last executing test programs: 14m34.440923347s ago: executing program 2 (id=39): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b04000000090000000100"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf253500000008000300", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r3, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/255, 0xff}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/18, 0x12}], 0x3, &(0x7f0000000ac0)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f00000010c0)=""/133, 0x85}], 0x2}, 0x3}], 0x3, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[], 0x34}}, 0x44800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff00000000"], 0x50}}, 0x4000850) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) userfaultfd(0x801) 14m33.869014823s ago: executing program 2 (id=41): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffd, {0x0, 0x200000000, 0xffffffffffffffff, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r3, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r1, &(0x7f0000004380)="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", 0x2000, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000180)="48832af71514be332b0f00879fc3567bade8b8", 0x13}}, 0x31) fsync(r0) 14m32.876599706s ago: executing program 2 (id=44): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x1d, 0x3, "c6a41d106c720000f5ffffffffffffff02000000637756043c"}, @NFTA_MATCH_NAME={0xd, 0x1, 'addrtype\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6003}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}]}]}], {0x14}}, 0xcc}}, 0x4048010) 14m32.70037786s ago: executing program 2 (id=45): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './bus\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 14m32.514638093s ago: executing program 2 (id=48): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x5, 0x0, 0x9, 0xfffffff1, 0x8e, 0x3, 0xff, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r3, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4) 14m31.912821854s ago: executing program 2 (id=52): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@sndinfo={0x20, 0x84, 0x2, {0x24de, 0x201, 0x4, 0x6f, r2}}], 0x20, 0x20008001}], 0x1, 0x24010000) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) sendmmsg$inet(r3, &(0x7f0000006640)=[{{&(0x7f0000000a40)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000001fc0)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000020) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce010203010902"], 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0xfffffffffffffe7e) 14m16.74422869s ago: executing program 32 (id=52): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@sndinfo={0x20, 0x84, 0x2, {0x24de, 0x201, 0x4, 0x6f, r2}}], 0x20, 0x20008001}], 0x1, 0x24010000) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) sendmmsg$inet(r3, &(0x7f0000006640)=[{{&(0x7f0000000a40)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000001fc0)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000020) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce010203010902"], 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0xfffffffffffffe7e) 23.98556439s ago: executing program 5 (id=3194): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448e0, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 23.35957173s ago: executing program 5 (id=3200): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x11) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) sendfile(r6, r1, 0x0, 0x9) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_ADD_TX_TS(r3, 0x0, 0xc04) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000280000000000017678ac1e0001000000000e00907800000004000000070000000100000008"], 0x0) 21.849531424s ago: executing program 5 (id=3206): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) timer_create(0xfffffffd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001900010000000000000000002001000000000000000ae10000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c040}, 0x8000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc0100"/45], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000001c0)="f01bf9f67c57cf8e4044066f178e00ca36e904138bc387a55a783b2dfe3078038f9088fcb6ac1ab8e9d8ced99fef2e307a14e2ae6e869515a793239902c29b15f43096eb25dea218d05907ee94f7343c025d32f52bc13f2011fde464b730c20cb8a9a62cd19c75af896b41e0e9f121785e2990dc5ae4a72cd4f1e41742aaa8a0763481dc36c41eff576b15a5791d5cb07907991aaf34a1da9273b55f75fcef5bd9c732", 0xa3}, {&(0x7f00000006c0)="37fcfd5a7a2f8bb6c6693cb306697ec8571d7069ddc7f866304eb6598d29d8f4e572b827b3c313ff513974834932252ca8a9b380d66bc21176457d16bcf6d530e3fa0af7ec7aa4550f33773c113c1e456762b212481435ac1f724e51c6dae02afbc8ce5e535d04a9a62cc8b2b1b53b2e343ab9b7b58cd22a50acdd6606489f1cbbc3b05462eedf93ff497916acf1a0d9a88a583e248c7c0a9ab0c1ab777339f9d9217e31aa72f3c8ac0a09d54ff19e0f07dc", 0xb2}], 0x2, &(0x7f0000001e00)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000100000060", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000", @ANYBLOB], 0xe8, 0x4001}}], 0x1, 0x81) recvmsg(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001a00)=""/159, 0x9f}], 0x1}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 19.719667542s ago: executing program 5 (id=3213): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x100000002) ioctl$TIOCSETD(r2, 0x5412, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000d040000000000e2590000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800050002000000"], 0x3c}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) epoll_create1(0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) 17.388935772s ago: executing program 5 (id=3217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r1, &(0x7f0000000380), 0x917) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='status\x00') read$FUSE(r4, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, r0, &(0x7f0000000000)={r4, r0, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) r6 = request_key(&(0x7f0000000100)='encrypted\x00', 0x0, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r7, &(0x7f0000000080)=""/72, 0x48) keyctl$clear(0x7, r6) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r8, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x20, 0x7, &(0x7f00000000c0)=[0x4], 0x1, 0x0}) 16.429226823s ago: executing program 5 (id=3219): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x4, 0x0, 0x0, 0x0, 0x2, 0x3e, 0xffffffeb, 0x7c, 0x40, 0x2, 0x0, 0x6, 0x38, 0x1, 0xfffe, 0x3, 0x3}, [{0x3, 0xf, 0x8, 0x11, 0x0, 0xe5, 0x1, 0x3}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x40942, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0xfb}) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) userfaultfd(0x80001) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000005f80)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000003c0)=""/195, 0xc3}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f0000000580)=""/32, 0x20}], 0x2, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/18, 0x12}, {&(0x7f00000006c0)=""/213, 0xd5}], 0x2, &(0x7f0000000800)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001000)=[{&(0x7f0000000980)=""/155, 0x9b}, {&(0x7f0000000a40)=""/228, 0xe4}, {&(0x7f0000000b40)=""/36, 0x24}, {&(0x7f0000000b80)=""/189, 0xbd}, {&(0x7f0000000c40)=""/166, 0xa6}, {&(0x7f0000000d00)=""/151, 0x97}, {&(0x7f0000000dc0)=""/12, 0xc}, {&(0x7f0000000e00)=""/141, 0x8d}, {&(0x7f0000000ec0)=""/15, 0xf}, {&(0x7f0000000f00)=""/229, 0xe5}], 0xa, &(0x7f00000010c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000001180), 0x6e, &(0x7f0000003600)=[{&(0x7f0000001200)=""/218, 0xda}, {&(0x7f0000001300)=""/28, 0x1c}, {&(0x7f0000001340)=""/144, 0x90}, {&(0x7f0000001400)}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/225, 0xe1}, {&(0x7f0000003540)=""/59, 0x3b}, {&(0x7f0000003580)=""/81, 0x51}], 0x9, &(0x7f00000036c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000003780), 0x6e, &(0x7f0000003840)=[{&(0x7f0000003800)=""/55, 0x37}], 0x1}}, {{&(0x7f0000003880), 0x6e, &(0x7f0000004a40)=[{&(0x7f0000003900)=""/224, 0xe0}, {&(0x7f0000003a00)=""/16, 0x10}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x3, &(0x7f0000004a80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004ac0), 0x6e, &(0x7f0000005b80)=[{&(0x7f0000004b40)=""/39, 0x27}, {&(0x7f0000004b80)=""/4096, 0x1000}], 0x2, &(0x7f0000005bc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000005c80), 0x6e, &(0x7f0000005dc0)=[{&(0x7f0000005d00)=""/135, 0x87}], 0x1, &(0x7f0000005e00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x178}}], 0x9, 0x10040, &(0x7f00000061c0)={0x0, 0x989680}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket(0x23, 0xa, 0x5) 7.355633294s ago: executing program 4 (id=3245): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0xfffffffd, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc0100"/45], 0xfc}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000001c0)="f01bf9f67c57cf8e4044066f178e00ca36e904138bc387a55a783b2dfe3078038f9088fcb6ac1ab8e9d8ced99fef2e307a14e2ae6e869515a793239902c29b15f43096eb25dea218d05907ee94f7343c025d32f52bc13f2011fde464b730c20cb8a9a62cd19c75af896b41e0e9f121785e2990dc5ae4a72cd4f1e41742aaa8a0763481dc36c41eff576b15a5791d5cb07907991aaf34a1da9273b55f75fcef5bd9c732", 0xa3}, {&(0x7f00000006c0)="37fcfd5a7a2f8bb6c6693cb306697ec8571d7069ddc7f866304eb6598d29d8f4e572b827b3c313ff513974834932252ca8a9b380d66bc21176457d16bcf6d530e3fa0af7ec7aa4550f33773c113c1e456762b212481435ac1f724e51c6dae02afbc8ce5e535d04a9a62cc8b2b1b53b2e343ab9b7b58cd22a50acdd6606489f1cbbc3b05462eedf93ff497916acf1a0d9a88a583e248c7c0a9ab0c1ab777339f9d9217e31aa72f3c8ac0a09d54ff19e0f07dc", 0xb2}], 0x2, &(0x7f0000001e00)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000100000060", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000", @ANYBLOB], 0xe8, 0x4001}}], 0x1, 0x81) recvmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001a00)=""/159, 0x9f}], 0x1}, 0x0) 7.142752163s ago: executing program 4 (id=3247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r1, &(0x7f0000000380), 0x917) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='status\x00') read$FUSE(r4, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, r0, &(0x7f0000000000)={r4, r0, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) r6 = request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) r7 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r7, &(0x7f0000000080)=""/72, 0x48) keyctl$clear(0x7, r6) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r8, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x20, 0x7, &(0x7f00000000c0)=[0x4], 0x1, 0x0}) 6.03147464s ago: executing program 4 (id=3249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f0000002b80)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)="683f0057954e8374745129caea99bc671e", 0x11}, {&(0x7f0000002840)}], 0x4) 5.680405839s ago: executing program 4 (id=3253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000140)) 3.935020565s ago: executing program 4 (id=3262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x4, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x30000013}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xfff1, 0xb}, {0xa, 0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x2, 0x80000000}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010044}, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.450767463s ago: executing program 1 (id=3263): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade5026"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.380801715s ago: executing program 1 (id=3264): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) timer_create(0xfffffffd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001900010000000000000000002001000000000000000ae10000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c040}, 0x8000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc0100"/45], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000001c0)="f01bf9f67c57cf8e4044066f178e00ca36e904138bc387a55a783b2dfe3078038f9088fcb6ac1ab8e9d8ced99fef2e307a14e2ae6e869515a793239902c29b15f43096eb25dea218d05907ee94f7343c025d32f52bc13f2011fde464b730c20cb8a9a62cd19c75af896b41e0e9f121785e2990dc5ae4a72cd4f1e41742aaa8a0763481dc36c41eff576b15a5791d5cb07907991aaf34a1da9273b55f75fcef5bd9c732", 0xa3}, {&(0x7f00000006c0)="37fcfd5a7a2f8bb6c6693cb306697ec8571d7069ddc7f866304eb6598d29d8f4e572b827b3c313ff513974834932252ca8a9b380d66bc21176457d16bcf6d530e3fa0af7ec7aa4550f33773c113c1e456762b212481435ac1f724e51c6dae02afbc8ce5e535d04a9a62cc8b2b1b53b2e343ab9b7b58cd22a50acdd6606489f1cbbc3b05462eedf93ff497916acf1a0d9a88a583e248c7c0a9ab0c1ab777339f9d9217e31aa72f3c8ac0a09d54ff19e0f07dc", 0xb2}], 0x2, &(0x7f0000001e00)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000100000060", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000", @ANYBLOB], 0xe8, 0x4001}}], 0x1, 0x81) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$binfmt_register(r0, 0x0, 0x0) 3.03255076s ago: executing program 4 (id=3265): r0 = socket$inet6(0xa, 0xa, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x7ffffffc}, 0x8) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2f}, 0x94) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x453, 0x200, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) r4 = socket(0xa, 0x5, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@link_local, @random="50a245d5cde0", @val={@void, {0x8100, 0x5}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1010000}}}}}, 0x0) r5 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r5, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000640)={0x20, 0x18, 0x4, "ce9f9ecb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x41015500, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0xf0) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) sendfile(r2, r2, 0x0, 0x200000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000100000001000000008000000070000000000000e03000000020000000030000000300000000094ea3027e271097e1b53bd2befa4324c41e1e7c1d9fb7e439df57ee2"], 0x0, 0x30, 0x0, 0x1, 0x4d}, 0x28) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2.976844135s ago: executing program 1 (id=3266): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0)=@int=0x5, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto(r3, 0x0, 0x0, 0x48000, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="20010000100021040000000000000000fe880000000000000000000000000001e00000020000000000000000f5ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x120}}, 0x0) msgsnd(0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB="03"], 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x46, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd601d200000442c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3300000e"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) listen(0xffffffffffffffff, 0x7f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6}, 0x20) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x4059080) 2.876951477s ago: executing program 3 (id=3267): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0xa, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x2000c095, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000880)=""/148, 0x94}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}, 0x1}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sendto$x25(r2, &(0x7f00000006c0)="816ef4c6f92a7ce837613cd90c3ca91b1179f99c4dda5e3057d75b07cf7468afb8c45d649308ff0d296329140c1acb79516a7acf54213232996c3918238be0c7a1c230839e6f5d2f748eae20b6ddce473fa7531a1081c9ca8c999dea75f5a363201629edbb146df4ebf214b9bddc17f3af586f44583f7e2ff8c3de01f3151bdf7bcb3bb0b02046eefcd26bcd09629aea53e4a4a7d85829f8f8aafc40b565e850510ea7bf0610178c402ff9b69eed348a431ff22eae5021de9eeab977a77450ed95d9966b3fb2b49e3a6dc5b8760e669133e1382adba039dcc62641f978f3b7b312a74698", 0xe4, 0x0, &(0x7f0000000540)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000180)=0x90000202, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 2.595321673s ago: executing program 0 (id=3268): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x8000000004) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x2, 0x80805, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 2.543487316s ago: executing program 1 (id=3269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601020000000000000000070000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448e0, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.530040166s ago: executing program 3 (id=3270): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x28383, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) io_submit(0x0, 0x1, &(0x7f0000004540)=[0x0]) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) sched_setaffinity(0x0, 0xfffffffffffffcb5, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000009500000000000000b7020000ffb000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="00d5fb2f12844f0000000000000000b7050000080000004608f1bc76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 2.058457921s ago: executing program 0 (id=3271): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0xa, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) 1.989375432s ago: executing program 3 (id=3272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x93}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.914754695s ago: executing program 0 (id=3273): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade5026"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.901319893s ago: executing program 1 (id=3274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x4, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x30000013}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xfff1, 0xb}, {0xa, 0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x2, 0x80000000}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010044}, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.870672469s ago: executing program 3 (id=3275): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\x00'}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x5, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x5, 0x7, 0x2b, 0x130, 0x0, @in6={0xa, 0x4e20, 0xe634, @private0, 0x8b1e}}]}, 0x88}, 0x1, 0x7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2000000002) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000000000000000000000000000061194c0000040000950000000000000047b7fbc828a3574ded64ddae01a2808503666c91d321e2175fcc1ffb2cde599f3d5b08cbb144dfb2d1359acd8ce8c4bf8ef06a4fa6754d63bffe40d843c5fd4a8618457f4bf97fe6ba30876d695e05e331fdacc738061c2222192d0d7c04be"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x1000}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800) syz_clone(0x80e1280, &(0x7f0000000300)="9e920a23254f1e8e10bc2525225d1be304e664460c7294865830d05532a786006f797def105426ddfa6719122b851c3761852017b5a5f6cc3f976f82bb622cef3f345b41c0060418131f747a", 0x4c, &(0x7f00000000c0), 0x0, &(0x7f0000000540)="dcc2938a0e1c2baf1362a0e787778391ca695d28b423c1557c9efa164efc748d5bec470bcdbea6d330324c85aaae14402bd2fc38b3e535a9ae59d34239c0b2878bfdefaca5a40b374270fe91a450d840834f7960c84e3ac28a17ec794ffd7e2205931ec946a72deb0f7c") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1}]}) write(r6, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1.831957428s ago: executing program 0 (id=3276): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x11) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) sendfile(r6, r1, 0x0, 0x9) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x4}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xc04) syz_emit_ethernet(0x36, 0x0, 0x0) 1.134304731s ago: executing program 1 (id=3277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone3(&(0x7f0000000480)={0x300008400, &(0x7f0000000100), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x1}, &(0x7f0000000300)=""/68, 0x44, &(0x7f0000000380)=""/80, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) socketpair$unix(0x1, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) socket(0x10, 0x3, 0x7e7b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r5, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) 870.115843ms ago: executing program 3 (id=3278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000007c0)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0xffff, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x58, 0x11, 0x1, @rand_addr=' \x01\x00', @empty, {[@dstopts={0x89}], {0x4e24, 0x4e21, 0x50, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fddc365a707a89c26ea9352beaef4004"}}}}}, 0x8e) r1 = socket(0xf, 0x4, 0x0) unshare(0x20400) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xd9, r2, 0x800000000000000}, 0x38) r3 = socket(0x2b, 0x80801, 0x1) shutdown(r3, 0x7ffffffe) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r5, @ANYBLOB, @ANYRES8=r5], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000150) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x2b, 0x80801, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x40, 0x1409, 0x2, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044040}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "4b15"}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x40010) write(r1, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) 607.379168ms ago: executing program 0 (id=3279): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0)=@int=0x5, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto(r3, 0x0, 0x0, 0x48000, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="20010000100021040000000000000000fe880000000000000000000000000001e00000020000000000000000f5ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x120}}, 0x0) msgsnd(0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB="03"], 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x46, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd601d200000442c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3300000e"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) listen(0xffffffffffffffff, 0x7f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6}, 0x20) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x4059080) 11.649106ms ago: executing program 0 (id=3280): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x100000002) ioctl$TIOCSETD(r2, 0x5412, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000d040000000000e2590000000000", @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800050002000000"], 0x3c}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) epoll_create1(0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) 0s ago: executing program 3 (id=3281): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x128) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000040)={0xc, 0x1, 0x0, 0x1, 'syz0\x00', 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000e42000/0x4000)=nil, 0x6000) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000000040)}], 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) read$FUSE(0xffffffffffffffff, &(0x7f000001b000)={0x2020}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x20010, r1, 0x6a85c000) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): ysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 836.859242][ T30] audit: type=1400 audit(2000000353.330:7099): avc: denied { read } for pid=16024 comm="syz.1.2842" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 837.937008][ T9] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 837.947961][ T9] usb 2-1: Warning! Unlikely big volume step count (=5423), linear volume or wrong cval->res? [ 838.010824][ T9] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = -13410/-7987/1 [ 839.136183][ T9] usb 2-1: USB disconnect, device number 49 [ 840.201585][T16110] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 841.663572][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 841.663592][ T30] audit: type=1400 audit(2000000359.410:7137): avc: denied { create } for pid=16122 comm="syz.1.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 841.698606][T16123] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 841.819782][T16120] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 841.841036][ T30] audit: type=1400 audit(2000000359.440:7138): avc: denied { shutdown } for pid=16122 comm="syz.1.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 842.802668][ T30] audit: type=1400 audit(2000000360.530:7139): avc: denied { read } for pid=16126 comm="syz.3.2875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 843.085565][T16130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2875'. [ 843.179004][ T30] audit: type=1400 audit(2000000360.920:7140): avc: denied { read write } for pid=16129 comm="syz.0.2877" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 843.259344][ T30] audit: type=1400 audit(2000000360.950:7141): avc: denied { create } for pid=16128 comm="syz.1.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 843.550337][ T30] audit: type=1400 audit(2000000360.960:7142): avc: denied { bpf } for pid=16128 comm="syz.1.2876" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 843.669201][T16140] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2879'. [ 843.691998][ T30] audit: type=1400 audit(2000000360.960:7143): avc: denied { read } for pid=16128 comm="syz.1.2876" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 843.695225][T16140] comedi comedi0: Minor 3 could not be opened [ 844.026485][ T30] audit: type=1400 audit(2000000360.960:7144): avc: denied { open } for pid=16128 comm="syz.1.2876" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 844.109285][T16135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2878'. [ 844.149414][ T30] audit: type=1400 audit(2000000360.970:7145): avc: denied { create } for pid=16128 comm="syz.1.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 844.229487][T16138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2879'. [ 844.238815][T16138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2879'. [ 844.283880][ T30] audit: type=1400 audit(2000000360.970:7146): avc: denied { prog_load } for pid=16128 comm="syz.1.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 845.489896][T16132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.615009][T16163] syzkaller0: entered promiscuous mode [ 845.635491][T16163] syzkaller0: entered allmulticast mode [ 845.880950][T16167] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2886'. [ 847.132594][T16176] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2889'. [ 847.631139][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 847.631154][ T30] audit: type=1400 audit(2000000365.370:7192): avc: denied { connect } for pid=16178 comm="syz.3.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 847.680166][T16186] netlink: 'syz.3.2891': attribute type 4 has an invalid length. [ 847.712845][ T30] audit: type=1400 audit(2000000365.380:7193): avc: denied { name_connect } for pid=16178 comm="syz.3.2891" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 847.765338][ T30] audit: type=1400 audit(2000000365.510:7194): avc: denied { map_read map_write } for pid=16185 comm="syz.5.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 847.845648][ T30] audit: type=1400 audit(2000000365.530:7195): avc: denied { prog_run } for pid=16187 comm="syz.0.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 847.995236][ T30] audit: type=1400 audit(2000000365.740:7196): avc: denied { read } for pid=16190 comm="syz.1.2895" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 848.152368][ T30] audit: type=1400 audit(2000000365.890:7197): avc: denied { mount } for pid=16192 comm="syz.5.2896" name="/" dev="ramfs" ino=52954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 848.386358][ T5729] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 848.541322][ T30] audit: type=1400 audit(2000000366.280:7198): avc: denied { create } for pid=16199 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 848.581948][ T5729] usb 2-1: Using ep0 maxpacket: 8 [ 848.614346][ T5729] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.723885][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 848.759928][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 848.779730][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 848.794059][ T5729] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 848.824314][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 848.836139][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 849.037836][T16202] bond3: Unable to set down delay as MII monitoring is disabled [ 849.139871][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 849.229045][T16202] bond3 (unregistering): Released all slaves [ 849.237369][T16207] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2899'. [ 849.439563][ T5729] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 849.707478][ T5729] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 849.962914][ T30] audit: type=1400 audit(2000000366.280:7199): avc: denied { read write } for pid=16199 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 849.992098][ T30] audit: type=1400 audit(2000000366.280:7200): avc: denied { open } for pid=16199 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 850.016085][ T30] audit: type=1400 audit(2000000366.310:7201): avc: denied { read } for pid=16197 comm="syz.5.2898" dev="nsfs" ino=4026534062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 850.092118][ T5729] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 850.101500][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.109666][ T5729] usb 2-1: Product: syz [ 850.113886][ T5729] usb 2-1: Manufacturer: syz [ 850.118489][ T5729] usb 2-1: SerialNumber: syz [ 850.125631][ T5729] usb 2-1: config 0 descriptor?? [ 850.132008][ T5729] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 850.222307][T16208] tipc: Enabling of bearer rejected, failed to enable media [ 850.942463][ T5614] Bluetooth: hci1: command tx timeout [ 851.285140][ T10] usb 2-1: USB disconnect, device number 50 [ 851.530352][T16233] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2906'. [ 851.578966][T16199] lo speed is unknown, defaulting to 1000 [ 851.611873][ T804] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 852.042020][ T804] usb 4-1: Using ep0 maxpacket: 8 [ 852.065054][ T804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.086009][ T804] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 852.396210][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 852.425778][ T804] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 852.438250][ T804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 852.479346][ T804] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 852.505075][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.535112][ T804] usb 4-1: Product: syz [ 852.549274][ T804] usb 4-1: Manufacturer: syz [ 852.554648][ T804] usb 4-1: SerialNumber: syz [ 852.592826][ T804] usb 4-1: config 0 descriptor?? [ 852.610810][ T804] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 853.099907][ T5614] Bluetooth: hci1: command tx timeout [ 853.108560][T16250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 853.540005][ T10] usb 4-1: USB disconnect, device number 59 [ 854.015304][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 854.015320][ T30] audit: type=1400 audit(2000000371.760:7211): avc: denied { read write } for pid=16269 comm="syz.0.2917" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 854.191812][ T30] audit: type=1400 audit(2000000371.760:7212): avc: denied { open } for pid=16269 comm="syz.0.2917" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 854.250466][T16274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2914'. [ 854.466711][T16275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.559666][ T30] audit: type=1400 audit(2000000371.800:7213): avc: denied { execmem } for pid=16269 comm="syz.0.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 854.638898][ T30] audit: type=1400 audit(2000000371.990:7214): avc: denied { write } for pid=16258 comm="syz.1.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 854.745764][T16199] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.760918][T16199] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.776377][T16199] bridge_slave_0: entered allmulticast mode [ 854.783014][ T30] audit: type=1400 audit(2000000372.010:7215): avc: denied { create } for pid=16276 comm="syz.5.2918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 854.924064][ T30] audit: type=1400 audit(2000000372.010:7216): avc: denied { read } for pid=16269 comm="syz.0.2917" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 855.071070][ T30] audit: type=1400 audit(2000000372.010:7217): avc: denied { open } for pid=16269 comm="syz.0.2917" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 855.190820][ T5614] Bluetooth: hci1: command tx timeout [ 855.333618][ T30] audit: type=1400 audit(2000000372.010:7218): avc: denied { ioctl } for pid=16276 comm="syz.5.2918" path="socket:[53127]" dev="sockfs" ino=53127 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 855.396582][T16199] bridge_slave_0: entered promiscuous mode [ 855.530611][ T30] audit: type=1400 audit(2000000372.020:7219): avc: denied { create } for pid=16276 comm="syz.5.2918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 855.632536][T16287] bond2: Unable to set down delay as MII monitoring is disabled [ 855.650395][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2920'. [ 855.669800][ T30] audit: type=1400 audit(2000000372.020:7220): avc: denied { write } for pid=16276 comm="syz.5.2918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 856.062624][T16287] bond2 (unregistering): Released all slaves [ 856.158092][T16199] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.170778][T16199] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.179074][T16199] bridge_slave_1: entered allmulticast mode [ 856.191182][T16199] bridge_slave_1: entered promiscuous mode [ 856.335661][T16298] netlink: 'syz.5.2921': attribute type 4 has an invalid length. [ 856.384144][T16199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.400658][T16199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.420336][T16302] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2923'. [ 856.444159][T16199] team0: Port device team_slave_0 added [ 856.461465][T16291] usb usb8: usbfs: process 16291 (syz.0.2920) did not claim interface 10 before use [ 856.462546][T16199] team0: Port device team_slave_1 added [ 856.561749][T16199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.569124][T16199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.595930][T16199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.838508][T16199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.894531][T16199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.023522][T16199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.120756][T16199] hsr_slave_0: entered promiscuous mode [ 857.128567][T16199] hsr_slave_1: entered promiscuous mode [ 857.148641][T16199] debugfs: 'hsr0' already exists in 'hsr' [ 857.159464][T16199] Cannot create hsr debugfs directory [ 857.263243][ T5614] Bluetooth: hci1: command tx timeout [ 857.300354][T16314] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2928'. [ 857.309479][ T5729] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 857.481740][ T5729] usb 4-1: Using ep0 maxpacket: 8 [ 857.496814][ T5729] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.524716][ T5729] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 857.556224][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 857.588438][ T5729] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 857.609494][ T5729] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 857.609781][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2930'. [ 857.646271][ T5729] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 857.686040][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.703280][ T5729] usb 4-1: Product: syz [ 857.715597][T16199] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.728801][ T5729] usb 4-1: Manufacturer: syz [ 857.744928][ T5729] usb 4-1: SerialNumber: syz [ 857.865022][T16322] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2931'. [ 858.048938][ T5729] usb 4-1: config 0 descriptor?? [ 858.071146][ T5729] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 858.180783][T16199] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.276206][T16329] syzkaller0: entered promiscuous mode [ 858.282343][T16329] syzkaller0: entered allmulticast mode [ 858.543651][ T5729] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 858.551353][ T10] usb 4-1: USB disconnect, device number 60 [ 858.641354][T16199] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.754869][ T5729] usb 1-1: unable to get BOS descriptor or descriptor too short [ 858.767302][T16199] bridge0: port 3(netdevsim0) entered disabled state [ 858.782153][ T5729] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.806488][ T5729] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 858.816318][T16199] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 858.825421][ T5729] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 858.836747][ T5729] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 858.836767][T16199] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 858.850292][ T5729] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 858.879836][T16199] bridge0: port 3(netdevsim0) entered disabled state [ 858.895687][ T5729] usb 1-1: config 1 interface 1 has no altsetting 0 [ 858.940557][ T5729] usb 1-1: string descriptor 0 read error: -22 [ 858.947193][ T5729] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 858.956731][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.960207][T16199] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.439513][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 859.439555][ T30] audit: type=1400 audit(2000000377.180:7279): avc: denied { read } for pid=16339 comm="syz.3.2935" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 859.441087][T16341] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2936'. [ 859.446212][ T30] audit: type=1400 audit(2000000377.190:7280): avc: denied { open } for pid=16339 comm="syz.3.2935" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 859.781022][T16343] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2935'. [ 859.853037][ T30] audit: type=1400 audit(2000000377.220:7281): avc: denied { ioctl } for pid=16339 comm="syz.3.2935" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 859.942204][ T30] audit: type=1400 audit(2000000377.230:7282): avc: denied { read write } for pid=16339 comm="syz.3.2935" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 859.968896][T16199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 859.986365][T16199] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 860.004071][T16199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 860.352143][T16199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 860.366386][T16199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 860.373970][ T30] audit: type=1400 audit(2000000377.230:7283): avc: denied { open } for pid=16339 comm="syz.3.2935" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 860.449124][ T30] audit: type=1400 audit(2000000377.520:7284): avc: denied { write } for pid=16339 comm="syz.3.2935" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 860.517584][T16199] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 860.537663][ T30] audit: type=1400 audit(2000000377.520:7285): avc: denied { create } for pid=16339 comm="syz.3.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 860.539345][T16199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 860.605149][ T30] audit: type=1400 audit(2000000377.520:7286): avc: denied { write } for pid=16339 comm="syz.3.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 860.662054][ T30] audit: type=1400 audit(2000000377.640:7287): avc: denied { open } for pid=16339 comm="syz.3.2935" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 860.775026][ T30] audit: type=1400 audit(2000000377.640:7288): avc: denied { ioctl } for pid=16339 comm="syz.3.2935" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 860.886409][T16199] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 861.319334][T16349] usb usb8: usbfs: process 16349 (syz.1.2937) did not claim interface 10 before use [ 861.448686][T16367] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2940'. [ 861.479590][T16367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=16367 comm=syz.5.2940 [ 861.517748][T16199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.533279][T16367] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 861.590608][T16199] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.614741][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.621952][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.676142][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.683355][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.369114][ T5706] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 862.388525][T16380] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2943'. [ 862.422216][ T5729] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 862.432397][ T5729] usb 1-1: Warning! Unlikely big volume step count (=5423), linear volume or wrong cval->res? [ 862.471954][ T5729] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = -13410/-7987/1 [ 862.524836][ T5706] usb 4-1: unable to get BOS descriptor or descriptor too short [ 862.562814][ T5706] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.599466][ T5729] usb 1-1: USB disconnect, device number 51 [ 862.605959][ T5706] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 862.626106][ T5706] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 862.687485][T16390] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 862.790254][ T5706] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 863.173153][ T5706] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 863.184564][ T5706] usb 4-1: config 1 interface 1 has no altsetting 0 [ 863.211376][ T5706] usb 4-1: string descriptor 0 read error: -22 [ 863.226352][ T5706] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 863.258638][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.308568][T16199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.858438][T16406] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2948'. [ 864.745084][T16199] veth0_vlan: entered promiscuous mode [ 864.779605][T16199] veth1_vlan: entered promiscuous mode [ 865.112508][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.150105][T16199] veth0_macvtap: entered promiscuous mode [ 865.167458][T16199] veth1_macvtap: entered promiscuous mode [ 865.266978][T16199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.285313][T16422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 865.296016][T16199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.323465][ T3366] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.358014][ T3366] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.373328][ T3366] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.465070][ T3366] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.519590][T10005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.556050][T10005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.874385][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.882914][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.900121][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 865.900132][ T30] audit: type=1400 audit(2000000383.640:7301): avc: denied { mounton } for pid=16199 comm="syz-executor" path="/root/syzkaller.bcZiis/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 865.938823][ T30] audit: type=1400 audit(2000000383.680:7302): avc: denied { mount } for pid=16199 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 866.171605][ T30] audit: type=1400 audit(2000000383.680:7303): avc: denied { mounton } for pid=16199 comm="syz-executor" path="/root/syzkaller.bcZiis/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 866.376025][T16431] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2954'. [ 866.422623][T15630] Bluetooth: (null): Invalid header checksum [ 866.532616][T15630] Bluetooth: (null): Invalid header checksum [ 866.644878][T15630] Bluetooth: (null): Invalid header checksum [ 866.765862][ T12] Bluetooth: (null): Invalid header checksum [ 866.797038][T16435] bond1: Unable to set down delay as MII monitoring is disabled [ 866.825091][T16435] bond1 (unregistering): Released all slaves [ 866.886264][ T12] Bluetooth: (null): Invalid header checksum [ 866.977977][ T12] Bluetooth: (null): Invalid header checksum [ 866.993366][ T5706] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 867.091316][ T3366] Bluetooth: (null): Invalid header checksum [ 867.193476][ T12] Bluetooth: (null): Invalid header checksum [ 867.348293][ T6867] Bluetooth: (null): Invalid header checksum [ 867.691023][ T30] audit: type=1400 audit(2000000383.680:7304): avc: denied { mount } for pid=16199 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 867.713195][ T30] audit: type=1400 audit(2000000383.680:7305): avc: denied { mounton } for pid=16199 comm="syz-executor" path="/root/syzkaller.bcZiis/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 867.742982][ T30] audit: type=1400 audit(2000000383.680:7306): avc: denied { mounton } for pid=16199 comm="syz-executor" path="/root/syzkaller.bcZiis/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=55911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 867.757854][T16445] netlink: 'syz.3.2957': attribute type 12 has an invalid length. [ 867.786937][ T30] audit: type=1400 audit(2000000383.680:7307): avc: denied { unmount } for pid=16199 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 867.806896][ T30] audit: type=1400 audit(2000000383.710:7308): avc: denied { mounton } for pid=16199 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 867.903762][ T5706] usb 4-1: USB disconnect, device number 61 [ 868.005730][ T30] audit: type=1400 audit(2000000383.710:7309): avc: denied { mount } for pid=16199 comm="syz-executor" name="/" dev="gadgetfs" ino=6804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 868.032574][ T30] audit: type=1400 audit(2000000383.710:7310): avc: denied { mount } for pid=16199 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 868.060066][T16452] usb usb8: usbfs: process 16452 (syz.0.2955) did not claim interface 10 before use [ 868.127870][T16454] tipc: Enabling of bearer rejected, failed to enable media [ 868.669335][T16462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=16462 comm=syz.4.2962 [ 868.708008][T16462] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 868.972102][T16467] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2964'. [ 869.275230][T16468] syzkaller1: entered promiscuous mode [ 869.283787][T16468] syzkaller1: entered allmulticast mode [ 869.491102][T16475] netlink: 'syz.5.2969': attribute type 12 has an invalid length. [ 869.953547][T16484] bridge0: port 3(netdevsim0) entered blocking state [ 869.960638][T16484] bridge0: port 3(netdevsim0) entered disabled state [ 869.968183][T16484] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 869.984381][T16484] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 869.993397][T16484] bridge0: port 3(netdevsim0) entered blocking state [ 870.000137][T16484] bridge0: port 3(netdevsim0) entered forwarding state [ 870.794497][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 870.803956][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 870.814720][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 870.830098][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 870.839345][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 870.975813][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 870.975831][ T30] audit: type=1400 audit(2000000388.720:7320): avc: denied { read write } for pid=5607 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 871.091694][T16504] tipc: Enabling of bearer rejected, failed to enable media [ 871.105339][ T30] audit: type=1400 audit(2000000388.730:7321): avc: denied { create } for pid=16491 comm="syz.5.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 871.137398][T16504] syzkaller0: entered promiscuous mode [ 871.161724][T16504] syzkaller0: entered allmulticast mode [ 871.167701][ T30] audit: type=1400 audit(2000000388.730:7322): avc: denied { write } for pid=16491 comm="syz.5.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 871.215923][ T30] audit: type=1400 audit(2000000388.750:7323): avc: denied { open } for pid=5607 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 871.290408][ T30] audit: type=1400 audit(2000000388.750:7324): avc: denied { ioctl } for pid=5607 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 871.384986][ T30] audit: type=1400 audit(2000000388.760:7325): avc: denied { create } for pid=16500 comm="syz.4.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 871.458916][ T30] audit: type=1400 audit(2000000388.760:7326): avc: denied { connect } for pid=16500 comm="syz.4.2977" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 871.535922][ T30] audit: type=1400 audit(2000000388.760:7327): avc: denied { create } for pid=16500 comm="syz.4.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 871.562014][ T30] audit: type=1400 audit(2000000388.780:7328): avc: denied { write } for pid=16500 comm="syz.4.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 871.583139][ T30] audit: type=1400 audit(2000000388.780:7329): avc: denied { nlmsg_write } for pid=16500 comm="syz.4.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 871.612497][T16488] lo speed is unknown, defaulting to 1000 [ 872.295985][T16526] usb usb8: usbfs: process 16526 (syz.4.2980) did not claim interface 10 before use [ 872.334122][T16529] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 872.344874][T16525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 872.945246][ T5614] Bluetooth: hci4: command tx timeout [ 873.303236][ T24] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 873.390142][T16488] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.407769][T16488] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.434884][T16488] bridge_slave_0: entered allmulticast mode [ 873.461388][T16488] bridge_slave_0: entered promiscuous mode [ 873.483479][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 873.501278][T16488] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.509433][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.522590][T16488] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.538101][ T24] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 873.562015][T16488] bridge_slave_1: entered allmulticast mode [ 873.573276][ T24] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 873.601036][ T24] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 873.601775][T16488] bridge_slave_1: entered promiscuous mode [ 873.649105][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 873.681314][ T24] usb 6-1: config 1 interface 1 has no altsetting 0 [ 873.699729][ T24] usb 6-1: string descriptor 0 read error: -22 [ 873.712099][ T24] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 873.733720][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.852881][T16488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.908849][T16488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.998309][T16488] team0: Port device team_slave_0 added [ 874.014076][T16488] team0: Port device team_slave_1 added [ 874.082473][T16563] tipc: Enabling of bearer rejected, failed to enable media [ 874.124708][T16488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.134157][T16488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.163706][T16488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.206226][T16488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.225216][T16488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.305011][T16488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.349119][T16563] syzkaller0: entered promiscuous mode [ 874.371790][T16563] syzkaller0: entered allmulticast mode [ 874.431772][ T5721] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 874.811719][ T5721] usb 5-1: Using ep0 maxpacket: 8 [ 874.837061][ T5721] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.889970][ T5721] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 874.917287][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 874.928474][ T5721] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 874.939279][ T5721] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.989794][ T5721] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 875.001703][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.005899][T16488] hsr_slave_0: entered promiscuous mode [ 875.015436][ T5721] usb 5-1: Product: syz [ 875.074557][T16488] hsr_slave_1: entered promiscuous mode [ 875.080455][ T5614] Bluetooth: hci4: command tx timeout [ 875.080778][T16488] debugfs: 'hsr0' already exists in 'hsr' [ 875.092269][T16488] Cannot create hsr debugfs directory [ 875.110718][ T5721] usb 5-1: Manufacturer: syz [ 875.121744][ T5721] usb 5-1: SerialNumber: syz [ 875.129281][ T5721] usb 5-1: config 0 descriptor?? [ 875.154182][ T5721] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 875.582363][ T5721] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 875.805181][ T9] usb 5-1: USB disconnect, device number 52 [ 875.846842][T16488] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.902302][ T5721] usb 1-1: Using ep0 maxpacket: 8 [ 875.920851][ T5721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.955221][ T5721] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 876.008316][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 876.034969][ T24] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 876.053276][ T5721] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 876.086047][ T5721] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 876.131493][ T5721] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 876.143295][T16488] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.158642][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.186938][ T5721] usb 1-1: Product: syz [ 876.192660][ T5721] usb 1-1: Manufacturer: syz [ 876.214403][ T5721] usb 1-1: SerialNumber: syz [ 876.231336][ T24] usb 6-1: USB disconnect, device number 57 [ 876.252031][ T5721] usb 1-1: config 0 descriptor?? [ 876.366146][ T5721] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 876.510154][T16488] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.539207][T16589] usb usb8: usbfs: process 16589 (syz.3.2998) did not claim interface 10 before use [ 876.697737][T16590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 876.907467][T16488] bridge0: port 1(netdevsim0) entered disabled state [ 877.042771][T16488] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 877.072538][T16488] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 877.102988][ T5614] Bluetooth: hci4: command tx timeout [ 877.112215][ T24] usb 1-1: USB disconnect, device number 52 [ 877.149743][T16488] bridge0: port 1(netdevsim0) entered disabled state [ 877.261153][T16488] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.460714][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 877.460731][ T30] audit: type=1400 audit(2000000395.200:7401): avc: denied { ioctl } for pid=16602 comm="syz.5.3002" path="socket:[55229]" dev="sockfs" ino=55229 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 877.987767][T16609] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3005'. [ 878.044484][T16609] comedi comedi0: Minor 3 could not be opened [ 878.084610][T16609] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3005'. [ 878.093961][T16609] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3005'. [ 878.261298][ T30] audit: type=1400 audit(2000000396.000:7402): avc: denied { ioctl } for pid=16608 comm="syz.3.3004" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=928 ioctlcmd=0x6f53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 878.397472][T16488] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 878.418894][ T30] audit: type=1400 audit(2000000396.160:7403): avc: denied { write } for pid=16613 comm="syz.3.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 878.462363][T16488] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 878.485911][T16488] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 878.611788][ T30] audit: type=1400 audit(2000000396.330:7404): avc: denied { write } for pid=16613 comm="syz.3.3007" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 878.976925][T16488] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 879.002901][T16488] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 879.011409][T16488] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 879.022651][T16488] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 879.038713][T16488] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 879.182981][ T5614] Bluetooth: hci4: command tx timeout [ 879.480866][T16632] netlink: 'syz.5.3008': attribute type 4 has an invalid length. [ 879.497302][T16488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.579973][T16488] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.610058][T15630] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.617198][T15630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.638350][T15630] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.645560][T15630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.886096][T16646] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3013'. [ 879.921959][ T5721] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 880.117212][ T30] audit: type=1400 audit(2000000397.770:7405): avc: denied { write } for pid=16642 comm="syz.0.3013" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 880.261755][ T5721] usb 5-1: Using ep0 maxpacket: 8 [ 880.273750][ T5721] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.291387][ T5721] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 880.322013][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 880.343774][ T5721] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 880.354905][ T5721] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 880.379976][ T5721] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 880.450344][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.480562][ T5721] usb 5-1: Product: syz [ 880.495989][ T5721] usb 5-1: Manufacturer: syz [ 880.513554][ T5721] usb 5-1: SerialNumber: syz [ 880.522707][T16658] netlink: 'syz.0.3017': attribute type 12 has an invalid length. [ 880.538525][ T5721] usb 5-1: config 0 descriptor?? [ 880.560339][ T5721] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 880.921928][ T30] audit: type=1400 audit(2000000398.650:7406): avc: denied { ioctl } for pid=16667 comm="syz.5.3020" path="socket:[57537]" dev="sockfs" ino=57537 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 880.927980][T16488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.183695][ T10] usb 5-1: USB disconnect, device number 53 [ 881.198738][ T30] audit: type=1400 audit(2000000398.940:7407): avc: denied { create } for pid=16667 comm="syz.5.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 881.230676][ T30] audit: type=1400 audit(2000000398.940:7408): avc: denied { write } for pid=16667 comm="syz.5.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 881.251285][ T30] audit: type=1326 audit(2000000398.970:7409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.5.3020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ee259cdd9 code=0x5fff0000 [ 881.349301][T16672] usb usb8: usbfs: process 16672 (syz.3.3014) did not claim interface 10 before use [ 881.414445][T16488] veth0_vlan: entered promiscuous mode [ 881.431291][T16488] veth1_vlan: entered promiscuous mode [ 881.538904][T16488] veth0_macvtap: entered promiscuous mode [ 881.569656][T16488] veth1_macvtap: entered promiscuous mode [ 881.624666][T16488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.645907][T16488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.675776][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.687961][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.706946][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.726342][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.989889][T16681] netlink: 'syz.4.3025': attribute type 12 has an invalid length. [ 882.012010][ T6867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.030067][ T6867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.102819][ T6867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.110691][ T6867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.194875][ T30] audit: type=1400 audit(2000000399.930:7410): avc: denied { mounton } for pid=16488 comm="syz-executor" path="/root/syzkaller.zU6LEv/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 882.233077][ T5714] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 882.551827][ T5714] usb 6-1: Using ep0 maxpacket: 8 [ 882.664831][ T5714] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.675216][ T5714] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 882.686935][T16696] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 882.701116][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 882.716813][ T5714] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 882.727967][ T5714] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 882.747316][ T5714] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 882.756695][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.765062][ T5714] usb 6-1: Product: syz [ 882.769348][ T5714] usb 6-1: Manufacturer: syz [ 882.774745][ T5714] usb 6-1: SerialNumber: syz [ 882.794964][ T5714] usb 6-1: config 0 descriptor?? [ 882.807496][ T5714] kvaser_usb 6-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 882.907430][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 882.907445][ T30] audit: type=1400 audit(2000000400.650:7429): avc: denied { unmount } for pid=16199 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 882.950725][ T30] audit: type=1400 audit(2000000400.690:7430): avc: denied { getopt } for pid=16700 comm="syz.1.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 883.025280][T16708] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3034'. [ 883.117225][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3037'. [ 883.330291][T16717] usb usb8: usbfs: process 16717 (syz.1.3037) did not claim interface 10 before use [ 883.798419][ T30] audit: type=1400 audit(2000000401.540:7431): avc: denied { create } for pid=16719 comm="syz.0.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 883.800038][ T5714] usb 6-1: USB disconnect, device number 58 [ 883.855141][ T30] audit: type=1400 audit(2000000401.590:7432): avc: denied { write } for pid=16719 comm="syz.0.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 883.877612][T16720] syzkaller1: entered promiscuous mode [ 883.885537][T16720] syzkaller1: entered allmulticast mode [ 883.893972][ T30] audit: type=1400 audit(2000000401.620:7433): avc: denied { setopt } for pid=16719 comm="syz.0.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 884.433945][ T30] audit: type=1400 audit(2000000402.180:7434): avc: denied { write } for pid=16727 comm="syz.0.3041" name="video0" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 884.498125][ T90] Bluetooth: (null): Invalid header checksum [ 884.596083][ T90] Bluetooth: (null): Invalid header checksum [ 884.704549][ T90] Bluetooth: (null): Invalid header checksum [ 884.892196][ T12] Bluetooth: (null): Invalid header checksum [ 884.988166][ T12] Bluetooth: (null): Invalid header checksum [ 885.054217][T16730] bond1: Unable to set down delay as MII monitoring is disabled [ 885.083728][T16730] bond1 (unregistering): Released all slaves [ 885.104230][ T12] Bluetooth: (null): Invalid header checksum [ 885.226117][T12076] Bluetooth: (null): Invalid header checksum [ 886.941078][T16738] syzkaller0: entered promiscuous mode [ 886.954888][T16758] binder: 16757:16758 ioctl c0306201 200000000640 returned -22 [ 886.962520][ T30] audit: type=1400 audit(2000000404.690:7435): avc: denied { read } for pid=16757 comm="syz.1.3047" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 887.008800][T16758] ubi: mtd0 is already attached to ubi16 [ 887.048521][ T30] audit: type=1400 audit(2000000404.690:7436): avc: denied { open } for pid=16757 comm="syz.1.3047" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 887.116377][ T30] audit: type=1400 audit(2000000404.700:7437): avc: denied { ioctl } for pid=16757 comm="syz.1.3047" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 887.171813][ T30] audit: type=1400 audit(2000000404.700:7438): avc: denied { set_context_mgr } for pid=16757 comm="syz.1.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 887.959047][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3048'. [ 888.356753][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 888.368993][ T30] audit: type=1326 audit(2000000406.070:7442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.5.3053" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ee259cdd9 code=0x0 [ 888.527987][T16775] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3051'. [ 888.571499][T16775] comedi comedi0: Minor 3 could not be opened [ 888.597566][T16775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3051'. [ 888.606712][T16775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3051'. [ 889.406033][T16781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3050'. [ 889.543736][T15630] Bluetooth: (null): Invalid header checksum [ 889.635681][T16786] usb usb8: usbfs: process 16786 (syz.0.3050) did not claim interface 10 before use [ 890.022812][ T90] Bluetooth: (null): Invalid header checksum [ 890.046043][ T90] Bluetooth: (null): Invalid header checksum [ 890.062139][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 890.091003][ T90] Bluetooth: (null): Invalid header checksum [ 890.145160][ T90] Bluetooth: (null): Invalid header checksum [ 890.197708][ T90] Bluetooth: (null): Invalid header checksum [ 890.305793][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 890.356225][ T90] Bluetooth: (null): Invalid header checksum [ 890.386538][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.445962][ T90] Bluetooth: (null): Invalid header checksum [ 890.508294][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 890.530128][ T90] Bluetooth: (null): Invalid header checksum [ 890.622426][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 890.691751][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 890.716834][ T30] audit: type=1400 audit(2000000408.460:7443): avc: denied { allowed } for pid=16790 comm="syz.0.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 890.737971][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 890.853462][ T90] Bluetooth: (null): Invalid header checksum [ 890.973811][T15630] Bluetooth: (null): Invalid header checksum [ 891.082533][ T1337] Bluetooth: (null): Invalid header checksum [ 891.193556][ T1337] Bluetooth: (null): Invalid header checksum [ 891.302683][T10005] Bluetooth: (null): Invalid header checksum [ 891.424288][ T30] audit: type=1400 audit(2000000408.460:7444): avc: denied { create } for pid=16790 comm="syz.0.3058" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 891.593564][ T10] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 891.603391][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.611495][ T10] usb 4-1: Product: syz [ 891.615710][ T10] usb 4-1: Manufacturer: syz [ 891.620330][ T10] usb 4-1: SerialNumber: syz [ 891.634340][ T10] usb 4-1: config 0 descriptor?? [ 891.658960][ T10] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 892.499583][ T24] usb 4-1: USB disconnect, device number 62 [ 893.138705][ T30] audit: type=1326 audit(2000000410.880:7445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16798 comm="syz.3.3059" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb8619cdd9 code=0x5fff0000 [ 893.654083][T16785] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 893.655566][T16792] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 894.067173][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3063'. [ 894.738821][ T30] audit: type=1400 audit(2000000412.230:7446): avc: denied { read } for pid=16813 comm="syz.3.3065" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 894.762269][ T30] audit: type=1400 audit(2000000412.230:7447): avc: denied { open } for pid=16813 comm="syz.3.3065" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 894.891613][ T30] audit: type=1400 audit(2000000412.240:7448): avc: denied { ioctl } for pid=16813 comm="syz.3.3065" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 895.160362][ T30] audit: type=1400 audit(2000000412.430:7449): avc: denied { read write } for pid=16813 comm="syz.3.3065" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 895.241943][ T30] audit: type=1400 audit(2000000412.430:7450): avc: denied { open } for pid=16813 comm="syz.3.3065" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 895.382308][ T30] audit: type=1326 audit(2000000413.120:7451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16826 comm="syz.1.3067" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d8a79cdd9 code=0x0 [ 895.485124][T16828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 895.826249][T16831] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3069'. [ 895.866558][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3068'. [ 896.110923][T16835] usb usb8: usbfs: process 16835 (syz.4.3068) did not claim interface 10 before use [ 896.535006][T16837] tipc: Enabling of bearer rejected, failed to enable media [ 896.545036][T16837] syzkaller0: entered promiscuous mode [ 896.557299][T16837] syzkaller0: entered allmulticast mode [ 896.628945][T16843] netlink: 'syz.5.3072': attribute type 12 has an invalid length. [ 896.628963][T16842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3073'. [ 896.886201][T15630] Bluetooth: (null): Invalid header checksum [ 896.983235][ T36] Bluetooth: (null): Invalid header checksum [ 897.092681][ T1337] Bluetooth: (null): Invalid header checksum [ 897.206020][ T48] Bluetooth: (null): Invalid header checksum [ 897.313125][ T90] Bluetooth: (null): Invalid header checksum [ 897.375610][T16853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3076'. [ 897.432987][ T90] Bluetooth: (null): Invalid header checksum [ 897.580243][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3077'. [ 897.638178][T16847] syzkaller0: entered promiscuous mode [ 897.671266][T16848] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 898.284419][T16874] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3080'. [ 900.365951][T16872] bridge0: port 3(netdevsim0) entered blocking state [ 900.372831][T16872] bridge0: port 3(netdevsim0) entered disabled state [ 900.379685][T16872] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 900.388533][T16872] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 900.396245][T16872] bridge0: port 3(netdevsim0) entered blocking state [ 900.402974][T16872] bridge0: port 3(netdevsim0) entered forwarding state [ 900.858694][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3087'. [ 900.878650][ T30] audit: type=1400 audit(2000000418.620:7452): avc: denied { read write } for pid=16892 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 900.983983][ T30] audit: type=1400 audit(2000000418.640:7453): avc: denied { open } for pid=16892 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 901.061190][ T30] audit: type=1400 audit(2000000418.800:7454): avc: denied { read } for pid=16892 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 901.136966][T16899] usb usb8: usbfs: process 16899 (syz.4.3087) did not claim interface 10 before use [ 901.184201][T16887] netlink: 'syz.0.3085': attribute type 12 has an invalid length. [ 901.449423][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 901.469684][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 901.482209][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 901.497698][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 901.507335][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 901.513858][ T30] audit: type=1400 audit(2000000418.870:7456): avc: denied { write } for pid=16888 comm="syz.4.3087" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 901.658154][ T30] audit: type=1400 audit(2000000418.870:7457): avc: denied { create } for pid=16888 comm="syz.4.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 901.688464][ T30] audit: type=1400 audit(2000000418.880:7458): avc: denied { connect } for pid=16888 comm="syz.4.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 901.709258][ T30] audit: type=1400 audit(2000000418.880:7459): avc: denied { write } for pid=16888 comm="syz.4.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 901.732268][ T30] audit: type=1400 audit(2000000419.190:7460): avc: denied { write } for pid=16892 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 901.776279][ T30] audit: type=1400 audit(2000000418.800:7455): avc: denied { ioctl } for pid=16892 comm="syz-executor" path="socket:[58044]" dev="sockfs" ino=58044 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 901.881903][ T30] audit: type=1400 audit(2000000419.330:7461): avc: denied { sys_module } for pid=16889 comm="syz.1.3086" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 902.351077][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3093'. [ 902.490772][T16892] lo speed is unknown, defaulting to 1000 [ 902.539963][T16930] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3095'. [ 903.187117][T16939] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 903.254265][T16942] netlink: 'syz.1.3099': attribute type 12 has an invalid length. [ 903.582582][ T5614] Bluetooth: hci2: command tx timeout [ 903.605589][T16952] syzkaller0: entered promiscuous mode [ 903.613553][T16952] syzkaller0: entered allmulticast mode [ 903.829112][T16960] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3104'. [ 904.198537][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3106'. [ 904.213964][T16892] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.231312][T16892] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.253349][T16892] bridge_slave_0: entered allmulticast mode [ 904.280870][T16892] bridge_slave_0: entered promiscuous mode [ 904.311963][ T5714] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 904.464606][T16892] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.472504][T16892] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.481173][T16892] bridge_slave_1: entered allmulticast mode [ 904.596559][T16892] bridge_slave_1: entered promiscuous mode [ 904.619542][T16970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3107'. [ 904.671719][ T5714] usb 1-1: Using ep0 maxpacket: 8 [ 904.685847][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.703800][T16892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.716552][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 904.731959][T16892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.741839][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 904.752619][ T5714] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 904.795888][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 904.844042][ T5714] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 904.854790][T16892] team0: Port device team_slave_0 added [ 904.861922][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.872615][T16892] team0: Port device team_slave_1 added [ 904.882119][ T5714] usb 1-1: Product: syz [ 904.896054][ T5714] usb 1-1: Manufacturer: syz [ 904.911571][ T5714] usb 1-1: SerialNumber: syz [ 904.937571][ T5714] usb 1-1: config 0 descriptor?? [ 904.949150][T16892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.968194][ T5714] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 904.980779][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.035151][T16892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.050514][T16892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.060744][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.090020][T16892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.146773][T16892] hsr_slave_0: entered promiscuous mode [ 905.157482][T16892] hsr_slave_1: entered promiscuous mode [ 905.171884][T16983] binder: 16982:16983 ioctl c0306201 200000000640 returned -22 [ 905.179965][T16892] debugfs: 'hsr0' already exists in 'hsr' [ 905.187261][T16892] Cannot create hsr debugfs directory [ 905.211794][ T804] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 905.230620][T16983] ubi: mtd0 is already attached to ubi16 [ 905.598625][ T804] usb 6-1: unable to get BOS descriptor or descriptor too short [ 905.614074][ T804] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.624528][ T804] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 905.634117][ T804] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 905.645639][ T804] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 905.662186][ T5614] Bluetooth: hci2: command tx timeout [ 905.692666][ T804] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 905.734285][ T24] usb 1-1: USB disconnect, device number 53 [ 905.764201][ T804] usb 6-1: config 1 interface 1 has no altsetting 0 [ 905.781993][ T804] usb 6-1: string descriptor 0 read error: -22 [ 905.789848][ T804] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 905.803705][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.882411][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 905.882423][ T30] audit: type=1400 audit(2000000423.630:7552): avc: denied { create } for pid=16992 comm="syz.4.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 905.961563][T16995] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3111'. [ 906.425371][ T30] audit: type=1400 audit(2000000424.160:7553): avc: denied { bind } for pid=16992 comm="syz.4.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 906.476703][ T30] audit: type=1400 audit(2000000424.190:7554): avc: denied { setopt } for pid=16992 comm="syz.4.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 906.595000][ T30] audit: type=1326 audit(2000000424.190:7555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16992 comm="syz.4.3112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f259dd9cdd9 code=0x5fff0000 [ 906.641118][T16892] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.678242][ T30] audit: type=1400 audit(2000000424.310:7556): avc: denied { create } for pid=16997 comm="syz.1.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 906.726618][ T30] audit: type=1400 audit(2000000424.310:7557): avc: denied { read } for pid=16997 comm="syz.1.3113" name="frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 906.750988][ T30] audit: type=1400 audit(2000000424.310:7558): avc: denied { open } for pid=16997 comm="syz.1.3113" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 906.809945][ T30] audit: type=1400 audit(2000000424.310:7559): avc: denied { ioctl } for pid=16997 comm="syz.1.3113" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=928 ioctlcmd=0x6f53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 906.852791][ T30] audit: type=1400 audit(2000000424.310:7560): avc: denied { write } for pid=16997 comm="syz.1.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 906.898362][ T30] audit: type=1400 audit(2000000424.320:7561): avc: denied { write } for pid=16997 comm="syz.1.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 907.061923][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 907.303239][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 907.396400][T16892] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.436601][T17000] netlink: 'syz.4.3114': attribute type 4 has an invalid length. [ 907.463495][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 907.472873][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.484161][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 907.496541][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 907.496733][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.517181][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 907.532140][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 907.556904][ T9] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 907.558410][T16892] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.578677][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 907.588780][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 907.601682][ T9] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 907.623248][ T24] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 907.632819][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.641858][ T24] usb 2-1: Product: syz [ 907.651483][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 907.651491][ T24] usb 2-1: Manufacturer: syz [ 907.651514][ T9] usb 1-1: config 1 interface 1 has no altsetting 0 [ 907.680164][ T24] usb 2-1: SerialNumber: syz [ 907.691383][ T24] usb 2-1: config 0 descriptor?? [ 907.701953][ T24] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 907.721761][ T9] usb 1-1: string descriptor 0 read error: -22 [ 907.728597][ T9] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 907.748423][ T5614] Bluetooth: hci2: command tx timeout [ 907.766683][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.800623][T16892] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.756400][ T804] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 908.834882][ T5721] usb 2-1: USB disconnect, device number 51 [ 908.926216][ T804] usb 6-1: USB disconnect, device number 59 [ 909.037862][T16892] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 909.085347][T16892] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 909.119323][T16892] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 909.163026][T16892] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 909.286148][T16892] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 909.335670][T16892] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 909.429676][T16892] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 909.466919][T16892] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 909.832341][ T5614] Bluetooth: hci2: command tx timeout [ 910.021502][T17037] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3120'. [ 910.249651][T17025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3119'. [ 910.420953][T16892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.453230][T17039] binder: 17038:17039 ioctl c0306201 200000000640 returned -22 [ 910.463959][T16892] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.501390][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.508601][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.548821][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.555961][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.581001][T17039] ubi: mtd0 is already attached to ubi16 [ 911.362066][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 911.362083][ T30] audit: type=1400 audit(2000000429.110:7615): avc: denied { create } for pid=17052 comm="syz.1.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 911.457966][ T30] audit: type=1400 audit(2000000429.130:7616): avc: denied { bind } for pid=17052 comm="syz.1.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 911.540342][ T9] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 911.573026][ T30] audit: type=1400 audit(2000000429.130:7617): avc: denied { setopt } for pid=17052 comm="syz.1.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 911.596283][ T30] audit: type=1400 audit(2000000429.130:7618): avc: denied { accept } for pid=17052 comm="syz.1.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 911.623080][ T30] audit: type=1400 audit(2000000429.130:7619): avc: denied { write } for pid=17052 comm="syz.1.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 911.642919][ T30] audit: type=1400 audit(2000000429.130:7620): avc: denied { read } for pid=17052 comm="syz.1.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 911.695530][ T30] audit: type=1400 audit(2000000429.260:7621): avc: denied { read } for pid=17056 comm="syz.5.3127" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 911.727220][ T30] audit: type=1400 audit(2000000429.260:7622): avc: denied { open } for pid=17056 comm="syz.5.3127" path="/dev/input/event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 911.742055][ T9] usb 1-1: USB disconnect, device number 54 [ 911.862370][T17059] netlink: 'syz.1.3126': attribute type 4 has an invalid length. [ 912.139613][ T30] audit: type=1400 audit(2000000429.280:7623): avc: denied { write } for pid=17056 comm="syz.5.3127" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 912.209344][ T30] audit: type=1400 audit(2000000429.360:7624): avc: denied { create } for pid=17058 comm="syz.1.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 912.390547][T16892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.458120][T17063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3128'. [ 912.501742][ T804] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 912.516325][T16892] veth0_vlan: entered promiscuous mode [ 912.552295][T16892] veth1_vlan: entered promiscuous mode [ 912.692075][ T804] usb 6-1: Using ep0 maxpacket: 8 [ 912.731328][ T804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.784626][ T804] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 912.793743][T16892] veth0_macvtap: entered promiscuous mode [ 912.800874][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 912.810030][T16892] veth1_macvtap: entered promiscuous mode [ 912.856136][T17078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3129'. [ 912.979456][ T804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 912.992030][ T804] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 913.008698][ T804] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 913.018544][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.030159][ T804] usb 6-1: Product: syz [ 913.036388][ T804] usb 6-1: Manufacturer: syz [ 913.055246][ T804] usb 6-1: SerialNumber: syz [ 913.065954][T16892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 913.092376][ T804] usb 6-1: config 0 descriptor?? [ 913.114528][ T804] kvaser_usb 6-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 913.114906][T16892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.171100][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.201945][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.228935][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.262854][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.690988][ T5714] usb 6-1: USB disconnect, device number 60 [ 913.806019][ T6263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.821873][ T6263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.935224][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.965284][T17095] netlink: 'syz.1.3134': attribute type 4 has an invalid length. [ 913.976517][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.793222][T17102] syzkaller1: entered promiscuous mode [ 914.811746][T17102] syzkaller1: entered allmulticast mode [ 915.058098][T15630] Bluetooth: (null): Invalid header checksum [ 915.107273][T17106] bond1: Unable to set down delay as MII monitoring is disabled [ 915.127752][T17106] bond1 (unregistering): Released all slaves [ 915.155030][T15630] Bluetooth: (null): Invalid header checksum [ 915.342313][T15630] Bluetooth: (null): Invalid header checksum [ 915.539350][T17118] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3141'. [ 916.398420][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 916.398436][ T30] audit: type=1400 audit(2000000434.140:7740): avc: denied { ioctl } for pid=17127 comm="syz.3.3146" path="socket:[58796]" dev="sockfs" ino=58796 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 916.465054][ T30] audit: type=1400 audit(2000000434.190:7741): avc: denied { getopt } for pid=17127 comm="syz.3.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 916.569235][T17139] netlink: 'syz.5.3144': attribute type 4 has an invalid length. [ 916.629576][ T30] audit: type=1400 audit(2000000434.370:7742): avc: denied { setopt } for pid=17131 comm="syz.1.3145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 916.650231][ T9040] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 916.659709][ T30] audit: type=1400 audit(2000000434.410:7743): avc: denied { write } for pid=17131 comm="syz.1.3145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 916.866506][ T9040] usb 1-1: unable to get BOS descriptor or descriptor too short [ 916.875688][ T9040] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.910662][ T9040] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 916.919831][ T9040] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 916.937470][ T9040] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 916.952192][ T9040] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 916.969569][ T9040] usb 1-1: config 1 interface 1 has no altsetting 0 [ 916.979520][ T9040] usb 1-1: string descriptor 0 read error: -22 [ 916.986816][ T9040] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 916.996158][ T9040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.256167][ T30] audit: type=1400 audit(2000000435.000:7744): avc: denied { read write } for pid=17154 comm="syz.1.3150" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 917.321799][ T30] audit: type=1400 audit(2000000435.000:7745): avc: denied { open } for pid=17154 comm="syz.1.3150" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 917.530071][T17162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3152'. [ 917.701558][ T30] audit: type=1400 audit(2000000435.110:7746): avc: denied { read } for pid=17156 comm="syz.5.3153" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 917.760117][ T30] audit: type=1400 audit(2000000435.110:7747): avc: denied { open } for pid=17156 comm="syz.5.3153" path="/dev/input/event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 917.821102][ T30] audit: type=1400 audit(2000000435.440:7748): avc: denied { ioctl } for pid=17160 comm="syz.4.3151" path="/dev/dvb/adapter0/dvr0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 917.860001][ T30] audit: type=1400 audit(2000000435.490:7749): avc: denied { allowed } for pid=17160 comm="syz.4.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 917.948435][T17165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 917.951802][T15909] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 918.135242][T15909] usb 6-1: Using ep0 maxpacket: 8 [ 918.186716][T15909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.213254][T15909] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 918.257917][T15909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 918.298246][T15909] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 918.357543][T15909] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 918.413727][T15909] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 918.437317][T15909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.471585][T15909] usb 6-1: Product: syz [ 918.480435][T15909] usb 6-1: Manufacturer: syz [ 918.502425][T15909] usb 6-1: SerialNumber: syz [ 918.619814][T15909] usb 6-1: config 0 descriptor?? [ 918.631949][T15630] Bluetooth: (null): Invalid header checksum [ 918.686996][T15909] kvaser_usb 6-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 918.712707][T17175] bond1: Unable to set down delay as MII monitoring is disabled [ 918.741989][ T36] Bluetooth: (null): Invalid header checksum [ 918.753981][T17175] bond1 (unregistering): Released all slaves [ 918.852485][T15630] Bluetooth: (null): Invalid header checksum [ 919.060741][ T5714] usb 6-1: USB disconnect, device number 61 [ 919.808536][ T9040] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 919.919894][ T9040] usb 1-1: USB disconnect, device number 55 [ 920.051432][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3158'. [ 920.119183][T17184] syzkaller0: entered promiscuous mode [ 920.608587][ T9040] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 920.751726][ T9040] usb 5-1: device descriptor read/64, error -71 [ 920.991707][ T9040] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 921.141723][ T9040] usb 5-1: device descriptor read/64, error -71 [ 921.255100][ T9040] usb usb5-port1: attempt power cycle [ 921.606770][ T9040] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 921.651930][ T9040] usb 5-1: device descriptor read/8, error -71 [ 921.905255][ T9040] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 921.948402][ T9040] usb 5-1: device descriptor read/8, error -71 [ 922.079873][ T9040] usb usb5-port1: unable to enumerate USB device [ 922.851801][T17214] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3164'. [ 923.021763][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 923.021797][ T30] audit: type=1400 audit(2000000440.740:7754): avc: denied { write } for pid=17212 comm="syz.3.3164" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 923.161518][T17216] netlink: 'syz.1.3165': attribute type 12 has an invalid length. [ 923.913891][T17221] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3168'. [ 924.034404][ T30] audit: type=1400 audit(2000000441.780:7755): avc: denied { read } for pid=17235 comm="syz.0.3171" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 924.062499][T17237] binder: 17235:17237 ioctl c0306201 200000000640 returned -22 [ 924.097342][T17233] netlink: 'syz.4.3169': attribute type 4 has an invalid length. [ 924.128693][T17237] ubi: mtd0 is already attached to ubi16 [ 924.143463][ T30] audit: type=1400 audit(2000000441.800:7756): avc: denied { open } for pid=17235 comm="syz.0.3171" path="/dev/binderfs/binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 924.287436][ T30] audit: type=1400 audit(2000000441.800:7757): avc: denied { ioctl } for pid=17235 comm="syz.0.3171" path="/dev/binderfs/binder0" dev="binder" ino=25 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 924.378063][ T30] audit: type=1400 audit(2000000441.800:7758): avc: denied { set_context_mgr } for pid=17235 comm="syz.0.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 924.462416][ T30] audit: type=1400 audit(2000000441.800:7759): avc: denied { write } for pid=17235 comm="syz.0.3171" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 924.523901][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 924.599092][ T30] audit: type=1400 audit(2000000441.930:7760): avc: denied { read } for pid=17235 comm="syz.0.3171" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 924.647586][ T30] audit: type=1400 audit(2000000441.930:7761): avc: denied { open } for pid=17235 comm="syz.0.3171" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 924.671680][ T30] audit: type=1400 audit(2000000441.940:7762): avc: denied { append } for pid=17235 comm="syz.0.3171" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 924.695159][ T30] audit: type=1400 audit(2000000441.950:7763): avc: denied { ioctl } for pid=17235 comm="syz.0.3171" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 924.721495][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 924.726619][T15909] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 924.745810][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.763160][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 924.775236][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 924.809426][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 924.852635][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 924.855062][T17248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3176'. [ 924.907311][ T10] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 924.916800][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.940853][ T10] usb 2-1: Product: syz [ 924.946641][T15909] usb 1-1: Using ep0 maxpacket: 8 [ 924.953395][T15909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.968852][ T10] usb 2-1: Manufacturer: syz [ 924.973710][T15909] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 924.985813][ T10] usb 2-1: SerialNumber: syz [ 924.994427][ T10] usb 2-1: config 0 descriptor?? [ 924.999385][T15909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 925.010422][T15909] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 925.026237][ T10] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 925.067303][T15909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 925.141055][T15909] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 925.150222][T15909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.159315][T15909] usb 1-1: Product: syz [ 925.164646][T15909] usb 1-1: Manufacturer: syz [ 925.169383][T15909] usb 1-1: SerialNumber: syz [ 925.181088][T15909] usb 1-1: config 0 descriptor?? [ 925.191270][T15909] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 925.284592][T17255] netlink: 'syz.4.3178': attribute type 12 has an invalid length. [ 925.422349][T15909] usb 2-1: USB disconnect, device number 52 [ 925.711961][ T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 925.812526][ T10] usb 1-1: USB disconnect, device number 56 [ 925.993581][ T24] usb 5-1: device descriptor read/64, error -71 [ 926.201420][T17267] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3182'. [ 926.261727][ T24] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 926.261727][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 926.412620][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 926.418918][ T24] usb 5-1: device descriptor read/64, error -71 [ 926.433037][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.447812][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 926.511435][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 926.521398][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 926.531770][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 926.549789][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.558515][ T24] usb usb5-port1: attempt power cycle [ 926.559464][ T10] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 926.574858][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.586458][ T10] usb 4-1: Product: syz [ 926.590810][ T10] usb 4-1: Manufacturer: syz [ 926.595842][ T10] usb 4-1: SerialNumber: syz [ 926.603840][ T10] usb 4-1: config 0 descriptor?? [ 926.622798][ T10] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 926.709915][T17275] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3184'. [ 926.924093][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 926.970692][ T24] usb 5-1: device descriptor read/8, error -71 [ 927.175355][ T10] usb 4-1: USB disconnect, device number 63 [ 927.221732][ T24] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 927.262629][ T24] usb 5-1: device descriptor read/8, error -71 [ 927.526883][ T24] usb usb5-port1: unable to enumerate USB device [ 927.703603][T17281] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 927.802548][T12076] Bluetooth: (null): Invalid header checksum [ 927.863524][T17287] bond3: Unable to set down delay as MII monitoring is disabled [ 927.912734][T12076] Bluetooth: (null): Invalid header checksum [ 927.919761][T17287] bond3 (unregistering): Released all slaves [ 928.022689][T12076] Bluetooth: (null): Invalid header checksum [ 928.142913][T12076] Bluetooth: (null): Invalid header checksum [ 928.247920][T12076] Bluetooth: (null): Invalid header checksum [ 928.358939][T12076] Bluetooth: (null): Invalid header checksum [ 928.477113][ T48] Bluetooth: (null): Invalid header checksum [ 928.596037][ T48] Bluetooth: (null): Invalid header checksum [ 928.823620][T17293] netlink: 'syz.3.3189': attribute type 12 has an invalid length. [ 928.901724][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 928.901740][ T30] audit: type=1400 audit(2000000446.640:7770): avc: denied { create } for pid=17298 comm="syz.4.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 928.943396][ T30] audit: type=1400 audit(2000000446.640:7771): avc: denied { shutdown } for pid=17298 comm="syz.4.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 928.945571][T17299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=17299 comm=syz.4.3192 [ 929.465013][T17308] netlink: 'syz.3.3193': attribute type 4 has an invalid length. [ 929.494559][ T30] audit: type=1400 audit(2000000447.240:7772): avc: denied { read } for pid=17316 comm="syz.1.3196" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 929.544561][ T30] audit: type=1400 audit(2000000447.240:7773): avc: denied { open } for pid=17316 comm="syz.1.3196" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 929.605828][T17317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3196'. [ 929.606169][ T30] audit: type=1400 audit(2000000447.250:7774): avc: denied { ioctl } for pid=17316 comm="syz.1.3196" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 929.679912][ T30] audit: type=1400 audit(2000000447.280:7775): avc: denied { create } for pid=17312 comm="syz.0.3195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 929.700935][ T30] audit: type=1400 audit(2000000447.290:7776): avc: denied { read write } for pid=17316 comm="syz.1.3196" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 929.737402][ T30] audit: type=1400 audit(2000000447.290:7777): avc: denied { open } for pid=17316 comm="syz.1.3196" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 929.764822][ T30] audit: type=1400 audit(2000000447.330:7778): avc: denied { read } for pid=17312 comm="syz.0.3195" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 929.818923][ T30] audit: type=1400 audit(2000000447.330:7779): avc: denied { write } for pid=17316 comm="syz.1.3196" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 930.261859][T17335] tipc: Enabling of bearer rejected, failed to enable media [ 931.539500][T17350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=17350 comm=syz.0.3205 [ 931.677918][ T5714] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 931.730777][T17350] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 932.382001][ T5714] usb 5-1: Using ep0 maxpacket: 8 [ 932.389804][ T5714] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.415942][T17361] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3206'. [ 932.427058][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 932.447506][T17352] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3207'. [ 932.460113][T17352] comedi comedi0: Minor 3 could not be opened [ 932.467650][T17352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3207'. [ 932.476649][T17352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3207'. [ 932.488671][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 932.523229][ T5714] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 932.538140][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 932.563780][ T5714] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 932.576039][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.586765][ T5714] usb 5-1: Product: syz [ 932.596684][ T5714] usb 5-1: Manufacturer: syz [ 932.601607][ T5714] usb 5-1: SerialNumber: syz [ 932.670579][T17365] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3209'. [ 932.966570][ T5714] usb 5-1: config 0 descriptor?? [ 932.976116][T17367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=17367 comm=syz.1.3208 [ 932.993231][ T5714] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 933.422912][ T10] usb 5-1: USB disconnect, device number 62 [ 933.559347][T17373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3212'. [ 933.754436][ T12] Bluetooth: (null): Invalid header checksum [ 933.761118][ T5620] Bluetooth: hci6: command 0x0406 tx timeout [ 933.877553][T12076] Bluetooth: (null): Invalid header checksum [ 933.969847][T17381] bond3: Unable to set down delay as MII monitoring is disabled [ 934.000712][T12076] Bluetooth: (null): Invalid header checksum [ 934.032255][T17381] bond3 (unregistering): Released all slaves [ 934.119949][ T3366] Bluetooth: (null): Invalid header checksum [ 934.203316][ T12] Bluetooth: (null): Invalid header checksum [ 934.338732][ T36] Bluetooth: (null): Invalid header checksum [ 934.464769][ T3366] Bluetooth: (null): Invalid header checksum [ 934.478433][T17386] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3214'. [ 934.888356][ T1337] Bluetooth: (null): Invalid header checksum [ 934.917586][ T1337] Bluetooth: (null): Invalid header checksum [ 934.959567][ T1337] Bluetooth: (null): Invalid header checksum [ 935.003658][ T1337] Bluetooth: (null): Invalid header checksum [ 935.043584][ T1337] Bluetooth: (null): Invalid header checksum [ 936.372595][T17398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 936.384571][T17398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 936.400974][T17398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 936.415046][T17398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 936.528066][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 936.528084][ T30] audit: type=1400 audit(2000000453.940:7786): avc: denied { mounton } for pid=17394 comm="syz.5.3217" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 936.626195][ T30] audit: type=1400 audit(2000000453.950:7787): avc: denied { mount } for pid=17394 comm="syz.5.3217" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 936.652267][ T30] audit: type=1400 audit(2000000453.980:7788): avc: denied { map_create } for pid=17394 comm="syz.5.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 936.672075][T15630] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 936.679772][T15630] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 936.701835][ T5714] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 936.713559][ T30] audit: type=1400 audit(2000000454.300:7789): avc: denied { read } for pid=17394 comm="syz.5.3217" name="comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 936.750807][ T30] audit: type=1400 audit(2000000454.300:7790): avc: denied { open } for pid=17394 comm="syz.5.3217" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 936.843161][ T30] audit: type=1400 audit(2000000454.300:7791): avc: denied { ioctl } for pid=17394 comm="syz.5.3217" path="/dev/comedi4" dev="devtmpfs" ino=1279 ioctlcmd=0x6409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 936.931076][ T30] audit: type=1400 audit(2000000454.330:7792): avc: denied { read write } for pid=16199 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 937.010113][ T30] audit: type=1400 audit(2000000454.330:7793): avc: denied { open } for pid=16199 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 937.089105][ T30] audit: type=1400 audit(2000000454.330:7794): avc: denied { ioctl } for pid=16199 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 937.146393][T16582] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 937.219383][ T30] audit: type=1400 audit(2000000454.370:7795): avc: denied { create } for pid=17400 comm="syz.4.3218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 937.323519][T16582] usb 5-1: unable to get BOS descriptor or descriptor too short [ 937.346380][T16582] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 937.371783][ T5714] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 937.386744][T16582] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 937.418938][T16582] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 937.422172][T15909] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 937.467153][T16582] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 937.502759][T15909] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 937.503006][T16582] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 937.541790][ T5714] usb 4-1: Using ep0 maxpacket: 8 [ 937.547230][T16582] usb 5-1: config 1 interface 1 has no altsetting 0 [ 937.565391][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.587379][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 937.589738][T16582] usb 5-1: string descriptor 0 read error: -22 [ 937.645321][T16582] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 937.677776][T16582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.680005][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 937.707869][ T5714] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 937.718747][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 937.778952][ T5714] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 937.793615][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.816000][ T5714] usb 4-1: Product: syz [ 937.820294][ T5714] usb 4-1: Manufacturer: syz [ 937.834476][ T5714] usb 4-1: SerialNumber: syz [ 937.856959][ T5714] usb 4-1: config 0 descriptor?? [ 937.871386][ T5714] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 938.045007][T15909] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 938.228282][T15909] usb 1-1: Using ep0 maxpacket: 8 [ 938.241548][T15909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.283486][T15909] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 938.295377][T15909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 938.305245][T15909] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 938.413729][T15909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 938.420073][ T804] usb 4-1: USB disconnect, device number 64 [ 938.544283][T15909] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 938.553509][T15909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.562571][T15909] usb 1-1: Product: syz [ 938.571486][T15909] usb 1-1: Manufacturer: syz [ 938.578497][T15909] usb 1-1: SerialNumber: syz [ 938.613997][T15909] usb 1-1: config 0 descriptor?? [ 938.625819][T15909] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 939.557353][ T804] usb 1-1: USB disconnect, device number 57 [ 939.568317][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 939.593046][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 939.604882][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 939.619649][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 939.629603][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 939.842929][T17437] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3225'. [ 939.886358][T17437] comedi comedi0: Minor 3 could not be opened [ 939.903043][T17437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3225'. [ 939.912266][T17437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3225'. [ 940.431110][T17443] syzkaller0: entered promiscuous mode [ 940.438200][T17443] syzkaller0: entered allmulticast mode [ 940.649041][T17431] lo speed is unknown, defaulting to 1000 [ 940.781819][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 941.293397][T16582] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 941.551698][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 941.551734][ T30] audit: type=1400 audit(2000000459.220:7845): avc: denied { write } for pid=17456 comm="syz.0.3229" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 941.695198][T16582] usb 5-1: USB disconnect, device number 63 [ 941.827441][ T5620] Bluetooth: hci3: command tx timeout [ 941.899634][ T30] audit: type=1400 audit(2000000459.220:7846): avc: denied { ioctl } for pid=17456 comm="syz.0.3229" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 942.091743][ T9040] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 942.288183][ T9040] usb 4-1: unable to get BOS descriptor or descriptor too short [ 942.310484][ T9040] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.339209][ T9040] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 942.400497][ T9040] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 942.468473][T17479] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3234'. [ 942.481046][ T9040] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 942.484811][ T30] audit: type=1400 audit(2000000460.220:7847): avc: denied { create } for pid=17478 comm="syz.0.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 942.511687][ T9040] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 942.555414][ T9040] usb 4-1: config 1 interface 1 has no altsetting 0 [ 942.846782][ T30] audit: type=1400 audit(2000000460.220:7848): avc: denied { bind } for pid=17478 comm="syz.0.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 942.876931][ T30] audit: type=1400 audit(2000000460.270:7849): avc: denied { setopt } for pid=17478 comm="syz.0.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 942.898065][ T30] audit: type=1400 audit(2000000460.270:7850): avc: denied { accept } for pid=17478 comm="syz.0.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 942.917821][ T30] audit: type=1400 audit(2000000460.280:7851): avc: denied { write } for pid=17478 comm="syz.0.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 942.951399][ T9040] usb 4-1: string descriptor 0 read error: -22 [ 942.962789][ T9040] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 942.983057][ T30] audit: type=1400 audit(2000000460.280:7852): avc: denied { read } for pid=17478 comm="syz.0.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 943.015766][ T9040] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.110543][T17489] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3236'. [ 943.155462][T17489] comedi comedi0: Minor 3 could not be opened [ 943.180882][T17489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3236'. [ 943.191874][T17489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3236'. [ 943.361331][ T30] audit: type=1400 audit(2000000460.280:7853): avc: denied { write } for pid=17478 comm="syz.0.3234" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 943.459316][ T30] audit: type=1400 audit(2000000460.690:7854): avc: denied { ioctl } for pid=17458 comm="syz.3.3230" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 943.639904][T17431] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.659222][T17431] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.684164][T17431] bridge_slave_0: entered allmulticast mode [ 943.703845][T17431] bridge_slave_0: entered promiscuous mode [ 943.726351][T17431] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.760732][T17431] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.795766][T17431] bridge_slave_1: entered allmulticast mode [ 943.821022][T17431] bridge_slave_1: entered promiscuous mode [ 943.905303][ T5620] Bluetooth: hci3: command tx timeout [ 943.920927][T17431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.959177][T17431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.097751][T17431] team0: Port device team_slave_0 added [ 944.124123][T17431] team0: Port device team_slave_1 added [ 944.217820][T17431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.236332][T17431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.271714][T17431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.348177][T17431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.369416][T17431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.496090][T17431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.664642][T17511] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3240'. [ 944.967299][T17431] hsr_slave_0: entered promiscuous mode [ 945.085743][T17512] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3241'. [ 945.282264][T17431] hsr_slave_1: entered promiscuous mode [ 945.297547][T17431] debugfs: 'hsr0' already exists in 'hsr' [ 945.304517][T17431] Cannot create hsr debugfs directory [ 945.572385][T17515] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3242'. [ 945.982068][ T5620] Bluetooth: hci3: command tx timeout [ 946.304166][T17431] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.973569][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 946.973589][ T30] audit: type=1400 audit(2000000464.380:7915): avc: denied { mounton } for pid=17526 comm="syz.4.3247" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 947.085887][ T30] audit: type=1400 audit(2000000464.390:7916): avc: denied { mount } for pid=17526 comm="syz.4.3247" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 947.167405][ T30] audit: type=1400 audit(2000000464.410:7917): avc: denied { map_create } for pid=17526 comm="syz.4.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 947.199012][ T30] audit: type=1400 audit(2000000464.750:7918): avc: denied { ioctl } for pid=17530 comm="syz.0.3248" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 947.256911][T17431] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.324705][ T30] audit: type=1400 audit(2000000464.790:7919): avc: denied { read } for pid=17526 comm="syz.4.3247" name="comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 947.367410][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3249'. [ 947.407065][ T9040] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 947.521409][ T9040] usb 4-1: USB disconnect, device number 65 [ 947.610941][T17431] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.681799][T17551] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3251'. [ 947.991806][ T30] audit: type=1400 audit(2000000465.720:7920): avc: denied { perfmon } for pid=17552 comm="syz.1.3252" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 948.053608][ T30] audit: type=1400 audit(2000000465.760:7921): avc: denied { ioctl } for pid=17552 comm="syz.1.3252" path="socket:[61517]" dev="sockfs" ino=61517 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 948.082704][ T5620] Bluetooth: hci3: command tx timeout [ 948.105223][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'. [ 948.139435][ T30] audit: type=1326 audit(2000000465.770:7922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17552 comm="syz.1.3252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d8a79cdd9 code=0x5fff0000 [ 948.205148][ T30] audit: type=1400 audit(2000000465.880:7923): avc: denied { prog_run } for pid=17560 comm="syz.0.3255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 948.226237][T17431] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.294432][T17568] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3256'. [ 948.640958][ T30] audit: type=1400 audit(2000000466.380:7924): avc: denied { ioctl } for pid=17556 comm="syz.3.3254" path="socket:[60648]" dev="sockfs" ino=60648 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 948.883880][T17574] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3258'. [ 948.941776][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 949.186748][T17573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3258'. [ 949.199796][T17573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3258'. [ 949.384820][T17577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 949.777178][T17588] syzkaller0: entered promiscuous mode [ 949.784093][T17588] syzkaller0: entered allmulticast mode [ 949.934002][T17431] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 949.947263][T17431] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 949.974823][T17431] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 950.074072][T17595] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3264'. [ 950.244495][T17431] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 950.264754][T17431] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 950.283314][T17431] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 950.322429][T17431] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 950.335266][T17431] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 950.468067][T17609] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3266'. [ 950.491263][T17609] comedi comedi0: Minor 3 could not be opened [ 950.691749][ T9040] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 950.734141][T17611] netlink: 'syz.3.3267': attribute type 12 has an invalid length. [ 950.807451][T17431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.911203][ T9040] usb 5-1: unable to get BOS descriptor or descriptor too short [ 950.915988][T17431] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.922408][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3269'. [ 950.971359][ T9040] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 951.080050][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.087175][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.106581][ T9040] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 951.152513][ T9040] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 951.214573][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.221733][ T9040] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 951.221752][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.247823][ T9040] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 951.260817][ T9040] usb 5-1: config 1 interface 1 has no altsetting 0 [ 951.285527][ T9040] usb 5-1: string descriptor 0 read error: -22 [ 951.300252][ T9040] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 951.318494][ T9040] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.327079][T17621] netlink: 'syz.0.3271': attribute type 12 has an invalid length. [ 951.512373][T17628] syzkaller0: entered promiscuous mode [ 951.518149][T17628] syzkaller0: entered allmulticast mode [ 951.551589][T17633] tipc: Enabling of bearer rejected, failed to enable media [ 951.855306][T17637] bridge0: port 3(netdevsim0) entered blocking state [ 951.862707][T17637] bridge0: port 3(netdevsim0) entered disabled state [ 951.870477][T17637] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 951.887655][T17637] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 951.899045][T17637] bridge0: port 3(netdevsim0) entered blocking state [ 951.906446][T17637] bridge0: port 3(netdevsim0) entered forwarding state [ 952.595345][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 952.595362][ T30] audit: type=1400 audit(2000000470.340:7938): avc: denied { create } for pid=17648 comm="syz.3.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 952.645703][T17650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=17650 comm=syz.3.3278 [ 952.732304][ T30] audit: type=1400 audit(2000000470.370:7939): avc: denied { shutdown } for pid=17648 comm="syz.3.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 952.779100][T17650] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 952.888647][T17655] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3279'. [ 952.904737][T17655] comedi comedi0: Minor 3 could not be opened [ 953.215392][T17431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.228041][T17656] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 953.462985][ T87] unregister_netdevice: waiting for bond2 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 953.640097][ T30] audit: type=1400 audit(2000000471.370:7940): avc: denied { write } for pid=5590 comm="syz-executor" path="pipe:[5226]" dev="pipefs" ino=5226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 953.767713][T17666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3280'. [ 954.108774][ T30] audit: type=1400 audit(2000000471.510:7941): avc: denied { read } for pid=4958 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 954.404086][ T30] audit: type=1400 audit(2000000471.510:7942): avc: denied { search } for pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.645672][ T30] audit: type=1400 audit(2000000471.530:7943): avc: denied { search } for pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.682994][ T9040] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 954.797431][ T30] audit: type=1400 audit(2000000471.530:7944): avc: denied { add_name } for pid=4958 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.868640][ T30] audit: type=1400 audit(2000000471.540:7945): avc: denied { create } for pid=4958 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 954.948476][ T30] audit: type=1400 audit(2000000471.590:7946): avc: denied { read } for pid=17661 comm="syz.0.3280" name="v4l-subdev0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 955.058145][ T9040] usb 5-1: USB disconnect, device number 64 [ 955.085427][ T30] audit: type=1400 audit(2000000471.600:7947): avc: denied { open } for pid=17661 comm="syz.0.3280" path="/dev/v4l-subdev0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1