macvtap: entered promiscuous mode [ 49.472438][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.477771][ T5746] veth0_vlan: entered promiscuous mode [ 49.491491][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.507611][ T5816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.511344][ T5816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.520704][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.523491][ T5816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.528369][ T5816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.533058][ T5746] veth1_vlan: entered promiscuous mode [ 49.543909][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.556169][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.570446][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.576816][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.586421][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.590039][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.665642][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.669803][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.680650][ T5746] veth0_macvtap: entered promiscuous mode [ 49.693326][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.695277][ T5739] veth0_vlan: entered promiscuous mode [ 49.698421][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.709243][ T5746] veth1_macvtap: entered promiscuous mode [ 49.743853][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.745836][ T5739] veth1_vlan: entered promiscuous mode [ 49.746908][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.752626][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.756214][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.773705][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.807709][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.809956][ T5743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.817362][ T5739] veth0_macvtap: entered promiscuous mode [ 49.821038][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.824162][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.832066][ T5739] veth1_macvtap: entered promiscuous mode [ 49.835845][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.839470][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.865931][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.879491][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.898317][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.901421][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.912549][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.916348][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.943439][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.946718][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.986016][ T5895] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 49.997054][ T5897] openvswitch: netlink: IPv4 tunnel dst address is zero [ 49.999634][ T5897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 50.005354][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.008661][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.009873][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.014790][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.039595][ T5895] xt_l2tp: wrong L2TP version: 0 [ 50.047186][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.051370][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.082173][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 50.087147][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 50.145811][ T5907] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 50.168456][ T5907] qnx6: wrong signature (magic) in superblock #1. [ 50.183722][ T5907] qnx6: unable to read the first superblock [ 50.212170][ T5912] netdevsim netdevsim0: Direct firmware load for . [ 50.212170][ T5912] failed with error -2 [ 50.222029][ T5912] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 50.222029][ T5912] [ 50.273312][ T5920] openvswitch: netlink: Flow actions attr not present in new flow. [ 50.613402][ T5952] mmap: syz.1.18 (5952) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.686005][ T5741] Bluetooth: hci3: command tx timeout [ 50.686774][ T5747] Bluetooth: hci0: command tx timeout [ 50.754690][ T5747] Bluetooth: hci2: command tx timeout [ 50.755055][ T5741] Bluetooth: hci1: command tx timeout [ 50.760780][ T5957] orangefs_devreq_write_iter: failed to copy head. [ 50.778885][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 50.782611][ T5963] netlink: 48 bytes leftover after parsing attributes in process `syz.2.23'. [ 50.791265][ T5963] geneve2: entered promiscuous mode [ 50.793422][ T5963] geneve2: entered allmulticast mode [ 50.828210][ T5969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24'. [ 50.970919][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 51.273010][ T5999] syz.3.33 uses obsolete (PF_INET,SOCK_PACKET) [ 51.467876][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 51.515586][ T42] kauditd_printk_skb: 169 callbacks suppressed [ 51.515603][ T42] audit: type=1400 audit(1785430501.592:340): avc: denied { sys_module } for pid=6008 comm="syz.2.35" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 51.597953][ T42] audit: type=1400 audit(1785430501.672:341): avc: denied { bind } for pid=6008 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.598433][ T6010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27681 sclass=netlink_route_socket pid=6010 comm=syz.2.35 [ 51.599301][ T6009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27681 sclass=netlink_route_socket pid=6009 comm=syz.2.35 [ 51.599460][ T6009] Zero length message leads to an empty skb [ 51.603700][ T42] audit: type=1400 audit(1785430501.672:342): avc: denied { setopt } for pid=6008 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.624939][ T42] audit: type=1400 audit(1785430501.702:343): avc: denied { mounton } for pid=6008 comm="syz.2.35" path="/16/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 51.629010][ T6009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6009 comm=syz.2.35 [ 51.639596][ T42] audit: type=1400 audit(1785430501.712:344): avc: denied { open } for pid=6008 comm="syz.2.35" path="/dev/ptyq9" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 51.688175][ T42] audit: type=1400 audit(1785430501.762:345): avc: denied { set_context_mgr } for pid=6017 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 51.746915][ T42] audit: type=1400 audit(1785430501.822:346): avc: denied { write } for pid=6017 comm="syz.2.36" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.824565][ T42] audit: type=1400 audit(1785430501.902:347): avc: denied { ioctl } for pid=6020 comm="syz.3.37" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.877508][ T42] audit: type=1400 audit(1785430501.952:348): avc: denied { write } for pid=6020 comm="syz.3.37" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.891859][ T6021] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 51.901402][ T42] audit: type=1400 audit(1785430501.972:349): avc: denied { nlmsg_write } for pid=6020 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.995011][ T5838] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.997582][ T6026] loop5: detected capacity change from 0 to 2640 [ 52.004255][ T6026] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.008093][ T6026] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.011832][ T6026] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.014824][ T6026] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.017937][ T6026] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.020672][ T6026] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.023564][ T6026] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.027332][ T6026] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.029890][ T6026] ldm_validate_partition_table(): Disk read failed. [ 52.032264][ T6026] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.035861][ T6026] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.038641][ T6026] Dev loop5: unable to read RDB block 0 [ 52.040499][ T6026] loop5: unable to read partition table [ 52.043174][ T6026] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 52.054324][ T6037] netlink: 48 bytes leftover after parsing attributes in process `syz.3.42'. [ 52.096819][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 52.101312][ T6037] hsr_slave_0: left promiscuous mode [ 52.105540][ T6037] hsr_slave_1: left promiscuous mode [ 52.146136][ T5838] usb 7-1: Using ep0 maxpacket: 8 [ 52.152035][ T5838] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 179, changing to 11 [ 52.156691][ T5838] usb 7-1: config 1 interface 0 has no altsetting 0 [ 52.162066][ T5838] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 52.165699][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.168959][ T5838] usb 7-1: Product: syz [ 52.170729][ T5838] usb 7-1: Manufacturer: syz [ 52.172721][ T5838] usb 7-1: SerialNumber: syz [ 52.376416][ T29] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 52.465580][ T6060] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 52.513757][ T5838] usbhid 7-1:1.0: can't add hid device: -71 [ 52.516906][ T5838] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 52.526456][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 52.528132][ T5838] usb 7-1: USB disconnect, device number 2 [ 52.537788][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 52.543608][ T29] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 52.547888][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.557826][ T6070] openvswitch: netlink: Actions may not be safe on all matching packets [ 52.566582][ T6070] hugetlbfs: syz.1.54 (6070): Using mlock ulimits for SHM_HUGETLB is obsolete [ 52.570243][ T29] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 52.579637][ T29] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 52.667643][ T6073] loop5: detected capacity change from 0 to 7 [ 52.673756][ T6073] Dev loop5: unable to read RDB block 7 [ 52.676942][ T6073] loop5: unable to read partition table [ 52.679484][ T6073] loop5: partition table beyond EOD, truncated [ 52.682170][ T6073] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 52.754488][ T5741] Bluetooth: hci3: command tx timeout [ 52.754723][ T5747] Bluetooth: hci0: command tx timeout [ 52.770920][ T56] usb 5-1: USB disconnect, device number 2 [ 52.790649][ T56] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 52.798288][ T56] garmin_gps 5-1:1.0: device disconnected [ 52.844820][ T5747] Bluetooth: hci2: command tx timeout [ 52.844856][ T5741] Bluetooth: hci1: command tx timeout [ 53.083303][ T6093] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 53.087621][ T6093] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 53.091567][ T6093] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 53.095776][ T6093] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 53.147423][ T6095] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 53.183166][ T6097] file system registered [ 53.359721][ T6099] kvm_intel: kvm [6098]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x8000000000000003 [ 53.399303][ T5736] ffs_data_put(): freeing [ 53.425111][ T6102] netlink: 'syz.2.65': attribute type 11 has an invalid length. [ 53.428459][ T6102] netlink: 224 bytes leftover after parsing attributes in process `syz.2.65'. [ 53.467379][ T6104] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6104 comm=syz.2.67 [ 53.519536][ T6106] warning: `syz.0.68' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 53.564763][ T6115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.568367][ T6115] batadv_slave_1: entered allmulticast mode [ 53.695390][ T6124] team0: Port device team_slave_0 removed [ 53.864983][ T5812] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 53.956669][ T56] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.015634][ T5812] usb 6-1: not running at top speed; connect to a high speed hub [ 54.019954][ T5812] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 54.025461][ T5812] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 54.029332][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.042465][ T5812] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 54.050449][ T6136] Line length is too long: Should be less than 4094 [ 54.052060][ T5812] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 54.104466][ T56] usb 8-1: Using ep0 maxpacket: 16 [ 54.111418][ T56] usb 8-1: config 131 has an invalid interface number: 90 but max is 3 [ 54.116752][ T56] usb 8-1: config 131 has an invalid interface number: 212 but max is 3 [ 54.120275][ T56] usb 8-1: config 131 has an invalid interface number: 133 but max is 3 [ 54.123774][ T56] usb 8-1: config 131 has an invalid interface number: 236 but max is 3 [ 54.127578][ T56] usb 8-1: config 131 has an invalid interface number: 130 but max is 3 [ 54.131190][ T56] usb 8-1: config 131 contains an unexpected descriptor of type 0x2, skipping [ 54.135008][ T56] usb 8-1: config 131 contains an unexpected descriptor of type 0x1, skipping [ 54.138681][ T56] usb 8-1: config 131 has 5 interfaces, different from the descriptor's value: 4 [ 54.142431][ T56] usb 8-1: config 131 has no interface number 0 [ 54.145174][ T56] usb 8-1: config 131 has no interface number 1 [ 54.147712][ T56] usb 8-1: config 131 has no interface number 2 [ 54.150306][ T56] usb 8-1: config 131 has no interface number 3 [ 54.152924][ T56] usb 8-1: config 131 has no interface number 4 [ 54.155681][ T56] usb 8-1: config 131 interface 90 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 54.159940][ T56] usb 8-1: config 131 interface 90 altsetting 3 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 54.164441][ T56] usb 8-1: config 131 interface 212 altsetting 7 endpoint 0xB has invalid maxpacket 511, setting to 64 [ 54.168815][ T56] usb 8-1: config 131 interface 212 altsetting 7 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 54.173122][ T56] usb 8-1: config 131 interface 212 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 1023 [ 54.177295][ T56] usb 8-1: config 131 interface 212 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 54.182935][ T56] usb 8-1: config 131 interface 212 altsetting 7 endpoint 0x89 has invalid maxpacket 14680, setting to 64 [ 54.187709][ T56] usb 8-1: config 131 interface 212 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 54.192535][ T56] usb 8-1: config 131 interface 212 altsetting 7 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 54.199153][ T56] usb 8-1: config 131 interface 212 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 54.203684][ T56] usb 8-1: config 131 interface 212 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 54.208195][ T56] usb 8-1: config 131 interface 212 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 54.211779][ T56] usb 8-1: config 131 interface 212 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 54.215275][ T56] usb 8-1: config 131 interface 212 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 54.218623][ T56] usb 8-1: config 131 interface 212 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 54.222571][ T56] usb 8-1: config 131 interface 133 altsetting 254 has a duplicate endpoint with address 0x4, skipping [ 54.226768][ T56] usb 8-1: config 131 interface 133 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 54.230782][ T56] usb 8-1: config 131 interface 133 altsetting 254 has a duplicate endpoint with address 0x84, skipping [ 54.234327][ T56] usb 8-1: config 131 interface 133 altsetting 254 endpoint 0xF has invalid wMaxPacketSize 0 [ 54.237539][ T56] usb 8-1: config 131 interface 133 altsetting 254 has a duplicate endpoint with address 0x9, skipping [ 54.240913][ T56] usb 8-1: config 131 interface 133 altsetting 254 has an endpoint descriptor with address 0x66, changing to 0x6 [ 54.244665][ T56] usb 8-1: config 131 interface 133 altsetting 254 has a duplicate endpoint with address 0x6, skipping [ 54.248040][ T56] usb 8-1: config 131 interface 133 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 54.251459][ T56] usb 8-1: config 131 interface 133 altsetting 254 has a duplicate endpoint with address 0x2, skipping [ 54.252261][ T5812] usb 6-1: USB disconnect, device number 2 [ 54.254916][ T56] usb 8-1: config 131 interface 133 altsetting 254 has a duplicate endpoint with address 0x3, skipping [ 54.254934][ T56] usb 8-1: config 131 interface 133 altsetting 254 has 10 endpoint descriptors, different from the interface descriptor's value: 13 [ 54.254949][ T56] usb 8-1: too many endpoints for config 131 interface 236 altsetting 134: 170, using maximum allowed: 30 [ 54.261739][ T5812] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 54.264426][ T56] usb 8-1: config 131 interface 236 altsetting 134 has an invalid descriptor for endpoint zero, skipping [ 54.264441][ T56] usb 8-1: config 131 interface 236 altsetting 134 has a duplicate endpoint with address 0x8D, skipping [ 54.264454][ T56] usb 8-1: config 131 interface 236 altsetting 134 has a duplicate endpoint with address 0x4, skipping [ 54.264465][ T56] usb 8-1: config 131 interface 236 altsetting 134 has 3 endpoint descriptors, different from the interface descriptor's value: 170 [ 54.264486][ T56] usb 8-1: config 131 interface 130 altsetting 203 has a duplicate endpoint with address 0xA, skipping [ 54.264497][ T56] usb 8-1: config 131 interface 130 altsetting 203 has a duplicate endpoint with address 0xE, skipping [ 54.268896][ T5812] garmin_gps 6-1:1.0: device disconnected [ 54.270964][ T56] usb 8-1: config 131 interface 130 altsetting 203 has a duplicate endpoint with address 0xE, skipping [ 54.270980][ T56] usb 8-1: config 131 interface 130 altsetting 203 has a duplicate endpoint with address 0x4, skipping [ 54.270991][ T56] usb 8-1: config 131 interface 130 altsetting 203 has a duplicate endpoint with address 0x3, skipping [ 54.271003][ T56] usb 8-1: config 131 interface 130 altsetting 203 has a duplicate endpoint with address 0x4, skipping [ 54.271016][ T56] usb 8-1: config 131 interface 130 altsetting 203 has a duplicate endpoint with address 0xA, skipping [ 54.271027][ T56] usb 8-1: config 131 interface 130 altsetting 203 has a duplicate endpoint with address 0x6, skipping [ 54.271039][ T56] usb 8-1: config 131 interface 130 altsetting 203 has a duplicate endpoint with address 0xF, skipping [ 54.271051][ T56] usb 8-1: config 131 interface 130 altsetting 203 has a duplicate endpoint with address 0xA, skipping [ 54.323274][ T56] usb 8-1: config 131 interface 130 altsetting 203 has a duplicate endpoint with address 0xA, skipping [ 54.326696][ T56] usb 8-1: config 131 interface 130 altsetting 203 has a duplicate endpoint with address 0x6, skipping [ 54.330052][ T56] usb 8-1: config 131 interface 130 altsetting 203 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 54.333689][ T56] usb 8-1: config 131 interface 130 altsetting 203 endpoint 0x86 has an invalid bInterval 171, changing to 11 [ 54.337987][ T56] usb 8-1: config 131 interface 130 altsetting 203 endpoint 0x86 has invalid maxpacket 49650, setting to 1024 [ 54.341598][ T56] usb 8-1: config 131 interface 130 altsetting 203 has a duplicate endpoint with address 0xB, skipping [ 54.345067][ T56] usb 8-1: config 131 interface 130 altsetting 203 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 54.349267][ T56] usb 8-1: config 131 interface 90 has no altsetting 0 [ 54.351393][ T56] usb 8-1: config 131 interface 212 has no altsetting 0 [ 54.353572][ T56] usb 8-1: config 131 interface 133 has no altsetting 0 [ 54.356126][ T56] usb 8-1: config 131 interface 236 has no altsetting 0 [ 54.358284][ T56] usb 8-1: config 131 interface 130 has no altsetting 0 [ 54.361956][ T56] usb 8-1: New USB device found, idVendor=07c0, idProduct=1506, bcdDevice=ce.3a [ 54.364925][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.367409][ T56] usb 8-1: Product: syz [ 54.368723][ T56] usb 8-1: Manufacturer: syz [ 54.370184][ T56] usb 8-1: SerialNumber: syz [ 54.412738][ T6142] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 54.416195][ T6142] CIFS: VFS: Malformed UNC in devname [ 54.419017][ T6142] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 54.427715][ T6142] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 54.526258][ T6149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4132 sclass=netlink_route_socket pid=6149 comm=syz.0.84 [ 54.579355][ T6127] trusted_key: syz.3.76 sent an empty control message without MSG_MORE. [ 54.662585][ T6151] can0: slcan on ttyS3. [ 54.745713][ T6150] can0 (unregistered): slcan off ttyS3. [ 54.834574][ T5741] Bluetooth: hci0: command tx timeout [ 54.845786][ T5741] Bluetooth: hci3: command tx timeout [ 54.884077][ T6170] netlink: 'syz.1.88': attribute type 2 has an invalid length. [ 54.916687][ T5741] Bluetooth: hci2: command tx timeout [ 55.007103][ T6175] NILFS (loop2): device size too small [ 55.062768][ T6179] overlayfs: empty lowerdir [ 55.079658][ T6170] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 55.157104][ T6181] xt_socket: unknown flags 0x48 [ 55.509805][ T6204] ======================================================= [ 55.509805][ T6204] WARNING: The mand mount option has been deprecated and [ 55.509805][ T6204] and is ignored by this kernel. Remove the mand [ 55.509805][ T6204] option from the mount to silence this warning. [ 55.509805][ T6204] ======================================================= [ 55.525163][ T6204] FAT-fs (nullb0): bogus number of reserved sectors [ 55.527791][ T6204] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 55.990820][ T6229] afs: Unknown parameter 'dyn"' [ 56.002482][ T6232] gadgetfs: bound to dummy_udc driver [ 56.124862][ T6242] __nla_validate_parse: 6 callbacks suppressed [ 56.124876][ T6242] netlink: 11148 bytes leftover after parsing attributes in process `syz.1.112'. [ 56.201758][ T5817] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.305726][ T5817] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.399411][ T5817] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.406975][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.411560][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.415145][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.420682][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.424267][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.492037][ T5817] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.666974][ T5817] bridge_slave_1: left allmulticast mode [ 56.672549][ T5817] bridge_slave_1: left promiscuous mode [ 56.679291][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.692500][ T5817] bridge_slave_0: left allmulticast mode [ 56.695917][ T42] kauditd_printk_skb: 321 callbacks suppressed [ 56.695929][ T42] audit: type=1400 audit(1785430506.772:671): avc: denied { prog_run } for pid=6266 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.695954][ T5817] bridge_slave_0: left promiscuous mode [ 56.707484][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.722791][ T42] audit: type=1400 audit(1785430506.792:672): avc: denied { write } for pid=6269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.734174][ T56] iowarrior 8-1:131.90: no interrupt-in endpoint found [ 56.745271][ T56] iowarrior 8-1:131.212: no interrupt-in endpoint found [ 56.759728][ T56] iowarrior 8-1:131.133: no interrupt-in endpoint found [ 56.775178][ T56] iowarrior 8-1:131.236: no interrupt-in endpoint found [ 56.777481][ T42] audit: type=1400 audit(1785430506.852:673): avc: denied { write } for pid=6273 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.790184][ T56] iowarrior 8-1:131.130: no interrupt-out endpoint found [ 56.798072][ T56] usb 8-1: USB disconnect, device number 2 [ 56.881505][ T6278] fuse: Unknown parameter '' [ 56.907343][ T5817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.912821][ T5817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.916787][ T5817] bond0 (unregistering): Released all slaves [ 56.923453][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 56.933248][ T42] audit: type=1400 audit(1785430507.012:674): avc: denied { ioctl } for pid=6277 comm="syz.3.119" path="socket:[11876]" dev="sockfs" ino=11876 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.954577][ T42] audit: type=1400 audit(1785430507.022:675): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.002201][ T42] audit: type=1400 audit(1785430507.072:676): avc: denied { mount } for pid=6284 comm="syz.1.120" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 57.024407][ T42] audit: type=1400 audit(1785430507.082:677): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 57.033777][ T42] audit: type=1400 audit(1785430507.092:678): avc: denied { write } for pid=6281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.069080][ T42] audit: type=1400 audit(1785430507.142:679): avc: denied { read } for pid=6291 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.100169][ T42] audit: type=1400 audit(1785430507.172:680): avc: denied { write } for pid=6296 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.123265][ T6299] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 57.129509][ T6299] netlink: 32 bytes leftover after parsing attributes in process `syz.2.124'. [ 57.153459][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 57.387093][ T5817] hsr_slave_0: left promiscuous mode [ 57.391847][ T5817] hsr_slave_1: left promiscuous mode [ 57.394332][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.398124][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.401433][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.413007][ T5817] veth1_macvtap: left promiscuous mode [ 57.415473][ T5817] veth0_macvtap: left promiscuous mode [ 57.436710][ T5817] veth1_vlan: left promiscuous mode [ 57.438715][ T5817] veth0_vlan: left promiscuous mode [ 57.618526][ T5817] team0 (unregistering): Port device team_slave_1 removed [ 57.687429][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 57.730412][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.735367][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.737868][ T6254] bridge_slave_0: entered allmulticast mode [ 57.740737][ T6254] bridge_slave_0: entered promiscuous mode [ 57.752680][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.755930][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.757869][ T6353] binder: 6352:6353 ioctl c0306201 200000000080 returned -14 [ 57.759121][ T6254] bridge_slave_1: entered allmulticast mode [ 57.768659][ T6254] bridge_slave_1: entered promiscuous mode [ 57.831246][ T6254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.836492][ T6254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.881116][ T6254] team0: Port device team_slave_0 added [ 57.891926][ T6254] team0: Port device team_slave_1 added [ 57.900000][ T6364] XFS (nullb0): Invalid superblock magic number [ 57.911770][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.913992][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.923410][ T6254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.924308][ T6364] XFS (nullb0): Invalid superblock magic number [ 57.932071][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.934689][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.948688][ T6254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.966622][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.006114][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 58.007621][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.022485][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.030697][ T6254] hsr_slave_0: entered promiscuous mode [ 58.033227][ T6254] hsr_slave_1: entered promiscuous mode [ 58.073372][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.085968][ T6400] vlan2: entered promiscuous mode [ 58.087674][ T6400] bridge0: entered promiscuous mode [ 58.090378][ T6400] vlan2: entered allmulticast mode [ 58.092337][ T6400] bridge0: entered allmulticast mode [ 58.110900][ T6401] binder: 6399:6401 ioctl c0306201 200000000080 returned -14 [ 58.112921][ T6409] Config c/1 of g1 needs at least one function. [ 58.113960][ T6400] binder: 6399:6400 ioctl c0306201 2000000003c0 returned -22 [ 58.114048][ T6401] binder: 6399:6401 ioctl c0306201 2000000003c0 returned -22 [ 58.117620][ T6409] udc dummy_udc.0: failed to start g1: -22 [ 58.118854][ T6401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6401 comm=syz.3.141 [ 58.131740][ T6409] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 58.136273][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.151488][ T6409] UDC core: g1: couldn't find an available UDC or it's busy [ 58.225232][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.245028][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.263588][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.302313][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.351544][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.389051][ T6453] netlink: 'syz.2.145': attribute type 21 has an invalid length. [ 58.389766][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.414452][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.438820][ T5741] Bluetooth: hci3: command tx timeout [ 58.443720][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.467278][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.479606][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.479892][ T6254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.490868][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.495232][ T6254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.497588][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.505721][ T6254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.508868][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.522964][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.530454][ T6254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.544584][ T6254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.552521][ T6254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.552951][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.555436][ T6254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.566183][ T6254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.599451][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.623492][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.648549][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.684646][ T10] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 58.692713][ T6364] XFS (nullb0): Invalid superblock magic number [ 58.769601][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'. [ 58.772721][ T6541] block nbd0: not configured, cannot reconfigure [ 58.786964][ T6254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.816001][ T6254] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.830688][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.833019][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.835660][ T6543] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd30 [ 58.851087][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.853510][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.877029][ T6548] syzkaller1: entered promiscuous mode [ 58.879141][ T6548] syzkaller1: entered allmulticast mode [ 59.043140][ T6548] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 59.048406][ T6548] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 59.059577][ T6548] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 59.062100][ T6548] netlink: 1 bytes leftover after parsing attributes in process `syz.3.151'. [ 59.227553][ T6564] No buffer was provided with the request [ 59.275792][ T6570] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 59.279655][ T6570] Cannot find add_set index 0 as target [ 59.324098][ T6254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.527594][ T6254] veth0_vlan: entered promiscuous mode [ 59.533080][ T6254] veth1_vlan: entered promiscuous mode [ 59.554914][ T6254] veth0_macvtap: entered promiscuous mode [ 59.559055][ T6254] veth1_macvtap: entered promiscuous mode [ 59.582172][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.588041][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.597903][ T5816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.601461][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.606292][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.609541][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.632672][ T6608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.679268][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 59.682608][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.685346][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.689820][ T6614] capability: warning: `syz.2.160' uses 32-bit capabilities (legacy support in use) [ 59.698724][ T6618] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 59.737957][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.740778][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.807520][ T6630] kAFS: No cell specified [ 60.333018][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.166'. [ 60.335407][ T6684] Bluetooth: MGMT ver 1.23 [ 60.337665][ T6682] tmpfs: Bad value for 'huge' [ 60.481038][ T6696] netlink: 48 bytes leftover after parsing attributes in process `syz.1.172'. [ 60.493601][ T6696] 9pnet: Found fid 0 not clunked [ 60.515209][ T5741] Bluetooth: hci3: command tx timeout [ 61.028299][ T6731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.185'. [ 61.135693][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.188'. [ 61.143223][ T6737] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 61.446255][ T6742] SELinux: Context system_u:object_r:modem_device_t:s0 is not valid (left unmapped). [ 61.623683][ T6750] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 61.706584][ T42] kauditd_printk_skb: 86 callbacks suppressed [ 61.706608][ T42] audit: type=1400 audit(1785430511.782:767): avc: denied { setattr } for pid=6760 comm="syz.1.193" name="/" dev="9p" ino=76573399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.716384][ T6761] netlink: 'syz.1.193': attribute type 47 has an invalid length. [ 61.721067][ T6761] netlink: 'syz.1.193': attribute type 2 has an invalid length. [ 61.727453][ T6761] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 61.731280][ T6761] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 61.789532][ T42] audit: type=1400 audit(1785430511.862:768): avc: denied { mount } for pid=6762 comm="syz.3.194" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.947545][ T42] audit: type=1400 audit(1785430512.022:769): avc: denied { unmount } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.963759][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.199'. [ 61.981782][ T42] audit: type=1400 audit(1785430512.052:770): avc: denied { mounton } for pid=6781 comm="syz.1.202" path="/65/config" dev="configfs" ino=3121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.982790][ T6784] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 61.990295][ T42] audit: type=1400 audit(1785430512.062:771): avc: denied { read } for pid=6781 comm="syz.1.202" name="/" dev="configfs" ino=3121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.000904][ T42] audit: type=1400 audit(1785430512.062:772): avc: denied { read open } for pid=6781 comm="syz.1.202" path="/65/config" dev="configfs" ino=3121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.016061][ T42] audit: type=1400 audit(1785430512.062:773): avc: denied { ioctl } for pid=6781 comm="syz.1.202" path="/65/config" dev="configfs" ino=3121 ioctlcmd=0xaf20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.023706][ T42] audit: type=1400 audit(1785430512.062:774): avc: denied { read } for pid=6781 comm="syz.1.202" name="g1" dev="configfs" ino=9688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.030960][ T42] audit: type=1400 audit(1785430512.062:775): avc: denied { read } for pid=6781 comm="syz.1.202" name="g1" dev="configfs" ino=9688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.038006][ T42] audit: type=1400 audit(1785430512.062:776): avc: denied { read } for pid=6781 comm="syz.1.202" name="g1" dev="configfs" ino=9688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.156960][ T6803] syz.4.207: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 62.226294][ T6816] xt_hashlimit: size too large, truncated to 1048576 [ 62.246996][ T5852] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.255981][ T6819] netlink: 32 bytes leftover after parsing attributes in process `syz.1.212'. [ 62.259936][ T6819] comedi comedi4: bad chanlist[0]=0x0000000d chan=13 range length=2 [ 62.379520][ T6824] overlay: ./file0 is not a directory [ 62.401364][ T6827] netlink: 124 bytes leftover after parsing attributes in process `syz.2.214'. [ 62.408536][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 62.416848][ T5852] usb 8-1: Using ep0 maxpacket: 8 [ 62.422671][ T5852] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 62.425810][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.428548][ T5852] usb 8-1: Product: syz [ 62.429945][ T5852] usb 8-1: Manufacturer: syz [ 62.431490][ T5852] usb 8-1: SerialNumber: syz [ 62.439863][ T5852] usb 8-1: config 0 descriptor?? [ 62.444253][ T5852] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 62.447550][ T5852] pctv452e: pctv452e_power_ctrl: 1 [ 62.447550][ T5852] [ 62.449961][ T5852] usb 8-1: selecting invalid altsetting 3 [ 62.451813][ T5852] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 62.451813][ T5852] [ 62.455828][ T5852] dvb-usb: bulk message failed: -22 (5/0) [ 62.465156][ T5852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 62.468821][ T5852] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 62.472370][ T5852] usb 8-1: media controller created [ 62.474958][ T5852] dvb-usb: bulk message failed: -22 (8/0) [ 62.476873][ T5852] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 62.479892][ T5852] dvb-usb: MAC address reading failed. [ 62.490865][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 62.518750][ T5852] DVB: Unable to find symbol stb0899_attach() [ 62.520675][ T5852] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 62.574433][ T5852] rc_core: IR keymap rc-tt-1500 not found [ 62.576296][ T5852] Registered IR keymap rc-empty [ 62.581755][ T5852] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 62.585979][ T5852] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input6 [ 62.593702][ T5852] dvb-usb: schedule remote query interval to 100 msecs. [ 62.596870][ T5852] pctv452e: pctv452e_power_ctrl: 0 [ 62.596870][ T5852] [ 62.599195][ T5852] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 62.604498][ T5741] Bluetooth: hci3: command tx timeout [ 62.650029][ T6784] dvb-usb: bulk message failed: -22 (7/0) [ 62.655567][ T6784] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 62.661922][ T5859] usb 8-1: USB disconnect, device number 3 [ 62.697727][ T5859] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 62.767229][ T6842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.935686][ T6850] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 63.186845][ T6858] i2c i2c-0: new_device: Instantiated device rt1711h at 0x04 [ 63.273412][ T6863] netlink: 'syz.3.225': attribute type 10 has an invalid length. [ 63.274818][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'. [ 63.288012][ T6863] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.291411][ T6863] bond0: (slave team0): Enslaving as an active interface with an up link [ 63.430711][ T6875] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 63.465129][ T6877] cgroup: Unknown subsys name 'cpuset' [ 63.518209][ T6882] netlink: 344 bytes leftover after parsing attributes in process `syz.1.233'. [ 63.535003][ T6888] x_tables: duplicate underflow at hook 2 [ 63.904860][ T6921] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 63.904860][ T6921] The task syz.2.243 (6921) triggered the difference, watch for misbehavior. [ 63.960111][ T6916] evm: overlay not supported [ 64.006859][ T6929] overlayfs: upper fs does not support file handles, falling back to index=off. [ 64.030411][ T6931] openvswitch: netlink: Actions may not be safe on all matching packets [ 64.036248][ T6931] openvswitch: netlink: Actions may not be safe on all matching packets [ 64.188604][ T6945] syzkaller0: entered promiscuous mode [ 64.190558][ T6945] syzkaller0: entered allmulticast mode [ 64.499230][ T6963] smpboot: CPU 1 is now offline [ 64.651407][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.264'. [ 64.674522][ T5741] Bluetooth: hci3: command tx timeout [ 64.684809][ T6976] tmpfs: Group quota block hardlimit too large. [ 64.953977][ T6984] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 65.096249][ T6992] syzkaller0: entered promiscuous mode [ 65.098789][ T6992] syzkaller0: entered allmulticast mode [ 65.224676][ T6999] netlink: 'syz.4.270': attribute type 1 has an invalid length. [ 65.249870][ T6999] bond1: entered promiscuous mode [ 65.253540][ T6999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.258487][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.270'. [ 65.261414][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.270'. [ 65.282385][ T6998] bond1: (slave bridge1): making interface the new active one [ 65.285298][ T6998] bridge1: entered promiscuous mode [ 65.288708][ T6998] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 65.660206][ T7016] capability: warning: `syz.3.276' uses deprecated v2 capabilities in a way that may be insecure [ 65.734916][ T5831] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 65.884755][ T5831] usb 9-1: Using ep0 maxpacket: 32 [ 65.888340][ T5831] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 65.893219][ T5831] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 65.896450][ T5831] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 65.899106][ T5831] usb 9-1: Product: syz [ 65.900434][ T5831] usb 9-1: Manufacturer: syz [ 65.902028][ T5831] usb 9-1: SerialNumber: syz [ 65.908567][ T5831] usb 9-1: config 0 descriptor?? [ 65.910731][ T7014] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 66.009327][ T7027] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7027 comm=syz.3.279 [ 66.078273][ T7029] gadgetfs: bound to dummy_udc driver [ 66.097240][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.103263][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.110057][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.113229][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.169833][ T7033] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 66.233691][ T7039] process 'syz.3.283' launched './file0' with NULL argv: empty string added [ 66.238255][ T5108] usb 9-1: USB disconnect, device number 2 [ 66.336163][ T7046] bad cache= option: noneÿÿ [ 66.336163][ T7046] [ 66.338697][ T7046] CIFS: VFS: bad cache= option: noneÿÿ [ 66.482540][ T7059] __nla_validate_parse: 5 callbacks suppressed [ 66.482567][ T7059] netlink: 240 bytes leftover after parsing attributes in process `syz.3.287'. [ 66.862511][ T7066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.884515][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 67.044527][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 67.049344][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 67.053737][ T9] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 67.056783][ T9] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 67.059495][ T9] usb 9-1: config 14 has no interface number 0 [ 67.061564][ T9] usb 9-1: config 14 has no interface number 1 [ 67.063824][ T9] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 67.067628][ T9] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 67.071917][ T9] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 67.077103][ T9] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 67.081717][ T9] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 67.086476][ T9] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.091804][ T9] usb 9-1: config 14 interface 57 has no altsetting 0 [ 67.096139][ T9] usb 9-1: config 14 interface 228 has no altsetting 0 [ 67.100458][ T9] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 67.104233][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.107582][ T9] usb 9-1: Product: syz [ 67.109360][ T9] usb 9-1: Manufacturer: syz [ 67.111289][ T9] usb 9-1: SerialNumber: syz [ 67.360565][ T5108] IPVS: starting estimator thread 0... [ 67.391914][ T7075] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 67.395628][ T7074] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 67.454648][ T7076] IPVS: using max 26 ests per chain, 62400 per kthread [ 67.473100][ T42] kauditd_printk_skb: 58 callbacks suppressed [ 67.473155][ T42] audit: type=1400 audit(1785430517.542:835): avc: denied { name_connect } for pid=7077 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 67.520401][ T9] legousbtower 9-1:14.57: interrupt endpoints not found [ 67.541622][ T42] audit: type=1400 audit(1785430517.612:836): avc: denied { relabelfrom } for pid=7083 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 67.550030][ T42] audit: type=1400 audit(1785430517.612:837): avc: denied { relabelto } for pid=7083 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 67.699342][ T42] audit: type=1400 audit(1785430517.772:838): avc: denied { read } for pid=7092 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.751227][ T42] audit: type=1400 audit(1785430517.822:839): avc: denied { getopt } for pid=7092 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.889927][ T7105] overlayfs: regular lower layers cannot follow data lower layers [ 67.922813][ T9] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 67.928079][ T42] audit: type=1400 audit(1785430518.012:840): avc: denied { append } for pid=7104 comm="syz.1.303" name="001" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.938276][ T9] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 68.137912][ T42] audit: type=1400 audit(1785430518.212:841): avc: denied { write } for pid=7110 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.183909][ T42] audit: type=1400 audit(1785430518.252:842): avc: denied { write } for pid=7115 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.591985][ T7130] i2c i2c-0: new_device: Instantiated device wcd9390-usbss at 0x42 [ 68.722525][ T42] audit: type=1400 audit(1785430518.792:843): avc: denied { sqpoll } for pid=7137 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.843659][ T7147] >: renamed from macvtap0 (while UP) [ 68.859437][ T7147] netlink: 'syz.3.314': attribute type 11 has an invalid length. [ 68.886048][ T42] audit: type=1400 audit(1785430518.962:844): avc: denied { setopt } for pid=7151 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.888873][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 68.934027][ T7156] netlink: 40 bytes leftover after parsing attributes in process `syz.1.317'. [ 68.937897][ T7156] tipc: Invalid UDP bearer configuration [ 68.938164][ T7156] tipc: Enabling of bearer rejected, failed to enable media [ 68.952775][ T7159] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 69.012760][ T7152] kvm: pic: non byte read [ 69.018040][ T7152] kvm: pic: non byte read [ 69.020851][ T7152] kvm: pic: non byte read [ 69.023419][ T7152] kvm: pic: non byte read [ 69.027629][ T7152] kvm: pic: non byte read [ 69.030913][ T7152] kvm: pic: non byte read [ 69.033437][ T7152] kvm: pic: non byte read [ 69.036302][ T7152] kvm: pic: non byte read [ 69.041270][ T7152] kvm: pic: non byte read [ 69.043807][ T7152] kvm: pic: non byte read [ 69.354485][ T5812] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 69.407682][ T1168] rpcbind: server 127.0.0.1 not responding, timed out [ 69.535815][ T5812] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.539151][ T5812] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 69.542051][ T5812] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 69.546551][ T5812] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 69.549502][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.555357][ T7172] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 69.559377][ T5812] hub 6-1:1.0: bad descriptor, ignoring hub [ 69.561316][ T5812] hub 6-1:1.0: probe with driver hub failed with error -5 [ 69.563986][ T5812] cdc_wdm 6-1:1.0: skipping garbage [ 69.565702][ T5812] cdc_wdm 6-1:1.0: skipping garbage [ 69.570494][ T5812] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 69.572438][ T5812] cdc_wdm 6-1:1.0: Unknown control protocol [ 69.616627][ T5816] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.710351][ T5816] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.755667][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.769888][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.775735][ T5831] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 69.781021][ T5816] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.784962][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.791180][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.796498][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.862267][ T5816] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.885039][ T5852] usb 6-1: USB disconnect, device number 3 [ 69.895732][ T5812] usb 9-1: USB disconnect, device number 3 [ 69.895871][ C0] usb 9-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 69.938472][ T5812] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 69.946097][ T5831] usb 8-1: Using ep0 maxpacket: 16 [ 69.959789][ T5831] usb 8-1: New USB device found, idVendor=ffad, idProduct=a001, bcdDevice= 0.40 [ 69.969125][ T5831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.974140][ T5831] usb 8-1: Product: 〦몷Ⱐ尡ݜང䌒﬒䕘â’赹紌䚢䭚ꀭ쵖í‰ç«½â§”䂫릓铙ᩭ뙔볙갺дé™äŒ‘鱱羚魆첈ã‘탾Ꮉï¦é¶‰î‘韠鶭葺ሒêè»à¾­æ˜†ã¢ã·‹á¨•èµ’ã“⋛탘藂葃䉤臡袻뒀䷴兀樈୘༂◬秵ಮïœë­°ã«â­¶î’§æŽ…锒㢥䙪츽膄ꤊ鬴ۨ醅嘩᪨嵩⵸䣅é§á²í—‡ç‰ã¡…퉆㔋쫋å°æ½£Ô¢íš£à½«è«ˆïž¿ä•³Ü â™¬ê¡—穴ᆕ [ 69.991297][ T5831] usb 8-1: Manufacturer: á ‰ [ 69.992911][ T5831] usb 8-1: SerialNumber: Ñ [ 70.108516][ T5816] bridge_slave_1: left allmulticast mode [ 70.112837][ T5816] bridge_slave_1: left promiscuous mode [ 70.116140][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.122431][ T5816] bridge_slave_0: left allmulticast mode [ 70.127222][ T5816] bridge_slave_0: left promiscuous mode [ 70.130543][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.214450][ T5831] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 70.235199][ T5108] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 70.249977][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.257509][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.262660][ T5831] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 70.262940][ T5816] bond0 (unregistering): Released all slaves [ 70.276074][ T5831] usb 8-1: USB disconnect, device number 4 [ 70.311672][ T5740] udevd[5740]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.324983][ T7212] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 70.337236][ T7212] batman_adv: batadv0: Adding interface: gretap1 [ 70.339489][ T7212] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.348728][ T7212] batman_adv: batadv0: Interface activated: gretap1 [ 70.395702][ T5108] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.401382][ T5108] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 70.406697][ T5108] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 70.410153][ T5108] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 70.413028][ T5108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.418697][ T7172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.451064][ T5108] hub 6-1:1.0: bad descriptor, ignoring hub [ 70.453072][ T5108] hub 6-1:1.0: probe with driver hub failed with error -5 [ 70.463512][ T5108] cdc_wdm 6-1:1.0: skipping garbage [ 70.466916][ T5108] cdc_wdm 6-1:1.0: skipping garbage [ 70.476337][ T5108] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 70.481140][ T5108] cdc_wdm 6-1:1.0: Unknown control protocol [ 70.520136][ T5450] 8021q: adding VLAN 0 to HW filter on device eth6 [ 70.725437][ T5108] usb 6-1: USB disconnect, device number 4 [ 70.738325][ T7188] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.741449][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.755376][ T7188] bridge_slave_0: entered allmulticast mode [ 70.763892][ T7188] bridge_slave_0: entered promiscuous mode [ 70.771952][ T7188] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.775237][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.777622][ T7188] bridge_slave_1: entered allmulticast mode [ 70.780965][ T7188] bridge_slave_1: entered promiscuous mode [ 70.831902][ T7188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.839966][ T7188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.870665][ T7188] team0: Port device team_slave_0 added [ 70.874576][ T56] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 70.879265][ T7188] team0: Port device team_slave_1 added [ 70.888438][ T5816] hsr_slave_0: left promiscuous mode [ 70.890696][ T5816] hsr_slave_1: left promiscuous mode [ 70.892722][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.895269][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.898131][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.901095][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.909839][ T5816] veth1_macvtap: left promiscuous mode [ 70.911832][ T5816] veth0_macvtap: left promiscuous mode [ 70.913668][ T5816] veth1_vlan: left promiscuous mode [ 70.915906][ T5816] veth0_vlan: left promiscuous mode [ 71.046815][ T56] usb 9-1: config 0 has an invalid interface number: 120 but max is 0 [ 71.049817][ T56] usb 9-1: config 0 has no interface number 0 [ 71.052245][ T56] usb 9-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.056741][ T56] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.060860][ T56] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 71.065001][ T56] usb 9-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 71.068483][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.072574][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 71.080430][ T56] usb 9-1: config 0 descriptor?? [ 71.089300][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 71.092092][ T56] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.120/input/input7 [ 71.256752][ T7188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.259063][ T7188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.268215][ T7188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.273048][ T7188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.275511][ T7188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.285193][ T7188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.296550][ T56] usb 9-1: USB disconnect, device number 4 [ 71.296743][ T7244] syzkaller0: entered promiscuous mode [ 71.304588][ T7244] syzkaller0: entered allmulticast mode [ 71.322931][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.325827][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.363625][ T7188] hsr_slave_0: entered promiscuous mode [ 71.371225][ T7188] hsr_slave_1: entered promiscuous mode [ 71.373531][ T7188] debugfs: 'hsr0' already exists in 'hsr' [ 71.375520][ T7188] Cannot create hsr debugfs directory [ 71.531576][ T5450] 8021q: adding VLAN 0 to HW filter on device eth7 [ 71.584795][ T7188] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.589798][ T7188] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.592852][ T7188] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.597122][ T7188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.600118][ T7188] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.604196][ T7188] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.607327][ T7188] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.613632][ T7188] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.703578][ T7271] kvm: kvm [7270]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 71.707034][ T7188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.723200][ T7188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.733066][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.735385][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.749749][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.752088][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.813872][ T5450] 8021q: adding VLAN 0 to HW filter on device eth8 [ 71.874739][ T5741] Bluetooth: hci0: command tx timeout [ 72.019700][ T5450] 8021q: adding VLAN 0 to HW filter on device eth9 [ 72.103959][ T7188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.210989][ T7307] netlink: 5 bytes leftover after parsing attributes in process `syz.4.341'. [ 72.216615][ T7313] netlink: 5 bytes leftover after parsing attributes in process `syz.4.341'. [ 72.231352][ T7307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.236617][ T7313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.300813][ T7324] binder: 7323:7324 ioctl c018620c 200000000080 returned -22 [ 72.323816][ T9] hid (null): unknown global tag 0xe [ 72.332286][ T9] hid (null): unknown global tag 0xc [ 72.350006][ T9] hid-generic 0009:000F:0080.0002: unknown global tag 0xe [ 72.352428][ T9] hid-generic 0009:000F:0080.0002: item 0 4 1 14 parsing failed [ 72.357419][ T9] hid-generic 0009:000F:0080.0002: probe with driver hid-generic failed with error -22 [ 72.387775][ T7188] veth0_vlan: entered promiscuous mode [ 72.398258][ T7188] veth1_vlan: entered promiscuous mode [ 72.419544][ T7188] veth0_macvtap: entered promiscuous mode [ 72.423756][ T7188] veth1_macvtap: entered promiscuous mode [ 72.442442][ T7188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.456791][ T7188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.463501][ T7332] Bluetooth: MGMT ver 1.23 [ 72.482374][ T5816] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.492881][ T5816] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.501458][ T5816] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.508630][ T5816] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.568519][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.568537][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.608820][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.612346][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.624508][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 72.624532][ T42] audit: type=1400 audit(1785430522.692:868): avc: denied { mounton } for pid=7188 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 72.643182][ T42] audit: type=1400 audit(1785430522.702:869): avc: denied { mounton } for pid=7188 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 72.782378][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 72.785538][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 72.788292][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.355'. [ 72.799213][ T7361] overlayfs: missing 'workdir' [ 72.803934][ T42] audit: type=1400 audit(1785430522.872:870): avc: denied { create } for pid=7360 comm="syz.5.356" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.896889][ T42] audit: type=1400 audit(1785430522.972:871): avc: denied { map } for pid=7370 comm="syz.5.360" path="socket:[16224]" dev="sockfs" ino=16224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 72.976437][ T7376] syzkaller0: entered promiscuous mode [ 72.978241][ T7376] syzkaller0: entered allmulticast mode [ 73.031714][ T7379] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2525402522 (323251522816 ns) > initial count (185678303104 ns). Using initial count to start timer. [ 73.106815][ T7386] binder: 7385:7386 ioctl c0306201 200000000040 returned -14 [ 73.115931][ T7386] tap0: tun_chr_ioctl cmd 1074025675 [ 73.117836][ T7386] tap0: persist disabled [ 73.307209][ T7392] netlink: 'syz.1.367': attribute type 1 has an invalid length. [ 73.319524][ T7392] netlink: 224 bytes leftover after parsing attributes in process `syz.1.367'. [ 73.341953][ T7393] bridge1: entered promiscuous mode [ 73.473496][ T42] audit: type=1400 audit(1785430523.542:872): avc: denied { connect } for pid=7402 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.657529][ T42] audit: type=1400 audit(1785430523.732:873): avc: denied { mount } for pid=7408 comm="syz.1.372" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 73.679563][ T7409] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 73.955475][ T5741] Bluetooth: hci0: command tx timeout [ 74.038473][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.374'. [ 74.437309][ T7435] 9p: Could not find request transport: viÿio [ 74.441557][ T7435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.377'. [ 74.453535][ T42] audit: type=1400 audit(1785430524.522:874): avc: denied { create } for pid=7434 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.457895][ T7435] ubi16: attaching mtd0 [ 74.463856][ T42] audit: type=1400 audit(1785430524.522:875): avc: denied { bind } for pid=7434 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.474052][ T7435] ubi16: scanning is finished [ 74.476316][ T7435] ubi16: empty MTD device detected [ 74.482423][ T42] audit: type=1400 audit(1785430524.532:876): avc: denied { write } for pid=7434 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.493463][ T42] audit: type=1400 audit(1785430524.562:877): avc: denied { map } for pid=7441 comm="syz.4.381" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.548501][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 74.724513][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 74.780632][ T7435] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 74.786664][ T7435] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 74.792987][ T7435] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 74.797251][ T7435] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 74.800425][ T7435] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 74.803213][ T7435] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 74.806619][ T7435] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1124675269 [ 74.810866][ T7435] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 74.817872][ T7453] ubi16: background thread "ubi_bgt16d" started, PID 7453 [ 74.874532][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 74.887616][ T9] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 74.904969][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.915133][ T9] usb 6-1: Product: syz [ 74.916978][ T9] usb 6-1: Manufacturer: syz [ 74.924633][ T9] usb 6-1: SerialNumber: syz [ 74.940491][ T9] usb 6-1: config 0 descriptor?? [ 74.970405][ T7464] netlink: 'syz.3.388': attribute type 2 has an invalid length. [ 74.972769][ T7464] netlink: 'syz.3.388': attribute type 2 has an invalid length. [ 74.978593][ T7464] program syz.3.388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.050877][ T7468] xt_hashlimit: size too large, truncated to 1048576 [ 75.121724][ T7474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=536 sclass=netlink_route_socket pid=7474 comm=syz.4.392 [ 75.157613][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 75.350991][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 75.357646][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 75.361130][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 75.363686][ T9] usb 6-1: media controller created [ 75.372643][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.437617][ T7474] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.442306][ T7474] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.507399][ T7474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.519964][ T7474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.592670][ T7474] bond1: left promiscuous mode [ 75.594745][ T7474] bridge1: left promiscuous mode [ 75.599377][ T7474] batman_adv: batadv0: Interface deactivated: gretap1 [ 75.606538][ T5817] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.612546][ T5817] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.615829][ T5817] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.618825][ T5817] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.856443][ T7487] openvswitch: netlink: IP tunnel dst address not specified [ 75.916239][ T7444] dtv5100: wlen = 1d, aborting. [ 75.917959][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 75.925307][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 75.934126][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 75.950899][ T9] usb 6-1: USB disconnect, device number 5 [ 75.984638][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 76.034672][ T5741] Bluetooth: hci0: command tx timeout [ 76.170445][ T7508] netlink: 'syz.5.402': attribute type 15 has an invalid length. [ 76.183995][ T5817] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 76.184197][ T7508] netlink: 'syz.5.402': attribute type 15 has an invalid length. [ 76.192771][ T5816] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 76.196991][ T5816] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 76.200715][ T5816] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 76.335973][ T7512] syzkaller0: create flow: hash 2986227233 index 1 [ 76.337141][ T5816] syzkaller0: tun_net_xmit 76 [ 76.342917][ T5816] syzkaller0: tun_net_xmit 48 [ 76.355362][ T10] syzkaller0: tun_net_xmit 76 [ 76.368664][ T7513] syzkaller0: delete flow: hash 2986227233 index 1 [ 76.793003][ T7517] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.812850][ T7517] block device autoloading is deprecated and will be removed. [ 76.831108][ T7519] random: crng reseeded on system resumption [ 77.421331][ T7549] xt_ecn: cannot match TCP bits for non-tcp packets [ 77.545123][ T7552] openvswitch: netlink: Key type 193 is out of range max 32 [ 77.990375][ T5816] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.996285][ T5816] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.999880][ T5816] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.003503][ T5816] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.093609][ T7561] openvswitch: netlink: Multiple metadata blocks provided [ 78.114561][ T5741] Bluetooth: hci0: command tx timeout [ 78.137984][ T7563] openvswitch: netlink: IP tunnel dst address not specified [ 78.162422][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 78.162442][ T42] audit: type=1400 audit(1785430528.232:913): avc: denied { ioctl } for pid=7564 comm="syz.3.416" path="/dev/sg0" dev="devtmpfs" ino=722 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.164331][ T7566] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 78.298869][ T7576] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 78.387994][ T7568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7568 comm=syz.4.417 [ 78.899241][ T42] audit: type=1400 audit(1785430528.972:914): avc: denied { bind } for pid=7609 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.905716][ T42] audit: type=1400 audit(1785430528.972:915): avc: denied { name_bind } for pid=7609 comm="syz.3.428" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 78.913021][ T42] audit: type=1400 audit(1785430528.972:916): avc: denied { node_bind } for pid=7609 comm="syz.3.428" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 79.030059][ T7615] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 79.032374][ T7615] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 79.037104][ T7615] vhci_hcd vhci_hcd.0: Device attached [ 79.202703][ T42] audit: type=1400 audit(1785430529.272:917): avc: denied { read } for pid=7614 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.284569][ T56] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 79.360914][ T42] audit: type=1400 audit(1785430529.432:918): avc: denied { mac_admin } for pid=7623 comm="syz.4.430" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.360921][ T7625] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 79.373603][ T42] audit: type=1400 audit(1785430529.452:919): avc: denied { relabelto } for pid=7623 comm="syz.4.430" name="cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 79.387427][ T42] audit: type=1400 audit(1785430529.452:920): avc: denied { associate } for pid=7623 comm="syz.4.430" name="cgroup.procs" dev="cgroup" ino=294 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 79.856426][ T7616] vhci_hcd: connection reset by peer [ 79.863285][ T5816] vhci_hcd vhci_hcd.3: stop threads [ 79.867298][ T5816] vhci_hcd vhci_hcd.3: release socket [ 79.873601][ T5816] vhci_hcd vhci_hcd.3: disconnect device [ 81.034720][ T7556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.137509][ T7634] xt_hashlimit: size too large, truncated to 1048576 [ 81.175848][ T42] audit: type=1400 audit(1785430531.252:921): avc: denied { setopt } for pid=7640 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.223102][ T42] audit: type=1400 audit(1785430531.292:922): avc: denied { bind } for pid=7640 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.247263][ T7641] __nla_validate_parse: 2 callbacks suppressed [ 81.247279][ T7641] netlink: 14 bytes leftover after parsing attributes in process `syz.1.435'. [ 81.357027][ T7638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=7638 comm=syz.3.433 [ 81.380260][ T7638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60252 sclass=netlink_route_socket pid=7638 comm=syz.3.433 [ 81.475516][ T7664] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 81.542252][ T7666] netlink: 216 bytes leftover after parsing attributes in process `syz.3.441'. [ 81.567714][ T848] cfg80211: failed to load regulatory.db [ 81.622712][ T7676] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.445'. [ 81.626154][ T7676] openvswitch: netlink: ufid size 21390 bytes exceeds the range (1, 16) [ 81.628980][ T7676] openvswitch: netlink: Message has 4 unknown bytes. [ 81.689890][ T7679] vlan3: entered allmulticast mode [ 81.840201][ T7687] binder: 7686:7687 ioctl 5331 0 returned -22 [ 82.041342][ T7698] netlink: 'syz.3.454': attribute type 10 has an invalid length. [ 82.045896][ T7698] syz_tun: entered promiscuous mode [ 82.058135][ T7698] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 82.091164][ T5739] svc: failed to register nfsdv3 RPC service (errno 111). [ 82.095015][ T5739] svc: failed to register nfsaclv3 RPC service (errno 111). [ 82.098143][ T5739] failed to unregister tcp with rpcbind [ 82.100346][ T5739] svc: failed to register nfsdv3 RPC service (errno 97). [ 82.103027][ T5739] svc: failed to register nfsaclv3 RPC service (errno 97). [ 82.106640][ T5739] failed to unregister tcp with rpcbind [ 82.280314][ T7716] syz_tun: entered allmulticast mode [ 82.294319][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.459'. [ 82.323928][ T7718] program syz.3.459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.328217][ T7718] bond1: entered promiscuous mode [ 82.331877][ T7718] bond1: entered allmulticast mode [ 82.339248][ T7716] netlink: 11 bytes leftover after parsing attributes in process `syz.1.458'. [ 82.392381][ T7716] sock: sock_set_timeout: `syz.1.458' (pid 7716) tries to set negative timeout [ 82.403166][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.5.463'. [ 82.774461][ T5108] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 82.850875][ T7741] trusted_key: encrypted_key: keylen parameter is missing [ 82.925903][ T5108] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 82.928420][ T5108] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 82.932048][ T5108] usb 10-1: config 0 interface 0 has no altsetting 0 [ 82.936052][ T5108] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.939308][ T5108] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 82.941899][ T5108] usb 10-1: Product: syz [ 82.943211][ T5108] usb 10-1: Manufacturer: syz [ 82.944704][ T5108] usb 10-1: SerialNumber: syz [ 82.947644][ T5108] usb 10-1: config 0 descriptor?? [ 82.951276][ T5108] hub 10-1:0.0: bad descriptor, ignoring hub [ 82.953079][ T5108] hub 10-1:0.0: probe with driver hub failed with error -5 [ 82.956923][ T5108] usb 10-1: selecting invalid altsetting 0 [ 83.112665][ T7715] syz_tun: left allmulticast mode [ 83.153811][ T7738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.159494][ T7738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.237209][ T7754] overlayfs: missing 'lowerdir' [ 83.240456][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 83.253798][ T7755] bond0: entered promiscuous mode [ 83.261161][ T7755] bond_slave_0: entered promiscuous mode [ 83.265727][ T7755] bond_slave_1: entered promiscuous mode [ 83.275101][ T7755] batadv0: entered promiscuous mode [ 83.282092][ T7755] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 83.297033][ T7755] bond0: left promiscuous mode [ 83.299115][ T7755] bond_slave_0: left promiscuous mode [ 83.301517][ T7755] bond_slave_1: left promiscuous mode [ 83.307548][ T7755] batadv0: left promiscuous mode [ 83.325406][ T7758] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 83.341394][ T7758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.469'. [ 83.417791][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 83.417808][ T42] audit: type=1400 audit(1785430533.492:938): avc: denied { write } for pid=7760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.492374][ T42] audit: type=1400 audit(1785430533.562:939): avc: denied { write } for pid=7767 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.528961][ T7765] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 83.618147][ T42] audit: type=1400 audit(1785430533.692:940): avc: denied { write } for pid=7773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.727211][ T42] audit: type=1400 audit(1785430533.802:941): avc: denied { write } for pid=7779 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.797668][ T10] usb 10-1: USB disconnect, device number 2 [ 83.880432][ T7783] input: syz0 as /devices/virtual/input/input8 [ 83.931117][ T42] audit: type=1400 audit(1785430533.992:942): avc: denied { write } for pid=7784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.007029][ T42] audit: type=1400 audit(1785430534.082:943): avc: denied { write } for pid=7790 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.165571][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.168454][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.208228][ T7798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.215349][ T7798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.318248][ T7811] netlink: 'syz.4.479': attribute type 11 has an invalid length. [ 84.320785][ T7811] netlink: 132 bytes leftover after parsing attributes in process `syz.4.479'. [ 84.335923][ T5816] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 84.341328][ T5816] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.348400][ T5816] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 84.363843][ T5816] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.371120][ T5816] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 84.382275][ T5816] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.392507][ T5816] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 84.403046][ T5816] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.412811][ T7820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7820 comm=syz.1.480 [ 84.424532][ T56] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 84.445891][ T42] audit: type=1400 audit(1785430534.522:944): avc: denied { mounton } for pid=7818 comm="syz.1.480" path="/141/file0" dev="9p" ino=76573399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.454643][ T7820] overlayfs: workdir and upperdir must reside under the same mount [ 84.470351][ T42] audit: type=1400 audit(1785430534.542:945): avc: denied { write } for pid=7818 comm="syz.1.480" name="/" dev="9p" ino=76573399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.484759][ T42] audit: type=1400 audit(1785430534.562:946): avc: denied { write } for pid=7817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.493596][ T42] audit: type=1400 audit(1785430534.562:947): avc: denied { add_name } for pid=7818 comm="syz.1.480" name="cgroup.kill" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.630377][ T10] hid (null): global environment stack underflow [ 84.645937][ T7839] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 84.651579][ T10] hid-generic 616F:20C2607D:F72986D9.0003: global environment stack underflow [ 84.656561][ T10] hid-generic 616F:20C2607D:F72986D9.0003: item 0 1 1 11 parsing failed [ 84.660246][ T10] hid-generic 616F:20C2607D:F72986D9.0003: probe with driver hid-generic failed with error -22 [ 84.725794][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 84.726816][ T7845] netlink: 'syz.5.489': attribute type 1 has an invalid length. [ 84.734897][ T7845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.960210][ T7865] team0 (unregistering): Port device team_slave_0 removed [ 84.965097][ T7865] team0 (unregistering): Port device team_slave_1 removed [ 85.006507][ T7873] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 85.318085][ T7895] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 85.324491][ T7895] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 85.328752][ T7895] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 85.332224][ T7895] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 85.877315][ T7951] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 85.885922][ T7951] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 85.889553][ T7951] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 85.892740][ T7951] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 86.183941][ T56] IPVS: starting estimator thread 0... [ 86.299528][ T7975] IPVS: using max 29 ests per chain, 69600 per kthread [ 86.339033][ T7981] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 86.351400][ T7983] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x47 (-16) [ 86.377978][ T7985] efs: device does not support 512 byte blocks [ 86.381041][ T7985] device does not support 512 byte blocks [ 86.381041][ T7985] [ 86.469891][ T7987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.696341][ T8002] __nla_validate_parse: 7 callbacks suppressed [ 86.696368][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 86.734282][ T8002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.919465][ T8017] overlayfs: failed to resolve './file0': -2 [ 86.984492][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 86.995613][ T8019] usb usb1: usbfs: process 8019 (syz.1.540) did not claim interface 10 before use [ 87.146271][ T10] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 87.150341][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.153653][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.157674][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.163805][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.169496][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.177790][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.193693][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.198974][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.202543][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.206823][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.210489][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.216774][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.221787][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.228052][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.233955][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.248676][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.252520][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.257242][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.261622][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.267858][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.274098][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.279554][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.283850][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.288855][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.293581][ T8032] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 87.294078][ T10] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 87.300514][ T10] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 87.304997][ T10] usb 8-1: Product: syz [ 87.308474][ T10] usb 8-1: Manufacturer: syz [ 87.310135][ T10] usb 8-1: SerialNumber: syz [ 87.317703][ T10] usb 8-1: config 0 descriptor?? [ 87.329959][ T10] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 87.407463][ T8036] gadgetfs: bound to dummy_udc driver [ 87.480773][ T8049] random: crng reseeded on system resumption [ 87.564223][ T8055] uprobe: syz.4.553:8055 failed to unregister, leaking uprobe [ 87.629579][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 87.633349][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 87.655621][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.659327][ T8061] bond2: (slave bond0): making interface the new active one [ 87.662617][ T8061] bond2: (slave bond0): Enslaving as an active interface with an up link [ 87.714599][ T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 87.855136][ T10] usb 6-1: device descriptor read/64, error -71 [ 88.034519][ T8078] FAT-fs (nbd4): unable to read boot sector [ 88.104438][ T10] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 88.216389][ T8084] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 88.221829][ T8084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8084 comm=syz.4.561 [ 88.244485][ T10] usb 6-1: device descriptor read/64, error -71 [ 88.330032][ T8084] ftl_cs: FTL header not found. [ 88.355048][ T10] usb usb6-port1: attempt power cycle [ 88.418131][ T8084] block2mtd: mtd1: [/dev/loop0] erase_size = 128KiB [131072] [ 88.744311][ T8092] loop5: detected capacity change from 0 to 7 [ 88.745900][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 88.777224][ T10] usb 6-1: device descriptor read/8, error -71 [ 88.796380][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 88.796403][ T42] audit: type=1400 audit(1785430538.872:999): avc: denied { write } for pid=8091 comm="syz.4.563" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.824470][ T42] audit: type=1400 audit(1785430538.872:1000): avc: denied { setattr } for pid=8091 comm="syz.4.563" name="[userfaultfd]" dev="anon_inodefs" ino=23041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.901459][ T8092] Dev loop5: unable to read RDB block 7 [ 88.903398][ T8092] loop5: unable to read partition table [ 88.905870][ T8092] loop5: partition table beyond EOD, truncated [ 88.910199][ T8092] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 89.021494][ T42] audit: type=1400 audit(1785430539.092:1001): avc: denied { write } for pid=8096 comm="syz.4.565" name="/" dev="9p" ino=76573399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.030112][ T42] audit: type=1400 audit(1785430539.102:1002): avc: denied { create } for pid=8096 comm="syz.4.565" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 89.035352][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 89.076130][ T10] usb 6-1: device descriptor read/8, error -71 [ 89.194886][ T10] usb usb6-port1: unable to enumerate USB device [ 89.472371][ T42] audit: type=1400 audit(1785430539.542:1003): avc: denied { accept } for pid=8109 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.487829][ T42] audit: type=1400 audit(1785430539.562:1004): avc: denied { read } for pid=8109 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.558470][ C0] usb 8-1: yurex_control_callback - control failed: -2 [ 89.561648][ C0] usb 8-1: yurex_control_callback - control failed: -32 [ 89.565346][ T42] audit: type=1400 audit(1785430539.632:1005): avc: denied { read } for pid=8109 comm="syz.4.568" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.565447][ T5108] usb 8-1: USB disconnect, device number 5 [ 89.573263][ T42] audit: type=1400 audit(1785430539.632:1006): avc: denied { open } for pid=8109 comm="syz.4.568" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.585067][ T5108] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 89.762054][ T8131] netlink: 3 bytes leftover after parsing attributes in process `syz.5.574'. [ 89.933664][ T42] audit: type=1400 audit(1785430540.002:1007): avc: denied { create } for pid=8141 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.939649][ T8142] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 89.943041][ T42] audit: type=1400 audit(1785430540.002:1008): avc: denied { setopt } for pid=8141 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.943102][ T8142] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 89.954124][ T8142] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 89.958134][ T8142] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 89.986271][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.579'. [ 89.990011][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.579'. [ 90.375205][ T8165] overlay: ./file0 is not a directory [ 90.510189][ T8172] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.779122][ T8180] netlink: 'syz.1.589': attribute type 11 has an invalid length. [ 90.817201][ T8182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.825817][ T8182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.828880][ T8182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.848448][ T12] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 91.415420][ C2] ata1: illegal qc_active transition (00000000->00080000) [ 91.494592][ T5108] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 91.624828][ T5108] usb 10-1: device descriptor read/64, error -71 [ 91.694573][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 91.750877][ T1136] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 91.759212][ T8216] [U] [ 91.761077][ T8216] [U] [ 91.762124][ T8216] [U] [ 91.763041][ T8216] [U] [ 91.764111][ T8216] [U] [ 91.765079][ T8216] [U] [ 91.765458][ T1136] ata1.00: configured for UDMA/100 [ 91.765974][ T8216] [U] [ 91.766008][ T8216] [U] [ 91.767779][ T8216] [U] [ 91.767801][ T8216] [U] [ 91.767816][ T8216] [U] [ 91.772379][ T8216] [U] [ 91.773418][ T8216] [U] [ 91.774319][ T8216] [U] [ 91.775241][ T8216] [U] [ 91.776129][ T8216] [U] [ 91.778393][ T8215] [U] [ 91.847950][ T9] usb 6-1: config index 0 descriptor too short (expected 8192, got 96) [ 91.853258][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.862401][ T9] usb 6-1: config 0 has no interfaces? [ 91.864743][ T5108] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 91.866710][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice=1c.40 [ 91.875060][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.881664][ T9] usb 6-1: Product: syz [ 91.883378][ T9] usb 6-1: Manufacturer: syz [ 91.901713][ T9] usb 6-1: config 0 descriptor?? [ 91.995715][ T5108] usb 10-1: device descriptor read/64, error -71 [ 92.106095][ T5108] usb usb10-port1: attempt power cycle [ 92.149951][ T9] usb 6-1: USB disconnect, device number 10 [ 92.282394][ T8227] netlink: 'syz.4.606': attribute type 21 has an invalid length. [ 92.294515][ T8227] netlink: 152 bytes leftover after parsing attributes in process `syz.4.606'. [ 92.360653][ T8236] tmpfs: Unknown parameter 'permit_directio' [ 92.361520][ T5450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.362718][ T8238] netlink: 168 bytes leftover after parsing attributes in process `syz.4.608'. [ 92.452763][ T5108] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 92.475270][ T5108] usb 10-1: device descriptor read/8, error -71 [ 92.541590][ T5743] ffs_data_put(): freeing [ 92.682420][ T5831] IPVS: starting estimator thread 0... [ 92.714636][ T5108] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 92.737883][ T5108] usb 10-1: device descriptor read/8, error -71 [ 92.754928][ T34] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 92.774552][ T8265] IPVS: using max 44 ests per chain, 105600 per kthread [ 92.830295][ T8270] overlayfs: missing 'lowerdir' [ 92.845135][ T5108] usb usb10-port1: unable to enumerate USB device [ 92.910244][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.923523][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.927210][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.933749][ T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.939052][ T8277] netlink: 'syz.3.620': attribute type 1 has an invalid length. [ 92.940160][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.948187][ T34] usb 9-1: config 0 descriptor?? [ 92.965247][ T8277] 8021q: adding VLAN 0 to HW filter on device bond3 [ 92.978857][ T8277] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 93.064903][ T5816] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 93.175856][ T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 93.355698][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.360808][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.365000][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.367492][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.369920][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.372534][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.375448][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.377911][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.380573][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.383169][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.398747][ T34] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 93.556373][ T34] usb 9-1: USB disconnect, device number 5 [ 93.821187][ T8298] binder: 8254:8298 ioctl c0306201 0 returned -14 [ 93.824832][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 93.824866][ T42] audit: type=1400 audit(1785430543.902:1039): avc: denied { call } for pid=8254 comm="syz.4.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 94.089449][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 94.093168][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 94.099785][ T42] audit: type=1400 audit(1785430544.172:1040): avc: denied { getopt } for pid=8303 comm="syz.3.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.109120][ T42] audit: type=1400 audit(1785430544.172:1041): avc: denied { getopt } for pid=8303 comm="syz.3.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.241234][ T8309] fuse: Bad value for 'fd' [ 94.356931][ T42] audit: type=1400 audit(1785430544.432:1042): avc: denied { bind } for pid=8315 comm="syz.5.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.367474][ T42] audit: type=1400 audit(1785430544.442:1043): avc: denied { write } for pid=8318 comm="syz.3.632" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 94.376950][ T42] audit: type=1400 audit(1785430544.442:1044): avc: denied { open } for pid=8318 comm="syz.3.632" path="/159/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 94.702699][ T8336] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.705411][ T8336] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 94.708087][ T8336] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.710493][ T8336] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 94.746169][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'. [ 94.749080][ T8338] netlink: 3 bytes leftover after parsing attributes in process `syz.3.638'. [ 94.775367][ T42] audit: type=1400 audit(1785430544.842:1045): avc: denied { bind } for pid=8339 comm="syz.3.639" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.787236][ T42] audit: type=1400 audit(1785430544.852:1046): avc: denied { name_bind } for pid=8339 comm="syz.3.639" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 94.793738][ T42] audit: type=1400 audit(1785430544.852:1047): avc: denied { node_bind } for pid=8339 comm="syz.3.639" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 94.802632][ T42] audit: type=1400 audit(1785430544.852:1048): avc: denied { accept } for pid=8339 comm="syz.3.639" laddr=::1 lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.833190][ T8344] netlink: 76 bytes leftover after parsing attributes in process `syz.3.640'. [ 95.074514][ C2] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 95.103900][ T8360] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 95.158044][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 95.160936][ T8365] netlink: 31 bytes leftover after parsing attributes in process `syz.3.648'. [ 95.168620][ T8365] netlink: 'syz.3.648': attribute type 3 has an invalid length. [ 95.172082][ T8365] netlink: 'syz.3.648': attribute type 2 has an invalid length. [ 95.176658][ T8365] netlink: 31 bytes leftover after parsing attributes in process `syz.3.648'. [ 95.788239][ T8393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=8393 comm=syz.4.658 [ 95.944063][ T8414] gadgetfs: bound to dummy_udc driver [ 96.194481][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.201806][ C0] gadgetfs: connected [ 96.206911][ T9] gadgetfs: disconnected [ 96.318735][ T8422] netlink: 'syz.3.666': attribute type 1 has an invalid length. [ 96.354662][ C0] gadgetfs: connected [ 96.360337][ T9] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 96.374964][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.392729][ C0] gadgetfs: configuration #1 [ 96.443554][ T8413] gadgetfs: suspended from state 3 [ 96.443799][ T9] usb 5-1: can't set config #1, error -71 [ 96.450150][ T8413] gadgetfs: disconnected [ 96.459863][ T9] usb 5-1: USB disconnect, device number 3 [ 96.560493][ T8426] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 96.568826][ T8404] syz.4.660 (8404): drop_caches: 2 [ 96.574748][ T8426] netlink: 'syz.5.668': attribute type 21 has an invalid length. [ 96.578936][ T8427] syz.3.667 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 96.604044][ T8424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.608130][ T8424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.657382][ T8429] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.809211][ T8433] tmpfs: Bad value for 'mpol' [ 96.865503][ T5831] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 97.044635][ T5831] usb 8-1: Using ep0 maxpacket: 8 [ 97.050033][ T5831] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 97.053626][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.062890][ T5831] pvrusb2: Hardware description: Terratec Grabster AV400 [ 97.066005][ T5831] pvrusb2: ********** [ 97.067641][ T5831] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 97.071574][ T5831] pvrusb2: Important functionality might not be entirely working. [ 97.079406][ T5831] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 97.083734][ T5831] pvrusb2: ********** [ 97.271290][ T2520] pvrusb2: Invalid write control endpoint [ 97.353217][ T2520] pvrusb2: Invalid write control endpoint [ 97.356661][ T2520] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 97.362749][ T2520] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 97.365721][ T2520] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 97.369856][ T2520] pvrusb2: Device being rendered inoperable [ 97.377684][ T2520] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 97.384052][ T2520] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 97.402154][ T2520] pvrusb2: Attached sub-driver cx25840 [ 97.406377][ T2520] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 97.409791][ T2520] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 97.603051][ T8437] tmpfs: Bad value for 'mpol' [ 97.651125][ T8445] syzkaller1: entered promiscuous mode [ 97.653096][ T8445] syzkaller1: entered allmulticast mode [ 97.910880][ T5831] usb 8-1: USB disconnect, device number 6 [ 99.088185][ T8481] netlink: 'syz.5.684': attribute type 2 has an invalid length. [ 99.091738][ T8481] __nla_validate_parse: 2 callbacks suppressed [ 99.091758][ T8481] netlink: 68 bytes leftover after parsing attributes in process `syz.5.684'. [ 99.099438][ T8481] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 99.204226][ T8485] netlink: 'syz.3.686': attribute type 10 has an invalid length. [ 99.372221][ T8496] xt_cgroup: invalid path, errno=-2 [ 99.450347][ T8503] netlink: 280 bytes leftover after parsing attributes in process `syz.5.693'. [ 99.468829][ T8503] efs: device does not support 512 byte blocks [ 99.470807][ T8503] device does not support 512 byte blocks [ 99.470807][ T8503] [ 99.550452][ T8505] pim6reg9: entered allmulticast mode [ 99.593035][ T8515] xt_bpf: check failed: parse error [ 99.641893][ T5817] nci: nci_rx_work: unknown MT 0x1 [ 99.801314][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 99.801343][ T42] audit: type=1400 audit(1785430549.872:1056): avc: denied { name_bind } for pid=8524 comm="syz.4.700" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 100.032879][ T42] audit: type=1400 audit(1785430550.102:1057): avc: denied { mount } for pid=8544 comm="syz.5.703" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 100.053900][ T8545] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 100.058082][ T8545] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 100.081409][ T42] audit: type=1400 audit(1785430550.152:1058): avc: denied { unmount } for pid=7188 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 100.126447][ T42] audit: type=1400 audit(1785430550.202:1059): avc: denied { read write } for pid=8549 comm="syz.5.704" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 100.137527][ T8552] MTRR 1 not used [ 100.141033][ T42] audit: type=1400 audit(1785430550.212:1060): avc: denied { open } for pid=8549 comm="syz.5.704" path="/92/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 100.153915][ T42] audit: type=1400 audit(1785430550.212:1061): avc: denied { ioctl } for pid=8549 comm="syz.5.704" path="/92/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 100.227447][ T42] audit: type=1400 audit(1785430550.292:1062): avc: denied { create } for pid=8557 comm="syz.5.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.236450][ T42] audit: type=1400 audit(1785430550.302:1063): avc: denied { bind } for pid=8557 comm="syz.5.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.253283][ T42] audit: type=1400 audit(1785430550.312:1064): avc: denied { write } for pid=8557 comm="syz.5.705" path="socket:[26736]" dev="sockfs" ino=26736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.287632][ T42] audit: type=1400 audit(1785430550.362:1065): avc: denied { listen } for pid=8563 comm="syz.5.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.372780][ T8509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.442281][ T8579] netlink: 36 bytes leftover after parsing attributes in process `syz.5.708'. [ 100.724266][ T8605] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 100.750568][ T8608] fuse: Unknown parameter 'user¶Ðd' [ 100.754472][ T5831] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 100.799178][ T8612] Bluetooth: (null): Invalid header checksum [ 100.810518][ T48] Bluetooth: (null): Invalid header checksum [ 100.914600][ T5831] usb 8-1: Using ep0 maxpacket: 32 [ 100.918976][ T5831] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 100.924184][ T5831] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 100.925181][ T8619] netlink: 'syz.4.718': attribute type 1 has an invalid length. [ 100.927771][ T5831] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 100.931560][ T8619] netlink: 756 bytes leftover after parsing attributes in process `syz.4.718'. [ 100.932465][ T5831] usb 8-1: Product: syz [ 100.936760][ T5831] usb 8-1: Manufacturer: syz [ 100.938317][ T5831] usb 8-1: SerialNumber: syz [ 100.944323][ T5831] usb 8-1: config 0 descriptor?? [ 100.949764][ T8586] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.954162][ T5831] hub 8-1:0.0: bad descriptor, ignoring hub [ 100.957543][ T5831] hub 8-1:0.0: probe with driver hub failed with error -5 [ 101.166379][ T8629] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 101.206387][ T8633] netlink: 'syz.5.721': attribute type 15 has an invalid length. [ 101.210138][ T8633] netlink: 'syz.5.721': attribute type 15 has an invalid length. [ 101.213337][ T8633] netlink: 'syz.5.721': attribute type 15 has an invalid length. [ 101.217106][ T8633] netlink: 'syz.5.721': attribute type 15 has an invalid length. [ 101.220304][ T8633] netlink: 'syz.5.721': attribute type 15 has an invalid length. [ 101.223542][ T8633] netlink: 'syz.5.721': attribute type 15 has an invalid length. [ 101.227713][ T8633] netlink: 'syz.5.721': attribute type 15 has an invalid length. [ 101.331788][ T8641] input: syz0 as /devices/virtual/input/input9 [ 101.394328][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.724'. [ 103.212267][ T8671] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 103.272441][ T8680] syzkaller0: entered promiscuous mode [ 103.273293][ T8671] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 103.276966][ T8680] syzkaller0: entered allmulticast mode [ 103.278666][ T8671] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 103.283630][ T8671] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 103.285993][ T8671] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 103.299435][ T8671] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 103.305003][ T8680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.732'. [ 103.310429][ T8680] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8680 comm=syz.4.732 [ 103.334325][ T8671] pci 0000:00:01.0: Adding to iommu group 1 [ 103.355762][ T8671] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 103.358140][ T8671] pci 0000:00:01.0: vgaarb: bridge control possible [ 103.360678][ T8671] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 103.378049][ T8671] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 103.390140][ T8671] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 103.400186][ T8671] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 103.462607][ T8671] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 103.465646][ T8671] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 103.471257][ T8671] [drm] features: -virgl +edid -resource_blob -host_visible [ 103.471271][ T8671] [drm] features: -context_init -blob_alignment [ 103.494443][ T8671] ------------[ cut here ]------------ [ 103.497273][ T8671] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 103.499553][ T8671] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa6/0x420, CPU#2: syz.5.730/8671 [ 103.503018][ T8671] Modules linked in: [ 103.505086][ T8671] CPU: 2 UID: 0 PID: 8671 Comm: syz.5.730 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.509932][ T8671] Tainted: [L]=SOFTLOCKUP [ 103.512070][ T8671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.515916][ T8671] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 103.518313][ T8671] Code: 48 8b 43 60 48 8d 58 a0 48 3d 30 82 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 a5 a3 5d 09 85 c0 75 e0 48 8d 3d fa 2d ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 25 a5 5d 09 48 85 c0 0f [ 103.525578][ T8671] RSP: 0018:ffffc900040b6f58 EFLAGS: 00010246 [ 103.527724][ T8671] RAX: 0000000000000000 RBX: ffff88802594f7c0 RCX: fffff52000816dc6 [ 103.530567][ T8671] RDX: 0000000000000000 RSI: ffffffff8c6f8ae0 RDI: ffffffff912750c0 [ 103.533447][ T8671] RBP: ffffffff8c6f8ae0 R08: 0000000000000000 R09: fffffbfff2244f3a [ 103.536287][ T8671] R10: ffffc900040b6f58 R11: 0000000000000000 R12: 0000000000000000 [ 103.539175][ T8671] R13: ffffc900040b6fc8 R14: 00000000000000d8 R15: 0000000000000000 [ 103.542131][ T8671] FS: 00007fd1b43d86c0(0000) GS:ffff8880d5fdc000(0000) knlGS:0000000000000000 [ 103.545633][ T8671] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.547831][ T8671] CR2: 000000110c396799 CR3: 000000005ba2f000 CR4: 0000000000352ef0 [ 103.550578][ T8671] Call Trace: [ 103.551994][ T8671] [ 103.552896][ T8671] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 103.554823][ T8671] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 103.556604][ T8671] ? vp_modern_set_queue_enable+0x43/0x90 [ 103.558461][ T8671] ? iowrite16+0x33/0xb0 [ 103.559873][ T8671] ? vp_modern_find_vqs+0xd2/0x100 [ 103.561599][ T8671] virtio_gpu_init.cold+0x51c/0x126e [ 103.563333][ T8671] ? lockdep_hardirqs_on+0x78/0x100 [ 103.565170][ T8671] ? __pfx_virtio_gpu_init+0x10/0x10 [ 103.566877][ T8671] ? console_unlock+0x1c9/0x260 [ 103.568437][ T8671] ? __pfx_console_unlock+0x10/0x10 [ 103.570016][ T8671] ? con_is_bound+0x141/0x190 [ 103.571492][ T8671] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 103.573281][ T8671] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 103.575579][ T8671] ? vga_remove_vgacon+0x21/0x30 [ 103.577425][ T8671] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 103.579811][ T8671] virtio_gpu_probe+0x21c/0x360 [ 103.581339][ T8671] virtio_dev_probe+0x6a2/0xbe0 [ 103.582863][ T8671] ? __pfx_virtio_dev_probe+0x10/0x10 [ 103.583659][ T8685] IPVS: length: 18 != 8 [ 103.584667][ T8671] ? kernfs_create_link+0x1bd/0x240 [ 103.587596][ T8671] ? kernfs_put+0x3f/0x60 [ 103.588923][ T8671] ? sysfs_do_create_link_sd+0xbb/0x140 [ 103.590929][ T8671] ? sysfs_create_link+0x68/0xc0 [ 103.592567][ T8671] ? __pfx_virtio_dev_probe+0x10/0x10 [ 103.594199][ T8671] really_probe+0x241/0xa60 [ 103.595679][ T8671] __driver_probe_device+0x20e/0x450 [ 103.597324][ T8671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.599191][ T8671] driver_probe_device+0x4a/0x140 [ 103.600829][ T8671] __device_attach_driver+0x1df/0x320 [ 103.602551][ T8671] ? __pfx___device_attach_driver+0x10/0x10 [ 103.604671][ T8671] bus_for_each_drv+0x159/0x1e0 [ 103.606179][ T8671] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.607877][ T8671] ? lockdep_hardirqs_on+0x78/0x100 [ 103.609540][ T8671] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.611397][ T8671] __device_attach+0x1e4/0x4d0 [ 103.612963][ T8671] ? __pfx___device_attach+0x10/0x10 [ 103.614727][ T8671] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.616397][ T8671] device_initial_probe+0xaf/0xd0 [ 103.618058][ T8671] bus_probe_device+0x64/0x160 [ 103.619526][ T8671] device_add+0x121d/0x1970 [ 103.620952][ T8671] ? __pfx_device_add+0x10/0x10 [ 103.622526][ T8671] ? __pfx___might_resched+0x10/0x10 [ 103.624216][ T8671] ? iowrite8+0x2b/0xb0 [ 103.625633][ T8671] ? iowrite8+0x2e/0xb0 [ 103.626947][ T8671] ? ioread8+0x8f/0xd0 [ 103.628225][ T8671] register_virtio_device+0x4f0/0x5d0 [ 103.629904][ T8671] ? __pfx_register_virtio_device+0x10/0x10 [ 103.631693][ T8671] ? __pfx_pcibios_set_master+0x10/0x10 [ 103.633432][ T8671] ? __raw_spin_lock_init+0x3a/0x110 [ 103.635464][ T8671] ? __pfx_virtio_pci_probe+0x10/0x10 [ 103.637133][ T8671] virtio_pci_probe+0x255/0x410 [ 103.638688][ T8671] local_pci_probe+0xdd/0x1b0 [ 103.640166][ T8671] pci_call_probe+0x176/0x800 [ 103.641783][ T8671] ? __pfx_pci_call_probe+0x10/0x10 [ 103.643411][ T8671] ? find_held_lock+0x2b/0x80 [ 103.645015][ T8671] ? pci_match_device+0x450/0x5f0 [ 103.646578][ T8671] ? pci_match_device+0x450/0x5f0 [ 103.648133][ T8671] ? pci_match_id+0x34d/0x3f0 [ 103.649607][ T8671] ? pci_match_device+0xb4/0x5f0 [ 103.651559][ T8671] pci_device_probe+0x1cd/0x370 [ 103.653156][ T8671] ? __pfx_pci_device_probe+0x10/0x10 [ 103.655155][ T8671] really_probe+0x241/0xa60 [ 103.656606][ T8671] __driver_probe_device+0x20e/0x450 [ 103.658280][ T8671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.660170][ T8671] driver_probe_device+0x4a/0x140 [ 103.661891][ T8671] __device_attach_driver+0x1df/0x320 [ 103.663701][ T8671] ? __pfx___device_attach_driver+0x10/0x10 [ 103.665758][ T8671] bus_for_each_drv+0x159/0x1e0 [ 103.667342][ T8671] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.669030][ T8671] ? lockdep_hardirqs_on+0x78/0x100 [ 103.670674][ T8671] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.672568][ T8671] __device_attach+0x1e4/0x4d0 [ 103.674063][ T8671] ? __pfx___device_attach+0x10/0x10 [ 103.675806][ T8671] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.677480][ T8671] device_initial_probe+0xaf/0xd0 [ 103.679113][ T8671] pci_bus_add_device+0xc5/0x100 [ 103.680762][ T8671] pci_bus_add_devices+0x9a/0x1f0 [ 103.682524][ T8671] pci_rescan_bus+0x2a/0x40 [ 103.684184][ T8671] rescan_store+0xfb/0x130 [ 103.685690][ T8671] ? __pfx_rescan_store+0x10/0x10 [ 103.687262][ T8671] ? sysfs_file_kobj+0xe4/0x290 [ 103.688781][ T8671] ? __pfx_rescan_store+0x10/0x10 [ 103.690304][ T8671] bus_attr_store+0x74/0xb0 [ 103.691742][ T8671] ? __pfx_bus_attr_store+0x10/0x10 [ 103.693354][ T8671] sysfs_kf_write+0xf2/0x150 [ 103.695090][ T8671] kernfs_fop_write_iter+0x3e0/0x5f0 [ 103.696728][ T8671] ? __pfx_sysfs_kf_write+0x10/0x10 [ 103.698334][ T8671] vfs_write+0x6ac/0x1050 [ 103.699657][ T8671] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 103.701605][ T8671] ? __pfx_vfs_write+0x10/0x10 [ 103.703105][ T8671] ksys_write+0x12a/0x250 [ 103.704530][ T8671] ? __pfx_ksys_write+0x10/0x10 [ 103.706042][ T8671] do_syscall_64+0x115/0x870 [ 103.707487][ T8671] ? clear_bhb_loop+0x40/0x90 [ 103.708967][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.710778][ T8671] RIP: 0033:0x7fd1b359df99 [ 103.712220][ T8671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.718042][ T8671] RSP: 002b:00007fd1b43d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.720639][ T8671] RAX: ffffffffffffffda RBX: 00007fd1b3826090 RCX: 00007fd1b359df99 [ 103.723255][ T8671] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000005 [ 103.725879][ T8671] RBP: 00007fd1b3634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 103.728283][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.730785][ T8671] R13: 00007fd1b3826128 R14: 00007fd1b3826090 R15: 00007ffdc1d5c168 [ 103.733350][ T8671] [ 103.734513][ T8671] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.736736][ T8671] CPU: 2 UID: 0 PID: 8671 Comm: syz.5.730 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.739935][ T8671] Tainted: [L]=SOFTLOCKUP [ 103.741329][ T8671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.744391][ T8671] Call Trace: [ 103.745470][ T8671] [ 103.746402][ T8671] dump_stack_lvl+0x100/0x190 [ 103.747884][ T8671] vpanic+0x552/0x970 [ 103.749090][ T8671] ? __pfx_vpanic+0x10/0x10 [ 103.750487][ T8671] panic+0xd1/0xe0 [ 103.751718][ T8671] ? __pfx_panic+0x10/0x10 [ 103.753140][ T8671] check_panic_on_warn.cold+0x19/0x34 [ 103.754843][ T8671] ? __kmem_cache_create_args+0xa6/0x420 [ 103.756584][ T8671] __warn.cold+0x191/0x318 [ 103.757972][ T8671] __report_bug+0x30f/0x440 [ 103.759357][ T8671] ? __kmem_cache_create_args+0xa6/0x420 [ 103.761126][ T8671] ? __pfx___report_bug+0x10/0x10 [ 103.762714][ T8671] ? __mutex_lock+0x26d/0x1bd0 [ 103.764202][ T8671] ? __kmem_cache_create_args+0x44/0x420 [ 103.765932][ T8671] report_bug_entry+0xe1/0x290 [ 103.767445][ T8671] ? __kmem_cache_create_args+0xa9/0x420 [ 103.769172][ T8671] handle_bug+0x1cd/0x2a0 [ 103.770519][ T8671] exc_invalid_op+0x17/0x50 [ 103.772084][ T8671] asm_exc_invalid_op+0x1a/0x20 [ 103.773587][ T8671] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 103.775521][ T8671] Code: 48 8b 43 60 48 8d 58 a0 48 3d 30 82 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 a5 a3 5d 09 85 c0 75 e0 48 8d 3d fa 2d ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 25 a5 5d 09 48 85 c0 0f [ 103.781515][ T8671] RSP: 0018:ffffc900040b6f58 EFLAGS: 00010246 [ 103.783412][ T8671] RAX: 0000000000000000 RBX: ffff88802594f7c0 RCX: fffff52000816dc6 [ 103.785794][ T8671] RDX: 0000000000000000 RSI: ffffffff8c6f8ae0 RDI: ffffffff912750c0 [ 103.788172][ T8671] RBP: ffffffff8c6f8ae0 R08: 0000000000000000 R09: fffffbfff2244f3a [ 103.790506][ T8671] R10: ffffc900040b6f58 R11: 0000000000000000 R12: 0000000000000000 [ 103.792933][ T8671] R13: ffffc900040b6fc8 R14: 00000000000000d8 R15: 0000000000000000 [ 103.795302][ T8671] ? __kmem_cache_create_args+0x9b/0x420 [ 103.797038][ T8671] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 103.798632][ T8671] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 103.800428][ T8671] ? vp_modern_set_queue_enable+0x43/0x90 [ 103.802291][ T8671] ? iowrite16+0x33/0xb0 [ 103.803646][ T8671] ? vp_modern_find_vqs+0xd2/0x100 [ 103.805349][ T8671] virtio_gpu_init.cold+0x51c/0x126e [ 103.806971][ T8671] ? lockdep_hardirqs_on+0x78/0x100 [ 103.808487][ T8671] ? __pfx_virtio_gpu_init+0x10/0x10 [ 103.810101][ T8671] ? console_unlock+0x1c9/0x260 [ 103.811622][ T8671] ? __pfx_console_unlock+0x10/0x10 [ 103.813227][ T8671] ? con_is_bound+0x141/0x190 [ 103.814624][ T8671] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 103.816297][ T8671] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 103.818037][ T8671] ? vga_remove_vgacon+0x21/0x30 [ 103.819513][ T8671] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 103.821646][ T8671] virtio_gpu_probe+0x21c/0x360 [ 103.823183][ T8671] virtio_dev_probe+0x6a2/0xbe0 [ 103.824649][ T8671] ? __pfx_virtio_dev_probe+0x10/0x10 [ 103.826282][ T8671] ? kernfs_create_link+0x1bd/0x240 [ 103.827893][ T8671] ? kernfs_put+0x3f/0x60 [ 103.829269][ T8671] ? sysfs_do_create_link_sd+0xbb/0x140 [ 103.830949][ T8671] ? sysfs_create_link+0x68/0xc0 [ 103.832522][ T8671] ? __pfx_virtio_dev_probe+0x10/0x10 [ 103.834174][ T8671] really_probe+0x241/0xa60 [ 103.835610][ T8671] __driver_probe_device+0x20e/0x450 [ 103.837260][ T8671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.839050][ T8671] driver_probe_device+0x4a/0x140 [ 103.840628][ T8671] __device_attach_driver+0x1df/0x320 [ 103.842379][ T8671] ? __pfx___device_attach_driver+0x10/0x10 [ 103.844243][ T8671] bus_for_each_drv+0x159/0x1e0 [ 103.845877][ T8671] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.847542][ T8671] ? lockdep_hardirqs_on+0x78/0x100 [ 103.849144][ T8671] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.850933][ T8671] __device_attach+0x1e4/0x4d0 [ 103.852511][ T8671] ? __pfx___device_attach+0x10/0x10 [ 103.854190][ T8671] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.855823][ T8671] device_initial_probe+0xaf/0xd0 [ 103.857407][ T8671] bus_probe_device+0x64/0x160 [ 103.858913][ T8671] device_add+0x121d/0x1970 [ 103.860346][ T8671] ? __pfx_device_add+0x10/0x10 [ 103.861983][ T8671] ? __pfx___might_resched+0x10/0x10 [ 103.863698][ T8671] ? iowrite8+0x2b/0xb0 [ 103.864998][ T8671] ? iowrite8+0x2e/0xb0 [ 103.866288][ T8671] ? ioread8+0x8f/0xd0 [ 103.867568][ T8671] register_virtio_device+0x4f0/0x5d0 [ 103.869271][ T8671] ? __pfx_register_virtio_device+0x10/0x10 [ 103.871105][ T8671] ? __pfx_pcibios_set_master+0x10/0x10 [ 103.872876][ T8671] ? __raw_spin_lock_init+0x3a/0x110 [ 103.874508][ T8671] ? __pfx_virtio_pci_probe+0x10/0x10 [ 103.876182][ T8671] virtio_pci_probe+0x255/0x410 [ 103.877710][ T8671] local_pci_probe+0xdd/0x1b0 [ 103.879161][ T8671] pci_call_probe+0x176/0x800 [ 103.880605][ T8671] ? __pfx_pci_call_probe+0x10/0x10 [ 103.882264][ T8671] ? find_held_lock+0x2b/0x80 [ 103.883777][ T8671] ? pci_match_device+0x450/0x5f0 [ 103.885330][ T8671] ? pci_match_device+0x450/0x5f0 [ 103.886879][ T8671] ? pci_match_id+0x34d/0x3f0 [ 103.888340][ T8671] ? pci_match_device+0xb4/0x5f0 [ 103.889754][ T8671] pci_device_probe+0x1cd/0x370 [ 103.891242][ T8671] ? __pfx_pci_device_probe+0x10/0x10 [ 103.892996][ T8671] really_probe+0x241/0xa60 [ 103.894395][ T8671] __driver_probe_device+0x20e/0x450 [ 103.896075][ T8671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.897886][ T8671] driver_probe_device+0x4a/0x140 [ 103.899429][ T8671] __device_attach_driver+0x1df/0x320 [ 103.901107][ T8671] ? __pfx___device_attach_driver+0x10/0x10 [ 103.903081][ T8671] bus_for_each_drv+0x159/0x1e0 [ 103.904625][ T8671] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.906290][ T8671] ? lockdep_hardirqs_on+0x78/0x100 [ 103.907898][ T8671] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.909804][ T8671] __device_attach+0x1e4/0x4d0 [ 103.911525][ T8671] ? __pfx___device_attach+0x10/0x10 [ 103.913137][ T8671] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.914746][ T8671] device_initial_probe+0xaf/0xd0 [ 103.916246][ T8671] pci_bus_add_device+0xc5/0x100 [ 103.917782][ T8671] pci_bus_add_devices+0x9a/0x1f0 [ 103.919363][ T8671] pci_rescan_bus+0x2a/0x40 [ 103.920802][ T8671] rescan_store+0xfb/0x130 [ 103.922288][ T8671] ? __pfx_rescan_store+0x10/0x10 [ 103.923872][ T8671] ? sysfs_file_kobj+0xe4/0x290 [ 103.925376][ T8671] ? __pfx_rescan_store+0x10/0x10 [ 103.926937][ T8671] bus_attr_store+0x74/0xb0 [ 103.928336][ T8671] ? __pfx_bus_attr_store+0x10/0x10 [ 103.930044][ T8671] sysfs_kf_write+0xf2/0x150 [ 103.931915][ T8671] kernfs_fop_write_iter+0x3e0/0x5f0 [ 103.934120][ T8671] ? __pfx_sysfs_kf_write+0x10/0x10 [ 103.936160][ T8671] vfs_write+0x6ac/0x1050 [ 103.937912][ T8671] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 103.940247][ T8671] ? __pfx_vfs_write+0x10/0x10 [ 103.942223][ T8671] ksys_write+0x12a/0x250 [ 103.943947][ T8671] ? __pfx_ksys_write+0x10/0x10 [ 103.945937][ T8671] do_syscall_64+0x115/0x870 [ 103.947859][ T8671] ? clear_bhb_loop+0x40/0x90 [ 103.949707][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.952007][ T8671] RIP: 0033:0x7fd1b359df99 [ 103.953775][ T8671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.961143][ T8671] RSP: 002b:00007fd1b43d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.964408][ T8671] RAX: ffffffffffffffda RBX: 00007fd1b3826090 RCX: 00007fd1b359df99 [ 103.967503][ T8671] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000005 [ 103.970591][ T8671] RBP: 00007fd1b3634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 103.973751][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.976895][ T8671] R13: 00007fd1b3826128 R14: 00007fd1b3826090 R15: 00007ffdc1d5c168 [ 103.980019][ T8671] [ 103.981983][ T8671] Kernel Offset: disabled [ 103.983819][ T8671] Rebooting in 86400 seconds..