last executing test programs: 3m43.162217409s ago: executing program 1 (id=486): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x4, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0xffffffff, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x1, 0x1903, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0xd35b, '\x00', @string=0x0}}) 3m43.161925678s ago: executing program 1 (id=487): getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 3m43.100278005s ago: executing program 1 (id=488): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000a000000003800000000004000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0xf5d, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x9, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x1], &(0x7f00000001c0)=[{0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x1, 0xa}, {0x5, 0x2, 0x1, 0x4}, {0x1, 0x4, 0x4, 0x2}], 0x10, 0xefc}, 0x94) setresgid(0x0, 0x0, 0xee00) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='writeback_bdi_register\x00', r0, 0x0, 0x2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r2, 0x27, 0x0, 0x4ec7, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000004c0)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000480)={0x5, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r5, 0xffffffffffffffff, 0x18, 0x2c, 0x0, @void, @void, @void, @value=r6, r4}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth1_to_team\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r8, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r9, &(0x7f0000002180), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22010039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(r9, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x1, 0x4, 0x0, {0x5, 0x0, 0x81, 0x7, 0x400000000000007, 0xd, 0xfff7ffff, 0x6, 0x4101, 0x8000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x1fe8e752, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@gettfilter={0x5c, 0x2e, 0x2, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xe, 0x6}, {0xc, 0x1}, {0x1, 0x3}}, [{0x8, 0xb, 0xfffffffd}, {0x8, 0xb, 0xdd}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}, {0x8}, {0x8, 0xb, 0xffffffff}]}, 0x5c}, 0x1, 0x2b1e}, 0x4000800) 3m42.891863759s ago: executing program 1 (id=493): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) r1 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffffffffffffde, 0xfa00, {0xffffffffffffffff, 0x8000004}}, 0xffcc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6_vti0\x00', 0x0, 0x6, 0xd8, 0x7f, 0x8, 0x58, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7, 0x5, 0xfffffff3}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@func={0x9, 0x0, 0x0, 0xc, 0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @ptr={0x4, 0x0, 0x0, 0x2, 0x2}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x5, 0x6}, @func={0x1, 0x0, 0x0, 0xc, 0x4}, @var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}, @union={0x10, 0x2, 0x0, 0x5, 0x1, 0x6, [{0xc, 0x2, 0x1ff}, {0xc, 0x1, 0x3}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0x7, 0x3}, {0x10, 0x4}]}]}, {0x0, [0x2e]}}, &(0x7f0000000900)=""/222, 0xb3, 0xde, 0x0, 0x40}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x200}, 0xc) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@generic={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x14, &(0x7f0000000640)=@raw=[@generic={0xff, 0x8, 0x2, 0x6, 0x3d7e5640}, @ringbuf_query, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x91}, @ringbuf_query, @jmp={0x5, 0x0, 0x2, 0x9, 0x1, 0x4, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0xff, 0x65, &(0x7f0000000700)=""/101, 0x41100, 0xc, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000a40)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b40)=[r4, r6, r7], &(0x7f0000000b80)=[{0x4, 0x4, 0x1, 0x9}], 0x10, 0x8000}, 0x94) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x12141}) io_uring_enter(r8, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) madvise(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x15) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x70bd27, 0x0, {{'drbg_pr_sha512\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r13, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r15 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r13, 0x4008ae6a, &(0x7f00000005c0)={0x2, 0x0, [{0x4, 0x1, 0x1, 0x0, @sint={0x7fff, 0x800}}, {0xa, 0x2, 0x0, 0x0, @sint={0x6, 0x80000000}}]}) ioctl$KVM_SET_LAPIC(r15, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet_sctp(r11, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x80, 0x10, 0x1, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x30}], 0x1, 0x40) 3m42.650341397s ago: executing program 1 (id=495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1a, 0x1, 0x0, 0x4, 0x4, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x1c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0xcf}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x40004}, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) r2 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x00I\x00_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async, rerun: 32) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) (rerun: 32) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cd", 0x3f}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x7, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x40000000, 0x71, 0x11, 0xb0}, [@map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x7f}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x10, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x6}, 0x94) (async, rerun: 64) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x200001, 0x0) (rerun: 64) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', r4}, 0x18) (async) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000480)={0x2, 0x0, &(0x7f0000000600)=""/231, &(0x7f0000000700)=""/211, &(0x7f0000000400)=""/110, 0x28004}) 3m42.551237876s ago: executing program 1 (id=498): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@fallback=r2, r2, 0x2f, 0x2024, 0x4}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) (async) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) (async) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) (async) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000004"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 3m27.383005106s ago: executing program 32 (id=498): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@fallback=r2, r2, 0x2f, 0x2024, 0x4}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) (async) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) (async) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) (async) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000004"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 3m23.738642671s ago: executing program 4 (id=563): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) dup(r0) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400) r4 = dup(r2) inotify_rm_watch(r4, r3) inotify_rm_watch(r2, r1) 3m23.671600616s ago: executing program 4 (id=613): r0 = socket$alg(0x26, 0x5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000180), &(0x7f0000000200)=0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/netlink\x00') pread64(r3, &(0x7f0000003200)=""/4140, 0x102c, 0x59) setreuid(0x0, 0xee00) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRES64=r2], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8d5949ae2b8b7ab1, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0x10}, 0x94) 3m23.512395824s ago: executing program 4 (id=617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000ecdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) getrlimit(0x0, &(0x7f0000000240)) 3m23.502071756s ago: executing program 4 (id=619): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) ioctl$LOOP_SET_DIRECT_IO(r0, 0xc0401289, 0x6e) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg/0:0:0:0\x00', 0x0, 0x0) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000001540)={0x51, 0x0, 0x0, 0x1, &(0x7f00000003c0)='\f', 0xc, 0x0, 0xffffff14, 0x1000, 0x60, &(0x7f0000000400), 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x30, 0x0, 0xfffffbff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 3m23.441358651s ago: executing program 4 (id=621): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x178, 0x30, 0x1, 0x0, 0x0, {}, [{0x164, 0x1, [@m_mpls={0x160, 0x1, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}, @TCA_MPLS_LABEL={0x8, 0x5, 0x29cac}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6e, 0x8, 0x6, 0x5211, 0x1}, 0x3}}]}, {0xe3, 0x4, "8d9ae592b3fc3095410adc966867d9bea727e87fc80420d2b6df93bfe391110696244aaf158de1b04102e403ec95e5d518f53e59013e9206770f2075d0de352f889cf4fab8c94108dea8a151e05bf8d1a4425d3e705397dffdf5aa5b8b166afe32e671bf87a832fc92684300b09c669ed012194dbf3e741cf105c327e8a39930cfd1387386d4b166ca44067f670b16eac973da445db6e0fab0d4eef5090b6a7f7e8e9418804e62d12c36aaacbf7c226a8d380cf8e26f984fea463f3758fc87709f074639c96bdbc8f36b0ab6b4f244d3d8e18df77384f8207be018b27166fa"}, {0xc}, {0xc}}}]}]}, 0x178}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000a000000000000000200000d00000000000000000200000000200000000000000000000001000005000000000200000002000000000800000000612e2e2e615f6100"], &(0x7f0000000000)=""/28, 0x56, 0x1c, 0x1}, 0x20) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x6cd57c36676caad5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000007c0), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f}, [@ldst={0x1, 0x2, 0x3, 0x2, 0xf, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r6, {0xe, 0x3}, {0x60}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x40004) r7 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @private2, @mcast1, [@dstopts={0x2b}]}}}}}}}, 0x0) recvfrom$inet(r7, 0x0, 0x0, 0x20002102, 0x0, 0x0) r8 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, &(0x7f0000000100)=0xbddc, 0x4) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file1\x00', 0x0, 0x8, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x9, &(0x7f0000000380)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @generic={0x1, 0x7, 0xc, 0x7ff, 0x9}, @jmp={0x5, 0x1, 0x4, 0xa, 0x3, 0x8, 0xffffffffffffffec}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000200)='GPL\x00', 0xdbb04f3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000400)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x10, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[r0, r0, r1, r0, r0, r10, r0, r0], &(0x7f00000006c0)=[{0x0, 0x4, 0x1, 0x1}], 0x10, 0x4}, 0x94) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x1d, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0) 3m22.90088152s ago: executing program 4 (id=633): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffe85, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000040)=0x3ff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x44, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a", 0x29}], 0x1}, 0x840) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000082, 0x0, 0x67c5}]}) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$CDROMREADMODE1(r9, 0x530d, &(0x7f0000000280)={0x0, 0x8, 0x8, 0x7, 0xfb, 0xa}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYRES8, @ANYRES64=r2, @ANYBLOB="0c009900d308000079000000080026006c0900000800a08d1d4a2a390800270002"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 3m22.766352165s ago: executing program 33 (id=633): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffe85, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000040)=0x3ff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x44, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a", 0x29}], 0x1}, 0x840) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000082, 0x0, 0x67c5}]}) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$CDROMREADMODE1(r9, 0x530d, &(0x7f0000000280)={0x0, 0x8, 0x8, 0x7, 0xfb, 0xa}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYRES8, @ANYRES64=r2, @ANYBLOB="0c009900d308000079000000080026006c0900000800a08d1d4a2a390800270002"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 1m44.6305876s ago: executing program 2 (id=2748): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {}, [{0x2, 0x7}], {}, [], {0x10, 0x1}}, 0x2c, 0x3) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000001140)=""/245, 0x71) 1m44.57078585s ago: executing program 2 (id=2750): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='maps\x00') (async, rerun: 64) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000100000700000000000000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000eaffffffffffffff"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000800000850000000f00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='rpc_clnt_new_err\x00', r2}, 0x18) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async, rerun: 64) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000076c0)) exit(0x0) (async) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r3], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}]}) (async) r7 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') read$FUSE(r7, &(0x7f0000003ac0)={0x2020}, 0x2023) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000a0a0101000000000000000000000000cad3c42306ca44882084aa6a5e48f2da8cebf0e85f1cbb86fe3308"], 0x14}}, 0x0) 1m44.487552765s ago: executing program 2 (id=2753): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000500", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m44.487058538s ago: executing program 2 (id=2755): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2081, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x7, 0x0, &(0x7f0000000040)) add_key(&(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000180)="6e0c9b6b38", 0x5, 0xffffffffffffffff) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000600)="0c37f8246f3e", 0x6}, {&(0x7f0000000440)='0', 0x1}], 0x2) 1m44.381055607s ago: executing program 2 (id=2756): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x800) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 1m44.380268702s ago: executing program 2 (id=2759): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x800, 0x0, 0x0, 0x0, 0xb, 0x4, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000feff0700", [0x0, 0x22000000000001]}}) socket$kcm(0x2, 0xa, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000a66000/0x8000)=nil, 0x8000, 0x3000007, 0x10, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r3, 0x0, 0x2000fb) r5 = getpgid(0xffffffffffffffff) syz_open_procfs(r5, &(0x7f0000000040)='cpuset\x00') r6 = syz_open_procfs(0x0, 0x0) read$FUSE(r6, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m29.328262606s ago: executing program 34 (id=2759): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x800, 0x0, 0x0, 0x0, 0xb, 0x4, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000feff0700", [0x0, 0x22000000000001]}}) socket$kcm(0x2, 0xa, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000a66000/0x8000)=nil, 0x8000, 0x3000007, 0x10, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r3, 0x0, 0x2000fb) r5 = getpgid(0xffffffffffffffff) syz_open_procfs(r5, &(0x7f0000000040)='cpuset\x00') r6 = syz_open_procfs(0x0, 0x0) read$FUSE(r6, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 12.039397091s ago: executing program 5 (id=4491): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004c"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 12.007080642s ago: executing program 5 (id=4492): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000048a2000000000000a4674a8200"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRESDEC=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) futex_waitv(&(0x7f0000000280)=[{0x0, &(0x7f0000000000), 0x2}, {0x0, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r3, &(0x7f0000000640), 0x0}, 0x20) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r6, r5, 0x0, 0x80009) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x9, "f3bfad2e"}, @main=@item_4={0x3, 0x0, 0xc}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x2, 0x0, 0xc, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00020000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r11 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r11, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r13 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r13, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r12, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 10.88828923s ago: executing program 3 (id=4509): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC], 0xf) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket(0x1f, 0x800, 0x1ffff) getsockopt(r3, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r4, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0x800002}, &(0x7f0000000100)=0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mprotect(&(0x7f00001ad000/0x4000)=nil, 0x4000, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f00000007c0)=""/4105, 0x1009}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES16=r1, @ANYRESHEX=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r7, 0x0, 0x0}, 0x20) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x8000, 0x4, 0x63, 0x8, 0x6}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[]) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r5}, &(0x7f0000000180)=0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000002200)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001a00)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000003200)={r9, r10, "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", "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"}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c960000502068000000000a7005df6fc000000"], 0x11) syz_emit_vhci(&(0x7f0000000300)=ANY=[], 0xe) socket$kcm(0x10, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x3, 0xffffffff, 0x8040000000000001, 0x8, 0x44, 0x6, 0x1, 0x8000000000000000}, &(0x7f0000000080)={0x8bac, 0x3ff, 0x5, 0x8000000000000001, 0x6, 0x7, 0x8, 0x100000001}, &(0x7f0000000100)={0x9, 0x2, 0x9, 0x12ed, 0x9, 0x13, 0x10000, 0xebe}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x80000001]}, 0x8}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000004001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb0000000000", 0xd8}], 0x1}, 0x4000) 10.834445422s ago: executing program 3 (id=4510): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004c"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 10.830117741s ago: executing program 3 (id=4511): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004c"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) (fail_nth: 2) 10.749648395s ago: executing program 3 (id=4512): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @p_u16=&(0x7f0000001b80)=0xa}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x7000000) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$FUSE(r2, &(0x7f0000002240)={0x2020}, 0x2020) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x5e) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x7}, 0x800, 0x0, 0x2, 0x0, 0x8, 0x8}, 0x20) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000004c0)={0x1, @raw_data="a425e2f1a54d24f14258313560608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r8 = pidfd_getfd(r5, r5, 0x0) setns(r8, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000400)='./file0/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x20304a5, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 10.405699901s ago: executing program 5 (id=4516): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='syzkaller0\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/235, 0xeb, 0x0, &(0x7f0000000200)=""/252, 0xfc}, &(0x7f0000000340)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0x1000, 0x1, &(0x7f0000001380)=""/23, 0x17}, &(0x7f0000001400)=0x40) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000001440)) write$uinput_user_dev(r1, &(0x7f0000001480)={'syz1\x00', {0x1, 0xfff0, 0x6, 0x8}, 0x41, [0x400, 0x9, 0xfffffe00, 0x7, 0xffffff10, 0x2, 0x9, 0x1, 0x9, 0x2, 0x0, 0xf, 0x8, 0x6, 0x3, 0x2, 0x8001, 0x6, 0x7fff, 0x8, 0x10001, 0x0, 0x1, 0x0, 0x6, 0x6, 0x7, 0x6, 0x8, 0xfffffffc, 0x6, 0x5, 0x24, 0x7, 0xfff, 0x9, 0x6, 0x1400, 0xa, 0x6, 0x3, 0x7ff, 0x10001, 0x3, 0x7, 0x166, 0x1, 0x41, 0x60000, 0xffff, 0x4, 0x80000001, 0x5, 0x8, 0x800, 0x7, 0x9, 0x800, 0x1, 0xee7c, 0x800, 0xfffffffc, 0x8], [0xc738, 0x40, 0x38f0, 0x1, 0x7ff, 0x0, 0x0, 0x80000000, 0xffff, 0xffffffff, 0x24fb, 0x7, 0x2, 0x2, 0xffffffff, 0x2, 0x4, 0x5, 0x8, 0xfffffffa, 0x7fff, 0x3, 0x5, 0xcee4, 0x8, 0xfffffff9, 0x6, 0x80000000, 0x7fffffff, 0x6, 0x80, 0x818c, 0x0, 0x7, 0x56df, 0x2, 0x1ff, 0x80000000, 0x1, 0x10, 0xa, 0x1, 0xe, 0x89b, 0x0, 0x2, 0x6, 0x4, 0x10, 0x1e, 0xe1b, 0xfffffffb, 0x57, 0x6, 0xd97, 0x8, 0x4e, 0x0, 0x3, 0x15f, 0x0, 0xa, 0x8, 0x6], [0x8001, 0x1, 0x8001, 0x0, 0xffffffff, 0x4, 0x517, 0x5, 0xba, 0xdc, 0x5, 0x3, 0x8, 0x101, 0xd, 0x1, 0x3, 0xf, 0x6, 0x80000001, 0x1, 0x8, 0x8, 0xd25b, 0x207aeadb, 0xbe, 0x2, 0x5, 0x2, 0x45, 0xd1cd, 0x4, 0xe2, 0x5db, 0x3, 0x1, 0x8000, 0x3, 0x400, 0xb, 0x400, 0x55, 0x7, 0xf, 0x7, 0x5, 0xc64, 0xd, 0x7f, 0x4, 0x3, 0x800, 0x7, 0x3ff, 0x6, 0x2, 0x0, 0x7, 0x7, 0x1, 0x533, 0x0, 0x2bcf, 0x7fffffff], [0x9, 0xf, 0x10000, 0x7, 0x3, 0x4, 0x0, 0x6, 0x5, 0x3, 0x3, 0x8, 0x5, 0x1, 0x7f, 0x9, 0xf, 0x4, 0xffffffc0, 0x1, 0x1, 0x1ff, 0x4, 0x636c, 0x0, 0x3, 0xff, 0x1127, 0x6, 0x4, 0x401, 0xffffffff, 0x2, 0x7, 0xd, 0x4, 0x9, 0x1, 0x7fffffff, 0x8, 0x3, 0x8, 0x4, 0x6, 0x8, 0x3, 0x2, 0x4, 0xe9f, 0x4, 0x6, 0x8, 0x9b, 0x1, 0x2, 0x10001, 0x10001, 0x3960, 0x9, 0x9, 0x6, 0x8, 0x7fffffff, 0xb5]}, 0x45c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001b00)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001900)=""/211, 0xd3, 0x1, &(0x7f0000001a00)=""/245, 0xf5}, &(0x7f0000001b40)=0x40) clock_gettime(0x0, &(0x7f0000001b80)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000001bc0)={r3, r4/1000+10000}, 0x10) syz_emit_ethernet(0xc3, &(0x7f0000001c00)={@random="5f66388a717f", @random="d34d1ede0d20", @val={@val={0x88a8, 0x1}, {0x8100, 0x6, 0x0, 0x3}}, {@llc_tr={0x11, {@llc={0xf3, 0x2, 'qu', "1f9acb6304f27ebf8c9f12e0491d2079de340389ffdbd8383a446258e5a867c3d182aabe976f09105253c1998329e3d2b04b85324a1887c92a861f185b5d41a91896385df5d1abbffbf79cf5f61cc5c0b1dcc10065e08d5286258e227c40a164a98ebf4f000e1bcc963bf1a2f03683add01783dfaae91be21ae19bb3f2ea72582889ae9f92f7b9445e8017fd03478da227d72ddfcdc5495d451a55781d59a0b6f847118823288b94c0"}}}}}, &(0x7f0000001d00)={0x0, 0x4, [0x6e4, 0x60b, 0x53d, 0x2]}) r5 = timerfd_create(0x6, 0x80800) clock_gettime(0x0, &(0x7f0000001d40)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f0000001d80)={{0x77359400}, {r6, r7+10000000}}, &(0x7f0000001dc0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$KDMKTONE(r8, 0x4b30, 0x1e) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001e40), &(0x7f0000001e80)=0xc) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001f40)=[@textreal={0x8, &(0x7f0000001ec0)="3e660f388201b810008ed00f1f4000baf80c66b86afc258c66efbafc0cedbaf80c66b804473b8a66efbafc0c66b80700000066ef66b8070000000f23c80f21f86635040010000f23f80fe1d70f78200f01ca0f01c3", 0x55}], 0x1, 0x0, &(0x7f0000001f80), 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000001fc0)={0x0, 0xcc, 0xfffffffffffff439}) clock_gettime(0x0, &(0x7f0000002000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002040)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f0000002080)={{r9, r10+60000000}, {r11, r12+60000000}}, &(0x7f00000020c0)) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000002100)=@base={0x4, 0x0, 0x5, 0xa24, 0xc10, r8, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) ppoll(&(0x7f0000002180)=[{r1, 0x28}, {r0, 0x4000}, {r0, 0x4018}, {r5, 0x1004}, {r13, 0x10}], 0x5, &(0x7f00000021c0), &(0x7f0000002200)={[0x82e0]}, 0x8) preadv(r2, &(0x7f00000036c0)=[{&(0x7f0000002240)=""/99, 0x63}, {&(0x7f00000022c0)=""/16, 0x10}, {&(0x7f0000002300)=""/236, 0xec}, {&(0x7f0000002400)=""/60, 0x3c}, {&(0x7f0000002440)=""/190, 0xbe}, {&(0x7f0000002500)=""/49, 0x31}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/126, 0x7e}, {&(0x7f00000035c0)=""/171, 0xab}, {&(0x7f0000003680)=""/2, 0x2}], 0xa, 0x9, 0xffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000003780), 0x40001, 0x0) fsconfig$FSCONFIG_SET_PATH(r8, 0x3, &(0x7f00000037c0)='/dev/kvm\x00', &(0x7f0000003800)='./file0\x00', 0xffffffffffffffff) 10.349072257s ago: executing program 5 (id=4519): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8ad50208000000002400128009000100626f6e640000000014000280050001000600000005000c97ed02c900"], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) chdir(&(0x7f00000001c0)='./bus\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000040)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0xb}) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x9, 0x100009b}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'team0\x00'}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.039370431s ago: executing program 5 (id=4520): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004c"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 9.887702984s ago: executing program 3 (id=4521): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004c"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) (fail_nth: 3) 9.58950953s ago: executing program 5 (id=4522): r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) r1 = eventfd2(0x9, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x10320}, {r0}, {r1, 0x4}, {r0, 0x22b7}, {r1, 0x20}], 0x5, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fd000000000000000800040001000000", 0x24) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000080)={0xf010004, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x16, '\x00', @string=0x0}}) 9.517333155s ago: executing program 35 (id=4522): r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) r1 = eventfd2(0x9, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x10320}, {r0}, {r1, 0x4}, {r0, 0x22b7}, {r1, 0x20}], 0x5, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fd000000000000000800040001000000", 0x24) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000080)={0xf010004, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x16, '\x00', @string=0x0}}) 9.46979617s ago: executing program 3 (id=4525): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000048a2000000000000a4674a8200"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRESDEC=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) futex_waitv(&(0x7f0000000280)=[{0x0, &(0x7f0000000000), 0x2}, {0x0, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r3, &(0x7f0000000640), 0x0}, 0x20) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r6, r5, 0x0, 0x80009) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x9, "f3bfad2e"}, @main=@item_4={0x3, 0x0, 0xc}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x2, 0x0, 0xc, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00020000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r11 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r11, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r13 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r13, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r12, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 9.466899646s ago: executing program 36 (id=4525): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000048a2000000000000a4674a8200"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRESDEC=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) futex_waitv(&(0x7f0000000280)=[{0x0, &(0x7f0000000000), 0x2}, {0x0, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r3, &(0x7f0000000640), 0x0}, 0x20) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r6, r5, 0x0, 0x80009) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x9, "f3bfad2e"}, @main=@item_4={0x3, 0x0, 0xc}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x2, 0x0, 0xc, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00020000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r11 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r11, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r13 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r13, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r12, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 1.889720726s ago: executing program 6 (id=4650): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x80000001, 0x4003) close_range(r0, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="e90c630faca2aaaaaaaaaaaa6000450000b00000000000119078000000000000000000000000009c9078010000000000000061c03d2d2548741ff5015767096e1cd263026dd8f0703d2e22e3916500fdb8ec615eee2cb3c51e06deb424010178396b2afe4378c81f63a9eefc66ef338492fd3b688b2b06e6f206e4e6b8d1174296cdd8dbed9defbb6502c2888b524721c5807f3b4eedba8966f8774437dec5f2fb530587df616814b8c8912ef8a35989cc9aa18e60d1a66b0c9ec23f1b56eba488bfededb3c997ae1f61c31711ea52cfdd80a481f56e3b87d87ddc5cd7f9a67dfb4437115aa7ff5619fb57937d4ee674bf"], 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000004001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb0000000000", 0xd8}], 0x1}, 0x4000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) 1.829523741s ago: executing program 6 (id=4652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32=r0, @ANYBLOB="080003001900000008000100", @ANYRES32=r1], 0x44}}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 1.749474231s ago: executing program 6 (id=4655): socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x123, 0x235, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x46}, @NFC_ATTR_PROTOCOLS={0x8}]}, 0x2c}}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 1.748359265s ago: executing program 6 (id=4657): mkdir(&(0x7f0000000100)='./file0\x00', 0x11c) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000240)='vxfs\x00', 0x11, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r3, &(0x7f00000014c0)=ANY=[@ANYBLOB="50010400000000008c22bf9b2ed6e5b6939f4db1af835bd3842a774df6ac67043afcbb661f6193c8f764c1b6a22bd4565ff3ebcc6f39d330a513f7318bc1b3214fb4f2b3669b3fb146cdd87a1b831797690f2a907806e30014416faab14d55f9dffcd0d6e5aa9c6b0f0608ffafc2255e1dd414d06c101d2fc8d3c8", @ANYRES64=0x0, @ANYBLOB="0400000000000000030000000000000000000000000000000000000001000000070000001b02000006000000000000008f00000000000000090000000000000007000000000000005d0a0000000000000000010000000000090000007f00000003000000001000000a000000", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="c425ffff050000000000000003000000000000000d0000000000000001000000b0000000000000000000000006000000000000000100000000000000100000000000000004000000000000000000000004001000050000000000000085000000000000000aff4624000000000600000000000000010000000000000006000000000000000100000002000000070000000060000000040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000002000000000000000000000000000080040000005c08000047504c0000000000"], 0x150) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000600), 0x0}, 0x20) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r3, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r3, &(0x7f0000000600)="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", 0xe9d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x4f, 0x86, 0xfffffffffffffffe, 0x5, 0x7, 0x40000000a, 0x651, 0x100000004, 0x9657, 0x0, 0x7ffffffd, 0x0, 0xf3, 0xc, 0x8000000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x5, 0xfffffffd, 0x8, 0x8, 0xfffffffffffffffa, 0x5, 0x6}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="d09178d2da3477ec73a38ffffcd82caf103bc848f7ff22290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f"]}, @nested={0x11f, 0x6, 0x0, 0x1, [@typed={0x109, 0x0, 0x0, 0x0, @binary="7ec7ba67da011673ff1ab09e525585242784f25a94b9c1a68abdaf9f8add1006a67b4d693c1288f571c5170a818b005fdb1329cbfdf218310f40d1f304d996dc626d41898d87422f8bbb41206c39321b335fc70c9286ebdbb773955fe26f7c912cd9171c6d320a539fa594287d65bcb8b52f24e49a1ba39633cd52f1c1bf2930116650533617839f03127338b37b0d07242de37293ea67a40f2a4cd4cc5063766dac6d2766fe27e39a9154f81b08f957567d5997ae2ac9132fb043e493299254b85d88c6c24bbbd025319996e97994723530e334584477d2eb82c28b60bf2ff5b963ee93a2d8b0c02aeb1ab1e8f02d332611e22b66a6e906836600"/261}, @generic="d83bea4ae74b4d194feb3f8d8b6dcf"]}]}, 0x184}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.619423203s ago: executing program 6 (id=4658): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x3000, 0x8, 0x200, 0x101, 0x7, 0xfffffffd, 0xeaa1, 0x0, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r1, @in={{0x2, 0x4e24, @loopback}}, [0x100000001, 0x12bb, 0x0, 0xc8, 0x6, 0x9, 0x9, 0x3, 0x0, 0xf1ff, 0x10000, 0x6, 0x5, 0x5, 0x8]}, &(0x7f0000000240)=0x100) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000680)={0x85, 0x2, &(0x7f0000000280)="5b9260abe9fb55c44525d061441b745b7709c598168880825afbe7b106e075de05dee6c04e751902abad3d897fa2f044f35914564a70af377b858ebc50ddb44c705155dee2459664b1295f8ff0ad1b81b8e5d50610be657b9db5ffffc858ea8020a04fa37c4fddf03b4cd4a7586d66f7ae587bc057f90eec1fea3ba6b54e1f6046aab0f8715b5803843e4af8f173f45ad2c8f3965f01592dbc1010daa80edcc3ae41539278ed7bf1843d972d2bb3574a8e65f9f97abf960c6ca25cdec00ae566b838b5a29cd00d260f8ef8eb093a10b8649fec25e890fad11677c222f0c27d2bffc1c00d98809f0deca2dec73b64982db32a4968381b5206511bd9ce55b3ad8ddced545469cb553671f52fba5ead8fdd77f5d67cbd5f6174510c3147816a8ddfdd931c76b3baedef6be282efe772a9ca513fb63d53c3491e8bd633019eec96ffda0d7c041972534905cbfb72c03c4e0cfbe6257ca15aae7932269a5dcceb94bbbb8d7f3f83a676fa0c8695b2517115e6b8634474b3f94e4479b270af21e155b6da2ce8eff54c132dc14f81c6523bff31e0213e2c0da63a47a1a6bf7bb972e4f5f80bb86f056960ed5a68d719e14caffe0cfb1cb01cd4f299bc36681d6447b36a8908c80645acd54d019b60644c97e7bee374ff975bf805d434657d5c39074d1091627b21b193873bc43b82f129869b68b9028862690d96381062dd200e137e5a6ded15e89d1c0b0622e814a26c205ad53604931c988e5a455b1f6436d0650f3c405dd133cf1a63086212b74e619fc9271267c962fff3d1caed151890a52be6823a0ba7e650e6d746d0db09c9b4ddc7f4d087703f3317e2bb4e3e57991be61fa99f5c910e78f71ff39e0287df7940460cc4812596c70428d0f5f3389b92c74f1ac49e2492e9cdfbf9f2b73cf0511225480fef833260a4838eb2500bd1a306876f8336002172a40aec700136af29d4f39cdbce11c82d6be4fea259679f72cccccf9e5c9f99fff9c42ee591ddc18bcb3e61c304c920ff5498f4383d4116b26bf72d69946c70f3b4fc89137e5d6fd02e6220d985f8da230bc0444bd5162aff054a49aa0c940150e4fe1a76a78f08d3665e0dbf66e690a8342977a87ec7d4ad5286130deba62feca5b469d4540a6e70e01e73db2d82bac3c9ec797f2535a811dfcac9e9d27562e39f01bd6ccbdc53f43e589aac8373df02a2ed2861aaaa5f7d616ba4e125dbda0b884e54b07df8b547abc3969e76d94e6dda6b70ffcf49084a061f249fe1f7d950b5f393b278e2200e3b91a05a7bdc785632ec86d025b8dadde71100568bf39ca5b4ee895aaec2cb0ef2138356a8b3a27b201d3d120b5e029abe90af2a5a0e946fa365f184370bb91087b28433e2d052924d3d3ee05640fea2e081198eacf4be6c13815943b9039351b29dd84fa7c07a172efb9d30d2fa16e2b4235b"}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000780)={0x5, 0x7}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000007c0)={r2}, &(0x7f0000000800)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000840)=@assoc_value={r1, 0x1}, 0x8) r6 = syz_open_dev$rtc(&(0x7f0000000880), 0x1, 0x400600) ioctl$RTC_EPOCH_READ(r6, 0x8008700d, &(0x7f00000008c0)) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000900)={r1, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000940)={r1, 0x0, 0x5, 0x6, 0x2, 0x6, 0x4, 0xfff, {r1, @in={{0x2, 0x4e20, @multicast2}}, 0x5, 0x8, 0x5, 0x0, 0x10}}, &(0x7f0000000a00)=0xb0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000a40)=""/96) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000b40)={0x1ff, 0x38, '\x00', 0x1, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000b80)={0x2, [0x0, 0x0]}, &(0x7f0000000bc0)=0xc) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000c40), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x800}, @SEG6_ATTR_DST={0x14, 0x1, @private1}]}, 0x44}, 0x1, 0x0, 0x0, 0x9040}, 0x8010) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000001100)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40290}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e00)={0x270, r8, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x25b, 0xf, [@mic={0x8c, 0x18, {0x61e, "6a372729418c", @long="c7dde2d91101fcf3ffd0cbed0c151855"}}, @measure_req={0x26, 0xfe, {0x8, 0x0, 0x2, "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"}}, @chsw_timing={0x68, 0x4, {0xf, 0x6}}, @perr={0x84, 0xc9, {0x8, 0xd, [{{}, @broadcast, 0x0, @void, 0x6}, {{}, @device_b, 0x3, @void, 0x40}, {{0x0, 0x1}, @device_a, 0x5, @value=@broadcast, 0x3c}, {{}, @device_b, 0x8, @void, 0x10}, {{}, @broadcast, 0xff, @void, 0x3c}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x41}, {{0x0, 0x1}, @device_b, 0x1ea9, @value=@broadcast, 0x1b}, {{}, @device_a, 0x800}, {{0x0, 0x1}, @device_a, 0x9, @value=@broadcast, 0x23}, {{}, @device_b, 0x200, @void, 0x3b}, {{}, @device_b, 0xffffffff, @void, 0x15}, {{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0xd}, {{}, @device_a, 0x6, @void, 0x11}]}}, @fast_bss_trans={0x37, 0x61, {0x3, 0x1, "2cb0ebd311110bb3e7bdd263e79b4902", "418c7088f696a6f391ea7a85286a97b50e031608ddf58c9af78c61fac5a189f7", "e1ebdbc42b6497696c7d6524965fd3daedae37a43f527d1d1a441f97ae30a4e1", [{0x2, 0xd, "aafe04ef9717811302b482a71d"}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x4, 0x9}}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000001140)={0x20}, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000001180)=0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001280)={r2, 0x94, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x40, @remote, 0x4}, @in6={0xa, 0x4e23, 0x4, @private1, 0x7}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x9, @private1, 0x8}, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @multicast2}]}, &(0x7f00000012c0)=0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000001300)=0xe4, 0x4) r9 = socket$qrtr(0x2a, 0x2, 0x0) preadv(r9, &(0x7f00000014c0)=[{&(0x7f0000001340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/223, 0xdf}], 0x2, 0x1, 0x8) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000001500)) 1.618357199s ago: executing program 6 (id=4660): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0xc) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) r2 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x8, 0x2, 0x10, 0x9, 0x2, 0xd}, {0x9, 0x5, 0xe, 0x2, 0x8, 0x40, 0xfe, 0x9}, {0x9, 0x5, 0xe, 0x3, 0x10, 0x3, 0x1, 0xa}}}}}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) syz_usb_disconnect(r2) r4 = msgget$private(0x0, 0x3b2) msgsnd(r4, &(0x7f0000000d80)={0x2}, 0x8, 0x0) msgrcv(r4, &(0x7f0000000e80)={0x0, ""/64}, 0x48, 0x2, 0x800) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x77, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x1ff, 0xf, 0xf, 0x2}}}}}]}}]}}, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000080)=[@nested_vmlaunch={0x12f, 0x18, 0x2}, @code={0xa, 0x53, {"66b858000f00d00f785ab467480fae09640f01c23e66450f3881444847c42241a6adc3000000c481f55e8b0018000066bad104edc4a3816e8aa5c000009c260f01c9"}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x100000000}, @rdmsr={0x66, 0x18, {0x2e3}}, @nested_load_code={0x12e, 0x53, {0x0, "0f01c5460f38f62266b80b018ee03baa00800000f30f1efd66b827000f00d866baf80cb87076bb8cef66bafc0c66ed470f09420f07c44279086250"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4022, 0x7, 0x4, 0x7}}, @wr_drn={0x68, 0x20, {0x0, 0x7}}, @in_dx={0x69, 0x20, {0xcd29, 0x3}}, @nested_load_code={0x12e, 0x61, {0x2, "45c044e5fe0065f2410f1c41ff640f01df460f2207c4a1f8135dd62ef0400fc099000000800f20c035100000000f22c02e3e0f01cbadc7442400a3000000c744240287a8ca86ff1c24"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host64=0x2c05, 0x80000001, 0x10001, 0x5}}, @cpuid={0x64, 0x18, {0x781a, 0xf3}}, @nested_load_code={0x12e, 0x88, {0x2, "b983080000b807000000ba000000000f3064f0478108f47f000066ba4100ecc4c14dd85b6766b870000f00d0c48229995b79f32ef3dcfa66baf80cb810c2bd87ef66bafc0cb800000000efc744240000500000c744240200000000c7442406000000000f011c246566430f3a145700bc"}}], 0x2b7}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000380)={0xbe, 0x0, 0x1}) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) 1.289227713s ago: executing program 0 (id=4667): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800fffc1014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004c"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 1.286902272s ago: executing program 0 (id=4668): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='cubic', 0x6) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x82, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008136270086dd6043ea5600442f00fc010001000000000000000000000000ff020000000000000000000000000001242022eb000000000000db91875086dd080088be86ddffff100000010100000000000000080022eb00000003200400000200000000000000000400000800655800000000"], 0x0) (rerun: 64) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) (rerun: 64) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) 1.039524353s ago: executing program 0 (id=4673): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000001c0)="ba30a945e46b03d7dd459192252b6e3c518d8badd03bee30080487b36c9dc92d57f60c92e675acf419e99d5ca8758bdc1e0ddc04ee8d370e9e5c1faa5b4fefed59d0931c498f0c7a38aeae2c26014b38"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000400)=[@dead_binder_done], 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x29914}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x62795}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.039350505s ago: executing program 0 (id=4674): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) read$alg(r1, &(0x7f0000000000)=""/46, 0x2e) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x44, 0x9, 0x3, 0xfe, 0x7, 0x6, 0x1e, 0x81, 0xf9, 0x1, 0x4c, 0x3, 0x20}, 0xe) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 829.149485ms ago: executing program 8 (id=4681): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc001000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xb, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x4000000, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x3, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0xfffffffd, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1c9, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0xa06, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0xd, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x0, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x4b4d, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x400040, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x84, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0xb, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x40000009, 0x4, 0xf9, 0x3, 0xdab, 0x3, 0x8, 0x14000, 0x5, 0x9]}, 0x45c) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x11, 0x200, &(0x7f0000003c40)="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"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) syz_open_dev$dri(&(0x7f00000001c0), 0x4, 0x2100) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000400450009000000000006e9ada8fe0000000003000000"], 0x14}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x4f) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="305c0605e182d12fd8326183700398d1c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b93d502b0cd490e35d53ddf6fd0461690982b2369490100b06df5aa58a09a000000808ce41d86b9b949004fd8fe7b80000000", 0x5e, 0xfffffffffffffffe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001b040)) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 747.78479ms ago: executing program 7 (id=4684): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc001000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xb, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x4000000, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x3, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0xfffffffd, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1c9, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0xa06, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0xd, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x0, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x4b4d, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x400040, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x84, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0xb, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x40000009, 0x4, 0xf9, 0x3, 0xdab, 0x3, 0x8, 0x14000, 0x5, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 5) 588.473288ms ago: executing program 8 (id=4685): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x10, 0xffffffff973d4f4d, 0x80c, 0xffb, 0x1a5, 0xffeffffa, 0x0, 0x0, 0x14, 0x10000101}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 329.654222ms ago: executing program 8 (id=4686): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000fc1014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004c"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 329.356823ms ago: executing program 8 (id=4687): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x48803) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000680)="02815c8edc872c4e4fa83d770ec18b39a030152d7bc57fe35d1fa7ec745786d5daf8454dcd82adb43257284f5ed0ee3303d61fc1960b3d00ba69652939e65437d8", 0x41) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r4 = socket(0x2, 0x2, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000000010500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000280)=0x3, 0x4) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="05000000010000", 0x7) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f00000000c0)={&(0x7f00000001c0), 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 190.31508ms ago: executing program 7 (id=4688): connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3800000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4050}, 0x81) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 139.679588ms ago: executing program 0 (id=4689): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x4e, 0x2, 0x3, "11010100001400000100005c4b7c1500000000f100"}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004c"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 139.163853ms ago: executing program 7 (id=4690): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x73, 0x10081) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0) 138.974851ms ago: executing program 7 (id=4691): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000004000", "f4bd000000801900", [0x0, 0x2000000000001]}}) 138.568275ms ago: executing program 0 (id=4692): r0 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) (async, rerun: 64) r1 = getuid() (rerun: 64) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1900) read$FUSE(r2, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, r3, &(0x7f0000000100)='./file0\x00') setresuid(0x0, r1, r3) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) flock(r5, 0x1) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000100)=""/62, &(0x7f0000000140)=0x3e) fchdir(r4) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0xfffffee5, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 60.389823ms ago: executing program 7 (id=4693): futex(&(0x7f0000000140)=0x4, 0x8, 0xfffff7fe, 0x0, 0x0, 0x2) 58.231144ms ago: executing program 7 (id=4694): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x42100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)={0x20, r3, 0x301, 0x8, 0x25dfdbfc, {0x1c}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4040) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000080)={&(0x7f0000000100)=[r1], 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, r6, 0x79abb0b8, 0x7f61, 0x80, 0x0, 0xc, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, r6}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(salsa20,sm3)\x00'}, 0x58) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @remote, @val={@void, {0x8100, 0x5, 0x1}}, {@canfd={0xd, {{0x0, 0x1, 0x1, 0x1}, 0x30, 0x1, 0x0, 0x0, "769cefafdc01f9692dcf11f0f39d387f74195461ba1b2c42fc07315b4e33b1083a93f6c30ae055abfe90d057ac7bde1b63fc0280a75470ba2fb96fa0c46aa73a"}}}}, &(0x7f00000000c0)={0x0, 0x1, [0x184, 0x90b, 0x47, 0x537]}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) 58.0259ms ago: executing program 8 (id=4695): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x0, 0xfffffffd}}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x0, 0xfffffffd}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) 0s ago: executing program 8 (id=4696): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc001000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xb, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x4000000, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x3, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0xfffffffd, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1c9, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0xa06, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0xd, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x0, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x4b4d, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x400040, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x84, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0xb, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x40000009, 0x4, 0xf9, 0x3, 0xdab, 0x3, 0x8, 0x14000, 0x5, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 6) kernel console output (not intermixed with test programs): d [ 277.447885][T18435] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 277.591389][T18455] usb usb8: usbfs: process 18455 (syz.0.3930) did not claim interface 0 before use [ 277.631009][T18459] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 277.631009][T18459] program syz.6.3931 not setting count and/or reply_len properly [ 277.639282][T18461] loop6: detected capacity change from 0 to 7 [ 277.653836][T18461] Dev loop6: unable to read RDB block 7 [ 277.655768][T18461] loop6: unable to read partition table [ 277.659452][T18461] loop6: partition table beyond EOD, truncated [ 277.662187][T18461] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 277.821657][T18484] mkiss: ax0: crc mode is auto. [ 277.866883][ T5785] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 277.899441][T18489] netlink: 'syz.3.3939': attribute type 1 has an invalid length. [ 277.902057][T18489] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3939'. [ 277.905019][T18489] netlink: 658 bytes leftover after parsing attributes in process `syz.3.3939'. [ 277.908053][T18489] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3939'. [ 277.994974][T18501] loop6: detected capacity change from 0 to 7 [ 277.998614][T18501] Dev loop6: unable to read RDB block 7 [ 278.001136][T18501] loop6: unable to read partition table [ 278.003668][T18501] loop6: partition table beyond EOD, truncated [ 278.006445][T18501] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 278.039316][ T5785] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 278.043246][ T5785] usb 10-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 278.056373][ T5785] usb 10-1: config 220 interface 0 has no altsetting 0 [ 278.063551][ T5785] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 278.067068][ T5785] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.070215][ T5785] usb 10-1: Product: syz [ 278.071623][ T5785] usb 10-1: Manufacturer: syz [ 278.073169][ T5785] usb 10-1: SerialNumber: syz [ 278.842040][T18524] usb usb8: usbfs: process 18524 (syz.0.3951) did not claim interface 0 before use [ 278.884250][T18528] loop6: detected capacity change from 0 to 7 [ 278.889039][T18528] Dev loop6: unable to read RDB block 7 [ 278.891335][T18528] loop6: unable to read partition table [ 278.894034][T18528] loop6: partition table beyond EOD, truncated [ 278.896906][T18528] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 278.948792][T18530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3954'. [ 279.025305][ T6022] IPVS: starting estimator thread 0... [ 279.067027][T18544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3959'. [ 279.146760][T18541] IPVS: using max 43 ests per chain, 103200 per kthread [ 279.202106][T18553] kernel read not supported for file /policy (pid: 18553 comm: syz.3.3961) [ 279.210470][T18553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3961'. [ 279.393253][T18562] 9pnet_virtio: no channels available for device syz [ 279.505355][T18565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3966'. [ 279.535211][T18566] veth9: entered promiscuous mode [ 279.537911][T18566] veth9: entered allmulticast mode [ 279.639322][T18571] delete_channel: no stack [ 279.787372][T18580] loop6: detected capacity change from 0 to 7 [ 279.790621][T18580] Dev loop6: unable to read RDB block 7 [ 279.792997][T18580] loop6: unable to read partition table [ 279.795034][T18580] loop6: partition table beyond EOD, truncated [ 279.797608][T18580] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 279.953980][T18606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3979'. [ 279.988474][T18610] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3980'. [ 279.993804][T18612] loop6: detected capacity change from 0 to 7 [ 279.996865][T18612] Dev loop6: unable to read RDB block 7 [ 279.998781][T18612] loop6: unable to read partition table [ 280.000932][T18612] loop6: partition table beyond EOD, truncated [ 280.002972][T18612] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 280.114444][T18627] program syz.0.3988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.286462][ T34] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 280.296489][T18635] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 280.448063][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.452824][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.460568][ T34] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.466012][ T34] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.469985][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.475628][ T34] usb 11-1: config 0 descriptor?? [ 280.562006][ T5785] uvcvideo 10-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 280.564416][ T5785] uvcvideo 10-1:220.0: No valid video chain found. [ 280.567688][ T5785] usb 10-1: USB disconnect, device number 16 [ 280.686403][ T34] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 280.750638][T18655] hugetlbfs: Unknown parameter '4v¤¸™¾îs' [ 281.008101][T18651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.011168][T18651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.017307][T18665] nbd: must specify an index to disconnect [ 281.819255][ T40] kauditd_printk_skb: 200 callbacks suppressed [ 281.819317][ T40] audit: type=1400 audit(1768809071.268:63213): avc: denied { ioctl } for pid=18670 comm="syz.5.4004" path="socket:[78789]" dev="sockfs" ino=78789 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.820900][T18671] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4004'. [ 281.843116][ T40] audit: type=1400 audit(1768809071.288:63214): avc: denied { mount } for pid=18670 comm="syz.5.4004" name="/" dev="9p" ino=71827601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 281.851471][ T40] audit: type=1400 audit(1768809071.288:63215): avc: denied { create } for pid=18670 comm="syz.5.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 281.857924][ T40] audit: type=1400 audit(1768809071.288:63216): avc: denied { setopt } for pid=18670 comm="syz.5.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 281.864231][ T40] audit: type=1400 audit(1768809071.308:63217): avc: denied { unmount } for pid=15070 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 281.922047][ T40] audit: type=1400 audit(1768809071.368:63218): avc: denied { read write } for pid=15070 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.932523][ T40] audit: type=1400 audit(1768809071.368:63219): avc: denied { open } for pid=15070 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.941280][ T40] audit: type=1400 audit(1768809071.368:63220): avc: denied { ioctl } for pid=15070 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.950639][ T40] audit: type=1400 audit(1768809071.398:63221): avc: denied { ioctl } for pid=18672 comm="syz.5.4005" path="socket:[77814]" dev="sockfs" ino=77814 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 281.958800][ T40] audit: type=1400 audit(1768809071.398:63222): avc: denied { create } for pid=18672 comm="syz.5.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 282.239905][T18681] Bluetooth: hci0: service_discovery: too big uuid_count value 18191 [ 282.472557][T18693] trusted_key: encrypted_key: insufficient parameters specified [ 282.521484][T18699] io-wq is not configured for unbound workers [ 282.597608][T18706] hfs: can't find a HFS filesystem on dev sr0 [ 282.632468][T18710] xt_recent: Unsupported userspace flags (000000b2) [ 282.642922][T18711] xt_recent: Unsupported userspace flags (000000b2) [ 282.690922][ T6022] usb 11-1: USB disconnect, device number 4 [ 283.333165][T18745] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 283.389679][T18747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=18747 comm=syz.5.4030 [ 283.394554][T18747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=18747 comm=syz.5.4030 [ 283.398991][T18747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=18747 comm=syz.5.4030 [ 283.403448][T18747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=18747 comm=syz.5.4030 [ 283.407482][T18747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=18747 comm=syz.5.4030 [ 283.411451][T18747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=18747 comm=syz.5.4030 [ 283.415447][T18747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=18747 comm=syz.5.4030 [ 283.424339][T18747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=18747 comm=syz.5.4030 [ 283.428944][T18747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=18747 comm=syz.5.4030 [ 283.433247][T18747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=18747 comm=syz.5.4030 [ 283.475868][T18750] raw_sendmsg: syz.3.4031 forgot to set AF_INET. Fix it! [ 283.493106][T18752] xt_hashlimit: max too large, truncated to 1048576 [ 283.708137][T18782] __nla_validate_parse: 1 callbacks suppressed [ 283.708148][T18782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4042'. [ 283.716049][T18780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4042'. [ 283.777914][T18788] net_ratelimit: 52 callbacks suppressed [ 283.777925][T18788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.783442][T18788] loop6: detected capacity change from 0 to 7 [ 283.788088][T18788] Dev loop6: unable to read RDB block 7 [ 283.790084][T18788] loop6: AHDI p1 p2 p3 [ 283.791495][T18788] loop6: partition table partially beyond EOD, truncated [ 283.793915][T18788] loop6: p3 start 335544320 is beyond EOD, truncated [ 283.870736][T18795] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4048'. [ 283.874142][T18795] netlink: 'syz.5.4048': attribute type 10 has an invalid length. [ 283.880852][T18795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.883890][T18795] batadv0: entered promiscuous mode [ 283.888134][T18795] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 284.052272][ T5295] Bluetooth: hci0: ISO packet for unknown connection handle 1585 [ 284.089043][T18816] erspan1: entered promiscuous mode [ 284.276673][ T9] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 284.383024][T18831] overlayfs: failed to verify upper (304/file1, ino=1827, err=-116) [ 284.387468][T18831] overlayfs: failed to verify index dir 'upper' xattr [ 284.389777][T18831] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 284.427636][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.432145][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.435476][ T9] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.440149][ T9] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.443312][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.450008][ T9] usb 11-1: config 0 descriptor?? [ 284.578772][T18850] netlink: 'syz.0.4067': attribute type 1 has an invalid length. [ 284.581462][T18850] netlink: 'syz.0.4067': attribute type 2 has an invalid length. [ 284.591482][T18850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4067'. [ 284.662078][T18861] netlink: 'syz.5.4071': attribute type 10 has an invalid length. [ 284.668231][T18861] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 284.671694][T18861] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 284.675698][T18861] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 284.687099][T18861] netlink: 'syz.5.4071': attribute type 1 has an invalid length. [ 284.713249][T18868] loop6: detected capacity change from 0 to 7 [ 284.715665][T18868] Dev loop6: unable to read RDB block 7 [ 284.717793][T18868] loop6: unable to read partition table [ 284.719658][T18868] loop6: partition table beyond EOD, truncated [ 284.721571][T18868] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 284.746159][T18869] netlink: 'syz.5.4071': attribute type 10 has an invalid length. [ 284.749016][T18869] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4071'. [ 284.752415][T18869] dummy0: entered promiscuous mode [ 284.866154][ T9] plantronics 0003:047F:FFFF.000D: invalid report_count 783138803 [ 284.870250][ T9] plantronics 0003:047F:FFFF.000D: item 0 4 1 9 parsing failed [ 284.874923][ T9] plantronics 0003:047F:FFFF.000D: parse failed [ 284.877247][ T9] plantronics 0003:047F:FFFF.000D: probe with driver plantronics failed with error -22 [ 284.924755][T18881] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4078'. [ 284.930610][T18881] netlink: Conntrack attr has 4 unknown bytes [ 284.970767][T18884] input: syz1 as /devices/virtual/input/input36 [ 285.020539][T18892] loop6: detected capacity change from 0 to 7 [ 285.023060][T18892] Dev loop6: unable to read RDB block 7 [ 285.026130][T18892] loop6: unable to read partition table [ 285.029886][T18892] loop6: partition table beyond EOD, truncated [ 285.032056][T18892] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 285.071640][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4055'. [ 285.083638][ T9] usb 11-1: USB disconnect, device number 5 [ 285.276356][ T6022] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 285.307623][T18902] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 285.312003][T18903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4085'. [ 285.432238][ T6022] usb 10-1: unable to get BOS descriptor or descriptor too short [ 285.436155][ T6022] usb 10-1: not running at top speed; connect to a high speed hub [ 285.440951][ T6022] usb 10-1: config 1 has an invalid interface number: 26 but max is 0 [ 285.443523][ T6022] usb 10-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 285.447820][ T6022] usb 10-1: config 1 has no interface number 0 [ 285.450008][ T6022] usb 10-1: config 1 interface 26 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.454828][ T6022] usb 10-1: config 1 interface 26 has no altsetting 0 [ 285.458883][ T6022] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.461873][ T6022] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.464455][ T6022] usb 10-1: Product: syz [ 285.465874][ T6022] usb 10-1: Manufacturer: syz [ 285.467610][ T6022] usb 10-1: SerialNumber: syz [ 285.675413][T18891] netlink: 45 bytes leftover after parsing attributes in process `syz.5.4081'. [ 285.707817][T18933] netlink: 'syz.0.4095': attribute type 3 has an invalid length. [ 285.710284][T18933] netlink: 'syz.0.4095': attribute type 1 has an invalid length. [ 285.712700][T18933] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4095'. [ 285.751790][ T6022] cdc_ether 10-1:1.26: skipping garbage [ 285.753673][ T6022] usb 10-1: bad CDC descriptors [ 285.757409][ T6022] usb 10-1: USB disconnect, device number 17 [ 285.789450][T18938] program syz.6.4100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.799775][T18942] netlink: 'syz.0.4102': attribute type 13 has an invalid length. [ 285.802621][T18942] ªªªªªª: entered promiscuous mode [ 285.805288][T18942] ªªªªªª: entered allmulticast mode [ 285.813371][T18942] tunl0: entered promiscuous mode [ 285.815587][T18942] tunl0: entered allmulticast mode [ 285.824189][T18942] gre0: entered promiscuous mode [ 285.826568][T18942] gre0: entered allmulticast mode [ 285.830304][T18942] gretap0: entered promiscuous mode [ 285.832514][T18942] gretap0: entered allmulticast mode [ 285.839915][T18942] erspan0: entered promiscuous mode [ 285.842216][T18942] erspan0: entered allmulticast mode [ 285.852356][T18942] ip_vti0: entered promiscuous mode [ 285.854650][T18942] ip_vti0: entered allmulticast mode [ 285.858782][T18942] ip6_vti0: entered promiscuous mode [ 285.860535][T18942] ip6_vti0: entered allmulticast mode [ 285.864508][T18942] sit0: entered promiscuous mode [ 285.867116][T18942] sit0: entered allmulticast mode [ 285.871418][T18942] ip6tnl0: entered promiscuous mode [ 285.873729][T18942] ip6tnl0: entered allmulticast mode [ 285.881843][T18942] ip6gre0: entered promiscuous mode [ 285.883725][T18942] ip6gre0: entered allmulticast mode [ 285.887500][T18942] syz_tun: entered promiscuous mode [ 285.889722][T18942] syz_tun: entered allmulticast mode [ 285.896884][T18942] ip6gretap0: entered promiscuous mode [ 285.898736][T18942] ip6gretap0: entered allmulticast mode [ 285.908831][T18942] bridge0: entered promiscuous mode [ 285.910607][T18942] bridge0: entered allmulticast mode [ 285.914235][T18942] vcan0: entered promiscuous mode [ 285.915967][T18942] vcan0: entered allmulticast mode [ 285.919753][T18942] bond0: entered promiscuous mode [ 285.921472][T18942] bond_slave_0: entered promiscuous mode [ 285.923845][T18942] bond_slave_1: entered promiscuous mode [ 285.926056][T18942] mac80211_hwsim hwsim27 : entered promiscuous mode [ 285.928754][T18942] bond0: entered allmulticast mode [ 285.930494][T18942] bond_slave_0: entered allmulticast mode [ 285.932501][T18942] bond_slave_1: entered allmulticast mode [ 285.934434][T18942] mac80211_hwsim hwsim27 : entered allmulticast mode [ 285.939829][T18942] team0: entered promiscuous mode [ 285.942071][T18942] team_slave_0: entered promiscuous mode [ 285.944641][T18942] team_slave_1: entered promiscuous mode [ 285.946763][T18942] geneve0: entered promiscuous mode [ 285.948664][T18942] team0: entered allmulticast mode [ 285.950396][T18942] team_slave_0: entered allmulticast mode [ 285.952369][T18942] team_slave_1: entered allmulticast mode [ 285.954253][T18942] geneve0: entered allmulticast mode [ 285.957182][T18942] dummy0: entered promiscuous mode [ 285.958982][T18942] dummy0: entered allmulticast mode [ 285.961819][T18942] nlmon0: entered promiscuous mode [ 285.963541][T18942] nlmon0: entered allmulticast mode [ 285.967547][T18942] caif0: entered promiscuous mode [ 285.969640][T18942] caif0: entered allmulticast mode [ 285.972050][T18942] batadv0: entered promiscuous mode [ 285.974172][T18942] batadv0: entered allmulticast mode [ 285.977762][T18942] vxcan0: entered promiscuous mode [ 285.979708][T18942] vxcan0: entered allmulticast mode [ 285.982826][T18942] vxcan1: entered promiscuous mode [ 285.984816][T18951] netlink: 'syz.6.4105': attribute type 5 has an invalid length. [ 285.985065][T18942] vxcan1: entered allmulticast mode [ 285.992720][T18942] veth0: entered promiscuous mode [ 285.994411][T18942] veth0: entered allmulticast mode [ 285.997603][T18942] veth1: entered promiscuous mode [ 285.999359][T18942] veth1: entered allmulticast mode [ 286.002216][T18942] wg0: entered promiscuous mode [ 286.003760][T18942] wg0: entered allmulticast mode [ 286.006749][T18942] wg1: entered promiscuous mode [ 286.008366][T18942] wg1: entered allmulticast mode [ 286.011091][T18942] wg2: entered promiscuous mode [ 286.012698][T18942] wg2: entered allmulticast mode [ 286.015373][T18942] veth0_to_bridge: entered promiscuous mode [ 286.017474][T18942] veth0_to_bridge: entered allmulticast mode [ 286.021275][T18942] veth1_to_bridge: entered promiscuous mode [ 286.023209][T18942] veth1_to_bridge: entered allmulticast mode [ 286.028207][T18942] veth0_to_bond: entered promiscuous mode [ 286.030071][T18942] veth0_to_bond: entered allmulticast mode [ 286.033373][T18942] veth1_to_bond: entered promiscuous mode [ 286.035700][T18942] veth1_to_bond: entered allmulticast mode [ 286.040360][T18942] veth0_to_team: entered promiscuous mode [ 286.042235][T18942] veth0_to_team: entered allmulticast mode [ 286.045716][T18942] veth1_to_team: entered promiscuous mode [ 286.048742][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 286.050960][T18942] veth1_to_team: entered allmulticast mode [ 286.057704][T18942] veth0_to_batadv: entered promiscuous mode [ 286.060188][T18942] veth0_to_batadv: entered allmulticast mode [ 286.063541][T18942] batadv_slave_0: entered promiscuous mode [ 286.065544][T18942] batadv_slave_0: entered allmulticast mode [ 286.069486][T18942] veth1_to_batadv: entered promiscuous mode [ 286.071450][T18942] veth1_to_batadv: entered allmulticast mode [ 286.074120][T18942] batadv_slave_1: entered promiscuous mode [ 286.076058][T18942] batadv_slave_1: entered allmulticast mode [ 286.080644][T18942] veth0_to_hsr: entered promiscuous mode [ 286.082960][T18942] veth0_to_hsr: entered allmulticast mode [ 286.087846][T18942] hsr_slave_0: entered allmulticast mode [ 286.091487][T18942] veth1_to_hsr: entered promiscuous mode [ 286.093890][T18942] veth1_to_hsr: entered allmulticast mode [ 286.100298][T18942] hsr0: entered promiscuous mode [ 286.102475][T18942] hsr0: entered allmulticast mode [ 286.106188][T18942] veth1_virt_wifi: entered promiscuous mode [ 286.109166][T18942] veth1_virt_wifi: entered allmulticast mode [ 286.113599][T18942] veth0_virt_wifi: entered promiscuous mode [ 286.116072][T18942] veth0_virt_wifi: entered allmulticast mode [ 286.121438][T18942] veth1_vlan: entered allmulticast mode [ 286.125651][T18942] veth0_vlan: entered allmulticast mode [ 286.131192][T18942] vlan0: entered promiscuous mode [ 286.133370][T18942] vlan0: entered allmulticast mode [ 286.137457][T18942] vlan1: entered promiscuous mode [ 286.139152][T18942] vlan1: entered allmulticast mode [ 286.142129][T18942] macvlan0: entered allmulticast mode [ 286.144405][T18942] macvlan1: entered promiscuous mode [ 286.147310][T18942] macvlan1: entered allmulticast mode [ 286.150394][T18942] ipvlan0: entered promiscuous mode [ 286.152057][T18942] ipvlan0: entered allmulticast mode [ 286.153927][T18942] ipvlan1: entered promiscuous mode [ 286.155573][T18942] ipvlan1: entered allmulticast mode [ 286.157906][T18942] veth1_macvtap: entered allmulticast mode [ 286.160976][T18942] veth0_macvtap: entered allmulticast mode [ 286.163783][T18942] macvtap0: entered promiscuous mode [ 286.165582][T18942] macvtap0: entered allmulticast mode [ 286.173655][T18942] macsec0: entered promiscuous mode [ 286.175409][T18942] macsec0: entered allmulticast mode [ 286.180304][T18942] geneve1: entered promiscuous mode [ 286.182006][T18942] geneve1: entered allmulticast mode [ 286.184833][T18942] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 286.187692][T18942] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 286.190989][T18942] !: entered allmulticast mode [ 286.192756][T18942] bond1: entered promiscuous mode [ 286.194360][T18942] bond1: entered allmulticast mode [ 286.196187][T18942] bond2: entered promiscuous mode [ 286.198211][T18942] bond2: entered allmulticast mode [ 286.200086][T18942] bridge1: entered promiscuous mode [ 286.201749][T18942] bridge1: entered allmulticast mode [ 286.204556][T18942] bond3: entered promiscuous mode [ 286.206986][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 286.211319][T18942] bond3: entered allmulticast mode [ 286.213215][T18942] macvlan2: entered allmulticast mode [ 286.215144][T18942] macvlan3: entered allmulticast mode [ 286.217315][T18942] vlan2: entered promiscuous mode [ 286.219035][T18942] vlan2: entered allmulticast mode [ 286.221704][T18942] veth2: entered promiscuous mode [ 286.223278][T18942] veth2: entered allmulticast mode [ 286.225126][T18942] veth3: entered promiscuous mode [ 286.227053][T18942] veth3: entered allmulticast mode [ 286.228897][T18942] bond4: entered promiscuous mode [ 286.230448][T18942] bond4: entered allmulticast mode [ 286.232268][T18942] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 286.234488][T18942] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 286.237566][T18942] pim6reg: entered promiscuous mode [ 286.240119][T18942] bridge2: entered promiscuous mode [ 286.241802][T18942] bridge2: entered allmulticast mode [ 286.244595][T18942] sit1: entered promiscuous mode [ 286.246860][T18942] sit1: entered allmulticast mode [ 286.250988][T18942] sit2: entered promiscuous mode [ 286.252635][T18942] sit2: entered allmulticast mode [ 286.255564][T18942] netdevsim netdevsim0 eth0: entered promiscuous mode [ 286.257881][T18942] netdevsim netdevsim0 eth0: entered allmulticast mode [ 286.260333][T18942] netdevsim netdevsim0 eth1: entered promiscuous mode [ 286.262488][T18942] netdevsim netdevsim0 eth1: entered allmulticast mode [ 286.265551][T18942] netdevsim netdevsim0 eth2: entered promiscuous mode [ 286.268137][T18942] netdevsim netdevsim0 eth2: entered allmulticast mode [ 286.270501][T18942] netdevsim netdevsim0 eth3: entered promiscuous mode [ 286.272571][T18942] netdevsim netdevsim0 eth3: entered allmulticast mode [ 286.274922][T18942] : entered allmulticast mode [ 286.277463][T18942] veth4: entered promiscuous mode [ 286.279077][T18942] veth4: entered allmulticast mode [ 286.280894][T18942] veth5: entered promiscuous mode [ 286.282513][T18942] veth5: entered allmulticast mode [ 286.284345][T18942] @: entered promiscuous mode [ 286.285868][T18942] @: entered allmulticast mode [ 286.288503][T18942] gtp0: entered promiscuous mode [ 286.290091][T18942] gtp0: entered allmulticast mode [ 286.291890][T18942] ip6_vti1: entered promiscuous mode [ 286.293597][T18942] ip6_vti1: entered allmulticast mode [ 286.296200][T18942] veth6: entered promiscuous mode [ 286.297985][T18942] veth6: entered allmulticast mode [ 286.299867][T18942] veth7: entered promiscuous mode [ 286.301458][T18942] veth7: entered allmulticast mode [ 286.303261][T18942] bridge3: entered promiscuous mode [ 286.304923][T18942] bridge3: entered allmulticast mode [ 286.368018][T18958] virtio-fs: tag not found [ 286.411696][T18960] team0: Device gtp0 is of different type [ 286.417431][T18965] loop6: detected capacity change from 0 to 7 [ 286.420579][T18965] Dev loop6: unable to read RDB block 7 [ 286.422653][T18965] loop6: unable to read partition table [ 286.424893][T18965] loop6: partition table beyond EOD, truncated [ 286.427604][T18965] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 286.535357][T18969] /dev/loop0: Can't lookup blockdev [ 286.539851][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 286.728935][T18986] overlayfs: failed to get inode (-116) [ 286.732611][T18986] overlayfs: failed to get inode (-116) [ 286.802816][T18990] loop6: detected capacity change from 0 to 7 [ 286.803470][T18990] Dev loop6: unable to read RDB block 7 [ 286.803502][T18990] loop6: unable to read partition table [ 286.803629][T18990] loop6: partition table beyond EOD, truncated [ 286.803645][T18990] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 286.827749][ T40] kauditd_printk_skb: 216 callbacks suppressed [ 286.827767][ T40] audit: type=1400 audit(1768809076.278:63439): avc: denied { unmount } for pid=18983 comm="syz.0.4116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 286.832575][ T40] audit: type=1400 audit(1768809076.278:63440): avc: denied { read } for pid=18983 comm="syz.0.4116" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 286.849948][ T40] audit: type=1400 audit(1768809076.278:63441): avc: denied { open } for pid=18983 comm="syz.0.4116" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 286.850002][ T40] audit: type=1400 audit(1768809076.278:63442): avc: denied { ioctl } for pid=18983 comm="syz.0.4116" path="/dev/input/event1" dev="devtmpfs" ino=942 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 286.850044][ T40] audit: type=1400 audit(1768809076.278:63443): avc: denied { create } for pid=18983 comm="syz.0.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 286.850081][ T40] audit: type=1400 audit(1768809076.278:63444): avc: denied { create } for pid=18983 comm="syz.0.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 286.850120][ T40] audit: type=1400 audit(1768809076.278:63445): avc: denied { write } for pid=18983 comm="syz.0.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 286.862191][ T40] audit: type=1400 audit(1768809076.318:63446): avc: denied { shutdown } for pid=18992 comm="syz.6.4119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.867525][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 286.911430][ T40] audit: type=1400 audit(1768809076.318:63447): avc: denied { connect } for pid=18992 comm="syz.6.4119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.911469][ T40] audit: type=1400 audit(1768809076.348:63448): avc: denied { prog_run } for pid=18994 comm="syz.6.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 286.986432][ T55] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 287.097120][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 287.146382][ T55] usb 10-1: Using ep0 maxpacket: 32 [ 287.152066][ T55] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 287.152086][ T55] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 287.152097][ T55] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 287.152109][ T55] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 287.152122][ T55] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 287.153718][ T55] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 287.153733][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.153743][ T55] usb 10-1: Product: syz [ 287.153751][ T55] usb 10-1: Manufacturer: syz [ 287.153758][ T55] usb 10-1: SerialNumber: syz [ 287.155053][ T55] usb 10-1: config 0 descriptor?? [ 287.155653][T18986] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 287.157655][ T55] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input37 [ 287.199845][ T5330] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 287.205231][ T5330] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 287.209010][ T5330] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 287.215086][ T5330] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 287.223086][T19000] delete_channel: no stack [ 287.379524][T18986] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 287.387619][ T55] usb 10-1: USB disconnect, device number 18 [ 287.514882][T19017] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 287.518976][T19017] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 287.525390][T19017] cramfs: wrong magic [ 287.598561][T19025] hugetlbfs: Unknown parameter '±i€­(ÎÞ/ì' [ 287.640959][T19029] netem: invalid attributes len -22 [ 287.642780][T19029] netem: change failed [ 287.846637][T19048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.850062][T19048] IPv6: NLM_F_CREATE should be set when creating new route [ 287.859711][T19048] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 287.926837][T19053] loop6: detected capacity change from 0 to 7 [ 287.928405][T19051] random: crng reseeded on system resumption [ 287.929355][T19053] Dev loop6: unable to read RDB block 7 [ 287.932965][T19053] loop6: unable to read partition table [ 287.934677][T19053] loop6: partition table beyond EOD, truncated [ 287.936836][T19053] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 287.938912][T19051] tipc: Started in network mode [ 287.941691][T19051] tipc: Node identity 84e, cluster identity 4711 [ 287.944042][T19051] tipc: Node number set to 2126 [ 287.959024][T19051] xt_ecn: cannot match TCP bits for non-tcp packets [ 287.961845][T19051] nbd: couldn't find a device at index 0 [ 288.138685][T19064] kAFS: unable to lookup cell 'syz0' [ 288.190527][T19073] openvswitch: netlink: IP tunnel dst address not specified [ 288.241738][T19079] loop6: detected capacity change from 0 to 7 [ 288.246191][T19077] : entered promiscuous mode [ 288.251947][T19079] Dev loop6: unable to read RDB block 7 [ 288.254956][T19079] loop6: unable to read partition table [ 288.257030][T19079] loop6: partition table beyond EOD, truncated [ 288.259428][T19079] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 288.369614][T19100] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 288.374843][T19100] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 288.418861][T19106] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 288.502609][T19119] loop6: detected capacity change from 0 to 7 [ 288.507342][T19119] Dev loop6: unable to read RDB block 7 [ 288.509880][T19119] loop6: unable to read partition table [ 288.512442][T19119] loop6: partition table beyond EOD, truncated [ 288.515166][T19119] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 288.624210][T19130] xt_bpf: check failed: parse error [ 288.846473][ T986] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 288.933935][ T9] hid_parser_main: 4086 callbacks suppressed [ 288.933948][ T9] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 288.939125][ T9] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 288.941599][ T9] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 288.944537][ T9] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 288.947916][ T9] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 288.951218][ T9] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 288.954543][ T9] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 288.958378][ T9] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 288.960999][ T9] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 288.963519][ T9] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 288.968389][ T55] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 288.968485][ T9] hid-generic 0003:0004:0000.000E: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 289.001697][ T986] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 289.005926][ T986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.010033][ T986] usb 5-1: Product: syz [ 289.011900][ T986] usb 5-1: Manufacturer: syz [ 289.013948][ T986] usb 5-1: SerialNumber: syz [ 289.118876][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 289.122522][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 289.126084][ T55] usb 11-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 289.129128][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.135289][ T55] usb 11-1: config 0 descriptor?? [ 289.138805][T19146] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 289.229522][ T986] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 289.233870][ T986] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 289.237751][ T986] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 289.245919][ T986] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 289.252414][ T986] usb 5-1: USB disconnect, device number 28 [ 289.345186][ T55] usbhid 11-1:0.0: can't add hid device: -71 [ 289.348321][ T55] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 289.355972][ T55] usb 11-1: USB disconnect, device number 6 [ 289.823456][T19181] __nla_validate_parse: 15 callbacks suppressed [ 289.823472][T19181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4179'. [ 289.827905][T19183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4179'. [ 289.828017][T19178] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 289.849296][T19181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4179'. [ 289.852615][T19181] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4179'. [ 289.960817][T19190] ip6tnl2: entered promiscuous mode [ 290.032362][T19196] mkiss: ax0: crc mode is auto. [ 290.206894][T19206] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.4186'. [ 290.210902][T19204] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.4186'. [ 290.413223][T19222] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4190'. [ 290.419196][T19222] validate_nla: 2 callbacks suppressed [ 290.419206][T19222] netlink: 'syz.6.4190': attribute type 10 has an invalid length. [ 290.429155][T19222] netlink: 'syz.6.4190': attribute type 10 has an invalid length. [ 290.437026][T19222] dummy0: entered promiscuous mode [ 290.440191][T19222] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 290.551175][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4192'. [ 290.659380][T19226] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 290.662026][T19226] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 290.670453][T19226] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 290.681226][T19226] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 290.684677][T19226] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 290.689880][T19226] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 290.892867][T19239] delete_channel: no stack [ 290.894464][T19239] delete_channel: no stack [ 291.091368][T19253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4204'. [ 291.093871][T19252] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 291.192945][T19269] loop6: detected capacity change from 0 to 7 [ 291.196239][T19269] Dev loop6: unable to read RDB block 7 [ 291.198507][T19269] loop6: unable to read partition table [ 291.200805][T19269] loop6: partition table beyond EOD, truncated [ 291.202796][T19269] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 291.399695][T19292] netlink: 'syz.5.4214': attribute type 10 has an invalid length. [ 291.457868][T19306] netlink: zone id is out of range [ 291.489257][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 291.514735][T19310] loop6: detected capacity change from 0 to 7 [ 291.517969][T19310] Dev loop6: unable to read RDB block 7 [ 291.519876][T19310] loop6: unable to read partition table [ 291.522055][T19310] loop6: partition table beyond EOD, truncated [ 291.524124][T19310] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 291.625468][T19319] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.628263][T19319] bridge0: port 1(bridge_slave_0) entered listening state [ 291.642626][T19319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.777588][T19333] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 291.789712][T19333] cramfs: wrong magic [ 291.838054][ T40] kauditd_printk_skb: 229 callbacks suppressed [ 291.838065][ T40] audit: type=1400 audit(1768809081.288:63678): avc: denied { ioctl } for pid=19330 comm="syz.6.4225" path="socket:[82703]" dev="sockfs" ino=82703 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 291.859011][ T40] audit: type=1400 audit(1768809081.308:63679): avc: denied { read write } for pid=19334 comm="syz.5.4227" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.866783][ T40] audit: type=1400 audit(1768809081.308:63680): avc: denied { open } for pid=19334 comm="syz.5.4227" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.874116][ T40] audit: type=1400 audit(1768809081.308:63681): avc: denied { ioctl } for pid=19334 comm="syz.5.4227" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.882130][ T40] audit: type=1400 audit(1768809081.308:63682): avc: denied { bind } for pid=19330 comm="syz.6.4225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 291.888621][ T40] audit: type=1400 audit(1768809081.318:63683): avc: denied { create } for pid=19330 comm="syz.6.4225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 291.921054][ T40] audit: type=1400 audit(1768809081.368:63684): avc: denied { ioctl } for pid=19330 comm="syz.6.4225" path="socket:[83741]" dev="sockfs" ino=83741 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 291.936710][ T40] audit: type=1400 audit(1768809081.388:63685): avc: denied { create } for pid=19336 comm="syz.3.4228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 291.943644][ T40] audit: type=1400 audit(1768809081.388:63686): avc: denied { getopt } for pid=19336 comm="syz.3.4228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 291.953662][T19337] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4228'. [ 291.958275][ T40] audit: type=1400 audit(1768809081.408:63687): avc: denied { sys_module } for pid=19330 comm="syz.6.4225" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 292.116362][ T55] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 292.119731][T19363] netlink: 'syz.3.4235': attribute type 21 has an invalid length. [ 292.122390][T19363] netlink: 'syz.3.4235': attribute type 4 has an invalid length. [ 292.124944][T19363] netlink: 'syz.3.4235': attribute type 5 has an invalid length. [ 292.161604][T19366] selinux_netlink_send: 6 callbacks suppressed [ 292.161616][T19366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19366 comm=syz.3.4236 [ 292.257003][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 292.268786][ T55] usb 10-1: config 0 has no interfaces? [ 292.273256][ T55] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 292.277830][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.280611][ T55] usb 10-1: Product: syz [ 292.282031][ T55] usb 10-1: Manufacturer: syz [ 292.283661][ T55] usb 10-1: SerialNumber: syz [ 292.290713][ T55] usb 10-1: config 0 descriptor?? [ 292.436413][ T55] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 292.587898][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.591784][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.595830][ T55] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.601388][ T55] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.604461][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.610376][ T55] usb 11-1: config 0 descriptor?? [ 292.696093][T19335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.698959][ T5940] Bluetooth: hci3: command 0x0405 tx timeout [ 292.699235][T19335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.758148][T19382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.761070][T19382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.773456][ T5785] usb 10-1: USB disconnect, device number 19 [ 292.807351][T19388] ip6gre1: entered allmulticast mode [ 292.856334][T19390] netlink: 'syz.5.4245': attribute type 7 has an invalid length. [ 292.859772][T19390] netlink: 'syz.5.4245': attribute type 8 has an invalid length. [ 293.024654][ T55] plantronics 0003:047F:FFFF.000F: invalid report_count 783138803 [ 293.028968][ T55] plantronics 0003:047F:FFFF.000F: item 0 4 1 9 parsing failed [ 293.031630][ T55] plantronics 0003:047F:FFFF.000F: parse failed [ 293.033857][ T55] plantronics 0003:047F:FFFF.000F: probe with driver plantronics failed with error -22 [ 293.066382][ T986] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 293.179881][T19399] bridge_slave_1: left allmulticast mode [ 293.181824][T19399] bridge_slave_1: left promiscuous mode [ 293.183790][T19399] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.187568][T19399] bridge_slave_0: left allmulticast mode [ 293.189513][T19399] bridge_slave_0: left promiscuous mode [ 293.191397][T19399] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.217228][ T986] usb 5-1: Using ep0 maxpacket: 8 [ 293.220897][ T986] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.227732][ T986] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.230925][ T986] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 293.234642][ T986] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 293.238053][ T986] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.242180][ T986] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 293.245110][ T986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.265133][ T55] usb 11-1: USB disconnect, device number 8 [ 293.451671][ T986] usb 5-1: GET_CAPABILITIES returned 0 [ 293.454921][ T986] usbtmc 5-1:16.0: can't read capabilities [ 293.545410][T19408] netlink: 'syz.5.4252': attribute type 1 has an invalid length. [ 293.705615][ T53] usb 5-1: USB disconnect, device number 29 [ 293.911631][T19421] gfs2: not a GFS2 filesystem [ 294.406444][ T53] usb 11-1: new low-speed USB device number 9 using dummy_hcd [ 294.568522][ T53] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 294.571956][ T53] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 294.575601][ T53] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 294.581310][ T53] usb 11-1: string descriptor 0 read error: -22 [ 294.583428][ T53] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.596302][ T53] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.601496][T19456] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 294.736704][ T986] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 294.786379][ T5940] Bluetooth: hci3: command 0x0405 tx timeout [ 294.806826][ T53] cdc_ncm 11-1:1.0: bind() failure [ 294.810716][ T53] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 294.813653][ T53] cdc_ncm 11-1:1.1: bind() failure [ 294.817310][ T53] usb 11-1: USB disconnect, device number 9 [ 294.897846][ T986] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.901508][ T986] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.904914][ T986] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.909157][ T986] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.912248][ T986] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.916354][ T986] usb 10-1: config 0 descriptor?? [ 295.246190][T19465] syzkaller0: entered promiscuous mode [ 295.248417][T19465] syzkaller0: entered allmulticast mode [ 295.327880][ T986] plantronics 0003:047F:FFFF.0010: invalid report_count 783138803 [ 295.330268][ T986] plantronics 0003:047F:FFFF.0010: item 0 4 1 9 parsing failed [ 295.333134][ T986] plantronics 0003:047F:FFFF.0010: parse failed [ 295.335151][ T986] plantronics 0003:047F:FFFF.0010: probe with driver plantronics failed with error -22 [ 295.528319][T19463] __nla_validate_parse: 12 callbacks suppressed [ 295.528330][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4262'. [ 295.582137][ T53] usb 10-1: USB disconnect, device number 20 [ 295.734461][T19497] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 295.741656][T19497] bond2: (slave lo): speed changed to 0 on port 1 [ 295.744772][T19497] bond2: (slave lo): Enslaving as a backup interface with an up link [ 295.750744][T19497] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 295.932128][T19520] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 295.934771][T19520] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 295.937930][T19520] cramfs: wrong magic [ 296.168319][T19530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29037 sclass=netlink_route_socket pid=19530 comm=syz.0.4283 [ 296.216672][T19546] usb 2-1: USB disconnect, device number 3 [ 296.399156][T19557] xt_l2tp: invalid flags combination: 8 [ 296.468411][T19575] netlink: 'syz.5.4298': attribute type 5 has an invalid length. [ 296.558168][T19587] dvmrp8: entered allmulticast mode [ 296.586784][ T986] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 296.641026][T19600] comedi comedi0: Minor 2147483647 is invalid! [ 296.646141][T19596] atomic_op ffff888025b8f198 conn xmit_atomic 0000000000000000 [ 296.694326][T19608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4306'. [ 296.699515][T19608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4306'. [ 296.704231][T19608] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4306'. [ 296.710640][T19608] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4306'. [ 296.737879][ T986] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.741444][ T986] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.744841][ T986] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 296.751590][ T986] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.754472][ T986] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.758831][ T986] usb 11-1: config 0 descriptor?? [ 296.866626][ T5940] Bluetooth: hci3: command 0x0405 tx timeout [ 296.896154][ T40] kauditd_printk_skb: 233 callbacks suppressed [ 296.896166][ T40] audit: type=1400 audit(1768809086.338:63921): avc: denied { allowed } for pid=19625 comm="syz.5.4312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 296.960551][T19633] futex_wake_op: syz.0.4314 tries to shift op by 32; fix this program [ 296.963952][ T40] audit: type=1400 audit(1768809086.408:63922): avc: denied { read write } for pid=19630 comm="syz.5.4313" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 296.971585][ T40] audit: type=1400 audit(1768809086.418:63923): avc: denied { open } for pid=19630 comm="syz.5.4313" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 296.979821][ T40] audit: type=1400 audit(1768809086.428:63924): avc: denied { mount } for pid=19630 comm="syz.5.4313" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 297.049076][T19633] IPv6: Can't replace route, no match found [ 297.164203][ T40] audit: type=1400 audit(1768809086.608:63925): avc: denied { read } for pid=19561 comm="syz.6.4293" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.174499][ T40] audit: type=1400 audit(1768809086.628:63926): avc: denied { open } for pid=19561 comm="syz.6.4293" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.175785][ T986] plantronics 0003:047F:FFFF.0011: invalid report_count 783138803 [ 297.184965][ T986] plantronics 0003:047F:FFFF.0011: item 0 4 1 9 parsing failed [ 297.195154][ T986] plantronics 0003:047F:FFFF.0011: parse failed [ 297.197334][ T986] plantronics 0003:047F:FFFF.0011: probe with driver plantronics failed with error -22 [ 297.213425][ T40] audit: type=1400 audit(1768809086.658:63927): avc: denied { create } for pid=19642 comm="syz.0.4316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.226449][ T40] audit: type=1400 audit(1768809086.658:63928): avc: denied { getopt } for pid=19642 comm="syz.0.4316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.361780][ T40] audit: type=1400 audit(1768809086.808:63929): avc: denied { write } for pid=19648 comm="syz.3.4317" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 297.375222][ T40] audit: type=1400 audit(1768809086.818:63930): avc: denied { write } for pid=19648 comm="syz.3.4317" path="socket:[85593]" dev="sockfs" ino=85593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 297.388923][T19562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4293'. [ 297.396216][ T5785] usb 11-1: USB disconnect, device number 10 [ 297.493872][T19658] loop6: detected capacity change from 0 to 7 [ 297.506731][T19658] Dev loop6: unable to read RDB block 7 [ 297.508689][T19658] loop6: unable to read partition table [ 297.510726][T19658] loop6: partition table beyond EOD, truncated [ 297.512832][T19658] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 297.546592][T19663] netlink: 'syz.5.4322': attribute type 10 has an invalid length. [ 297.553363][T19663] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 297.562378][T19663] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 297.685318][T19671] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4324'. [ 297.724331][T19683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4327'. [ 297.724715][T19684] netlink: 'syz.3.4327': attribute type 1 has an invalid length. [ 297.736377][T19671] tipc: Resetting bearer [ 297.744053][T19678] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4324'. [ 297.775400][T19671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.780841][T19671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.823244][T19671] batman_adv: batadv0: Interface deactivated: gretap1 [ 297.844746][T19684] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 297.847178][T19428] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.854272][T19428] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.862623][T19428] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.866869][T19428] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.869992][T19691] overlay: ./file0 is not a directory [ 297.870195][T19428] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.875367][T19428] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.880487][T19428] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.884099][T19428] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.926798][T19695] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4329'. [ 297.953619][T19699] netlink: 'syz.6.4331': attribute type 1 has an invalid length. [ 297.988929][T19702] loop6: detected capacity change from 0 to 7 [ 297.991160][T19702] Dev loop6: unable to read RDB block 7 [ 297.992740][T19702] loop6: unable to read partition table [ 297.994730][T19702] loop6: partition table beyond EOD, truncated [ 298.000950][T19702] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 298.068755][T19708] tmpfs: Unknown parameter 'nr_blmcks' [ 298.074391][T19708] ip6gre1: entered promiscuous mode [ 298.076157][T19708] ip6gre1: entered allmulticast mode [ 298.158288][T19710] tmpfs: Invalid uid '0x00000000ffffffff' [ 298.159693][T19714] netlink: 'syz.3.4337': attribute type 13 has an invalid length. [ 298.162745][T19714] netlink: 'syz.3.4337': attribute type 17 has an invalid length. [ 298.205679][T19714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.435214][T19728] Timeout policy `syz1' can only be used by L3 protocol number 35095 [ 298.465826][T19730] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 298.487219][ T9] usb 11-1: new full-speed USB device number 11 using dummy_hcd [ 298.519263][T19736] tmpfs: Bad value for 'nr_inodes' [ 298.638783][ T9] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.642980][ T9] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.647806][ T9] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.650987][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.859242][ T9] usb 11-1: usb_control_msg returned -32 [ 298.861530][ T9] usbtmc 11-1:16.0: can't read capabilities [ 298.997427][T19781] usb usb8: usbfs: process 19781 (syz.3.4361) did not claim interface 0 before use [ 299.220939][ T34] usb 11-1: USB disconnect, device number 11 [ 299.233985][T19797] tunl0: Caught tx_queue_len zero misconfig [ 299.242847][T19797] netlink: 'syz.5.4364': attribute type 7 has an invalid length. [ 299.285927][T19797] netlink: 'syz.5.4364': attribute type 1 has an invalid length. [ 299.654567][T19812] delete_channel: no stack [ 299.928307][T19844] bond0: Caught tx_queue_len zero misconfig [ 299.956965][T19841] syz.6.4378 (19841): drop_caches: 2 [ 300.823262][T19869] netlink: 'syz.5.4388': attribute type 3 has an invalid length. [ 300.827474][T19869] __nla_validate_parse: 8 callbacks suppressed [ 300.827491][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4388'. [ 300.910230][T19878] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 301.098666][T19888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=19888 comm=syz.6.4394 [ 301.103442][T19888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=19888 comm=syz.6.4394 [ 301.108119][T19888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=19888 comm=syz.6.4394 [ 301.177727][T19898] x_tables: duplicate underflow at hook 1 [ 301.369444][T19916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.381889][T19916] vlan1: entered promiscuous mode [ 301.394417][T19917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.691248][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 301.698328][T19941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4410'. [ 301.701364][T19943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4411'. [ 301.705303][T19943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4411'. [ 301.763180][T19945] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 301.930504][ T40] kauditd_printk_skb: 208 callbacks suppressed [ 301.930523][ T40] audit: type=1400 audit(1768809091.378:64139): avc: denied { write } for pid=19951 comm="syz.0.4415" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 301.969833][ T40] audit: type=1400 audit(1768809091.418:64140): avc: denied { create } for pid=19955 comm="syz.3.4417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 301.976660][ T40] audit: type=1400 audit(1768809091.418:64141): avc: denied { ioctl } for pid=19955 comm="syz.3.4417" path="socket:[88062]" dev="sockfs" ino=88062 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 301.984828][ T40] audit: type=1400 audit(1768809091.428:64142): avc: denied { read } for pid=19955 comm="syz.3.4417" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 301.994327][ T40] audit: type=1400 audit(1768809091.438:64143): avc: denied { bind } for pid=19955 comm="syz.3.4417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 302.001623][ T40] audit: type=1400 audit(1768809091.448:64144): avc: denied { setopt } for pid=19955 comm="syz.3.4417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 302.029291][ T40] audit: type=1400 audit(1768809091.478:64145): avc: denied { read write } for pid=19961 comm="syz.0.4418" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 302.036472][T19962] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.4418'. [ 302.039391][ T40] audit: type=1400 audit(1768809091.478:64146): avc: denied { open } for pid=19961 comm="syz.0.4418" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 302.051840][ T40] audit: type=1400 audit(1768809091.478:64147): avc: denied { mount } for pid=19961 comm="syz.0.4418" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 302.576487][ T55] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 302.646156][ T40] audit: type=1400 audit(1768809092.088:64148): avc: denied { append } for pid=19969 comm="syz.5.4421" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 302.683653][T19973] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4422'. [ 302.726355][ T55] usb 11-1: device descriptor read/64, error -71 [ 302.986405][ T55] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 303.137346][ T55] usb 11-1: device descriptor read/64, error -71 [ 303.143587][T19998] netlink: 'syz.5.4428': attribute type 21 has an invalid length. [ 303.146658][T19998] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4428'. [ 303.198931][T20006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4431'. [ 303.209541][T20005] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 303.213415][T20005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4430'. [ 303.219174][T20005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4430'. [ 303.246488][ T55] usb usb11-port1: attempt power cycle [ 303.249546][T20013] No source specified [ 303.606409][ T55] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 303.627174][ T55] usb 11-1: device descriptor read/8, error -71 [ 303.886519][ T55] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 303.907181][ T55] usb 11-1: device descriptor read/8, error -71 [ 304.017423][ T55] usb usb11-port1: unable to enumerate USB device [ 305.190335][T20049] loop6: detected capacity change from 0 to 7 [ 305.193474][T20049] Dev loop6: unable to read RDB block 7 [ 305.196559][T20049] loop6: unable to read partition table [ 305.198984][T20049] loop6: partition table beyond EOD, truncated [ 305.201679][T20049] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 305.341782][T20059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20059 comm=syz.5.4446 [ 305.444811][T20072] /dev/nullb0: Can't open blockdev [ 305.587539][T20084] loop6: detected capacity change from 0 to 7 [ 305.590418][T20084] Dev loop6: unable to read RDB block 7 [ 305.592809][T20084] loop6: unable to read partition table [ 305.595576][T20084] loop6: partition table beyond EOD, truncated [ 305.599131][T20084] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 305.677643][T20091] nilfs2: Unknown parameter 'barrier' [ 305.888800][T20111] netlink: 'syz.5.4462': attribute type 21 has an invalid length. [ 305.947677][T20119] __nla_validate_parse: 5 callbacks suppressed [ 305.947689][T20119] netlink: 4880 bytes leftover after parsing attributes in process `syz.6.4465'. [ 306.030504][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4467'. [ 306.033994][T20123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4467'. [ 306.037439][T20123] netlink: 'syz.5.4467': attribute type 18 has an invalid length. [ 306.040204][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4467'. [ 307.768817][ T40] kauditd_printk_skb: 111 callbacks suppressed [ 307.768829][ T40] audit: type=1400 audit(1768809097.218:64260): avc: denied { setopt } for pid=20150 comm="syz.5.4477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 307.806870][ T40] audit: type=1400 audit(1768809097.258:64261): avc: denied { read } for pid=20152 comm="syz.5.4478" dev="nsfs" ino=4026534374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 307.814153][ T40] audit: type=1400 audit(1768809097.258:64262): avc: denied { open } for pid=20152 comm="syz.5.4478" path="net:[4026534374]" dev="nsfs" ino=4026534374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 307.817177][T20153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4478'. [ 307.858679][T20153] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20153 comm=syz.5.4478 [ 307.865975][T20153] overlay: Unknown parameter 'act' [ 307.869099][T20153] MPI: mpi too large (130952 bits) [ 307.872039][ T40] audit: type=1400 audit(1768809097.318:64263): avc: denied { remount } for pid=20152 comm="syz.5.4478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 307.996535][ T40] audit: type=1400 audit(1768809097.448:64264): avc: denied { prog_run } for pid=20159 comm="syz.5.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 308.006146][T20160] xt_bpf: check failed: parse error [ 308.135841][ T40] audit: type=1400 audit(1768809097.578:64265): avc: denied { read write } for pid=20161 comm="syz.5.4482" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 308.144463][ T40] audit: type=1400 audit(1768809097.578:64266): avc: denied { open } for pid=20161 comm="syz.5.4482" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 308.151962][ T40] audit: type=1400 audit(1768809097.578:64267): avc: denied { unlink } for pid=20161 comm="syz.5.4482" name="#11e" dev="tmpfs" ino=2600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 308.159298][ T40] audit: type=1400 audit(1768809097.578:64268): avc: denied { mount } for pid=20161 comm="syz.5.4482" name="/" dev="overlay" ino=2594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 308.277753][ T40] audit: type=1400 audit(1768809097.728:64269): avc: denied { name_bind } for pid=20164 comm="syz.3.4483" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 308.410037][T20182] /dev/loop0: Can't lookup blockdev [ 308.727011][ T5785] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 308.763760][T20213] FAULT_INJECTION: forcing a failure. [ 308.763760][T20213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.768746][T20213] CPU: 1 UID: 0 PID: 20213 Comm: syz.3.4501 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.768774][T20213] Tainted: [L]=SOFTLOCKUP [ 308.768779][T20213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.768791][T20213] Call Trace: [ 308.768819][T20213] [ 308.768827][T20213] dump_stack_lvl+0x16c/0x1f0 [ 308.768877][T20213] should_fail_ex+0x512/0x640 [ 308.768902][T20213] _copy_from_user+0x2e/0xd0 [ 308.768926][T20213] copy_msghdr_from_user+0x98/0x160 [ 308.768944][T20213] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 308.768974][T20213] ___sys_sendmsg+0xfe/0x1d0 [ 308.768991][T20213] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.769041][T20213] __sys_sendmsg+0x16d/0x220 [ 308.769060][T20213] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.769095][T20213] do_syscall_64+0xcd/0xf80 [ 308.769120][T20213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.769139][T20213] RIP: 0033:0x7fa08f58f7c9 [ 308.769152][T20213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.769169][T20213] RSP: 002b:00007fa090351038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.769186][T20213] RAX: ffffffffffffffda RBX: 00007fa08f7e5fa0 RCX: 00007fa08f58f7c9 [ 308.769197][T20213] RDX: 0000000004004080 RSI: 0000200000000280 RDI: 0000000000000003 [ 308.769207][T20213] RBP: 00007fa090351090 R08: 0000000000000000 R09: 0000000000000000 [ 308.769218][T20213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.769227][T20213] R13: 00007fa08f7e6038 R14: 00007fa08f7e5fa0 R15: 00007ffdaf4c01d8 [ 308.769252][T20213] [ 308.874516][T20215] netlink: 'syz.3.4502': attribute type 12 has an invalid length. [ 308.888375][ T5785] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.896434][ T5785] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.899616][ T5785] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.903896][ T5785] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.907262][ T5785] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.911750][ T5785] usb 10-1: config 0 descriptor?? [ 308.967090][T20219] netlink: 'syz.3.4504': attribute type 1 has an invalid length. [ 308.969883][T20219] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4504'. [ 309.101765][T20220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4504'. [ 309.105719][T20220] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4504'. [ 309.108984][T20220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4504'. [ 309.322235][ T5785] plantronics 0003:047F:FFFF.0012: invalid report_count 783138803 [ 309.324870][ T5785] plantronics 0003:047F:FFFF.0012: item 0 4 1 9 parsing failed [ 309.327664][ T5785] plantronics 0003:047F:FFFF.0012: parse failed [ 309.329791][ T5785] plantronics 0003:047F:FFFF.0012: probe with driver plantronics failed with error -22 [ 309.432447][T20203] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 309.524297][T20188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4492'. [ 309.531802][ T5785] usb 10-1: USB disconnect, device number 21 [ 309.562184][T20237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20237 comm=syz.3.4508 [ 309.599354][ T5940] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 309.742564][T20247] xt_ipcomp: unknown flags 1D [ 310.123894][T20263] bond4: entered promiscuous mode [ 310.398769][T15070] overlayfs: failed lookup in lower (newroot/452, name='bus', err=-40): overlapping layers [ 310.403015][T15070] overlayfs: failed lookup in lower (newroot/452, name='bus', err=-40): overlapping layers [ 310.838829][T19717] delete_channel: no stack [ 311.031382][ T5295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.037702][ T5295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.042815][ T5295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.045767][ T5295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.049967][ T5295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.068525][ T5295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.073046][ T5295] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.080095][ T5295] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.084221][ T5295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.086970][T20274] ªªªªªª speed is unknown, defaulting to 1000 [ 311.092614][ T5295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.150046][T20281] loop6: detected capacity change from 0 to 7 [ 311.152570][T20281] Dev loop6: unable to read RDB block 7 [ 311.154465][T20281] loop6: unable to read partition table [ 311.156651][T20281] loop6: partition table beyond EOD, truncated [ 311.159060][T20281] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 311.169541][T20277] ªªªªªª speed is unknown, defaulting to 1000 [ 311.252901][T20274] chnl_net:caif_netlink_parms(): no params data found [ 311.277998][T20284] ªªªªªª speed is unknown, defaulting to 1000 [ 311.378895][T20274] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.382278][T20274] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.385428][T20274] bridge_slave_0: entered allmulticast mode [ 311.389353][T20274] bridge_slave_0: entered promiscuous mode [ 311.396116][T20274] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.399188][T20274] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.402409][T20274] bridge_slave_1: entered allmulticast mode [ 311.406353][T20274] bridge_slave_1: entered promiscuous mode [ 311.443176][T20274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.463460][T20274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.504317][T20274] team0: Port device team_slave_0 added [ 311.532929][T20274] team0: Port device team_slave_1 added [ 311.538131][T20277] chnl_net:caif_netlink_parms(): no params data found [ 311.570855][T20274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.573062][T20274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.582565][T20274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.620991][T20274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.623264][T20274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.643373][T20274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.759975][T20312] : entered promiscuous mode [ 311.792351][T20277] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.794927][T20277] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.818527][T20277] bridge_slave_0: entered allmulticast mode [ 311.836552][T20277] bridge_slave_0: entered promiscuous mode [ 311.856604][T20274] hsr_slave_0: entered promiscuous mode [ 311.867080][T20274] hsr_slave_1: entered promiscuous mode [ 311.869273][T20274] debugfs: 'hsr0' already exists in 'hsr' [ 311.871130][T20274] Cannot create hsr debugfs directory [ 311.886554][T20277] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.888928][T20277] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.891313][T20277] bridge_slave_1: entered allmulticast mode [ 311.894092][T20277] bridge_slave_1: entered promiscuous mode [ 311.912096][T20277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.925445][T20277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.965534][T20277] team0: Port device team_slave_0 added [ 311.973577][T20277] team0: Port device team_slave_1 added [ 312.002412][T20277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.004602][T20277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.012711][T20277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.020115][T20277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.022336][T20277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.030341][T20277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.063253][T20321] SELinux: policydb version 806848897 does not match my version range 15-35 [ 312.067443][T20321] SELinux: failed to load policy [ 312.078066][T20277] hsr_slave_0: entered promiscuous mode [ 312.080431][T20277] hsr_slave_1: entered promiscuous mode [ 312.083029][T20277] debugfs: 'hsr0' already exists in 'hsr' [ 312.084959][T20277] Cannot create hsr debugfs directory [ 312.163906][T20274] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 312.172517][T20274] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 312.184239][T20274] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 312.192810][T20274] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 312.306880][T20339] loop6: detected capacity change from 0 to 7 [ 312.311303][T20339] Dev loop6: unable to read RDB block 7 [ 312.313171][T20277] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 312.313232][T20339] loop6: unable to read partition table [ 312.318109][T20339] loop6: partition table beyond EOD, truncated [ 312.320145][T20339] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 312.322079][T20277] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 312.330982][T20277] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 312.338265][T20277] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 312.365734][T20274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.382666][T20274] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.390456][T17522] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.393099][T17522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.422294][T17522] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.424841][T17522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.442251][T20277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.459156][T20274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 312.463092][T20274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.489527][T20277] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.498016][T17511] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.500304][T17511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.508720][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.510989][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.582817][T20274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.588822][T20277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.631170][T20274] veth0_vlan: entered promiscuous mode [ 312.640040][T20277] veth0_vlan: entered promiscuous mode [ 312.643003][T20274] veth1_vlan: entered promiscuous mode [ 312.649408][T20277] veth1_vlan: entered promiscuous mode [ 312.665752][T20274] veth0_macvtap: entered promiscuous mode [ 312.673886][T20274] veth1_macvtap: entered promiscuous mode [ 312.679161][T20277] veth0_macvtap: entered promiscuous mode [ 312.686440][T20277] veth1_macvtap: entered promiscuous mode [ 312.702266][T20274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.714430][T20274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.719744][T20277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.728840][T19431] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.733773][T20277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.737654][T19431] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.740622][T19431] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.745611][T19431] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.755298][T19431] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.758520][T19431] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.766308][T19431] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.769324][T19431] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.867165][T17511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.876144][T19431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.876620][T17511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.879476][T19431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.911489][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.914152][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.915733][T19431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.919433][T19431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.924041][ T40] kauditd_printk_skb: 132 callbacks suppressed [ 312.924051][ T40] audit: type=1400 audit(1768809102.368:64402): avc: denied { mounton } for pid=20274 comm="syz-executor" path="/syzkaller.oEwJld/syz-tmp" dev="sda1" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 312.940563][ T40] audit: type=1400 audit(1768809102.378:64403): avc: denied { mount } for pid=20277 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 312.958144][ T40] audit: type=1400 audit(1768809102.378:64404): avc: denied { mounton } for pid=20277 comm="syz-executor" path="/syzkaller.JB3K4c/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 312.966823][ T40] audit: type=1400 audit(1768809102.378:64405): avc: denied { mounton } for pid=20277 comm="syz-executor" path="/syzkaller.JB3K4c/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=92265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 312.975608][ T40] audit: type=1400 audit(1768809102.388:64406): avc: denied { mounton } for pid=20277 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 312.983896][ T40] audit: type=1400 audit(1768809102.388:64407): avc: denied { mount } for pid=20277 comm="syz-executor" name="/" dev="gadgetfs" ino=7983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 312.991340][ T40] audit: type=1400 audit(1768809102.388:64408): avc: denied { mounton } for pid=20274 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 312.998990][ T40] audit: type=1400 audit(1768809102.388:64409): avc: denied { mount } for pid=20274 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 313.011934][T20386] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4531'. [ 313.014917][ T40] audit: type=1400 audit(1768809102.458:64410): avc: denied { write } for pid=20383 comm="syz.7.4523" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 313.024175][ T40] audit: type=1400 audit(1768809102.458:64411): avc: denied { read write } for pid=20383 comm="syz.7.4523" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.032410][T20392] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4531'. [ 313.074562][T20396] loop6: detected capacity change from 0 to 7 [ 313.077822][T20396] Dev loop6: unable to read RDB block 7 [ 313.080054][T20396] loop6: unable to read partition table [ 313.083475][T20396] loop6: partition table beyond EOD, truncated [ 313.085977][T20396] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 313.098537][ T5940] Bluetooth: hci0: command tx timeout [ 313.170497][T20406] openvswitch: netlink: IP tunnel dst address not specified [ 313.176453][ T5295] Bluetooth: hci2: command tx timeout [ 313.352540][T20423] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4553'. [ 313.357274][T20423] xt_nfacct: accounting object `syz0' does not exist [ 313.395001][T20427] random: crng reseeded on system resumption [ 313.406862][T20427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.444844][T20427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.531071][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.539275][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.543746][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.548661][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.557596][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.602921][T20432] ªªªªªª speed is unknown, defaulting to 1000 [ 313.777972][T20432] chnl_net:caif_netlink_parms(): no params data found [ 313.868542][T20432] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.872407][T20432] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.874786][T20432] bridge_slave_0: entered allmulticast mode [ 313.887368][T20432] bridge_slave_0: entered promiscuous mode [ 313.890702][T20432] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.892984][T20432] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.895373][T20432] bridge_slave_1: entered allmulticast mode [ 313.908032][T20432] bridge_slave_1: entered promiscuous mode [ 313.928904][T20432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.961814][T20432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.999496][T20432] team0: Port device team_slave_0 added [ 314.005530][T20432] team0: Port device team_slave_1 added [ 314.031814][T20432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.034463][T20432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.044028][T20432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.051487][T20432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.054564][T20432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.066372][T20432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.110370][T20432] hsr_slave_0: entered promiscuous mode [ 314.112725][T20432] hsr_slave_1: entered promiscuous mode [ 314.114899][T20432] debugfs: 'hsr0' already exists in 'hsr' [ 314.117260][T20432] Cannot create hsr debugfs directory [ 314.189185][T20432] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.192735][T20432] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.303937][T20432] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.308467][T20432] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.377090][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 314.407987][T20432] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.411204][T20432] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.471357][T20432] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.475126][T20432] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.595201][T20432] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.607857][T20432] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.612908][T20432] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 314.619397][T20432] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.664152][T20432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.675314][T20432] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.682273][ T4756] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.684638][ T4756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.699430][T19428] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.701759][T19428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.781004][T20456] xt_CT: No such helper "pptp" [ 314.875770][T20432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.921675][T20432] veth0_vlan: entered promiscuous mode [ 314.932788][T20432] veth1_vlan: entered promiscuous mode [ 314.956217][T20432] veth0_macvtap: entered promiscuous mode [ 314.959656][T20477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20477 comm=syz.8.4566 [ 314.969401][T20477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=20477 comm=syz.8.4566 [ 314.971442][T20432] veth1_macvtap: entered promiscuous mode [ 314.991499][T20432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.005390][T20432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.020982][ T105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.027705][ T105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.037327][ T105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.042917][ T105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.112054][T17524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.115343][T17524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.138480][T17524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.141696][T17524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.176681][ T5295] Bluetooth: hci0: command tx timeout [ 315.256466][ T5295] Bluetooth: hci2: command tx timeout [ 315.336584][ T9] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 315.496636][ T9] usb 12-1: Using ep0 maxpacket: 16 [ 315.500336][ T9] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 315.503530][ T9] usb 12-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 315.507618][ T9] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 66, changing to 10 [ 315.511295][ T9] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 24591, setting to 1024 [ 315.514835][ T9] usb 12-1: config 0 interface 0 has no altsetting 0 [ 315.518807][ T9] usb 12-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 315.521713][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.524232][ T9] usb 12-1: Product: syz [ 315.525690][ T9] usb 12-1: Manufacturer: syz [ 315.528027][ T9] usb 12-1: SerialNumber: syz [ 315.531124][ T9] usb 12-1: config 0 descriptor?? [ 315.576614][ T5295] Bluetooth: hci3: command tx timeout [ 315.674682][T20505] /dev/loop0: Can't lookup blockdev [ 315.713063][ T34] hid (null): unknown global tag 0xd [ 315.716201][ T34] hid-generic 0004:0003:FFFFFFFF.0013: unknown global tag 0xd [ 315.718845][ T34] hid-generic 0004:0003:FFFFFFFF.0013: item 0 2 1 13 parsing failed [ 315.721683][ T34] hid-generic 0004:0003:FFFFFFFF.0013: probe with driver hid-generic failed with error -22 [ 315.740401][ T9] input: syz syz as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input38 [ 315.763634][T20511] binder: 20510:20511 unknown command 0 [ 315.766011][T20511] binder: 20510:20511 ioctl c0306201 200000000180 returned -22 [ 315.769949][T20512] binder: BINDER_SET_CONTEXT_MGR already set [ 315.772535][T20512] binder: 20510:20512 ioctl 4018620d 200000000080 returned -16 [ 315.817117][T20518] comedi comedi3: dac02: I/O port conflict (0x8,8) [ 315.854058][T20525] loop6: detected capacity change from 0 to 7 [ 315.857348][T20525] Dev loop6: unable to read RDB block 7 [ 315.859537][T20525] loop6: unable to read partition table [ 315.861835][T20525] loop6: partition table beyond EOD, truncated [ 315.864127][T20525] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 315.935705][T20532] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4585'. [ 315.940260][T20532] binder: 20529:20532 ioctl c0306201 2000000001c0 returned -14 [ 315.947070][T20481] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4569'. [ 315.994582][T20546] netlink: 'syz.0.4590': attribute type 10 has an invalid length. [ 315.999895][T20546] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 316.003531][T20546] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 316.010066][T20546] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 316.049893][T20549] openvswitch: netlink: Key type 31 is not supported [ 316.057076][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4591'. [ 316.059956][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4591'. [ 316.070103][T20549] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4591'. [ 316.125053][T20562] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 316.149827][T20565] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4598'. [ 316.155110][T20481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.160931][T20481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.178607][ T55] usb 12-1: USB disconnect, device number 2 [ 316.213472][T20571] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4600'. [ 316.221249][T20571] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 316.264965][T20577] netlink: 'syz.8.4602': attribute type 1 has an invalid length. [ 316.271282][T20577] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 316.296223][T20583] netlink: 'syz.6.4603': attribute type 12 has an invalid length. [ 316.305649][T20583] netlink: 'syz.6.4603': attribute type 12 has an invalid length. [ 316.546847][ T9] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 316.707985][ T9] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 316.711208][ T9] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.715467][ T9] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 316.718721][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.747173][ T55] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 316.892161][T20615] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 316.897597][ T55] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 316.901115][ T55] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 316.904272][ T55] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 316.908684][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.915343][T20603] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 316.920468][ T55] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.933866][T20585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.941230][T20585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.944770][ T9] usb 13-1: usb_control_msg returned -32 [ 316.952506][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 316.953568][ T9] usbtmc 13-1:16.0: can't read capabilities [ 317.000776][T20614] netlink: 'syz.7.4613': attribute type 10 has an invalid length. [ 317.003710][T20615] netlink: 'syz.7.4613': attribute type 10 has an invalid length. [ 317.021319][T20614] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 317.169763][ T6835] usb 5-1: USB disconnect, device number 30 [ 317.207219][ T9] Process accounting resumed [ 317.214508][T20632] fuse: blksize only supported for fuseblk [ 317.217233][T20630] Mount JFS Failure: -22 [ 317.227957][T20632] Process accounting resumed [ 317.256546][ T5295] Bluetooth: hci0: command tx timeout [ 317.337948][ T5295] Bluetooth: hci2: command tx timeout [ 317.451284][T20645] mkiss: ax0: crc mode is auto. [ 317.503000][T20650] netlink: 'syz.0.4626': attribute type 21 has an invalid length. [ 317.543940][T20654] Unknown options in mask b7f2 [ 317.563949][T20656] ªªªªªª speed is unknown, defaulting to 1000 [ 317.656585][ T5295] Bluetooth: hci3: command tx timeout [ 317.838237][T20670] netlink: 'syz.6.4633': attribute type 6 has an invalid length. [ 317.856508][ T9] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 317.874343][T20672] ucma_write: process 87 (syz.0.4634) changed security contexts after opening file descriptor, this is not allowed. [ 317.902217][T20674] netlink: 'syz.6.4635': attribute type 5 has an invalid length. [ 317.937488][ T40] kauditd_printk_skb: 347 callbacks suppressed [ 317.937505][ T40] audit: type=1400 audit(1768809107.388:64759): avc: denied { read write } for pid=20679 comm="syz.0.4638" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 317.953934][ T40] audit: type=1400 audit(1768809107.388:64760): avc: denied { open } for pid=20679 comm="syz.0.4638" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 317.990665][ T40] audit: type=1400 audit(1768809107.438:64761): avc: denied { module_request } for pid=20681 comm="syz.0.4639" kmod=72746E6C2D6C696E6B2D6272696467655F736C618C65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 318.028221][ T9] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 318.030993][ T9] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.032274][ T40] audit: type=1400 audit(1768809107.478:64762): avc: denied { execute } for pid=20686 comm="syz.6.4637" path="/420/cpu.stat" dev="tmpfs" ino=2443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 318.034287][ T9] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 318.045295][ T9] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.049593][ T9] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.054596][ T9] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 318.069043][ T9] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 318.072149][ T9] usb 12-1: Product: syz [ 318.073874][ T9] usb 12-1: Manufacturer: syz [ 318.081271][ T9] cdc_wdm 12-1:1.0: skipping garbage [ 318.083589][ T9] cdc_wdm 12-1:1.0: skipping garbage [ 318.087818][ T9] cdc_wdm 12-1:1.0: cdc-wdm1: USB WDM device [ 318.090169][ T9] cdc_wdm 12-1:1.0: Unknown control protocol [ 318.095190][ T40] audit: type=1400 audit(1768809107.538:64763): avc: denied { bind } for pid=20692 comm="syz.6.4641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 318.103498][ T40] audit: type=1400 audit(1768809107.548:64764): avc: denied { unlink } for pid=20691 comm="syz.0.4640" name="#127" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 318.114249][ T40] audit: type=1400 audit(1768809107.548:64765): avc: denied { mount } for pid=20691 comm="syz.0.4640" name="/" dev="overlay" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 318.122768][ T40] audit: type=1400 audit(1768809107.558:64766): avc: denied { bpf } for pid=20691 comm="syz.0.4640" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 318.130739][ T40] audit: type=1400 audit(1768809107.558:64767): avc: denied { perfmon } for pid=20691 comm="syz.0.4640" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 318.161599][ T40] audit: type=1400 audit(1768809107.608:64768): avc: denied { unmount } for pid=15654 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 318.225226][T20699] __nla_validate_parse: 6 callbacks suppressed [ 318.225253][T20699] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4643'. [ 318.329651][T20703] x_tables: ip_tables: osf match: only valid for protocol 6 [ 318.385996][T20708] netlink: 'syz.6.4646': attribute type 3 has an invalid length. [ 318.391011][T20708] netlink: 216 bytes leftover after parsing attributes in process `syz.6.4646'. [ 318.392926][ T6835] usb 12-1: USB disconnect, device number 3 [ 318.396197][T20708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20708 comm=syz.6.4646 [ 318.427699][T20708] bridge0: port 3(syz_tun) entered blocking state [ 318.430235][T20708] bridge0: port 3(syz_tun) entered disabled state [ 318.432473][T20708] syz_tun: entered allmulticast mode [ 318.435369][T20708] syz_tun: entered promiscuous mode [ 318.438885][T20708] bridge0: port 3(syz_tun) entered blocking state [ 318.441098][T20708] bridge0: port 3(syz_tun) entered forwarding state [ 318.462406][T20716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4648'. [ 318.472192][T20716] erspan0: entered promiscuous mode [ 318.475162][T20716] erspan0: left promiscuous mode [ 318.587220][T20720] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 318.631230][T20725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4652'. [ 318.721315][T20733] vxfs: unable to read disk superblock at 1 [ 318.723552][T20733] vxfs: unable to read disk superblock at 8 [ 318.725632][T20733] vxfs: can't find superblock. [ 318.781917][T20733] netem: incorrect ge model size [ 318.784349][T20733] netem: change failed [ 318.868852][T20740] loop6: detected capacity change from 0 to 7 [ 318.871450][T20740] Dev loop6: unable to read RDB block 7 [ 318.873693][T20740] loop6: unable to read partition table [ 318.877343][T20740] loop6: partition table beyond EOD, truncated [ 318.879339][T20740] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 319.091379][T20752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4664'. [ 319.106987][ T9] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 319.138366][T20754] binder: 20753:20754 ioctl c018620c 200000000000 returned -22 [ 319.220838][T20766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4668'. [ 319.278051][ T9] usb 11-1: config 1 has an invalid interface number: 7 but max is 0 [ 319.280562][ T9] usb 11-1: config 1 has no interface number 0 [ 319.282629][ T9] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 16 [ 319.286058][ T9] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 319.290140][ T9] usb 11-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 319.296939][ T9] usb 11-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 319.300423][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.303611][ T9] usb 11-1: Product: syz [ 319.305426][ T9] usb 11-1: Manufacturer: syz [ 319.321480][ T5973] usb 13-1: USB disconnect, device number 2 [ 319.325802][ T9] usb 11-1: SerialNumber: syz [ 319.335951][T20742] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 319.336519][ T5295] Bluetooth: hci0: command tx timeout [ 319.339417][T20742] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 319.345519][ T9] usb 11-1: Expected 3 endpoints, found: 2 [ 319.361574][T20771] loop6: detected capacity change from 0 to 7 [ 319.365096][T20771] Dev loop6: unable to read RDB block 7 [ 319.367055][T20771] loop6: unable to read partition table [ 319.368828][T20771] loop6: partition table beyond EOD, truncated [ 319.370763][T20771] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 319.407882][T20775] lo: entered promiscuous mode [ 319.412426][T20773] kvm: pic: non byte read [ 319.426632][ T5295] Bluetooth: hci2: command tx timeout [ 319.553998][T20793] program syz.8.4678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.637185][T20801] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 319.639710][T20801] PKCS7: Only support pkcs7_signedData type [ 319.645819][T20803] loop6: detected capacity change from 0 to 7 [ 319.650574][T20803] Dev loop6: unable to read RDB block 7 [ 319.656484][T20803] loop6: unable to read partition table [ 319.658485][T20803] loop6: partition table beyond EOD, truncated [ 319.661921][T20803] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 319.746481][ T5295] Bluetooth: hci3: command tx timeout [ 319.747971][T20808] FAULT_INJECTION: forcing a failure. [ 319.747971][T20808] name failslab, interval 1, probability 0, space 0, times 0 [ 319.755175][T20808] CPU: 1 UID: 0 PID: 20808 Comm: syz.7.4684 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.755206][T20808] Tainted: [L]=SOFTLOCKUP [ 319.755213][T20808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.755225][T20808] Call Trace: [ 319.755247][T20808] [ 319.755255][T20808] dump_stack_lvl+0x16c/0x1f0 [ 319.755309][T20808] should_fail_ex+0x512/0x640 [ 319.755332][T20808] ? __kmalloc_cache_node_noprof+0x62/0x830 [ 319.755356][T20808] should_failslab+0xc2/0x120 [ 319.755381][T20808] __kmalloc_cache_node_noprof+0x83/0x830 [ 319.755403][T20808] ? __get_vm_area_node+0x101/0x330 [ 319.755429][T20808] ? __lock_acquire+0x436/0x2890 [ 319.755450][T20808] ? __get_vm_area_node+0x101/0x330 [ 319.755476][T20808] __get_vm_area_node+0x101/0x330 [ 319.755503][T20808] __vmalloc_node_range_noprof+0x247/0x16b0 [ 319.755530][T20808] ? vhost_task_create+0x1d2/0x370 [ 319.755553][T20808] ? local_lock_release+0x99/0x130 [ 319.755586][T20808] ? vhost_task_create+0x1d2/0x370 [ 319.755609][T20808] ? rcu_read_unlock+0x17/0x60 [ 319.755636][T20808] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 319.755663][T20808] ? __memcg_slab_post_alloc_hook+0x472/0x880 [ 319.755694][T20808] ? rcu_is_watching+0x12/0xc0 [ 319.755712][T20808] ? vhost_task_create+0x1d2/0x370 [ 319.755731][T20808] __vmalloc_node_noprof+0xad/0xf0 [ 319.755756][T20808] ? vhost_task_create+0x1d2/0x370 [ 319.755782][T20808] copy_process+0x619/0x7430 [ 319.755812][T20808] ? __pfx_copy_process+0x10/0x10 [ 319.755834][T20808] ? lockdep_init_map_type+0x5c/0x270 [ 319.755856][T20808] ? lockdep_init_map_type+0x5c/0x270 [ 319.755878][T20808] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 319.755909][T20808] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 319.755934][T20808] vhost_task_create+0x1d2/0x370 [ 319.755957][T20808] ? __pfx_vhost_task_create+0x10/0x10 [ 319.755988][T20808] ? __pfx_vhost_task_fn+0x10/0x10 [ 319.756016][T20808] ? __pfx___mutex_lock+0x10/0x10 [ 319.756049][T20808] kvm_mmu_post_init_vm+0x1b7/0x380 [ 319.756073][T20808] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 319.756096][T20808] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 319.756151][T20808] kvm_vcpu_ioctl+0x76d/0x16d0 [ 319.756182][T20808] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 319.756209][T20808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 319.756249][T20808] ? do_vfs_ioctl+0x128/0x14f0 [ 319.756273][T20808] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 319.756294][T20808] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 319.756330][T20808] ? hook_file_ioctl_common+0x144/0x410 [ 319.756356][T20808] ? selinux_file_ioctl+0x180/0x270 [ 319.756403][T20808] ? selinux_file_ioctl+0xb4/0x270 [ 319.756430][T20808] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 319.756457][T20808] __x64_sys_ioctl+0x18e/0x210 [ 319.756487][T20808] do_syscall_64+0xcd/0xf80 [ 319.756515][T20808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.756533][T20808] RIP: 0033:0x7ff6c558f7c9 [ 319.756549][T20808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.756566][T20808] RSP: 002b:00007ff6c37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.756584][T20808] RAX: ffffffffffffffda RBX: 00007ff6c57e5fa0 RCX: 00007ff6c558f7c9 [ 319.756596][T20808] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 319.756608][T20808] RBP: 00007ff6c37f6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.756618][T20808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.756629][T20808] R13: 00007ff6c57e6038 R14: 00007ff6c57e5fa0 R15: 00007fff35e59868 [ 319.756658][T20808] [ 319.889671][T20808] syz.7.4684: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 319.897458][T20808] CPU: 1 UID: 0 PID: 20808 Comm: syz.7.4684 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.897479][T20808] Tainted: [L]=SOFTLOCKUP [ 319.897483][T20808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.897489][T20808] Call Trace: [ 319.897495][T20808] [ 319.897500][T20808] dump_stack_lvl+0x16c/0x1f0 [ 319.897522][T20808] warn_alloc+0x248/0x3a0 [ 319.897536][T20808] ? __pfx_warn_alloc+0x10/0x10 [ 319.897547][T20808] ? trace_kmalloc+0x2b/0xb0 [ 319.897562][T20808] ? __get_vm_area_node+0x101/0x330 [ 319.897579][T20808] ? __kasan_kmalloc+0x8a/0xb0 [ 319.897594][T20808] ? __get_vm_area_node+0x208/0x330 [ 319.897612][T20808] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 319.897633][T20808] ? vhost_task_create+0x1d2/0x370 [ 319.897650][T20808] ? rcu_read_unlock+0x17/0x60 [ 319.897667][T20808] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 319.897684][T20808] ? __memcg_slab_post_alloc_hook+0x472/0x880 [ 319.897706][T20808] ? rcu_is_watching+0x12/0xc0 [ 319.897741][T20808] ? vhost_task_create+0x1d2/0x370 [ 319.897755][T20808] __vmalloc_node_noprof+0xad/0xf0 [ 319.897772][T20808] ? vhost_task_create+0x1d2/0x370 [ 319.897787][T20808] copy_process+0x619/0x7430 [ 319.897805][T20808] ? __pfx_copy_process+0x10/0x10 [ 319.897818][T20808] ? lockdep_init_map_type+0x5c/0x270 [ 319.897833][T20808] ? lockdep_init_map_type+0x5c/0x270 [ 319.897847][T20808] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 319.897867][T20808] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 319.897884][T20808] vhost_task_create+0x1d2/0x370 [ 319.897899][T20808] ? __pfx_vhost_task_create+0x10/0x10 [ 319.897918][T20808] ? __pfx_vhost_task_fn+0x10/0x10 [ 319.897935][T20808] ? __pfx___mutex_lock+0x10/0x10 [ 319.897955][T20808] kvm_mmu_post_init_vm+0x1b7/0x380 [ 319.897971][T20808] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 319.897986][T20808] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 319.898007][T20808] kvm_vcpu_ioctl+0x76d/0x16d0 [ 319.898025][T20808] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 319.898042][T20808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 319.898057][T20808] ? do_vfs_ioctl+0x128/0x14f0 [ 319.898070][T20808] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 319.898083][T20808] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 319.898105][T20808] ? hook_file_ioctl_common+0x144/0x410 [ 319.898120][T20808] ? selinux_file_ioctl+0x180/0x270 [ 319.898134][T20808] ? selinux_file_ioctl+0xb4/0x270 [ 319.898150][T20808] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 319.898167][T20808] __x64_sys_ioctl+0x18e/0x210 [ 319.898181][T20808] do_syscall_64+0xcd/0xf80 [ 319.898197][T20808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.898208][T20808] RIP: 0033:0x7ff6c558f7c9 [ 319.898218][T20808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.898228][T20808] RSP: 002b:00007ff6c37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.898239][T20808] RAX: ffffffffffffffda RBX: 00007ff6c57e5fa0 RCX: 00007ff6c558f7c9 [ 319.898245][T20808] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 319.898251][T20808] RBP: 00007ff6c37f6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.898257][T20808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.898263][T20808] R13: 00007ff6c57e6038 R14: 00007ff6c57e5fa0 R15: 00007fff35e59868 [ 319.898278][T20808] [ 319.898295][T20808] Mem-Info: [ 320.022689][T20808] active_anon:9134 inactive_anon:0 isolated_anon:0 [ 320.022689][T20808] active_file:1601 inactive_file:37204 isolated_file:0 [ 320.022689][T20808] unevictable:1768 dirty:144 writeback:0 [ 320.022689][T20808] slab_reclaimable:9828 slab_unreclaimable:139019 [ 320.022689][T20808] mapped:24978 shmem:6498 pagetables:1090 [ 320.022689][T20808] sec_pagetables:310 bounce:0 [ 320.022689][T20808] kernel_misc_reclaimable:0 [ 320.022689][T20808] free:387504 free_pcp:17246 free_cma:0 [ 320.038850][T20808] Node 0 active_anon:36532kB inactive_anon:0kB active_file:4668kB inactive_file:148488kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:58824kB dirty:572kB writeback:0kB shmem:22452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17248kB pagetables:4176kB sec_pagetables:1240kB all_unreclaimable? no Balloon:0kB [ 320.049613][T20808] Node 1 active_anon:4kB inactive_anon:0kB active_file:1736kB inactive_file:328kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41088kB dirty:4kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 320.060448][T20808] Node 0 DMA free:10864kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:300kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.073140][T20808] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 320.075520][T20808] Node 0 DMA32 free:163552kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36532kB inactive_anon:0kB active_file:4668kB inactive_file:148188kB unevictable:3536kB writepending:572kB zspages:0kB present:2080628kB managed:1265144kB mlocked:0kB bounce:0kB free_pcp:43032kB local_pcp:9196kB free_cma:0kB [ 320.088167][T20808] lowmem_reserve[]: 0 0 0 0 0 [ 320.090196][T20808] Node 1 Normal free:1375600kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:1736kB inactive_file:328kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:25632kB local_pcp:12196kB free_cma:0kB [ 320.103824][T20808] lowmem_reserve[]: 0 0 0 0 0 [ 320.105891][T20808] Node 0 DMA: 2*4kB (UM) 5*8kB (UM) 4*16kB (UM) 6*32kB (UM) 5*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (U) 3*2048kB (UM) 0*4096kB = 10864kB [ 320.106885][T20813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.112970][T20808] Node 0 DMA32: 1272*4kB (UME) 2804*8kB (UME) 1568*16kB (UME) 340*32kB (M) 178*64kB (UM) 108*128kB (ME) 47*256kB (ME) 24*512kB (UME) 33*1024kB (UM) 6*2048kB (UM) 1*4096kB (U) = 163200kB [ 320.116058][T20813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.123850][T20808] Node 1 Normal: 85*4kB (UME) 72*8kB (UE) 38*16kB (UME) 206*32kB (UME) 89*64kB (UME) 59*128kB (UME) 32*256kB (UME) 23*512kB (UM) 23*1024kB (UME) 16*2048kB (UM) 312*4096kB (UM) = 1375604kB [ 320.134272][T20808] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.140678][T20808] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 320.143654][T20808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.147203][T20808] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 320.151702][T20808] 45301 total pagecache pages [ 320.153356][T20808] 0 pages in swap cache [ 320.154779][T20808] Free swap = 124996kB [ 320.156175][T20808] Total swap = 124996kB [ 320.157726][T20808] 1048443 pages RAM [ 320.159214][T20808] 0 pages HighMem/MovableOnly [ 320.160932][T20808] 282846 pages reserved [ 320.163570][T20808] 0 pages cma reserved [ 320.222671][T20818] Bluetooth: MGMT ver 1.23 [ 320.265670][T20820] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 320.344603][T20827] loop6: detected capacity change from 0 to 7 [ 320.347534][T20827] Dev loop6: unable to read RDB block 7 [ 320.349431][T20827] loop6: unable to read partition table [ 320.351794][T20827] loop6: partition table beyond EOD, truncated [ 320.357616][T20827] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 320.457792][T20849] FAULT_INJECTION: forcing a failure. [ 320.457792][T20849] name failslab, interval 1, probability 0, space 0, times 0 [ 320.462923][T20849] CPU: 3 UID: 0 PID: 20849 Comm: syz.8.4696 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.462942][T20849] Tainted: [L]=SOFTLOCKUP [ 320.462946][T20849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 320.462952][T20849] Call Trace: [ 320.462957][T20849] [ 320.462962][T20849] dump_stack_lvl+0x16c/0x1f0 [ 320.462982][T20849] should_fail_ex+0x512/0x640 [ 320.462992][T20849] ? __kmalloc_noprof+0xca/0x910 [ 320.463003][T20849] should_failslab+0xc2/0x120 [ 320.463018][T20849] __kmalloc_noprof+0xeb/0x910 [ 320.463028][T20849] ? lsm_blob_alloc+0x68/0x90 [ 320.463041][T20849] ? lsm_blob_alloc+0x68/0x90 [ 320.463050][T20849] lsm_blob_alloc+0x68/0x90 [ 320.463060][T20849] security_task_alloc+0x2c/0x260 [ 320.463077][T20849] copy_process+0x2456/0x7430 [ 320.463094][T20849] ? __pfx_copy_process+0x10/0x10 [ 320.463106][T20849] ? lockdep_init_map_type+0x5c/0x270 [ 320.463120][T20849] ? lockdep_init_map_type+0x5c/0x270 [ 320.463133][T20849] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 320.463151][T20849] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 320.463167][T20849] vhost_task_create+0x1d2/0x370 [ 320.463182][T20849] ? __pfx_vhost_task_create+0x10/0x10 [ 320.463200][T20849] ? __pfx_vhost_task_fn+0x10/0x10 [ 320.463216][T20849] ? __pfx___mutex_lock+0x10/0x10 [ 320.463235][T20849] kvm_mmu_post_init_vm+0x1b7/0x380 [ 320.463250][T20849] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 320.463263][T20849] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 320.463283][T20849] kvm_vcpu_ioctl+0x76d/0x16d0 [ 320.463300][T20849] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 320.463316][T20849] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 320.463333][T20849] ? do_vfs_ioctl+0x128/0x14f0 [ 320.463349][T20849] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 320.463371][T20849] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 320.463395][T20849] ? hook_file_ioctl_common+0x144/0x410 [ 320.463409][T20849] ? selinux_file_ioctl+0x180/0x270 [ 320.463423][T20849] ? selinux_file_ioctl+0xb4/0x270 [ 320.463441][T20849] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 320.463464][T20849] __x64_sys_ioctl+0x18e/0x210 [ 320.463483][T20849] do_syscall_64+0xcd/0xf80 [ 320.463503][T20849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.463513][T20849] RIP: 0033:0x7fd6d338f7c9 [ 320.463523][T20849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.463533][T20849] RSP: 002b:00007fd6d4149038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.463544][T20849] RAX: ffffffffffffffda RBX: 00007fd6d35e5fa0 RCX: 00007fd6d338f7c9 [ 320.463550][T20849] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 320.463556][T20849] RBP: 00007fd6d4149090 R08: 0000000000000000 R09: 0000000000000000 [ 320.463562][T20849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.463568][T20849] R13: 00007fd6d35e6038 R14: 00007fd6d35e5fa0 R15: 00007ffe51675ce8 [ 320.463582][T20849] [ 320.576387][T20838] ------------[ cut here ]------------ [ 320.582798][T20838] [CRTC:37:crtc-0] vblank wait timed out [ 320.585239][T20838] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1920 at drm_atomic_helper_wait_for_vblanks.part.0+0x760/0x8c0, CPU#0: syz.7.4694/20838 [ 320.591436][T20838] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 320.594112][T20838] CPU: 0 UID: 0 PID: 20838 Comm: syz.7.4694 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.599251][T20838] Tainted: [L]=SOFTLOCKUP [ 320.601177][T20838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 320.605650][T20838] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x766/0x8c0 [ 320.609036][T20838] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 3f 01 00 00 48 8d 3d 30 37 3a 0b 8b b5 d8 00 00 00 <67> 48 0f b9 3a e9 ed fc ff ff e8 7b 52 66 fc e9 81 fe ff ff e8 81 [ 320.617731][T20838] RSP: 0018:ffffc900037277b0 EFLAGS: 00010246 [ 320.620254][T20838] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff11020868023 [ 320.623676][T20838] RDX: ffff888103698320 RSI: 0000000000000025 RDI: ffffffff9092e430 [ 320.627346][T20838] RBP: ffff888104340040 R08: 0000000000000005 R09: 0000000000000000 [ 320.630634][T20838] R10: 0000000000000000 R11: ffff88805087aff0 R12: dffffc0000000000 [ 320.633928][T20838] R13: ffff888054d70700 R14: 0000000000000000 R15: 0000000000000000 [ 320.637617][T20838] FS: 0000555568fc9500(0000) GS:ffff8880d68f1000(0000) knlGS:0000000000000000 [ 320.641313][T20838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.644083][T20838] CR2: 00007ff4345c3e9c CR3: 00000000273ea000 CR4: 0000000000352ef0 [ 320.647625][T20838] DR0: 0000000000000000 DR1: 000000000000afe8 DR2: 0000000000000000 [ 320.650973][T20838] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 320.654268][T20838] Call Trace: [ 320.655734][T20838] [ 320.657596][T20838] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 320.661068][T20838] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 320.663507][T20838] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.665749][T20838] ? __pfx_autoremove_wake_function+0x10/0x10 [ 320.668567][T20838] ? drm_atomic_helper_commit_hw_done+0x38e/0x490 [ 320.671255][T20838] drm_atomic_helper_commit_tail+0xff/0x130 [ 320.673756][T20838] commit_tail+0x334/0x410 [ 320.675686][T20838] drm_atomic_helper_commit+0x300/0x380 [ 320.678264][T20838] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 320.680851][T20838] drm_atomic_commit+0x234/0x300 [ 320.680929][ T6835] usb 11-1: USB disconnect, device number 16 [ 320.682946][T20838] ? __pfx_drm_atomic_commit+0x10/0x10 [ 320.688413][T20838] ? __pfx___drm_printfn_info+0x10/0x10 [ 320.690691][T20838] ? drm_client_rotation+0x4da/0x6a0 [ 320.692966][T20838] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 320.695599][T20838] ? __mutex_lock+0x27b/0x1ca0 [ 320.698110][T20838] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 320.700937][T20838] ? trace_contention_end+0xdd/0x110 [ 320.703217][T20838] drm_client_modeset_commit_locked+0x14d/0x580 [ 320.705903][T20838] drm_client_modeset_commit+0x4f/0x80 [ 320.708447][T20838] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 320.711754][T20838] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 320.714503][T20838] drm_fbdev_client_restore+0x1b/0x30 [ 320.717279][T20838] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 320.719806][T20838] drm_client_dev_restore+0x200/0x2a0 [ 320.721881][T20838] drm_release+0x2c6/0x360 [ 320.723665][T20838] ? __pfx_drm_release+0x10/0x10 [ 320.725775][T20838] __fput+0x402/0xb70 [ 320.727529][T20838] task_work_run+0x150/0x240 [ 320.729479][T20838] ? __pfx_task_work_run+0x10/0x10 [ 320.731631][T20838] ? __do_sys_close_range+0x278/0x730 [ 320.733975][T20838] exit_to_user_mode_loop+0xfb/0x540 [ 320.736329][T20838] do_syscall_64+0x4ee/0xf80 [ 320.738354][T20838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.740842][T20838] RIP: 0033:0x7ff6c558f7c9 [ 320.742722][T20838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.751138][T20838] RSP: 002b:00007fff35e599c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 320.754602][T20838] RAX: 0000000000000000 RBX: 000000000004e334 RCX: 00007ff6c558f7c9 [ 320.758023][T20838] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 320.761389][T20838] RBP: 00007ff6c57e7da0 R08: 0000000000000001 R09: 0000001435e59cbf [ 320.764885][T20838] R10: 0000001b2ee20000 R11: 0000000000000246 R12: 00007ff6c57e5fac [ 320.768480][T20838] R13: 00007ff6c57e5fa0 R14: ffffffffffffffff R15: 00007fff35e59ae0 [ 320.771853][T20838] [ 320.773189][T20838] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 320.776245][T20838] CPU: 0 UID: 0 PID: 20838 Comm: syz.7.4694 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.779890][T20838] Tainted: [L]=SOFTLOCKUP [ 320.781345][T20838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 320.784793][T20838] Call Trace: [ 320.785913][T20838] [ 320.786885][T20838] dump_stack_lvl+0x3d/0x1f0 [ 320.788404][T20838] vpanic+0x640/0x6f0 [ 320.789711][T20838] ? drm_atomic_helper_wait_for_vblanks.part.0+0x760/0x8c0 [ 320.792170][T20838] panic+0xca/0xd0 [ 320.793406][T20838] ? __pfx_panic+0x10/0x10 [ 320.795082][T20838] ? check_panic_on_warn+0x1f/0xb0 [ 320.797276][T20838] check_panic_on_warn+0xab/0xb0 [ 320.799315][T20838] __warn+0x108/0x3c0 [ 320.800913][T20838] __report_bug+0x2a0/0x520 [ 320.802459][T20838] ? drm_atomic_helper_wait_for_vblanks.part.0+0x760/0x8c0 [ 320.804796][T20838] ? __pfx___report_bug+0x10/0x10 [ 320.806509][T20838] report_bug_entry+0xe1/0x290 [ 320.808070][T20838] ? drm_atomic_helper_wait_for_vblanks.part.0+0x766/0x8c0 [ 320.810429][T20838] handle_bug+0x18a/0x260 [ 320.811887][T20838] exc_invalid_op+0x17/0x50 [ 320.813362][T20838] asm_exc_invalid_op+0x1a/0x20 [ 320.814915][T20838] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x766/0x8c0 [ 320.817385][T20838] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 3f 01 00 00 48 8d 3d 30 37 3a 0b 8b b5 d8 00 00 00 <67> 48 0f b9 3a e9 ed fc ff ff e8 7b 52 66 fc e9 81 fe ff ff e8 81 [ 320.823716][T20838] RSP: 0018:ffffc900037277b0 EFLAGS: 00010246 [ 320.825781][T20838] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff11020868023 [ 320.828265][T20838] RDX: ffff888103698320 RSI: 0000000000000025 RDI: ffffffff9092e430 [ 320.831458][T20838] RBP: ffff888104340040 R08: 0000000000000005 R09: 0000000000000000 [ 320.834662][T20838] R10: 0000000000000000 R11: ffff88805087aff0 R12: dffffc0000000000 [ 320.837842][T20838] R13: ffff888054d70700 R14: 0000000000000000 R15: 0000000000000000 [ 320.841172][T20838] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 320.844422][T20838] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 320.846900][T20838] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.849108][T20838] ? __pfx_autoremove_wake_function+0x10/0x10 [ 320.851134][T20838] ? drm_atomic_helper_commit_hw_done+0x38e/0x490 [ 320.853227][T20838] drm_atomic_helper_commit_tail+0xff/0x130 [ 320.855128][T20838] commit_tail+0x334/0x410 [ 320.856606][T20838] drm_atomic_helper_commit+0x300/0x380 [ 320.858365][T20838] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 320.860269][T20838] drm_atomic_commit+0x234/0x300 [ 320.861935][T20838] ? __pfx_drm_atomic_commit+0x10/0x10 [ 320.863675][T20838] ? __pfx___drm_printfn_info+0x10/0x10 [ 320.865473][T20838] ? drm_client_rotation+0x4da/0x6a0 [ 320.867302][T20838] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 320.869404][T20838] ? __mutex_lock+0x27b/0x1ca0 [ 320.871366][T20838] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 320.873593][T20838] ? trace_contention_end+0xdd/0x110 [ 320.875603][T20838] drm_client_modeset_commit_locked+0x14d/0x580 [ 320.877604][T20838] drm_client_modeset_commit+0x4f/0x80 [ 320.879334][T20838] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 320.882168][T20838] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 320.884504][T20838] drm_fbdev_client_restore+0x1b/0x30 [ 320.886258][T20838] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 320.888202][T20838] drm_client_dev_restore+0x200/0x2a0 [ 320.889938][T20838] drm_release+0x2c6/0x360 [ 320.891399][T20838] ? __pfx_drm_release+0x10/0x10 [ 320.892996][T20838] __fput+0x402/0xb70 [ 320.894291][T20838] task_work_run+0x150/0x240 [ 320.895825][T20838] ? __pfx_task_work_run+0x10/0x10 [ 320.897472][T20838] ? __do_sys_close_range+0x278/0x730 [ 320.899194][T20838] exit_to_user_mode_loop+0xfb/0x540 [ 320.900907][T20838] do_syscall_64+0x4ee/0xf80 [ 320.902449][T20838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.904342][T20838] RIP: 0033:0x7ff6c558f7c9 [ 320.905813][T20838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.911886][T20838] RSP: 002b:00007fff35e599c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 320.914535][T20838] RAX: 0000000000000000 RBX: 000000000004e334 RCX: 00007ff6c558f7c9 [ 320.917075][T20838] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 320.919579][T20838] RBP: 00007ff6c57e7da0 R08: 0000000000000001 R09: 0000001435e59cbf [ 320.922149][T20838] R10: 0000001b2ee20000 R11: 0000000000000246 R12: 00007ff6c57e5fac [ 320.924652][T20838] R13: 00007ff6c57e5fa0 R14: ffffffffffffffff R15: 00007fff35e59ae0 [ 320.927190][T20838] [ 320.928972][T20838] Kernel Offset: disabled [ 320.930355][T20838] Rebooting in 86400 seconds..