last executing test programs: 3m49.717995669s ago: executing program 0 (id=55): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x711, @loopback, 0x206}, {0xa, 0x4e21, 0xfffffffe, @empty, 0x8}, r6, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r6, 0x2}}, 0x18) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x5, 0xc, 0x0, &(0x7f0000000140)="04000000765c1511b2d653fa", 0x0, 0x923, 0x503, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff80fe, 0x1}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x488000, 0x0) accept4$packet(r7, 0x0, &(0x7f0000000100), 0x80000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) 3m49.658510733s ago: executing program 0 (id=57): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)}, 0x10000) 3m49.59077523s ago: executing program 0 (id=58): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x58}}, 0x0) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f00000004c0)=0x5, 0x4) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000680)={0xa22fc007, 0x0, "ee9a8000bc5e143f8437bb6bbe34fb7e7b692abe4bb49c3df484131ac9564da5", 0xffffff81, 0x9, 0xebc3, 0x5, 0x140}) r6 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x0) lseek(r6, 0x0, 0x1) 3m49.531293461s ago: executing program 0 (id=59): r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, &(0x7f00000003c0)) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x24}}, 0x81) 2m50.073105806s ago: executing program 2 (id=1133): r0 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00b500000000000000000002004000fc80c8090000000005001b"], 0x24}}, 0x0) 2m50.072137643s ago: executing program 2 (id=1134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0x1712, &(0x7f0000000200)={0x0, 0x1, 0x4000, 0x2, 0x7f}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x10a, 0x0, 0x6}]}) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="42f2d226dfbf55c6ebc9d4ba14698c2ec0416b3cb15f0b947b9e046bd3c42dcc8b", 0x21, r7) memfd_secret(0x80000) (async) r8 = memfd_secret(0x80000) ftruncate(r8, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0xfffffffe, 0x8000000, {0x7, 0x0, 0x0, r5, 0x0, 0x3211}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT(r9, &(0x7f0000000500)={0x8, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r9, &(0x7f0000000500)={0x8, {"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", 0x1000}}, 0x1006) 2m49.952946137s ago: executing program 2 (id=1136): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff70}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff4d, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r1, 0x20, &(0x7f0000000a40)={&(0x7f0000000900)=""/197, 0xc5, 0x0, &(0x7f0000000a00)=""/56, 0x38}}, 0x10) r2 = io_uring_setup(0x20796f, &(0x7f0000000900)={0x0, 0x7b61, 0x1, 0x1, 0x60}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/237, 0xed}], 0x1}, 0x8}], 0x1, 0x23, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) accept4(r1, &(0x7f0000000b00)=@hci, &(0x7f0000000b80)=0x80, 0x800) pwritev(r0, &(0x7f0000000840)=[{&(0x7f0000000080)="57a4238f3ab2366815dc67789879cf91b5198fb1e2f0af478a96329f754c840b63853736e41c2064bf3cfc0c56d308efd745378bd5a9f9997990e98bbd9d1a58dd79d137e53d5f70ef6e59d9bd249396c0500061c58b0f1f35045764cecfe6de6c95a305e806acfe7b2c6c7138d5c196133c2e30673837d9264284686d7ebdf88a58c5c40f9918eb05bc9457f2a8f5631fb5c1ad59779b9e38f8c491b08b6e054ed4f39352b1cb66e4f5e430c1686e3077659c42", 0xb4}, {&(0x7f0000000140)="1a0142402bd106acd9dbe67f7ca2029ddd56ba7d3b98313a62447ad1b82ade0c1803daff5b45e4e764adbaf821f4de1f7a3c3d20f9fb0ba1e16e2d7120335e8fa11e5877c4d1a02b2d596d01264140a5774463d650029ee9b872fc7d6f7193ae66eed877e1d666e97da9d0495958594865040faff6f68b74609f6702b1172a7738718b18150c389640d9d989c7cb75113e3228c612ddf9e9fe3fb199f6f2f0d46a41ea87c8a20288ddc4dbc54cf471c8dd3b4caa16f27b44ff65d9dabb6944dfd7b64eeecc397db92a1e41406f63eff812", 0xd1}, {&(0x7f0000000240)="7c171a6cb363ef019aca72422d76e2a72ca71d0727938b56c2a68ccc5ed0a82747fd507abfaef2100a3a912474686c374ae6a54884c14f303f5018ea92664c4adf8a0c53cb59325d431fb73b3eacaffb62373ba8d4e87d604bea8d3cb678acccc96ffd9925de2ff5b7b66168", 0x6c}, {&(0x7f00000002c0)="93c6285045b3fb9fa5b880f3eb274158edcf174e181a8fa789abcd83c66e654d719dfbfd6fb81bf1506c2af1f3d768acd92bcd64a321328f89694abce784c299012921423a65f4f75de1b258ea02bea4778f24133f92d796800faa5f82adfc7af4718463ad40a36340d4a92958ea47a9621f4171943df6538da83da3b952746dec20627686a8859d0fbfd88aa89f13b25a449f426d916f56cd15185c8871a310cc29193172492d3527e6d72ae2319ccfbb65513bb3c77794ec1c4db5ac0163280cf517e42ee65551f8f911e6909fa1d5dd7020a73c5cc1f080987787f111d4eab5b75e4705dd241ff76cdc37a241fa", 0xef}, {&(0x7f00000003c0)="0a2d9ec88aa92abac3862b74ae3d3e7c54dd03e8fad1c2476882c84c3b3c20552e9681bc1998e126a4510ded6a8184bfd6c327f4000e232bae6a611c29e3880acf3560b433edaa7b4a3709f6b267081f10b4c851db2ab07e47693724c1e292fd34c323a8926617914042fa095b3668492f4f419800d8bdc1504fd6c611d2caf6106d1c1f3d21d2b167578f46c2be8b39852bee3e0e40ade5018609bd622463e2abd6d72610874f27ea4fc21a2b2bc8667c3683466bf91e988b2a9abb9a6922aa220330b2fac72b1ad6ab95241c23985d67da1878a33de0e18d1693e74e0d3efe705ce494bf300d613ef1bd46ed90", 0xee}, {&(0x7f00000004c0)="dad25b9d0160e387709a18524066ccd2cafb68cd25b9c2de1e651823a16eae0c12543153e16cd0468fe4fc1dd5853bcdcf9db1da0bdcfdd98cf731b8738706fa771a420c49d7313f8ee47339b4610ecb298f81265d5142e2e9a80ecb2445c045780a48319438940887ed82a37e31771da9daa780d1e267dfafaf8f1355a9ba4e79761f47381e98842b6a3b62490680984869d0408a838a4516be3b138370c6f47f2638108d8dfda35b2ff8f39bea599d294c21cd97a9f7a2e80acc56644e8525e53ccc1d6d690280d45281bea3bbec7abcc95adceb09c8f70dd897358edba70ecf44d3153b9bd4432e95dcce7e42", 0xee}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="152bef81f4e8ed032cd375589b59b7c806be39254f7915e6a48e03cb2bb81cd9774c1d14f181f7da36af01bcfdc1af5277dda2d63cd004a2a4dacb7ca74bc98c832ef70ff0c90fe23d82e56c24803c6e9901377c09a6208bcf19d9df5563283bf804917623103443dfa1af1929a7add281819271dd937069c05449f2f9c4bb3f8a523ad4d95ae0a84ddf9c4f44bd821f62421693765f2c948bff301871451dc955f2d16ce15640f2d6e1d9b55e533aa44e6b1242da8f5b9e50ce0652891ef5d405d34163c830a6981b9eb6ff0c645cd3b8079c66ee5e4f115f232ff6609072d8a4e90efbf92ee6f5a00f68", 0xeb}, {&(0x7f00000007c0)="a3affcbf67d60650cd84d5afb741f7bda78533a68d9553b724f370d709e76ddbc6796b3c63000e81e5905f5ccb68f485b355f252df07bdf870b8cfaf5a5a2f7a3e41bfb3193a825b8477af8830c060b8ae2a0e40387fc245", 0x58}], 0x9, 0x4, 0x5) 2m49.053300428s ago: executing program 2 (id=1148): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1}, @enum]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="c7280d715d8ecca7a00a8c040000b9cef4d3b6411b58fb7482a21a83dee5dc53ce243202e3b44a4f98d66288dc30577fea665b4f64f7b5a9dfa3067c22f73e35315a58dc47aa4ee2fb8b150d30566d4d19009c10f8b75b1b40871b0dab3b9a4d8d9f6fe8bd2c4ac7c64f334bfd7c0a16f6d1cec4533a0bcdbeaa40b4e34b47b6ef4b8771a8c89b99c7cc41885ab66201f9a9c63b140fd2e0", @ANYRES64=0x3], 0x10) 2m49.052820629s ago: executing program 2 (id=1149): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "d920df", 0x8, 0x3a, 0x1, @mcast2, @loopback, {[], @echo_reply={0x81, 0x0, 0x0, 0x7fff, 0x5}}}}}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000300)={0x1, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6651cb5e0a3eeda1a7777d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db07", {0x80000002, 0x1ff}}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xff}, [{}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 2m33.949955775s ago: executing program 33 (id=1149): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "d920df", 0x8, 0x3a, 0x1, @mcast2, @loopback, {[], @echo_reply={0x81, 0x0, 0x0, 0x7fff, 0x5}}}}}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000300)={0x1, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6651cb5e0a3eeda1a7777d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db07", {0x80000002, 0x1ff}}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xff}, [{}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1m3.666490004s ago: executing program 3 (id=2798): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100000000000000000000000800218500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m3.58689204s ago: executing program 3 (id=2799): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) 1m3.585591486s ago: executing program 3 (id=2800): r0 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r3, 0x0, 0x5b, 0x40, 0x0, 0x0) r4 = dup(r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000001c0), 0x6000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180), 0x100800, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}], [{@hash}, {@obj_type={'obj_type', 0x3d, '9p\x00'}}], 0x6b}}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r0}, 0x18) 1m3.486892166s ago: executing program 3 (id=2801): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000001100)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x11, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x8, 0xfffffffffffffffb}}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x3, 0x0, 0xfffffffffffffffa, 0x7, r4}) fsmount(r1, 0x0, 0x8) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r6, 0xb}}, 0x10) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9]}, &(0x7f0000000180)=0x54) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00'/20, @ANYRES32=0x0, @ANYBLOB="88520000000000001800128008000100736974000c000280060012004e210000"], 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) 1m2.616963783s ago: executing program 3 (id=2809): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, &(0x7f0000000040)={{@hyper, 0x4}, 0x5, 0x4}) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x2}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@multicast1, @broadcast}, &(0x7f0000000100)=0xc) setsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f0000000140)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) r3 = memfd_secret(0x0) ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f0000000240)={0x0, 0x2d, &(0x7f0000000180)="c85d62d1fba946004bee5f682d476fb3db75670a5241c48404080ac04a7078305a744569aab97fae02d8f905a500ef2da24aeb433cdb962a237104030918a4d39e098d2eaac479e3429ad7e27d9e4d312729fe5dc090f691c561617ad3774eaf6fd77203a9a0925afb160e03b1dfae3f32b04efaf48641e9ae9da1dd81a7a84585286a01bd57c32ae6e8c25ea9d287d10a", {0xa, 0xa8d7, 0x30314142, 0x9, 0x4, 0x0, 0x7, 0x1}}) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f00000002c0)={0x2, 0x1e}, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000300)={{0x1, @name="e2ca34e5d6d18a2737861da1374527b98163d586ca8312d6425ce3f031f5ddc4"}, "e6d080ee0ca10eb7d7556e10a926ab0ea1c6beb5a826627f04bb89f5e8ca9c33", 0x2}) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000400)='personality\x00') ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000000440)={0xd, "537a9e2a520d7e06f792e0ca9926d84148ccaa0292d3dbfaa4abbfeb8b36af36", 0x5, 0x100, 0xef, 0x800, 0x10, 0x0, 0x41b9f200, 0x5}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r2, 0x0, r7, &(0x7f0000000600)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000680)=0x0) rt_sigqueueinfo(r8, 0x1d, &(0x7f00000006c0)={0x31, 0x4, 0x5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f00000007c0)={0x48, 0xa, r9}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000980)={'erspan0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x33, 0xfff, {{0x39, 0x4, 0x3, 0x18, 0xe4, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp_addr={0x44, 0x14, 0x54, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @end, @lsrr={0x83, 0x1b, 0x12, [@local, @empty, @multicast2, @loopback, @remote, @multicast1]}, @noop, @timestamp_addr={0x44, 0x44, 0x44, 0x1, 0x5, [{@private=0xa010101, 0xdc}, {@rand_addr=0x64010102, 0x9}, {@broadcast, 0x5}, {@broadcast, 0x3dc}, {@rand_addr=0x64010101, 0x5}, {@rand_addr=0x64010101, 0x6}, {@private=0xa010100, 0x81}, {@empty, 0x5}]}, @generic={0x83, 0x7, "8ef90ee90a"}, @timestamp_prespec={0x44, 0x44, 0x71, 0x3, 0x5, [{@loopback, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x1000}, {@empty, 0x5}, {@private=0xa010101, 0x5}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x4}, {@broadcast, 0x7}, {@remote, 0x401}, {@broadcast, 0x3}]}, @lsrr={0x83, 0xf, 0xcc, [@multicast2, @multicast1, @rand_addr=0x64010101]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x6, 0x8367, 0x8, 0x40, r4, 0x8000, '\x00', r10, r6, 0x1, 0x2, 0x2}, 0x50) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, 0x1412, 0x20, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40884}, 0x80) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000b40)={0x4, 0x10001}) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000b80)) r11 = creat(&(0x7f0000000d00)='./file0\x00', 0x100) ioctl$EXT4_IOC_GROUP_EXTEND(r11, 0x40086607, &(0x7f0000000d40)=0x80000000) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000d80)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x1}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000f00)={r3, &(0x7f0000000dc0)="7c2a1b46946eba91e73660e4d051794ac58231366951fa46f01cf12cfb23bbe41e86c8354f16fe06d9376ccc1bf67f6b3c05eaade589824afd500d55b2735c7b22965893f4c4e93c6844ab6dff6e3a45ea17f28b71893cfb40c115db2f8fc8fc7f71eec43f5ff9bc9e280fa60ccf5eb7dc10c69da06f66a94f292c542ed033e533780b1027c4c42144fcb914b4a14dfc82992b1706", &(0x7f0000000e80)=""/84}, 0x20) 1m0.306825741s ago: executing program 3 (id=2852): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd26, 0x25dfdbfd, {{@in6=@loopback, @in6=@private1, 0x4e20, 0x1f5, 0x4e24, 0x0, 0xa, 0xc0, 0x20, 0x2c}, 0x6e6bb5, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0x800}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x820}, 0x4cc00) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000500)={[{@name={'name', 0x3d, '\x98\xc5R\x95\xb1\xa3!\xfb\x05a\xe6)w-.\xac\x177~t\xde\xc5\x1er\xe7\x0e\xf8\xc7\xdd\x9b\xe9\x83*\xceh\xf4\x1fH\x96\xac\x89\xcd=?\xd6\x9d>\x87\xa2F\xd8\xfc\x96\xc26\xeb\xa9&\xd0V3\xbf\x7f1'}}]}) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) 1m0.195636942s ago: executing program 34 (id=2852): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd26, 0x25dfdbfd, {{@in6=@loopback, @in6=@private1, 0x4e20, 0x1f5, 0x4e24, 0x0, 0xa, 0xc0, 0x20, 0x2c}, 0x6e6bb5, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0x800}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x820}, 0x4cc00) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000500)={[{@name={'name', 0x3d, '\x98\xc5R\x95\xb1\xa3!\xfb\x05a\xe6)w-.\xac\x177~t\xde\xc5\x1er\xe7\x0e\xf8\xc7\xdd\x9b\xe9\x83*\xceh\xf4\x1fH\x96\xac\x89\xcd=?\xd6\x9d>\x87\xa2F\xd8\xfc\x96\xc26\xeb\xa9&\xd0V3\xbf\x7f1'}}]}) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) 1.71798733s ago: executing program 6 (id=3666): unshare(0x0) 1.668735864s ago: executing program 6 (id=3668): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 1.529586852s ago: executing program 1 (id=3673): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0xff, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0xfffffffd, 0x8000ffff, 0xa, 0x1ff, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0x7138) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="66ba2000b052ee660f38813bb83e69bef166baf80cb8cc8a0689ef66bafc0c66ed0f21f835040000010f23f8b99b0b0000b842066fc5ba000000000f308fe978d6b857648e2ade87014876aa0f210ab805000000b949f300004f01d90f32660f6e4c8fee362636ec", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"45969252f002937180e64d0bd513a62ca2d86da10a3ced8fdf41d876068c0eca8fd6532a060e5bd57ae8c8598a57d8a872eb24e6ca1adce8746909a2ec0f996db678963050e4bfb9adf4fd20dc7f5919a9c971063d55f3ddf10c35dbf205ccbdc67b022961c8df2fb7d1d1eebcfcd23f04fea913da84d9d21abd8fc439688e326ef6b73709b712aaf2c3cc37ea7e277dd1a2971d400a787b0c925eee65e788edd3ebe86b745740bbad95a90b0f4c92f86c5240a67534d5a8f0e77c6399e5cf9dafd1ba20edb4003eec57561dd751b49e7070b518823f49ab73440bf19462c7ffdceed6ecf84fa849f6c9148e2b31349348a3f91d4bcb944d99e93a88ed7d6be3337882ae41b5a47d97fda4b585d481b7be8a84c87bbf84269aff0054e5a3a74efe9491e2133b7680be3592d688c27208ac3d6513c5d8b1acf937f4304e46772354a0d5d90e576d2121b73338ed8cd357810b81d573d1e034ef5bcc52d3559eb851ed23439ddf7176037d84dd57d88e58ff27e8b6ac367da9dbdfa3566501d8a96999c696aabdaf376ba5e526a92e28186ae6fd4a99ff2837749c0b92b1500bf27f54d158ef5723c1807b3653448230e0ca0abf8cf23bfa65ca8ce84714dfbdd54aab59fd8b61c1351074fa5b41c5ece657e4ae6b1dc9b0999d2a0a575c6e39390601d6e0da96949e1c9a1adfc36d2d30dade5e1dcca115f6b4656ac9745ae392063f1a6060a17d53ed9ab5bca5af431900dab72ac94a788a723dbc9f7180200980b24a0ec89eadaccf15c03f04a7d25a91d24d369a5817aac385118085266d26eee86b0f9f63a1b4a2166e606d3a585a306f7ed12d8eccc0390fbee32db81619ed135e72d70743611b3c67a16579824191be8f2e7f8a6f51b8dbf48b6966a31e2e5252efc4070cf791a4382dad3eaa4a948d8091b087a524a17547d136439cdf9100164e2e59b9d52c72bde7110a69b4bbf15b0eade23414cdb5562859103ff65bcd332054d16ab1369b7ba544e71ec1d3f3bf33826533dbf29f3934c4cff75adc0f1cb7233074a25c6962f4d683eb0bdc9e1f17ea5312a0317b8880c74c5a011bc249d2740d5dc38b5e707a1507524fe447e6909435496e3b6afd4ea2744cf3eabbfba4dec98864e1c95b94f1251e917a36cbcc4d124a20f0db0755a2cba6ae4967bf468643a20e73d7133cb1bab9b5c9e806b6da34b03a9edd9f5bddd81d8bd2b21ebf86d10c63bdddc544b7af70d5a472dbd9325c2edd601b914c450cc780d622a1a36af60a2d864ab17c4ddc6e4f5b946518c776b3062f86d487732561feeb6a678ee81da8c7dbd5ad355e099a1deb12d68a200f8ea831f9c4913db0c3bba2df34f8ee1f5937925292ad01e8683f1d4483e057d27b4690daf2e1a71c90875b9a8969f1329d9e81d7c6e363ece76140da59b5b74b68e93e68fb1344e2766b"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001b80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0800a0001209000008009f0013000000080026008032fb8500800000000000004f6668350900af8d85ade64b7842bfd227"], 0x34}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) unshare(0x22020600) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000940)=ANY=[], 0x44}}, 0x800) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r11) sendmsg$IEEE802154_LLSEC_DEL_KEY(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001c40)=ANY=[@ANYBLOB="3c000000ff589a12bb767bc8ec99618203b3ee521f2634028bb55121af698c594bc6ad554da2e533c7c2f0753e07b317cbac57079dad4e804f6ad32ba5bbd137f1a13dffb127273d4897bbb53af79a90fb778259b03d5d35cd0690a26786a00121940b83a287805eddc4c6237b3520afc90747ecba4c08c2f883605f64199ab533cbf2cb44302fca7dd0f2b266797e21b74505d1d9c6959e496c8aa000000000", @ANYRES16=r12, @ANYBLOB="01022cbd7000fedbdf252800000005002b00000000000c0005000200aaaaaaaaaaaa06000600020000000a0001007770616e30000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) recvmsg$unix(r10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001880)=""/33, 0x21}, {&(0x7f0000001680)=""/47, 0x2f}, {&(0x7f0000001700)=""/70, 0x46}, {&(0x7f0000001d40)=""/74, 0x4a}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/183, 0xb7}, {&(0x7f0000001640)=""/9, 0x9}, {&(0x7f00000019c0)=""/209, 0xd1}, {&(0x7f0000001980)=""/37, 0x25}], 0x9, &(0x7f0000001e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}, 0x40000163) r13 = syz_io_uring_setup(0x17ae, &(0x7f00000005c0)={0x0, 0xbc47, 0x17281, 0x1, 0x1bd}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r14, r15, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r13}) io_uring_enter(0xffffffffffffffff, 0x1, 0xfffffffe, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.418931582s ago: executing program 4 (id=3678): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000bee22f200"/28], 0x48) r0 = socket(0x2, 0x805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xc, 0x800003fffffffffd}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000001a80)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008005}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) syz_emit_ethernet(0x26e, &(0x7f0000001100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "1145be", 0x234, 0x3a, 0xff, @loopback, @mcast1, {[@srh={0x89, 0x0, 0x4, 0x0, 0x4, 0x20, 0x6}, @fragment={0x16, 0x0, 0x4, 0x1, 0x0, 0x16, 0x66}, @hopopts={0x3c, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x48, {0x3, 0x10, 0x7a, 0x7, [0x4, 0x3, 0xb94c, 0xc68, 0x4, 0xa64, 0x6c, 0xf]}}]}, @routing={0x2, 0x2, 0x2, 0x2, 0x0, [@mcast2]}, @srh={0x4, 0x6, 0x4, 0x3, 0x10, 0x18, 0x2, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @empty}]}, @fragment={0x84, 0x0, 0x3, 0x0, 0x0, 0x1c, 0x67}, @srh={0x21, 0x6, 0x4, 0x3, 0x2, 0x40, 0x9, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0xff, 0xe, 0x0, 0x50, 0x0, [@local, @empty, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @mcast1]}, @dstopts={0x5c, 0x11, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x5, 0x68, "25778e383051a5638a9aa8f4270089b7a873ec6700ed482030dfe47583ce9e0fb5818b8b73a6a6948798e674604275ebc6880148b89bb1a7a135121e1119d824aea37a19ce05446c5382fd5aa7d4b5f902f74684149cc0eb68a2671b1852328b9cfb79187d17d711"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}], @mlv2_query={0x82, 0x0, 0x0, 0x5, 0x2, @local, 0x4, 0x1, 0x4, 0x9, 0x1, [@local]}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0xd2, 0xf9, 0x6, 0x1, @rand_addr=' \x01\x00', @empty, 0x700, 0x8, 0x7, 0xff}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000002b80)=ANY=[@ANYBLOB="d0880000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="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"], 0x1504}, 0x1, 0x0, 0x0, 0x48854}, 0x1) r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@alu={0x4, 0x0, 0xb, 0x9, 0x1, 0x80, 0x4}]}, &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) 1.370383434s ago: executing program 6 (id=3679): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300fa564b0a5056ee308d963ae734485c2dadab17923833b4f39ead5683e170a9a65ac00cc288aa280c2c8dfa77b4b4662f9646fa6b8b6cd5b16c2afbf9e0c4344d170f090f05242f3de4711c15486a0ba603b32e0a7e04b45c092c9f4863f2b5efdc587009bb4928735e688bc6600f94691906c3d1d1a5cdfdde4af96bdae52aebfe16a97ace3cf0fe35289022131ad052dcbcaa690ead934a4af48520e7dcaad37299cc", @ANYRES64=r1, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x7) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.280385751s ago: executing program 6 (id=3680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e63925789381db3fe455e8dadc7dcf81189517730bed5d8036168bd2e27cc611027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc506c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7964a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 1.280097181s ago: executing program 1 (id=3681): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000002000fedbdf251000000018000180140002006e657464657673696d300000000000000800060000080000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250100000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8010) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4292}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.220511227s ago: executing program 6 (id=3683): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}, {@access_client}]}}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110440000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 1.214426749s ago: executing program 1 (id=3684): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000001039fa6806000001000000000000000141000000140004000000000000040169623a894fd7d2fa77e7f6683d4db4cace5f7d5992ec0cd0c9bbc7a3a758232a5cf40c8128551707eb713d33c655348957be7a95fe0d5ff5d9aef0d2c86ffae66980af"], 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) socket(0x1, 0x803, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1.153421055s ago: executing program 4 (id=3687): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update ecryptfs\x00'], 0x1a, 0xfffffffffffffffc) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update ecryptfs\x00'], 0x1a, 0xfffffffffffffffc) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETS(r0, 0x80047456, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)="33cd195ce1", 0x5}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)="33cd195ce1", 0x5}, 0x68) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000d27f79389f7a5a121b043577ecf9d9e2d6b4def2cce43ee629a590fe6ec6b809eae99577bc8145b541dbdcb4f496da11cbc2cc91bf29086a3d2d517fc28d487fdf2c7496", @ANYRES16=r5, @ANYBLOB="040025bd7000fddbdf250300000008000500e000000114000200fc0000000000000000000000000000013200070073797374656d5f753a6f626a6563745f723a73797374656d645f7061737377645f7661725f72756e5f743a7330000000"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa1d0800450000b52df7b9e572c8082b6c21ffb62b3500010002001190780000"], 0x0) 1.080673501s ago: executing program 5 (id=3688): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2000) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0xc0045401, &(0x7f0000001280)) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.02092642s ago: executing program 5 (id=3689): socket$inet(0x2, 0x1, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x1000}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x1000}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 936.408273ms ago: executing program 5 (id=3690): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) (async) io_setup(0x9, &(0x7f0000000340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="23000f000087ced4041627906b"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff39) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0}]) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000500), 0x10000040006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000280)={0x13, 0x1, 0x3, "02860077abb9d375dcba568eb40700b80000000000f61045a82ed23d00", 0x34524742}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, r6, &(0x7f0000000140)) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1) 936.020449ms ago: executing program 4 (id=3691): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone3(&(0x7f0000000700)={0x40000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf250f0000000800270001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000000001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f0000000400)) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r4, r3, 0x4, r4}, 0x10) 843.213391ms ago: executing program 4 (id=3692): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) fadvise64(r1, 0x10000, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 842.94325ms ago: executing program 5 (id=3693): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) 790.435835ms ago: executing program 4 (id=3694): unshare(0x64000600) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffc00}}, './file0\x00'}) r3 = dup3(r2, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0xc) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f00000001c0)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000540}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x1411, 0x200, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000055}, 0x404c0c5) 789.339857ms ago: executing program 6 (id=3695): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r3, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x10000005, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x8000) read$char_usb(r1, &(0x7f0000000040)=""/128, 0x80) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) 266.202587ms ago: executing program 5 (id=3696): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0xc4) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100), 0x4) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r4, 0xffffffffffffffff, 0x0, r5}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @dev={0xac, 0x14, 0x14, 0xb}}}}}, 0x0) 265.536876ms ago: executing program 1 (id=3697): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x7, [0x5, 0x4, 0x9, 0x5c, 0x1, 0x4]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x0, 0x7, 0xff, 0xf, 0x52, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x7800, 0x7, 0xffffffff, 0x306}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', r2, 0x29, 0xf8, 0x5f, 0x9, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x40, 0x20, 0xf, 0x3ff}}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000200)=0xc39c, 0x4) fcntl$getownex(r3, 0x10, &(0x7f0000000240)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = signalfd(r0, &(0x7f00000002c0)={[0x2]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) read$FUSE(r5, &(0x7f0000000540)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002580)={0x0, 0x0, 0x0}, &(0x7f00000025c0)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002600)={0x0, 0x0}, &(0x7f0000002640)=0xc) statx(r4, &(0x7f0000002680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800, 0x20, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002980)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000002a80)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000002ac0)={{0x1, 0x1, 0x18, r4, {0xee01, 0xee00}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r14 = geteuid() r15 = getgid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000002d00)={{{@in=@private, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000002e00)=0xe8) getresgid(&(0x7f0000002e40)=0x0, &(0x7f0000002e80), &(0x7f0000002ec0)) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002f00)={0x3c0, 0x0, r6, [{{0x3, 0x2, 0x52a7, 0x94f, 0x5, 0x0, {0x1, 0x8, 0x4, 0x40, 0x7, 0x0, 0x8000, 0x9, 0x6, 0x1000, 0x8, 0xee01, r7, 0x80, 0x101}}, {0x6, 0x7, 0x0, 0xfff}}, {{0x3, 0x2, 0x7, 0x7fffffffffffffff, 0x4, 0x1, {0x1, 0x60b, 0x8, 0x7, 0x2800000000000, 0x800, 0x0, 0x7, 0x8, 0xa000, 0xf169, r8, 0xffffffffffffffff, 0x5, 0x8}}, {0x3, 0x3, 0x2, 0x7, '(#'}}, {{0x2, 0x1, 0x8e, 0xf4, 0x29e, 0xf, {0x2, 0x1, 0x100000001, 0x7, 0x1000, 0x80000000, 0x2, 0x0, 0x8, 0x1000, 0x9, r9, r10, 0x7fff, 0x5}}, {0x4, 0x2, 0x8, 0x8, 'syztnl2\x00'}}, {{0x4, 0x1, 0xb, 0x341, 0x7, 0x8, {0x5, 0x0, 0xfffffffffffffffa, 0x0, 0x7fff, 0xffffffff, 0xa71, 0x5, 0x3ff, 0xc000, 0x80000000, r11, r13, 0x1be, 0xe}}, {0x4, 0x8, 0x0, 0x100}}, {{0x3, 0x1, 0xa1f, 0x9, 0x0, 0x4, {0x1, 0xcbd3, 0xff, 0x8, 0x7, 0x6, 0x44f, 0x7f, 0x705d, 0x1000, 0x8, r14, r15, 0xb, 0x4}}, {0x4, 0x5, 0x1, 0xffffffff, '\x9a'}}, {{0x5, 0x0, 0x1, 0x82, 0x0, 0x6, {0x0, 0x8, 0x0, 0xffffffffffffffff, 0x9, 0x9, 0x200, 0xff, 0x8, 0x2000, 0x5, r16, r17, 0x5, 0x9}}, {0x5, 0x3, 0x1, 0x7f, '\x00'}}]}, 0x3c0) inotify_init1(0x80800) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001) setsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f00000032c0)=0x4, 0x4) mount$binderfs(&(0x7f0000003300), &(0x7f0000003340)='./binderfs\x00', &(0x7f0000003380), 0x192481, &(0x7f00000033c0)={[{@stats}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x51440b5c}}, {@max={'max', 0x3d, 0x100000000}}, {@max={'max', 0x3d, 0x101}}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '*(-:#['}}, {@uid_lt={'uid<', r12}}, {@uid_lt={'uid<', r8}}, {@fsname={'fsname', 0x3d, '\xff\xff'}}, {@hash}, {@permit_directio}, {@fowner_lt={'fowner<', r16}}]}) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000003500)={0x9, @pix_mp={0x2, 0x200, 0x32314d4e, 0x3, 0xb, [{0x5, 0xf}, {0x9, 0x5}, {0xfff, 0xdb0b}, {0x3, 0x3}, {0x9, 0xffffffff}, {0x7, 0x6}, {0x7, 0x40}, {0xfffffff7, 0x9}], 0x63, 0xc, 0x7}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) 190.599476ms ago: executing program 5 (id=3698): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_BUFCONFIG(r3, 0x8020640d, &(0x7f00000025c0)={0x1, 0x0, 0x2b39, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)) 190.16065ms ago: executing program 1 (id=3699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040034}, 0xc802) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80, 0x0, 0x0, 0x400, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x3b}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200047f9, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x482000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540)={0x0, 0x9}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000600)={0x1, 0x8000, 0x9, 0x2, r6}, 0x10) r7 = fcntl$dupfd(r4, 0x0, r4) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001c00)={0x18, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x4008011) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESHEX=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000780)=@urb_type_iso={0x0, {0x3, 0x1}, 0x9, 0x0, &(0x7f0000000400)="4f3e9ed07f1134f8ef5c80868b78e702948594bb37f18334372ea2b34034b8c2d955e0ca7b2883fcf9115c90a5504650befd018afc94f13b02e2548297424910f77cd01dc56518396b91219d876f77436aab580b6cd7eda2e97458f19b1e502f16efefcf7a6d38ae948d44b9a937915616cd320ac8e44ac1cea6f840e2be48ed0ea27ff6b0e8793d74604dfcfde2036cc37a03b79f716bfd220c3e8962a8d9167b89dad7cfa310eb653af3f3213215", 0xaf, 0x8, 0xb67, 0x6f, 0xc, 0xfffffffb, &(0x7f0000000000)="9d93a53900254af1b3692685ef8b864512a3b312bb115ff7ef04807fe93322a1d1300b2957e31aed86a64c13c7733d44026c2af2dd4cff5d0053cc5198b9d73afc9e23acf558786ced1588ecbfa9e264b5956cfbb2ce059c74170fef7374b047084a1f", [{0x1, 0x1, 0x596}, {0xb, 0x7, 0x7}, {0x1, 0x6}, {0x6, 0x7ff, 0x4}, {0x4, 0x10}, {0x4, 0xc, 0x2f2}, {0x7f, 0x5, 0x6}, {0xfffffffb, 0x5, 0x9}, {0xed0, 0x7, 0xffff}, {0x3, 0x2, 0xb5}, {0x10, 0x7, 0x6}, {0x61a, 0x4, 0x104}, {0xd, 0xf, 0xc}, {0x7c, 0x5}, {0x8, 0xfffffffb, 0x200}, {0x2, 0x0, 0x9}, {0x6, 0x757e, 0x6}, {0x6, 0x7, 0xffffffff}, {0x7, 0x10000, 0xf}, {0x1ff, 0xbe5f}, {0x5, 0x6, 0x3}, {0x48, 0x0, 0x4}, {0x2, 0x8, 0xbd65}, {0x4, 0x40000000, 0x6}, {0x4, 0x0, 0x5}, {0x2, 0xfffffff9, 0x3}, {0x3, 0x8, 0xe}, {0x2, 0x3, 0x5}, {0xf, 0x6, 0x17}, {0x355, 0x80000000, 0xf}, {0x8, 0x51, 0x5}, {0x7, 0x7f, 0x2}, {0x6, 0x2, 0xd2e}, {0x6, 0x10001, 0xf9}, {0xe, 0x10001, 0x2}, {0xd, 0x3, 0x4}, {0x3, 0x2382, 0x3}, {0x8, 0x2, 0x212}, {0x80, 0xb4, 0x5}, {0x1, 0x6, 0x7}, {0x8, 0x3, 0x3}, {0x6, 0x2, 0xca}, {0x3, 0x6, 0x1000}, {0x2, 0x4, 0x8}, {0x7ff, 0x7, 0x7ff}, {0x1, 0x6, 0xbd3}, {0x6, 0x8, 0x9}, {0xfffffffd, 0x1, 0x6}, {0x1, 0x80000001, 0x7fffffff}, {0x8, 0x2, 0x8b3}, {0x3, 0xe1, 0x6}, {0xe, 0x3, 0x7}, {0x1, 0x1, 0x3}, {0x10, 0x7, 0x4}, {0x92, 0x3, 0x5}, {0x100, 0xea0, 0x2}, {0x7, 0x3ff, 0x7}, {0xe23, 0x7, 0x8000}, {0x4, 0x6, 0x1}, {0x689c62, 0x40, 0x2}, {0x200, 0x109, 0x8000}, {0x1, 0x8, 0x9}, {0x579d, 0xef2, 0xc}, {0x3, 0x4, 0x3}, {0x1, 0x5, 0xa4}, {0x8, 0x3, 0x10000}, {0x2, 0x0, 0x9}, {0x7, 0x1, 0x4}, {0x1, 0x9, 0x1}, {0x8, 0x9, 0x6669}, {0x10, 0x4, 0xb8d0}, {0x5, 0xff}, {0xb, 0x4, 0x54}, {0x3, 0x7, 0xfffffe66}, {0x8, 0x3a1, 0xc}, {0xd954, 0x847, 0x9}, {0xea, 0x389, 0x1}, {0x3, 0x800, 0x8}, {0x7, 0x0, 0x1}, {0x8, 0x5, 0x897}, {0x2, 0x7ff, 0xf914}, {0x9, 0x8, 0x4}, {0x3, 0x9, 0x1abae7ec}, {0x6, 0x4, 0x9}, {0xfa6, 0x2, 0x7fffffff}, {0x1, 0x2, 0x3}, {0xfffffff7, 0x7, 0x1}, {0xfffffff7, 0x8, 0x200}, {0x0, 0x10001, 0x7ff}, {0xb47, 0x762, 0x10000}, {0x7a, 0x6}, {0x8001, 0x80, 0x3a}, {0xf, 0x80000000, 0x4}, {0x6ca, 0x4, 0x94}, {0xffffffff, 0x80000001, 0x8}, {0xe1, 0x4, 0x9}, {0x2, 0x7, 0x7}, {0x2, 0x7fdf, 0x2}, {0x6, 0x7, 0x675c}, {0xa, 0xd2, 0x93}, {0x101, 0x5, 0x8}, {0xf6, 0x7, 0xea1}, {0x8, 0x8, 0x19de}, {0x40, 0x9, 0xff}, {0x7, 0x5, 0x8}, {0x81, 0x4, 0xf2}, {0x100, 0x8, 0x3}, {0x2, 0x5, 0x80}, {0x82f, 0x62, 0xcf8d}, {0x4, 0x0, 0x4}, {0xffff0000, 0x9, 0x81}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) 189.352735ms ago: executing program 4 (id=3700): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfc, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}}, 0x28008080) unshare(0x2c020400) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0xf5cc, 0x2, 0x4}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfc, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}}, 0x28008080) (async) unshare(0x2c020400) (async) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0xf5cc, 0x2, 0x4}, 0x0, 0x0) (async) 0s ago: executing program 1 (id=3701): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x8, 0x40) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000280)={0x52, 0x9, 0x8, {0x9, 0x6}, {0x9, 0x7}, @rumble={0x1, 0x7}}) r4 = dup3(r2, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x8, 0x5, 0x2, 0x0, 0x5, '\x00', "037ec42b", "8000", "0100", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "006a9cc1f000", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x0, 0x8, 0x1, "1efcffffffffffff00", 0x0, 0x0, 0x0, 0x27}) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000040)=0x10, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xe80f, 0x0, 0x0, 0x48, 0xfb8, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@handle={0x73682a85, 0x100a, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1a}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=3702): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}) r1 = socket(0x1, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x30, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x229) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000002080)={r5, 0x80, {0x0, 0x0, 0x0, 0xa, 0x5, 0x0, 0x0, 0x18, 0x1, "1bcfc4fe703111d4e91379cc9bc43dcdc689b270de5f3a5b31730797e1353c9208cc5f7354ee857cfed8fdbee60ad90c792f4fae4a39be911e455584f3657d19", "4bf1f79ee16daae1ca4903600e261e9f74ba1a99ddf0b13f4530858d555842c451d9c9df2caffb70193ab97dcc5c2c832aef7952ca895875f7ac408d02863162", "bd20f6bbf043dc8329baa970dc1d6f15e1b6dbdf96cfc028023b6731cdc4b1ba", [0x5c77, 0x3]}}) getsockopt$ax25_int(r4, 0x101, 0x6, &(0x7f00000021c0), &(0x7f0000002200)=0x4) kernel console output (not intermixed with test programs): 33.031917][ T54] usb 9-1: SerialNumber: syz [ 233.037066][ T54] usb 9-1: config 0 descriptor?? [ 233.038897][ T1150] bond4: (slave lo): failed to get link speed/duplex [ 233.043934][ T54] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input40 [ 233.149205][ T6144] bond4: (slave lo): failed to get link speed/duplex [ 233.163631][ T34] usb 8-1: USB disconnect, device number 21 [ 233.205359][T15025] bridge0: entered promiscuous mode [ 233.207936][T15025] bridge0: entered allmulticast mode [ 233.242783][T15011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.246984][T15011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.260728][T15027] xfrm0 speed is unknown, defaulting to 1000 [ 233.298956][ T13] bond4: (slave lo): failed to get link speed/duplex [ 233.315044][ T6026] usb 9-1: USB disconnect, device number 14 [ 233.387274][T15031] QAT: Invalid ioctl -2144835806 [ 233.412274][ T1150] bond4: (slave lo): failed to get link speed/duplex [ 233.540592][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 233.595383][ T40] audit: type=1400 audit(233.504:30158): avc: denied { watch } for pid=15038 comm="syz.5.2740" path="/309/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 233.681185][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 233.747231][T15049] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.750391][T15049] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.788956][ T3986] bond4: (slave lo): failed to get link speed/duplex [ 233.831640][T15055] overlayfs: failed to resolve './file1': -2 [ 233.938414][T15075] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2749'. [ 234.032486][ T5939] Bluetooth: hci1: unexpected subevent 0x19 length: 24 < 28 [ 234.044467][T15089] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2752'. [ 234.045644][ T40] audit: type=1800 audit(233.954:30159): pid=15083 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.5.2752" name="/newroot/312/bus/#1684//deleted" dev="tmpfs" ino=1684 res=0 errno=0 [ 234.177937][T15096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2755'. [ 234.230418][ T40] audit: type=1326 audit(234.144:30160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15097 comm="syz.5.2756" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3db8f7c9 code=0x7ffc0000 [ 234.239899][ T40] audit: type=1326 audit(234.144:30161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15097 comm="syz.5.2756" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f4d3db8f7c9 code=0x7ffc0000 [ 234.247376][ T40] audit: type=1326 audit(234.144:30162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15097 comm="syz.5.2756" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3db8f7c9 code=0x7ffc0000 [ 234.257826][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2755'. [ 234.308935][ T5997] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 234.337037][T15104] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2757'. [ 234.449876][T15109] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio0-cursor) [ 234.472099][ T5997] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 47, changing to 4 [ 234.476823][ T5997] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid maxpacket 42203, setting to 1023 [ 234.482251][ T5997] usb 8-1: config 0 interface 0 has no altsetting 0 [ 234.487094][ T5997] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 234.491437][ T5997] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 234.494581][ T5997] usb 8-1: Product: syz [ 234.496329][ T5997] usb 8-1: Manufacturer: syz [ 234.498147][ T5997] usb 8-1: SerialNumber: syz [ 234.503011][ T5997] usb 8-1: config 0 descriptor?? [ 234.510827][ T5997] usb 8-1: selecting invalid altsetting 0 [ 234.708734][ T6014] vhci_hcd: vhci_device speed not set [ 234.711808][T15090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.714856][T15090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.722231][ T5997] usb 8-1: USB disconnect, device number 22 [ 234.771421][T15126] XFS (nullb0): Invalid superblock magic number [ 234.899384][T15140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4606 sclass=netlink_route_socket pid=15140 comm=syz.1.2767 [ 234.931516][T15141] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 234.938371][ C1] sr 2:0:0:0: [sr0] tag#8 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 234.941608][T15144] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 234.942924][ C1] sr 2:0:0:0: [sr0] tag#8 CDB: opcode=0xde (vendor) de 89 0b b6 4d c9 [ 235.028977][ T5997] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 235.054879][T15152] tmpfs: Unknown parameter 'loYwapeuۺawym|q|Vqƭxp(jx".O8jT0' [ 235.426644][T15168] netlink: 'syz.5.2772': attribute type 1 has an invalid length. [ 235.457285][T15168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 235.496200][T15168] veth7: entered promiscuous mode [ 235.502363][T15168] bond4: (slave veth7): Enslaving as an active interface with a down link [ 235.515336][T15168] vlan3: entered allmulticast mode [ 235.517204][T15168] bond4: entered allmulticast mode [ 235.521017][T15168] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 236.133391][T15192] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15192 comm=syz.4.2784 [ 236.181399][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2785'. [ 236.185203][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2785'. [ 236.188682][ T6026] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 236.338690][ T6026] usb 10-1: Using ep0 maxpacket: 16 [ 236.342724][ T6026] usb 10-1: config 0 has no interfaces? [ 236.346673][ T6026] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.351134][ T6026] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 236.354856][ T6026] usb 10-1: SerialNumber: syz [ 236.358668][ T6026] usb 10-1: config 0 descriptor?? [ 236.492304][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2788'. [ 236.493384][T15206] 9pnet_fd: p9_fd_create_unix (15206): problem connecting socket: ./file0: -111 [ 236.556808][T15210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2790'. [ 236.612416][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2790'. [ 236.979599][T15220] veth1_to_batadv: entered promiscuous mode [ 237.004875][T15220] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 237.130693][T15226] sctp: [Deprecated]: syz.3.2796 (pid 15226) Use of int in max_burst socket option. [ 237.130693][T15226] Use struct sctp_assoc_value instead [ 237.187442][T15231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2798'. [ 237.215793][T15233] trusted_key: encrypted_key: insufficient parameters specified [ 237.274477][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2797'. [ 237.355032][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 237.355043][ T40] audit: type=1400 audit(237.264:30189): avc: denied { mount } for pid=15240 comm="syz.3.2801" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 237.423227][ T9] libceph: connect (1)[c::]:6789 error -101 [ 237.426108][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 237.550502][ T40] audit: type=1400 audit(237.464:30190): avc: denied { shutdown } for pid=15248 comm="syz.1.2803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 237.606357][ T40] audit: type=1326 audit(237.514:30191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15255 comm="syz.1.2804" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4fb958f7c9 code=0x0 [ 237.667494][T15257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.670836][T15257] IPv6: NLM_F_CREATE should be set when creating new route [ 237.702211][ T9] libceph: connect (1)[c::]:6789 error -101 [ 237.705196][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 237.825729][T15257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.839762][T15257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.989900][T15257] bridge0: left allmulticast mode [ 237.997062][ T6552] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.001088][ T6552] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.004237][ T6552] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.008171][ T6552] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.017604][T15259] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2805'. [ 238.030071][ T13] net_ratelimit: 35 callbacks suppressed [ 238.030084][ T13] bond4: (slave lo): failed to get link speed/duplex [ 238.138672][ T1150] bond4: (slave lo): failed to get link speed/duplex [ 238.186981][T15241] ceph: No mds server is up or the cluster is laggy [ 238.242694][ T40] audit: type=1400 audit(238.154:30192): avc: denied { unlink } for pid=13415 comm="syz-executor" name="vcsa22" dev="overlay" ino=3161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.253157][ T1150] bond4: (slave lo): failed to get link speed/duplex [ 238.259665][ T40] audit: type=1400 audit(238.164:30193): avc: denied { unlink } for pid=13415 comm="syz-executor" name="md2" dev="overlay" ino=2920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.271085][T15265] FAT-fs (sr0): bogus number of reserved sectors [ 238.273948][T15265] FAT-fs (sr0): Can't find a valid FAT filesystem [ 238.299699][T15265] netlink: 'syz.4.2808': attribute type 23 has an invalid length. [ 238.362308][ T3986] bond4: (slave lo): failed to get link speed/duplex [ 238.474384][T15270] SELinux: policydb version -1703098298 does not match my version range 15-35 [ 238.477847][T15270] SELinux: failed to load policy [ 238.481435][ T40] audit: type=1400 audit(238.404:30194): avc: denied { listen } for pid=15269 comm="syz.1.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.490652][ T6546] bond4: (slave lo): failed to get link speed/duplex [ 238.608600][ T6546] bond4: (slave lo): failed to get link speed/duplex [ 238.728744][ T6546] bond4: (slave lo): failed to get link speed/duplex [ 238.736464][T15287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=15287 comm=syz.1.2815 [ 238.743125][T15287] netlink: 'syz.1.2815': attribute type 1 has an invalid length. [ 238.746448][T15287] netlink: 'syz.1.2815': attribute type 2 has an invalid length. [ 238.757260][ T2296] usb 10-1: USB disconnect, device number 19 [ 238.849584][ T6546] bond4: (slave lo): failed to get link speed/duplex [ 238.874259][T15293] netlink: 'syz.1.2818': attribute type 10 has an invalid length. [ 238.882940][T15293] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 238.924547][T15296] 9pnet_virtio: no channels available for device syz [ 238.969703][ T6549] bond4: (slave lo): failed to get link speed/duplex [ 239.085012][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 239.307416][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2827'. [ 239.639323][ T40] audit: type=1400 audit(239.554:30195): avc: denied { append } for pid=15335 comm="syz.5.2833" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 239.889690][T15346] tipc: Enabling of bearer rejected, failed to enable media [ 239.986886][T15358] trusted_key: encrypted_key: keylen parameter is missing [ 239.990941][T15357] netlink: 'syz.5.2842': attribute type 1 has an invalid length. [ 240.007914][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'. [ 240.138625][ T2296] delete_channel: no stack [ 240.348082][ T40] audit: type=1400 audit(240.254:30196): avc: denied { shutdown } for pid=15373 comm="syz.5.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.429906][ T6026] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 240.485787][T15382] 9pnet_virtio: no channels available for device ./file0 [ 240.485797][T15383] 9pnet_virtio: no channels available for device ./file0 [ 240.532820][T15387] loop2: detected capacity change from 0 to 7 [ 240.539906][T15387] Dev loop2: unable to read RDB block 7 [ 240.541812][T15387] loop2: AHDI p1 p2 p3 [ 240.543236][T15387] loop2: partition table partially beyond EOD, truncated [ 240.545658][T15387] loop2: p1 start 1601398130 is beyond EOD, truncated [ 240.548155][T15387] loop2: p2 start 1702059890 is beyond EOD, truncated [ 240.591416][ T6026] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 240.595377][ T6026] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 240.597626][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.604170][ T6026] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 240.607305][ T6026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.613686][T15368] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.616420][T15368] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.620882][ T6026] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.718037][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.758957][ T34] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 240.781988][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.824812][ T6026] usb 6-1: USB disconnect, device number 29 [ 240.855562][ T40] audit: type=1400 audit(240.774:30197): avc: denied { setopt } for pid=15404 comm="syz.5.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 240.859277][ T5293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.867217][ T5293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.867993][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.874395][ T5293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.883994][ T5293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.888135][ T5293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.888544][ T34] usb 9-1: device descriptor read/64, error -71 [ 240.899871][ T40] audit: type=1400 audit(240.814:30198): avc: denied { read write } for pid=10601 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.932979][T15403] xfrm0 speed is unknown, defaulting to 1000 [ 241.051552][ T6026] SELinux: failure in sel_netif_sid_slow(), invalid network interface (85) [ 241.128431][ T34] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 241.258430][ T34] usb 9-1: device descriptor read/64, error -71 [ 241.324494][ T13] bond0 (unregistering): Released all slaves [ 241.335612][ T13] bond1 (unregistering): Released all slaves [ 241.369163][ T34] usb usb9-port1: attempt power cycle [ 241.401829][T15403] chnl_net:caif_netlink_parms(): no params data found [ 241.442300][ T13] IPVS: stopping master sync thread 13927 ... [ 241.453062][T15403] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.455479][T15403] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.457818][T15403] bridge_slave_0: entered allmulticast mode [ 241.460948][T15403] bridge_slave_0: entered promiscuous mode [ 241.483393][T15403] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.485850][T15403] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.488424][T15403] bridge_slave_1: entered allmulticast mode [ 241.491199][T15403] bridge_slave_1: entered promiscuous mode [ 241.507861][T15403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.512695][T15403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.527395][T15403] team0: Port device team_slave_0 added [ 241.532657][T15403] team0: Port device team_slave_1 added [ 241.552441][T15403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.555025][T15403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.564607][T15403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.595189][T15403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.598909][T15403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.610637][T15403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.653939][T15403] hsr_slave_0: entered promiscuous mode [ 241.657917][T15403] hsr_slave_1: entered promiscuous mode [ 241.661323][T15403] debugfs: 'hsr0' already exists in 'hsr' [ 241.663903][T15403] Cannot create hsr debugfs directory [ 241.679258][ T13] hsr_slave_0: left promiscuous mode [ 241.681567][ T13] hsr_slave_1: left promiscuous mode [ 241.689913][ T13] veth1_macvtap: left promiscuous mode [ 241.693382][ T13] veth0_macvtap: left promiscuous mode [ 241.695609][ T13] veth1_vlan: left promiscuous mode [ 241.697980][ T13] veth0_vlan: left promiscuous mode [ 241.718394][ T34] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 241.739173][ T34] usb 9-1: device descriptor read/8, error -71 [ 241.742667][ T13] pim6reg (unregistering): left allmulticast mode [ 241.892299][T15423] ref_ctr increment failed for inode: 0x202 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880308e8000 [ 241.988679][ T34] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 242.009210][ T34] usb 9-1: device descriptor read/8, error -71 [ 242.122188][ T34] usb usb9-port1: unable to enumerate USB device [ 242.467800][T15424] xfrm0 speed is unknown, defaulting to 1000 [ 242.655085][T15403] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 242.667765][T15403] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 242.683574][T15403] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 242.689797][T15403] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 242.751972][T15403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.762734][T15403] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.769340][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.772522][ T6552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.782526][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.785672][ T6552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.841246][ T13] IPVS: stop unused estimator thread 0... [ 242.925573][T15403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.930502][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 242.930517][ T40] audit: type=1400 audit(242.844:30202): avc: denied { allowed } for pid=15445 comm="syz.1.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 242.969934][ T5293] Bluetooth: hci2: command tx timeout [ 242.996012][ T40] audit: type=1326 audit(242.904:30203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15450 comm="syz.1.2866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb958f7c9 code=0x7ffc0000 [ 243.005338][ T40] audit: type=1326 audit(242.904:30204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15450 comm="syz.1.2866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb958f7c9 code=0x7ffc0000 [ 243.014316][ T40] audit: type=1326 audit(242.904:30205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15450 comm="syz.1.2866" exe="/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4fb958f7c9 code=0x7ffc0000 [ 243.024909][ T40] audit: type=1326 audit(242.904:30206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15450 comm="syz.1.2866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb958f7c9 code=0x7ffc0000 [ 243.034446][ T40] audit: type=1326 audit(242.904:30207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15450 comm="syz.1.2866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb958f7c9 code=0x7ffc0000 [ 243.042342][ T40] audit: type=1326 audit(242.904:30208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15450 comm="syz.1.2866" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4fb958f7c9 code=0x7ffc0000 [ 243.050524][ T40] audit: type=1326 audit(242.904:30209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15450 comm="syz.1.2866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb958f7c9 code=0x7ffc0000 [ 243.058035][ T40] audit: type=1326 audit(242.914:30210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15450 comm="syz.1.2866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb958f7c9 code=0x7ffc0000 [ 243.066435][ T40] audit: type=1326 audit(242.914:30211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15450 comm="syz.1.2866" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4fb958f7c9 code=0x7ffc0000 [ 243.107348][T15403] veth0_vlan: entered promiscuous mode [ 243.113551][T15403] veth1_vlan: entered promiscuous mode [ 243.127925][T15403] veth0_macvtap: entered promiscuous mode [ 243.135702][T15403] veth1_macvtap: entered promiscuous mode [ 243.145448][T15403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.162548][T15403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.171068][ T6545] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.178352][ T6545] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.181359][ T6545] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.193379][ T6545] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.208992][ T6134] net_ratelimit: 21 callbacks suppressed [ 243.209004][ T6134] bond4: (slave lo): failed to get link speed/duplex [ 243.248420][ T6134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.251704][ T6134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.292244][ T3986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.295063][ T3986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.317813][T15467] overlayfs: unescaped trailing colons in lowerdir mount option. [ 243.321479][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 243.370522][T15471] netlink: 'syz.6.2854': attribute type 11 has an invalid length. [ 243.373429][T15471] __nla_validate_parse: 4 callbacks suppressed [ 243.373439][T15471] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2854'. [ 243.439658][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 243.548427][ T13] bond4: (slave lo): failed to get link speed/duplex [ 243.591878][T15497] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.608258][ T8298] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 243.668350][ T6134] bond4: (slave lo): failed to get link speed/duplex [ 243.778364][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 243.784787][ T8298] usb 10-1: config 1 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1535, setting to 1024 [ 243.789006][ T8298] usb 10-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.792846][ T8298] usb 10-1: config 1 interface 0 has no altsetting 0 [ 243.799620][ T8298] usb 10-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.40 [ 243.803068][ T8298] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.806226][ T8298] usb 10-1: Product: ƫﺠ䚃蹉ᅁ잉瑚泎軳鐫ঽ䶊㜧š；⑓쨽젧兕胹촬ඇ鬊䤄呀犩癤넙୧忝볝䒬봴澒笫윺趙嬾䱈薟䙣㞇툒㱵ᮾ괹‹췊Გ⮺ࢍ膞돐㶑윇Ⲍ弿撨⌂玄剬紸ⰿ㽑棞裲ႚ髼첿ᇓ沧 [ 243.817220][ T8298] usb 10-1: Manufacturer: 믲蕘醭뫘劬劒嶨饈㣏ꞁ뵒䎑࠱뭨䏌邆䮦榆؁哖괹憕൴蟝폦ᑎﲮ㱗㥶妎檥ʗ⥳줍䆇鳧ꋩ㉐扦軹ﶤ䱃㜾ၹ颚彨韪ᥞ꠻枺뗄Ꮱ摝㬍ጒ⾺ൿ栏㊫ᔲ藉坼羋ၼ궶ﲝﳥ뢾蒊픗 [ 243.826726][ T8298] usb 10-1: SerialNumber: 覸礿硩⤐ꚪ᳤鈅ꘕ臲择㙌뭶謇꼉瀘뫡랊揎ằﳯ蒒荀袄﹑壦谟鰵僚끦ℯ㸭蛼挠張쑱䣽昗뒉쳭ፌ觇껻΅㡣ꯩ [ 243.835349][T15461] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 243.898328][ T3986] bond4: (slave lo): failed to get link speed/duplex [ 244.028476][ T6134] bond4: (slave lo): failed to get link speed/duplex [ 244.138320][ T3986] bond4: (slave lo): failed to get link speed/duplex [ 244.242430][T15461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.245291][T15461] IPv6: NLM_F_CREATE should be set when creating new route [ 244.269577][T15461] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.272231][T15461] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.426004][ T6134] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.431364][ T6134] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.435673][ T6134] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.439504][ T6134] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.442376][ T6134] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.442963][ T8298] usbhid 10-1:1.0: can't add hid device: -71 [ 244.446090][ T6134] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.448023][ T8298] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 244.455289][ T8298] usb 10-1: USB disconnect, device number 20 [ 244.458847][ T6134] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.463468][ T6134] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.475363][T15515] ipt_REJECT: TCP_RESET invalid for non-tcp [ 244.483100][T15515] 9pnet_virtio: no channels available for device syz [ 244.498413][ T6546] bond4: (slave lo): failed to get link speed/duplex [ 244.600886][T15525] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 244.605152][T15525] overlayfs: maximum fs stacking depth exceeded [ 244.662586][T15536] input: syz1 as /devices/virtual/input/input41 [ 244.713490][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 244.717651][T15538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2889'. [ 244.725034][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 244.730311][T15538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2889'. [ 244.787696][T15544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2891'. [ 245.022702][T15555] netlink: 'syz.6.2893': attribute type 1 has an invalid length. [ 245.399185][T15576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.404157][T15576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.527143][T15601] usb usb8: usbfs: process 15601 (syz.6.2905) did not claim interface 0 before use [ 245.558918][T15605] netlink: 'syz.6.2906': attribute type 9 has an invalid length. [ 245.761268][T15620] tipc: Enabling not permitted [ 245.763295][T15620] tipc: Enabling of bearer rejected, failed to enable media [ 245.813748][T15622] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 245.819916][T15622] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 246.238647][ T5997] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 246.399343][ T5997] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 246.402095][ T5997] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 246.404969][ T5997] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 246.408482][T15651] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2922'. [ 246.411700][ T5997] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 246.415265][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 246.418840][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 246.428025][ T5997] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 246.436710][ T5997] usb 6-1: string descriptor 0 read error: -22 [ 246.439237][ T5997] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 246.442236][ T5997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.448332][ T5997] usb 6-1: config 0 descriptor?? [ 246.453425][ T5997] hub 6-1:0.0: bad descriptor, ignoring hub [ 246.455490][ T5997] hub 6-1:0.0: probe with driver hub failed with error -5 [ 246.459641][ T5997] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input42 [ 246.478096][ T5293] Bluetooth: hci2: command tx timeout [ 246.520519][T15653] bond5 (unregistering): Released all slaves [ 246.754868][T15668] hugetlbfs: Bad value for 'uid' [ 246.756547][T15668] hugetlbfs: Bad value for 'uid' [ 246.835774][ T47] usb 6-1: USB disconnect, device number 30 [ 247.313757][T15691] vxlan0: entered promiscuous mode [ 247.316490][T15691] vxlan0: entered allmulticast mode [ 247.322935][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.325858][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.337997][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.341333][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.843290][T15703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=15703 comm=syz.4.2939 [ 247.849400][T15703] netlink: 'syz.4.2939': attribute type 8 has an invalid length. [ 247.864883][T15703] tmpfs: Bad value for 'mpol' [ 247.868142][T15703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2939'. [ 248.196788][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 248.196799][ T40] audit: type=1326 audit(248.104:30265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15708 comm="syz.4.2942" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ac338f7c9 code=0x0 [ 248.241988][ T13] net_ratelimit: 33 callbacks suppressed [ 248.242006][ T13] bond4: (slave lo): failed to get link speed/duplex [ 248.307598][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2942'. [ 248.369456][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 248.478646][ T3986] bond4: (slave lo): failed to get link speed/duplex [ 248.553196][T15728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.557952][ T5293] Bluetooth: hci2: command tx timeout [ 248.560046][T15728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.588358][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 248.698022][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 248.807974][ T6546] bond4: (slave lo): failed to get link speed/duplex [ 248.918209][ T3986] bond4: (slave lo): failed to get link speed/duplex [ 249.027982][ T3986] bond4: (slave lo): failed to get link speed/duplex [ 249.089500][ T54] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 249.158171][ T6546] bond4: (slave lo): failed to get link speed/duplex [ 249.215048][ T40] audit: type=1400 audit(249.124:30266): avc: denied { append } for pid=15751 comm="syz.4.2956" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.216594][T15753] loop6: detected capacity change from 0 to 2640 [ 249.231404][T15753] buffer_io_error: 8 callbacks suppressed [ 249.231419][T15753] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.239934][T15753] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.243979][T15753] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.247597][T15753] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.252230][T15753] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.255835][T15753] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.259451][ T54] usb 11-1: Using ep0 maxpacket: 8 [ 249.261892][T15753] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.266726][T15753] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.271084][ T54] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.275342][ T54] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.278275][ T13] bond4: (slave lo): failed to get link speed/duplex [ 249.280219][ T54] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.280522][T15753] ldm_validate_partition_table(): Disk read failed. [ 249.280582][T15753] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.280662][T15753] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.280845][T15753] Dev loop6: unable to read RDB block 0 [ 249.281231][T15753] loop6: unable to read partition table [ 249.281398][T15753] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 249.307567][ T54] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.314111][ T54] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 249.318716][ T54] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.376406][ T40] audit: type=1400 audit(249.284:30267): avc: denied { create } for pid=15765 comm="syz.4.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 249.377558][T15766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2958'. [ 249.385034][ T40] audit: type=1400 audit(249.284:30268): avc: denied { setopt } for pid=15765 comm="syz.4.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 249.527001][ T54] usb 11-1: GET_CAPABILITIES returned 0 [ 249.529045][ T54] usbtmc 11-1:16.0: can't read capabilities [ 249.632741][T15768] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2959'. [ 249.731999][ T5997] usb 11-1: USB disconnect, device number 2 [ 249.736149][ T40] audit: type=1400 audit(249.644:30269): avc: denied { sqpoll } for pid=15737 comm="syz.6.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 249.750610][T15738] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 249.958526][T15785] tmpfs: Bad value for 'mpol' [ 250.099951][ T40] audit: type=1400 audit(250.014:30270): avc: denied { bind } for pid=15794 comm="syz.5.2965" lport=19608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 250.100686][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2965'. [ 250.112264][T15790] /dev/sr0: Can't open blockdev [ 250.114740][T15795] netlink: 'syz.5.2965': attribute type 1 has an invalid length. [ 250.133469][T15795] IPv6: sit1: Disabled Multicast RS [ 250.135845][T15795] sit1: entered allmulticast mode [ 250.428452][ T5997] usb 10-1: new low-speed USB device number 21 using dummy_hcd [ 250.589429][ T5997] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 250.592816][ T5997] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 250.597570][ T5997] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 250.602482][ T5997] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.608342][ T5997] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 250.613402][ T5997] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 250.617988][ T5997] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 250.623758][ T5997] usb 10-1: config 168 interface 0 has no altsetting 0 [ 250.627602][ T5997] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 250.631202][ T5997] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 250.636156][ T5997] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 250.641271][ T5997] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.645590][ T5997] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 250.649939][ T5997] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 250.653699][ T5997] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 250.659539][ T5997] usb 10-1: config 168 interface 0 has no altsetting 0 [ 250.664131][ T5997] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 250.667519][ T5997] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 250.672599][ T5997] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 250.677266][ T5997] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.682604][ T5997] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 250.687678][ T5997] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 250.692200][ T5997] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 250.698374][ T5997] usb 10-1: config 168 interface 0 has no altsetting 0 [ 250.704031][ T5997] usb 10-1: string descriptor 0 read error: -22 [ 250.706936][ T5997] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 250.710993][ T5997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.717599][ T5997] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 250.918307][T15812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=15812 comm=syz.4.2970 [ 250.919945][ T5997] usb 10-1: USB disconnect, device number 21 [ 250.923820][T15813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=15813 comm=syz.4.2970 [ 251.528090][T15823] netlink: 432 bytes leftover after parsing attributes in process `syz.5.2974'. [ 251.599634][T15829] CUSE: unknown device info "" [ 251.601873][T15829] CUSE: zero length info key specified [ 251.744857][ T5997] hid-generic 0009:0006:0203.0008: unknown main item tag 0x0 [ 251.747485][ T5997] hid-generic 0009:0006:0203.0008: unknown main item tag 0x0 [ 251.750704][ T5997] hid-generic 0009:0006:0203.0008: unknown main item tag 0x0 [ 251.753172][ T5997] hid-generic 0009:0006:0203.0008: unknown main item tag 0x0 [ 251.755676][ T5997] hid-generic 0009:0006:0203.0008: unknown main item tag 0x0 [ 251.758366][ T5997] hid-generic 0009:0006:0203.0008: unknown main item tag 0x0 [ 251.760768][ T5997] hid-generic 0009:0006:0203.0008: unknown main item tag 0x0 [ 251.763163][ T5997] hid-generic 0009:0006:0203.0008: unknown main item tag 0x0 [ 251.765698][ T5997] hid-generic 0009:0006:0203.0008: unknown main item tag 0x0 [ 251.768328][ T5997] hid-generic 0009:0006:0203.0008: unknown main item tag 0x0 [ 251.774205][ T5997] hid-generic 0009:0006:0203.0008: hidraw1: HID v0.05 Device [syz0] on syz0 [ 251.825664][T15835] program syz.5.2978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.830093][T15835] omfs: Invalid superblock (0) [ 252.057163][T15845] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2981'. [ 252.061224][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2981'. [ 252.112122][T15849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2983'. [ 252.127796][T15851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2984'. [ 252.183899][ T40] audit: type=1400 audit(252.095:30271): avc: denied { getopt } for pid=15855 comm="syz.4.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 252.234019][T15867] IPVS: ip_vs_add_dest(): server weight less than zero [ 252.241396][T15867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.243986][T15867] IPv6: NLM_F_CREATE should be set when creating new route [ 252.246407][T15867] IPv6: NLM_F_CREATE should be set when creating new route [ 252.251119][T15867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.296055][T15879] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2993'. [ 252.301781][T15880] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2993'. [ 252.388825][ T5293] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 252.424620][T15894] netlink: 'syz.5.2997': attribute type 1 has an invalid length. [ 252.443037][T15894] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.447331][T15894] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 252.456614][T15894] bond6: entered allmulticast mode [ 252.672219][T15927] 9pnet_virtio: no channels available for device syz [ 252.680430][ T40] audit: type=1400 audit(252.595:30272): avc: denied { mounton } for pid=15930 comm="syz.5.3008" path="/375/file0" dev="hugetlbfs" ino=65117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 252.700808][ T40] audit: type=1400 audit(252.605:30273): avc: denied { remount } for pid=15930 comm="syz.5.3008" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 252.808773][ T40] audit: type=1400 audit(252.725:30274): avc: denied { mounton } for pid=15935 comm="syz.5.3010" path="/376/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 252.808851][T15936] 9pnet_virtio: no channels available for device syz [ 252.850241][T15941] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 252.850241][T15941] program syz.4.3012 not setting count and/or reply_len properly [ 252.883493][T15941] netlink: 'syz.4.3012': attribute type 1 has an invalid length. [ 252.886465][T15941] netlink: 'syz.4.3012': attribute type 1 has an invalid length. [ 252.890108][T15941] netlink: 'syz.4.3012': attribute type 1 has an invalid length. [ 252.892937][T15941] netlink: 'syz.4.3012': attribute type 1 has an invalid length. [ 252.976794][T15960] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 253.162791][T15974] tipc: Started in network mode [ 253.164586][T15974] tipc: Node identity 7f000001, cluster identity 4711 [ 253.168816][T15974] tipc: Enabled bearer , priority 10 [ 253.236720][T15976] gfs2: not a GFS2 filesystem [ 253.255295][T15978] netlink: 'syz.4.3023': attribute type 1 has an invalid length. [ 253.259782][T15980] netlink: 'syz.4.3023': attribute type 1 has an invalid length. [ 253.265214][T15982] CIFS: Unable to determine destination address [ 253.298001][ T6546] net_ratelimit: 34 callbacks suppressed [ 253.298013][ T6546] bond4: (slave lo): failed to get link speed/duplex [ 253.385049][ T40] audit: type=1400 audit(253.295:30275): avc: denied { shutdown } for pid=15990 comm="syz.6.3028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.408309][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 253.433142][T15997] netem: invalid attributes len -22 [ 253.435215][T15997] netem: change failed [ 253.517724][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 253.522864][ T40] audit: type=1400 audit(253.435:30276): avc: denied { add_name } for pid=16003 comm="syz.1.3032" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 253.523408][ T40] audit: type=1400 audit(253.435:30277): avc: denied { create } for pid=16003 comm="syz.1.3032" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 253.526672][T16004] pim6reg1: entered promiscuous mode [ 253.558383][ T40] audit: type=1400 audit(253.435:30278): avc: denied { associate } for pid=16003 comm="syz.1.3032" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 253.588201][T16004] pim6reg1: entered allmulticast mode [ 253.637759][ T6549] bond4: (slave lo): failed to get link speed/duplex [ 253.747731][ T6549] bond4: (slave lo): failed to get link speed/duplex [ 253.838985][T16029] openvswitch: netlink: nsh attribute has 65276 unknown bytes. [ 253.841646][T16029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.867944][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 254.134861][T16036] cdrom: dropping to single frame dma [ 255.452191][ T6549] bond4: (slave lo): failed to get link speed/duplex [ 255.455513][ T8298] tipc: Node number set to 2130706433 [ 255.512720][ T40] audit: type=1400 audit(255.425:30279): avc: denied { listen } for pid=16064 comm="syz.1.3048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 255.526964][T16067] netlink: 'syz.4.3049': attribute type 1 has an invalid length. [ 255.567601][ T6549] bond4: (slave lo): failed to get link speed/duplex [ 255.591274][T16072] syzkaller1: entered promiscuous mode [ 255.593820][T16072] syzkaller1: entered allmulticast mode [ 255.748463][T16091] xfrm0 speed is unknown, defaulting to 1000 [ 255.773821][T16092] xfrm0 speed is unknown, defaulting to 1000 [ 255.809240][T16099] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=16099 comm=syz.1.3057 [ 255.814978][ T40] audit: type=1400 audit(255.725:30280): avc: denied { getopt } for pid=16098 comm="syz.1.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 256.068567][ T40] audit: type=1400 audit(255.985:30281): avc: denied { setopt } for pid=16112 comm="syz.1.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 256.076114][T16113] macsec0: entered promiscuous mode [ 256.079372][T16113] macsec0: entered allmulticast mode [ 256.081589][T16113] veth1_macvtap: entered allmulticast mode [ 256.117394][T16118] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 256.203038][T16123] __nla_validate_parse: 8 callbacks suppressed [ 256.203049][T16123] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3065'. [ 256.242478][T16129] mkiss: ax0: crc mode is auto. [ 256.247211][T16132] netlink: 'syz.5.3069': attribute type 10 has an invalid length. [ 256.259632][T16132] bridge_slave_1: left allmulticast mode [ 256.261540][T16132] bridge_slave_1: left promiscuous mode [ 256.263531][T16132] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.270738][T16132] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 256.286836][T16139] binder: 16131:16139 ioctl c0306201 200000000080 returned -22 [ 256.291232][T16129] XFS (nullb0): Invalid superblock magic number [ 256.538144][ T40] audit: type=1400 audit(256.455:30282): avc: denied { accept } for pid=16170 comm="syz.4.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 256.546067][T16175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3079'. [ 256.594613][T16181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3082'. [ 256.640129][T16190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=16190 comm=syz.6.3084 [ 256.748636][T16203] FAULT_INJECTION: forcing a failure. [ 256.748636][T16203] name failslab, interval 1, probability 0, space 0, times 1 [ 256.757574][T16203] CPU: 2 UID: 0 PID: 16203 Comm: syz.5.3089 Not tainted syzkaller #0 PREEMPT(full) [ 256.757599][T16203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 256.757610][T16203] Call Trace: [ 256.757615][T16203] [ 256.757623][T16203] dump_stack_lvl+0x16c/0x1f0 [ 256.757670][T16203] should_fail_ex+0x512/0x640 [ 256.757696][T16203] ? fs_reclaim_acquire+0xae/0x150 [ 256.757721][T16203] should_failslab+0xc2/0x120 [ 256.757744][T16203] __kmalloc_noprof+0xdd/0x870 [ 256.757770][T16203] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 256.757804][T16203] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 256.757830][T16203] tomoyo_realpath_from_path+0xc2/0x6e0 [ 256.757859][T16203] ? tomoyo_profile+0x47/0x60 [ 256.757880][T16203] tomoyo_path_number_perm+0x245/0x580 [ 256.757903][T16203] ? tomoyo_path_number_perm+0x237/0x580 [ 256.757929][T16203] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 256.757955][T16203] ? find_held_lock+0x2b/0x80 [ 256.758001][T16203] ? find_held_lock+0x2b/0x80 [ 256.758096][T16203] ? hook_file_ioctl_common+0x145/0x410 [ 256.758123][T16203] ? __fget_files+0x20e/0x3c0 [ 256.758153][T16203] security_file_ioctl+0x9b/0x240 [ 256.758181][T16203] __x64_sys_ioctl+0xb7/0x210 [ 256.758203][T16203] do_syscall_64+0xcd/0xf80 [ 256.758225][T16203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.758243][T16203] RIP: 0033:0x7f4d3db8f7c9 [ 256.758258][T16203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.758274][T16203] RSP: 002b:00007f4d3eae6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.758291][T16203] RAX: ffffffffffffffda RBX: 00007f4d3dde5fa0 RCX: 00007f4d3db8f7c9 [ 256.758302][T16203] RDX: 0000200000002340 RSI: 0000000080184540 RDI: 0000000000000003 [ 256.758313][T16203] RBP: 00007f4d3eae6090 R08: 0000000000000000 R09: 0000000000000000 [ 256.758324][T16203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.758334][T16203] R13: 00007f4d3dde6038 R14: 00007f4d3dde5fa0 R15: 00007ffd83b04e78 [ 256.758360][T16203] [ 256.758367][T16203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 256.916511][T16225] ipvlan2: entered allmulticast mode [ 256.918414][T16225] team0: entered allmulticast mode [ 256.920145][T16225] team_slave_0: entered allmulticast mode [ 256.922506][T16225] team_slave_1: entered allmulticast mode [ 256.925092][T16225] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 257.167755][ T9] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 257.227658][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3100'. [ 257.235941][T16245] No buffer was provided with the request [ 257.329194][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 47, changing to 4 [ 257.330057][T16251] FAULT_INJECTION: forcing a failure. [ 257.330057][T16251] name failslab, interval 1, probability 0, space 0, times 0 [ 257.334078][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid maxpacket 42203, setting to 1023 [ 257.334117][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 257.339991][T16251] CPU: 1 UID: 0 PID: 16251 Comm: syz.5.3103 Not tainted syzkaller #0 PREEMPT(full) [ 257.340015][T16251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.340026][T16251] Call Trace: [ 257.340032][T16251] [ 257.340039][T16251] dump_stack_lvl+0x16c/0x1f0 [ 257.340062][T16251] should_fail_ex+0x512/0x640 [ 257.340080][T16251] ? fs_reclaim_acquire+0xae/0x150 [ 257.340103][T16251] should_failslab+0xc2/0x120 [ 257.340125][T16251] __kmalloc_noprof+0xdd/0x870 [ 257.340148][T16251] ? tomoyo_encode2+0x100/0x3e0 [ 257.340178][T16251] ? tomoyo_encode2+0x100/0x3e0 [ 257.340201][T16251] tomoyo_encode2+0x100/0x3e0 [ 257.340228][T16251] tomoyo_encode+0x29/0x50 [ 257.340250][T16251] tomoyo_realpath_from_path+0x18f/0x6e0 [ 257.340283][T16251] tomoyo_path_number_perm+0x245/0x580 [ 257.340303][T16251] ? tomoyo_path_number_perm+0x237/0x580 [ 257.340326][T16251] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 257.340349][T16251] ? find_held_lock+0x2b/0x80 [ 257.340392][T16251] ? find_held_lock+0x2b/0x80 [ 257.340407][T16251] ? hook_file_ioctl_common+0x145/0x410 [ 257.340432][T16251] ? __fget_files+0x20e/0x3c0 [ 257.340458][T16251] security_file_ioctl+0x9b/0x240 [ 257.340483][T16251] __x64_sys_ioctl+0xb7/0x210 [ 257.340505][T16251] do_syscall_64+0xcd/0xf80 [ 257.340525][T16251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.340542][T16251] RIP: 0033:0x7f4d3db8f7c9 [ 257.340557][T16251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.340572][T16251] RSP: 002b:00007f4d3eae6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.340588][T16251] RAX: ffffffffffffffda RBX: 00007f4d3dde5fa0 RCX: 00007f4d3db8f7c9 [ 257.340599][T16251] RDX: 0000200000002340 RSI: 0000000080184540 RDI: 0000000000000003 [ 257.340608][T16251] RBP: 00007f4d3eae6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.340618][T16251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.340628][T16251] R13: 00007f4d3dde6038 R14: 00007f4d3dde5fa0 R15: 00007ffd83b04e78 [ 257.340653][T16251] [ 257.341204][T16251] ERROR: Out of memory at tomoyo_realpath_from_path. [ 257.346825][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 257.433529][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 257.436893][ T9] usb 6-1: Product: syz [ 257.439078][ T9] usb 6-1: Manufacturer: syz [ 257.440781][ T9] usb 6-1: SerialNumber: syz [ 257.443653][ T9] usb 6-1: config 0 descriptor?? [ 257.450670][ T9] usb 6-1: selecting invalid altsetting 0 [ 257.469447][T16259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3105'. [ 257.614608][T16270] Mount JFS Failure: -22 [ 257.627520][T16261] /dev/sr0: Can't open blockdev [ 257.651464][T16222] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 257.657918][ T6077] usb 6-1: USB disconnect, device number 31 [ 257.718591][T16277] FAULT_INJECTION: forcing a failure. [ 257.718591][T16277] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 257.725414][T16277] CPU: 0 UID: 0 PID: 16277 Comm: syz.5.3113 Not tainted syzkaller #0 PREEMPT(full) [ 257.725430][T16277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.725437][T16277] Call Trace: [ 257.725440][T16277] [ 257.725445][T16277] dump_stack_lvl+0x16c/0x1f0 [ 257.725461][T16277] should_fail_ex+0x512/0x640 [ 257.725475][T16277] _copy_to_user+0x32/0xd0 [ 257.725487][T16277] evdev_do_ioctl+0x4a6/0x1b30 [ 257.725502][T16277] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 257.725514][T16277] ? __pfx___mutex_lock+0x10/0x10 [ 257.725537][T16277] evdev_ioctl+0x16f/0x1a0 [ 257.725549][T16277] ? __pfx_evdev_ioctl+0x10/0x10 [ 257.725563][T16277] __x64_sys_ioctl+0x18e/0x210 [ 257.725577][T16277] do_syscall_64+0xcd/0xf80 [ 257.725590][T16277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.725601][T16277] RIP: 0033:0x7f4d3db8f7c9 [ 257.725610][T16277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.725620][T16277] RSP: 002b:00007f4d3eae6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.725631][T16277] RAX: ffffffffffffffda RBX: 00007f4d3dde5fa0 RCX: 00007f4d3db8f7c9 [ 257.725638][T16277] RDX: 0000200000002340 RSI: 0000000080184540 RDI: 0000000000000003 [ 257.725644][T16277] RBP: 00007f4d3eae6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.725650][T16277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.725656][T16277] R13: 00007f4d3dde6038 R14: 00007f4d3dde5fa0 R15: 00007ffd83b04e78 [ 257.725670][T16277] [ 257.734862][T16282] program syz.6.3115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.903525][T16294] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3120'. [ 257.911893][T16299] Attempt to restore checkpoint with obsolete wellknown handles [ 258.270773][ T40] audit: type=1400 audit(258.185:30283): avc: denied { remount } for pid=16330 comm="syz.4.3128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 258.288471][ T40] audit: type=1400 audit(258.185:30284): avc: denied { relabelfrom } for pid=16330 comm="syz.4.3128" name="" dev="pipefs" ino=68161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 258.297779][T16339] 9pnet_virtio: no channels available for device syz [ 258.345073][T16343] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 258.387567][ T73] net_ratelimit: 23 callbacks suppressed [ 258.387579][ T73] bond4: (slave lo): failed to get link speed/duplex [ 258.497660][ T6144] bond4: (slave lo): failed to get link speed/duplex [ 258.538119][T16357] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3134'. [ 258.541618][T16357] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1281 sclass=netlink_xfrm_socket pid=16357 comm=syz.1.3134 [ 258.627358][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 258.637407][ T5939] Bluetooth: hci0: command 0x041b tx timeout [ 258.637644][ T5293] Bluetooth: hci2: command tx timeout [ 258.665870][ T40] audit: type=1400 audit(258.575:30285): avc: denied { connect } for pid=16368 comm="syz.4.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 258.738487][ T93] bond4: (slave lo): failed to get link speed/duplex [ 258.857667][ T93] bond4: (slave lo): failed to get link speed/duplex [ 258.869147][T16380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3140'. [ 258.879604][ T93] bond0: (slave bond_slave_0): interface is now down [ 258.880197][T16380] netlink: 'syz.4.3140': attribute type 10 has an invalid length. [ 258.882211][ T93] bond0: (slave c@0): interface is now down [ 258.885109][ T93] bond0: now running without any active interface! [ 258.909561][T16380] syz_tun: entered promiscuous mode [ 258.917590][T16380] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 258.929620][ T93] bond0: (slave syz_tun): interface is now down [ 258.934267][ T93] bond0: now running without any active interface! [ 258.969933][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 259.087533][ T13] bond4: (slave lo): failed to get link speed/duplex [ 259.197604][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 259.226852][ T2296] libceph: connect (1)[c::]:6789 error -22 [ 259.229663][ T2296] libceph: mon0 (1)[c::]:6789 connect error [ 259.235955][T16410] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3148'. [ 259.268947][T16412] random: crng reseeded on system resumption [ 259.279806][T16412] binder: 16411:16412 ioctl c0306201 200000000300 returned -22 [ 259.284385][T16412] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16412 comm=syz.5.3149 [ 259.293550][T16413] binder: 16411:16413 ioctl c0306201 200000000300 returned -22 [ 259.317457][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 259.427401][ T93] bond4: (slave lo): failed to get link speed/duplex [ 259.487676][ T2296] libceph: connect (1)[c::]:6789 error -22 [ 259.490081][ T2296] libceph: mon0 (1)[c::]:6789 connect error [ 259.999317][ T2296] libceph: connect (1)[c::]:6789 error -22 [ 260.001884][ T2296] libceph: mon0 (1)[c::]:6789 connect error [ 260.015904][T16404] ceph: No mds server is up or the cluster is laggy [ 263.467462][ T6545] net_ratelimit: 35 callbacks suppressed [ 263.467482][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 263.577364][ T93] bond4: (slave lo): failed to get link speed/duplex [ 263.687237][ T13] bond4: (slave lo): failed to get link speed/duplex [ 263.797257][ T13] bond4: (slave lo): failed to get link speed/duplex [ 263.907253][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 264.027351][ T13] bond4: (slave lo): failed to get link speed/duplex [ 264.137595][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 264.247446][ T13] bond4: (slave lo): failed to get link speed/duplex [ 264.357490][ T73] bond4: (slave lo): failed to get link speed/duplex [ 264.467653][ T13] bond4: (slave lo): failed to get link speed/duplex [ 268.487208][ T3986] net_ratelimit: 35 callbacks suppressed [ 268.487229][ T3986] bond4: (slave lo): failed to get link speed/duplex [ 268.596930][ T73] bond4: (slave lo): failed to get link speed/duplex [ 268.706906][ T73] bond4: (slave lo): failed to get link speed/duplex [ 268.816924][ T3986] bond4: (slave lo): failed to get link speed/duplex [ 268.927111][ T13] bond4: (slave lo): failed to get link speed/duplex [ 269.036969][ T73] bond4: (slave lo): failed to get link speed/duplex [ 269.146930][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 269.267248][ T73] bond4: (slave lo): failed to get link speed/duplex [ 269.376927][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 269.487014][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 272.450628][T16441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3156'. [ 272.631103][T16446] ref_ctr_offset mismatch. inode: 0x543 offset: 0x0 ref_ctr_offset(old): 0xeeee4000 ref_ctr_offset(new): 0xffffffff00000000 [ 272.658426][T16446] ref_ctr_offset mismatch. inode: 0x543 offset: 0x0 ref_ctr_offset(old): 0xeeee4000 ref_ctr_offset(new): 0xffffffff00000000 [ 272.675812][ T40] audit: type=1804 audit(272.586:30286): pid=16445 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3158" name="/newroot/249/file0" dev="tmpfs" ino=1347 res=1 errno=0 [ 272.830659][T16468] xfrm0 speed is unknown, defaulting to 1000 [ 272.867030][T16470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3164'. [ 272.878272][T16470] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 273.018621][ T40] audit: type=1400 audit(272.936:30287): avc: denied { override_creds } for pid=16475 comm="syz.6.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 273.033756][T16479] xfrm0 speed is unknown, defaulting to 1000 [ 273.157123][T16484] xfrm0 speed is unknown, defaulting to 1000 [ 273.282263][T16492] overlayfs: failed to resolve './file0': -40 [ 273.432266][T16500] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3174'. [ 273.494334][ T40] audit: type=1400 audit(273.406:30288): avc: denied { accept } for pid=16501 comm="syz.1.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 273.505314][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3175'. [ 273.522705][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3176'. [ 273.529310][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3176'. [ 273.533435][T16506] netlink: 'syz.5.3176': attribute type 11 has an invalid length. [ 273.537998][T16506] netlink: 'syz.5.3176': attribute type 13 has an invalid length. [ 273.542933][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3176'. [ 273.548468][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3176'. [ 273.551750][T16506] netlink: 'syz.5.3176': attribute type 11 has an invalid length. [ 273.554355][T16506] netlink: 'syz.5.3176': attribute type 13 has an invalid length. [ 273.576810][ T93] net_ratelimit: 34 callbacks suppressed [ 273.576827][ T93] bond4: (slave lo): failed to get link speed/duplex [ 273.601448][T16512] set match dimension is over the limit! [ 273.686821][ T93] bond4: (slave lo): failed to get link speed/duplex [ 273.809568][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 273.816809][ T9] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 273.869834][T16516] netlink: 'syz.5.3179': attribute type 1 has an invalid length. [ 273.928979][ T3986] bond4: (slave lo): failed to get link speed/duplex [ 273.939631][T16531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3182'. [ 273.969659][ T9] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 273.972507][ T9] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 273.975444][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 273.980552][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 273.984569][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 273.989141][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 273.993624][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 274.005301][ T9] usb 6-1: string descriptor 0 read error: -22 [ 274.009017][ T9] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 274.012485][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.017565][ T9] usb 6-1: config 0 descriptor?? [ 274.020530][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 274.022601][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 274.026785][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input44 [ 274.036739][ T13] bond4: (slave lo): failed to get link speed/duplex [ 274.146632][ T3986] bond4: (slave lo): failed to get link speed/duplex [ 274.227280][T16553] block nbd6: not configured, cannot reconfigure [ 274.242934][ T34] usb 6-1: USB disconnect, device number 32 [ 274.266549][ T93] bond4: (slave lo): failed to get link speed/duplex [ 274.279771][T16557] netlink: 'syz.4.3190': attribute type 10 has an invalid length. [ 274.282637][T16557] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3190'. [ 274.295508][T16557] team0: Port device geneve0 added [ 274.344510][T16565] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4π!FVluc'f`ކ;1 [ 274.406633][ T3986] bond4: (slave lo): failed to get link speed/duplex [ 274.490480][T16575] netlink: 'syz.4.3195': attribute type 1 has an invalid length. [ 274.494159][T16575] netlink: 'syz.4.3195': attribute type 1 has an invalid length. [ 274.516641][ T93] bond4: (slave lo): failed to get link speed/duplex [ 274.618871][ T40] audit: type=1400 audit(274.536:30289): avc: denied { listen } for pid=16581 comm="syz.4.3197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 274.636801][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 274.745566][T16585] 9pnet_virtio: no channels available for device syz [ 275.131075][T16628] vxfs: unable to read disk superblock at 1 [ 275.133271][T16628] vxfs: unable to read disk superblock at 8 [ 275.135692][T16628] vxfs: can't find superblock. [ 275.219909][T16634] /dev/sg0: Can't lookup blockdev [ 276.155832][T16664] netlink: 'syz.4.3223': attribute type 7 has an invalid length. [ 276.169270][T16664] [U] [ 276.170297][T16664] [U] [ 276.171231][T16664] [U] [ 276.172182][T16664] [U] [ 276.173827][T16664] [U] [ 276.174826][T16664] [U] [ 276.175756][T16664] [U] [ 276.176693][T16664] [U] [ 276.179062][T16664] [U] [ 276.180035][T16664] [U] [ 276.180991][T16664] [U] [ 276.181946][T16664] [U] [ 276.183013][T16664] [U] [ 276.184065][T16664] [U] [ 276.184999][T16664] [U] [ 276.185933][T16664] [U] [ 276.191418][T16664] 9pnet_virtio: no channels available for device syz [ 276.195595][T16663] [U] [ 276.507752][T16682] netlink: 'syz.4.3230': attribute type 11 has an invalid length. [ 276.524595][T16682] netlink: 'syz.4.3230': attribute type 1 has an invalid length. [ 276.614919][T16690] loop5: detected capacity change from 0 to 7 [ 276.674116][ T40] audit: type=1400 audit(276.586:30290): avc: denied { execute } for pid=16683 comm="syz.6.3231" path="/sys/power/pm_freeze_timeout" dev="sysfs" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 276.685085][ T11] blk_print_req_error: 5 callbacks suppressed [ 276.685102][ T11] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.692670][ T11] buffer_io_error: 6 callbacks suppressed [ 276.692684][ T11] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.700597][T16690] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.703904][T16690] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.706754][T16690] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.709889][T16690] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.712680][T16690] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.715905][T16690] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.719148][T16690] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.722585][T16690] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.725336][T16690] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.728672][T16690] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.731618][T16690] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.735417][T16690] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.738366][T16690] ldm_validate_partition_table(): Disk read failed. [ 276.740725][T16690] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.743864][T16690] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.746825][T16690] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.749960][T16690] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.752722][T16690] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.755882][T16690] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.758773][T16690] Dev loop5: unable to read RDB block 0 [ 276.760854][T16690] loop5: unable to read partition table [ 276.762956][T16690] loop5: partition table beyond EOD, truncated [ 276.765093][T16690] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 277.434741][T16697] bond2: (slave bridge3): making interface the new active one [ 277.438866][T16697] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 277.449391][T16697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.514733][T16697] __nla_validate_parse: 9 callbacks suppressed [ 277.514749][T16697] netlink: 328 bytes leftover after parsing attributes in process `syz.6.3233'. [ 278.018599][T16722] program syz.1.3241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.024324][T16722] program syz.1.3241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.073334][T16728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3242'. [ 278.080991][T16728] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 278.084436][T16728] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 278.088337][T16728] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 278.091991][T16728] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 278.303727][T16736] batman_adv: batadv0: Adding interface: gretap2 [ 278.306815][T16736] batman_adv: batadv0: Interface activated: gretap2 [ 278.526611][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3248'. [ 278.535794][T16754] 9pnet_virtio: no channels available for device syz [ 278.537110][T16753] validate_nla: 3 callbacks suppressed [ 278.537125][T16753] netlink: 'syz.5.3248': attribute type 39 has an invalid length. [ 278.596994][ T6545] net_ratelimit: 33 callbacks suppressed [ 278.597013][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 278.708910][ T1150] bond4: (slave lo): failed to get link speed/duplex [ 278.816437][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 278.927307][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 279.004975][T16785] openvswitch: netlink: Invalid VLAN frame [ 279.046513][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 279.166504][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 279.181132][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3256'. [ 279.277490][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 279.290755][T16800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3261'. [ 279.396411][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 279.435889][T16813] fuse: Bad value for 'fd' [ 279.506312][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 279.561373][T16824] dlm: no locking on control device [ 279.997829][T16846] overlayfs: failed to clone upperpath [ 280.408382][T16874] ceph: No source [ 280.629702][T16890] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 280.702488][T16896] Bluetooth: hci4: Frame reassembly failed (-84) [ 280.707232][ T93] Bluetooth: hci4: Frame reassembly failed (-84) [ 280.769285][T16900] veth0_to_bridge: entered promiscuous mode [ 280.777182][T16895] veth0_to_bridge: left promiscuous mode [ 281.047794][T16909] ip6gre2: entered promiscuous mode [ 281.049874][T16909] ip6gre2: entered allmulticast mode [ 281.053860][ T1150] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 281.055119][T16909] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 281.062696][ T1150] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 281.068778][ T40] audit: type=1400 audit(280.986:30291): avc: denied { setopt } for pid=16910 comm="syz.1.3298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 281.076809][ T5997] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 281.626471][ T5997] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 281.744072][ T34] IPVS: starting estimator thread 0... [ 281.774115][ T40] audit: type=1326 audit(281.686:30292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16920 comm="syz.5.3302" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3db8f7c9 code=0x7fc00000 [ 281.801174][ T40] audit: type=1400 audit(281.716:30293): avc: denied { setopt } for pid=16933 comm="syz.6.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 281.846173][T16926] IPVS: using max 23 ests per chain, 55200 per kthread [ 281.854660][T16934] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3304'. [ 281.858955][T16934] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3304'. [ 281.916399][ T5997] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 282.239454][T16961] 9pnet_fd: Insufficient options for proto=fd [ 282.400261][T16976] program syz.1.3319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.664437][T16987] netlink: 360 bytes leftover after parsing attributes in process `syz.5.3324'. [ 282.716175][ T5293] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 282.717813][ T5939] Bluetooth: hci4: command 0xfc11 tx timeout [ 282.829209][ T40] audit: type=1400 audit(282.746:30294): avc: denied { setopt } for pid=17003 comm="syz.4.3332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 282.842389][ T2296] hid_parser_main: 7 callbacks suppressed [ 282.842408][ T2296] hid-generic 0000:0000:400000.0009: unknown main item tag 0x0 [ 282.852695][ T2296] hid-generic 0000:0000:400000.0009: unknown main item tag 0x0 [ 282.860929][ T2296] hid-generic 0000:0000:400000.0009: unknown main item tag 0x0 [ 282.864712][ T2296] hid-generic 0000:0000:400000.0009: unknown main item tag 0x0 [ 282.868424][ T2296] hid-generic 0000:0000:400000.0009: unknown main item tag 0x0 [ 282.871840][ T2296] hid-generic 0000:0000:400000.0009: unknown main item tag 0x0 [ 282.876729][ T2296] hid-generic 0000:0000:400000.0009: unknown main item tag 0x0 [ 282.880091][ T2296] hid-generic 0000:0000:400000.0009: unknown main item tag 0x0 [ 282.884665][ T2296] hid-generic 0000:0000:400000.0009: unknown main item tag 0x0 [ 282.888767][ T2296] hid-generic 0000:0000:400000.0009: unknown main item tag 0x0 [ 282.894788][ T2296] hid-generic 0000:0000:400000.0009: hidraw1: HID v0.03 Device [syz0] on syz1 [ 282.898242][T17016] XFS (nullb0): Invalid superblock magic number [ 282.949371][T17033] nftables ruleset with unbound set [ 282.951635][T17031] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3339'. [ 282.958638][T17031] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3339'. [ 282.961650][T17031] gretap0: entered promiscuous mode [ 283.091289][ T40] audit: type=1400 audit(283.006:30295): avc: denied { name_bind } for pid=17045 comm="syz.6.3344" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 283.135731][ T40] audit: type=1400 audit(283.046:30296): avc: denied { setattr } for pid=17050 comm="syz.1.3346" name="ttynull" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 283.290010][T17070] sctp: [Deprecated]: syz.6.3352 (pid 17070) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.290010][T17070] Use struct sctp_sack_info instead [ 283.391765][T17083] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3357'. [ 283.404152][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3358'. [ 283.408239][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3358'. [ 283.411316][T17086] netlink: 'syz.1.3358': attribute type 11 has an invalid length. [ 283.414243][T17086] netlink: 'syz.1.3358': attribute type 7 has an invalid length. [ 283.497277][ T40] audit: type=1400 audit(283.416:30297): avc: denied { shutdown } for pid=17087 comm="syz.4.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 283.538930][T17100] xt_hashlimit: max too large, truncated to 1048576 [ 283.603708][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3365'. [ 283.622865][T17108] 9pnet_virtio: no channels available for device syz [ 283.629489][T17108] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3365'. [ 283.686923][ T6545] net_ratelimit: 44 callbacks suppressed [ 283.686941][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 283.703744][T17114] pimreg: entered allmulticast mode [ 283.729593][T17118] tipc: Started in network mode [ 283.731836][T17118] tipc: Node identity 8e4e0bc8a05b, cluster identity 4711 [ 283.735048][T17118] tipc: Enabled bearer , priority 0 [ 283.763116][T17118] tipc: Disabling bearer [ 283.806544][ T93] bond4: (slave lo): failed to get link speed/duplex [ 283.886322][ T40] audit: type=1400 audit(283.806:30298): avc: denied { name_bind } for pid=17129 comm="syz.1.3371" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 283.894538][ T40] audit: type=1400 audit(283.806:30299): avc: denied { name_connect } for pid=17129 comm="syz.1.3371" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 283.917300][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 283.935981][ T34] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 284.036318][ T93] bond4: (slave lo): failed to get link speed/duplex [ 284.097897][ T34] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 284.102206][ T34] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 284.106757][ T34] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 284.112547][ T5939] Bluetooth: hci3: unexpected event for opcode 0x042c [ 284.112691][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.120711][T17112] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 284.123016][T17112] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 284.127168][ T34] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 284.146346][ T1150] bond4: (slave lo): failed to get link speed/duplex [ 284.256330][ T1150] bond4: (slave lo): failed to get link speed/duplex [ 284.329977][ T2296] usb 9-1: USB disconnect, device number 19 [ 284.366056][ T1150] bond4: (slave lo): failed to get link speed/duplex [ 284.479711][ T93] bond4: (slave lo): failed to get link speed/duplex [ 284.551931][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3366'. [ 284.587684][ T93] bond4: (slave lo): failed to get link speed/duplex [ 284.655402][T17151] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3377'. [ 284.659147][T17151] xt_socket: unknown flags 0xd0 [ 284.707006][ T93] bond4: (slave lo): failed to get link speed/duplex [ 284.748690][T17157] tmpfs: Invalid uid '0x00000000ffffffff' [ 284.961261][T17181] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:0 [ 284.966928][ T40] audit: type=1400 audit(284.886:30300): avc: denied { setopt } for pid=17180 comm="syz.5.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 285.275967][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 285.346022][ T34] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 285.400074][T17211] dvmrp6: entered allmulticast mode [ 285.548836][ T34] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x72, changing to 0x2 [ 285.552731][ T34] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x2 has invalid maxpacket 28538, setting to 64 [ 285.560562][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 285.565203][ T34] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 285.568626][ T34] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 285.571626][ T34] usb 6-1: Product: syz [ 285.573227][ T34] usb 6-1: Manufacturer: syz [ 285.575206][ T34] usb 6-1: SerialNumber: syz [ 285.579585][ T34] usb 6-1: config 0 descriptor?? [ 285.581862][T17185] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 285.586971][ T34] usb 6-1: selecting invalid altsetting 0 [ 285.787273][T17180] delete_channel: no stack [ 285.791172][T17185] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 285.803436][ T8298] usb 6-1: USB disconnect, device number 33 [ 286.396702][T17245] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17245 comm=syz.4.3413 [ 286.505470][ T5939] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 286.569184][T17256] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 286.572351][T17256] overlayfs: failed to set xattr on upper [ 286.574903][T17256] overlayfs: ...falling back to redirect_dir=nofollow. [ 286.578574][T17256] overlayfs: ...falling back to index=off. [ 286.581185][T17256] overlayfs: ...falling back to uuid=null. [ 286.591322][T17256] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 286.609293][ T5939] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 286.633559][T17263] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 286.708461][T17278] 9pnet_virtio: no channels available for device syz [ 286.768142][T17285] overlayfs: failed to clone lowerpath [ 287.109786][T17310] tipc: Started in network mode [ 287.111459][T17310] tipc: Node identity 7f000001, cluster identity 4711 [ 287.114080][T17310] tipc: Enabled bearer , priority 10 [ 287.181834][T17318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7763 sclass=netlink_route_socket pid=17318 comm=syz.4.3438 [ 287.182597][ T5939] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 287.185941][ T8298] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 287.222489][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 287.222503][ T40] audit: type=1400 audit(287.137:30302): avc: denied { accept } for pid=17319 comm="syz.1.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 287.235805][ T40] audit: type=1400 audit(287.137:30303): avc: denied { write } for pid=17321 comm="syz.4.3441" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 287.248775][T17322] overlayfs: upper fs does not support file handles, falling back to index=off. [ 287.258821][T17322] evm: overlay not supported [ 287.276830][T17324] trusted_key: encrypted_key: master key parameter '' is invalid [ 287.337007][ T8298] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12408, setting to 64 [ 287.340907][ T8298] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.345467][ T8298] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.349553][ T8298] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.356257][ T8298] usb 11-1: config 0 descriptor?? [ 287.361314][ T8298] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 287.466488][ T40] audit: type=1400 audit(287.387:30304): avc: denied { append } for pid=17345 comm="syz.4.3447" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 287.487930][T17347] ip6tnl1: entered promiscuous mode [ 287.589929][T17354] trusted_key: encrypted_key: insufficient parameters specified [ 287.660952][ T40] audit: type=1400 audit(287.577:30305): avc: denied { append } for pid=17358 comm="syz.4.3453" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 287.699153][T17363] __nla_validate_parse: 5 callbacks suppressed [ 287.699165][T17363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3454'. [ 287.727726][T17349] xfrm0 speed is unknown, defaulting to 1000 [ 287.937528][ T34] usb 11-1: USB disconnect, device number 3 [ 288.095050][T17390] netlink: 'syz.6.3461': attribute type 322 has an invalid length. [ 288.096165][T17391] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 288.198673][T17400] geneve2: entered allmulticast mode [ 288.235775][ T34] tipc: Node number set to 2130706433 [ 288.565538][T17416] mkiss: ax0: crc mode is auto. [ 288.634973][T17371] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.639763][T17371] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 288.648748][T17371] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 288.652078][T17371] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.654118][T17371] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 288.658406][T17371] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 288.663985][T17371] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.667209][T17371] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 288.670685][T17371] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 288.674340][T17371] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 288.678236][T17371] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.680427][T17371] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 288.684902][T17371] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 288.763313][T17421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.782128][T17421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.815735][ T6134] net_ratelimit: 37 callbacks suppressed [ 288.815746][ T6134] bond4: (slave lo): failed to get link speed/duplex [ 288.836166][T17428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.839329][T17428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.911087][ T40] audit: type=1400 audit(288.827:30306): avc: denied { bind } for pid=17433 comm="syz.6.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 288.926151][ T6549] bond4: (slave lo): failed to get link speed/duplex [ 289.036090][ T6134] bond4: (slave lo): failed to get link speed/duplex [ 289.067294][T17445] bond2: option mode: unable to set because the bond device has slaves [ 289.075923][ T2296] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 289.090141][T17447] netlink: 'syz.6.3480': attribute type 11 has an invalid length. [ 289.092879][T17447] netlink: 199788 bytes leftover after parsing attributes in process `syz.6.3480'. [ 289.137786][T17453] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3481'. [ 289.156892][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 289.187122][T17460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3483'. [ 289.258360][ T2296] usb 6-1: device descriptor read/all, error -71 [ 289.265768][ T6134] bond4: (slave lo): failed to get link speed/duplex [ 289.292377][T17472] netlink: 'syz.1.3488': attribute type 1 has an invalid length. [ 289.385971][ T6144] bond4: (slave lo): failed to get link speed/duplex [ 289.411479][T17482] overlayfs: failed to resolve './bus': -2 [ 289.483469][T17491] tipc: Enabling of bearer rejected, failed to enable media [ 289.495788][ T6144] bond4: (slave lo): failed to get link speed/duplex [ 289.606362][ T6134] bond4: (slave lo): failed to get link speed/duplex [ 289.607633][T17499] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3497'. [ 289.612047][T17499] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3497'. [ 289.687537][T17507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.708678][T17507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.709418][T17511] Unknown options in mask b7f2 [ 289.715835][T17511] 9pnet_virtio: no channels available for device syz [ 289.716051][ T6549] bond4: (slave lo): failed to get link speed/duplex [ 289.799173][ T40] audit: type=1400 audit(289.717:30307): avc: denied { listen } for pid=17515 comm="syz.4.3503" lport=58271 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 289.836037][ T6144] bond4: (slave lo): failed to get link speed/duplex [ 289.846144][T17518] netlink: 'syz.4.3504': attribute type 1 has an invalid length. [ 289.926450][ T5939] Bluetooth: hci3: command 0x0405 tx timeout [ 290.008632][T17524] netlink: 'syz.5.3506': attribute type 10 has an invalid length. [ 290.012269][T17524] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3506'. [ 290.078560][T17524] vlan0 (unregistering): left allmulticast mode [ 290.080692][T17524] veth0_vlan (unregistering): left allmulticast mode [ 290.333039][T17530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=17530 comm=syz.6.3508 [ 290.339022][T17539] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 290.343535][T17539] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 290.348312][T17539] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 290.351671][T17539] UDF-fs: Scanning with blocksize 512 failed [ 290.354999][T17539] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 290.359832][T17539] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 290.362884][T17539] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 290.367252][T17539] UDF-fs: Scanning with blocksize 1024 failed [ 290.370728][T17539] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 290.375167][T17539] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 290.379542][T17539] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 290.382967][T17539] UDF-fs: Scanning with blocksize 2048 failed [ 290.386449][T17539] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 290.389794][T17539] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 290.394260][T17539] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 290.397902][T17539] UDF-fs: Scanning with blocksize 4096 failed [ 290.400529][T17539] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 290.427040][T17548] netlink: 'syz.6.3515': attribute type 1 has an invalid length. [ 290.451246][T17550] netlink: 'syz.5.3516': attribute type 10 has an invalid length. [ 290.454073][T17550] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3516'. [ 290.458568][T17550] team0: entered promiscuous mode [ 290.460714][T17550] team_slave_0: entered promiscuous mode [ 290.462961][T17550] team_slave_1: entered promiscuous mode [ 290.466010][T17550] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.468815][T17550] bridge0: port 2(team0) entered blocking state [ 290.470993][T17550] bridge0: port 2(team0) entered disabled state [ 290.477929][T17553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.504501][T17553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.571470][T17561] pimreg: entered allmulticast mode [ 290.677187][T17567] overlay: ./bus is not a directory [ 290.691637][T17569] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 290.698201][ T40] audit: type=1400 audit(290.617:30308): avc: denied { write open } for pid=17568 comm="syz.6.3521" path=2F3135322F23383433202864656C6574656429 dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 290.733811][ C1] hpet: Lost 2 RTC interrupts [ 290.742710][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 290.742757][ T5938] Bluetooth: hci1: command 0x0c1a tx timeout [ 290.742869][ T5293] Bluetooth: hci0: command 0x041b tx timeout [ 290.767935][ C1] hpet: Lost 1 RTC interrupts [ 290.770859][ T40] audit: type=1400 audit(290.627:30309): avc: denied { ioctl } for pid=17568 comm="syz.6.3521" path=2F3135322F23383433202864656C6574656429 dev="tmpfs" ino=843 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 290.812551][T17575] FAULT_INJECTION: forcing a failure. [ 290.812551][T17575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.849143][T17575] CPU: 2 UID: 0 PID: 17575 Comm: syz.6.3524 Not tainted syzkaller #0 PREEMPT(full) [ 290.849160][T17575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.849167][T17575] Call Trace: [ 290.849171][T17575] [ 290.849175][T17575] dump_stack_lvl+0x16c/0x1f0 [ 290.849193][T17575] should_fail_ex+0x512/0x640 [ 290.849208][T17575] _copy_from_user+0x2e/0xd0 [ 290.849219][T17575] copy_msghdr_from_user+0x98/0x160 [ 290.849231][T17575] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 290.849242][T17575] ? __lock_acquire+0x433/0x22f0 [ 290.849263][T17575] ___sys_sendmsg+0xfe/0x1d0 [ 290.849274][T17575] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.849285][T17575] ? __lock_acquire+0x433/0x22f0 [ 290.849315][T17575] __sys_sendmsg+0x16d/0x220 [ 290.849326][T17575] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.849346][T17575] do_syscall_64+0xcd/0xf80 [ 290.849360][T17575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.849372][T17575] RIP: 0033:0x7fc52698f7c9 [ 290.849382][T17575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.849394][T17575] RSP: 002b:00007fc52775f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.849405][T17575] RAX: ffffffffffffffda RBX: 00007fc526be5fa0 RCX: 00007fc52698f7c9 [ 290.849412][T17575] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 290.849419][T17575] RBP: 00007fc52775f090 R08: 0000000000000000 R09: 0000000000000000 [ 290.849425][T17575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.849432][T17575] R13: 00007fc526be6038 R14: 00007fc526be5fa0 R15: 00007fff5ea555a8 [ 290.849447][T17575] [ 290.983657][T17591] netlink: 'syz.6.3529': attribute type 1 has an invalid length. [ 291.171128][T17607] netlink: 'syz.1.3535': attribute type 21 has an invalid length. [ 291.214890][T17610] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 291.305637][ T2296] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 291.314141][T17616] FAULT_INJECTION: forcing a failure. [ 291.314141][T17616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.319153][T17616] CPU: 0 UID: 0 PID: 17616 Comm: syz.1.3537 Not tainted syzkaller #0 PREEMPT(full) [ 291.319170][T17616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.319177][T17616] Call Trace: [ 291.319182][T17616] [ 291.319187][T17616] dump_stack_lvl+0x16c/0x1f0 [ 291.319205][T17616] should_fail_ex+0x512/0x640 [ 291.319218][T17616] _copy_from_user+0x2e/0xd0 [ 291.319230][T17616] move_addr_to_kernel+0x65/0x170 [ 291.319246][T17616] __copy_msghdr+0x386/0x470 [ 291.319258][T17616] copy_msghdr_from_user+0xc1/0x160 [ 291.319268][T17616] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 291.319278][T17616] ? __lock_acquire+0x433/0x22f0 [ 291.319299][T17616] ___sys_sendmsg+0xfe/0x1d0 [ 291.319310][T17616] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.319320][T17616] ? __lock_acquire+0x433/0x22f0 [ 291.319350][T17616] __sys_sendmsg+0x16d/0x220 [ 291.319360][T17616] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.319380][T17616] do_syscall_64+0xcd/0xf80 [ 291.319393][T17616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.319404][T17616] RIP: 0033:0x7f4fb958f7c9 [ 291.319414][T17616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.319424][T17616] RSP: 002b:00007f4fba34e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.319435][T17616] RAX: ffffffffffffffda RBX: 00007f4fb97e5fa0 RCX: 00007f4fb958f7c9 [ 291.319442][T17616] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 291.319448][T17616] RBP: 00007f4fba34e090 R08: 0000000000000000 R09: 0000000000000000 [ 291.319455][T17616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.319461][T17616] R13: 00007f4fb97e6038 R14: 00007f4fb97e5fa0 R15: 00007ffce5f61a68 [ 291.319492][T17616] [ 291.394640][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.418586][T17619] netlink: 'syz.6.3538': attribute type 1 has an invalid length. [ 291.419688][T17620] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3539'. [ 291.432478][T17620] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3539'. [ 291.445323][T17619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.455991][T17619] bond3: entered allmulticast mode [ 291.469430][ T2296] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 291.474452][ T2296] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.484288][ T2296] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.488091][ T2296] usb 9-1: config 0 interface 0 has no altsetting 0 [ 291.493781][ T2296] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.510999][ T2296] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.514565][ T2296] usb 9-1: config 0 interface 0 has no altsetting 0 [ 291.520552][ T2296] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.527327][ T2296] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.537558][ T2296] usb 9-1: config 0 interface 0 has no altsetting 0 [ 291.540616][ T2296] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.543560][ T2296] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.547803][ T2296] usb 9-1: config 0 interface 0 has no altsetting 0 [ 291.550819][ T2296] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.553734][ T2296] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.557275][ T2296] usb 9-1: config 0 interface 0 has no altsetting 0 [ 291.560245][ T2296] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.563692][ T2296] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.567692][ T2296] usb 9-1: config 0 interface 0 has no altsetting 0 [ 291.571036][ T2296] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.574661][ T2296] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.580568][ T2296] usb 9-1: config 0 interface 0 has no altsetting 0 [ 291.583598][ T2296] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.586875][ T2296] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.592532][ T2296] usb 9-1: config 0 interface 0 has no altsetting 0 [ 291.601734][ T2296] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 291.605265][ T2296] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 291.608481][ T2296] usb 9-1: Product: syz [ 291.610391][ T2296] usb 9-1: Manufacturer: syz [ 291.612031][ T2296] usb 9-1: SerialNumber: syz [ 291.614846][ T2296] usb 9-1: config 0 descriptor?? [ 291.620558][ T2296] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 291.637953][T17637] netlink: 'syz.1.3542': attribute type 1 has an invalid length. [ 291.828573][T17644] cgroup: No subsys list or none specified [ 291.928579][T17647] overlayfs: missing 'lowerdir' [ 291.933389][T17647] overlay: ./file0 is not a directory [ 291.995644][ T5939] Bluetooth: hci3: command 0x0405 tx timeout [ 292.306024][ T8298] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 292.458416][ T8298] usb 6-1: config 1 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1535, setting to 1024 [ 292.463287][ T8298] usb 6-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.469239][ T8298] usb 6-1: config 1 interface 0 has no altsetting 0 [ 292.474734][ T8298] usb 6-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.40 [ 292.479436][ T8298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.483077][ T8298] usb 6-1: Product: ƫﺠ䚃蹉ᅁ잉瑚泎軳鐫ঽ䶊㜧š；⑓쨽젧兕胹촬ඇ鬊䤄呀犩癤넙୧忝볝䒬봴澒笫윺趙嬾䱈薟䙣㞇툒㱵ᮾ괹‹췊Გ⮺ࢍ膞돐㶑윇Ⲍ弿撨⌂玄剬紸ⰿ㽑棞裲ႚ髼첿ᇓ沧 [ 292.494665][T17674] vcan1: entered allmulticast mode [ 292.495656][ T8298] usb 6-1: Manufacturer: 믲蕘醭뫘劬劒嶨饈㣏ꞁ뵒䎑࠱뭨䏌邆䮦榆؁哖괹憕൴蟝폦ᑎﲮ㱗㥶妎檥ʗ⥳줍䆇鳧ꋩ㉐扦軹ﶤ䱃㜾ၹ颚彨韪ᥞ꠻枺뗄Ꮱ摝㬍ጒ⾺ൿ栏㊫ᔲ藉坼羋ၼ궶ﲝﳥ뢾蒊픗 [ 292.517441][ T8298] usb 6-1: SerialNumber: 覸礿硩⤐ꚪ᳤鈅ꘕ臲择㙌뭶謇꼉瀘뫡랊揎ằﳯ蒒荀袄﹑壦谟鰵僚끦ℯ㸭蛼挠張쑱䣽昗뒉쳭ፌ觇껻΅㡣ꯩ [ 292.532709][T17642] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 292.795934][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 292.795968][ T5941] Bluetooth: hci0: command 0x041b tx timeout [ 292.795990][ T5293] Bluetooth: hci1: command 0x0c1a tx timeout [ 292.946651][T17642] veth1_macvtap: left allmulticast mode [ 292.962246][T17642] batman_adv: batadv0: Interface deactivated: gretap2 [ 292.969337][ T6134] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.982969][ T6134] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.992688][ T6134] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.997891][ T6134] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.050086][ T8298] usbhid 6-1:1.0: can't add hid device: -71 [ 293.052203][ T8298] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 293.056221][ T8298] usb 6-1: USB disconnect, device number 36 [ 293.160371][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 293.160383][ T40] audit: type=1400 audit(293.077:30311): avc: denied { name_bind } for pid=17720 comm="syz.5.3570" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 293.833176][T17730] Sensor A: ================= START STATUS ================= [ 293.836876][ T93] net_ratelimit: 35 callbacks suppressed [ 293.836894][ T93] bond4: (slave lo): failed to get link speed/duplex [ 293.842816][T17730] Sensor A: Test Pattern: Horizontal 100% Colorbar [ 293.848199][T17730] Sensor A: Show Information: All [ 293.850456][T17730] Sensor A: Vertical Flip: false [ 293.852719][T17730] Sensor A: Horizontal Flip: true [ 293.855074][T17730] Sensor A: Brightness: 255 [ 293.857479][T17730] Sensor A: Contrast: 128 [ 293.859613][T17730] Sensor A: Hue: 0 [ 293.861314][T17730] Sensor A: Saturation: 128 [ 293.863405][T17730] Sensor A: ================== END STATUS ================== [ 293.903522][T17735] __nla_validate_parse: 1 callbacks suppressed [ 293.903538][T17735] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3576'. [ 293.906620][T17736] NILFS (nullb0): couldn't find nilfs on the device [ 293.946570][ T93] bond4: (slave lo): failed to get link speed/duplex [ 294.032661][T17753] IPVS: fo: FWM 3 0x00000003 - no destination available [ 294.066010][ T6546] bond4: (slave lo): failed to get link speed/duplex [ 294.075542][ T5941] Bluetooth: hci3: command 0x0405 tx timeout [ 294.176481][ T6546] bond4: (slave lo): failed to get link speed/duplex [ 294.187561][ T34] usb 9-1: USB disconnect, device number 20 [ 294.205642][ T34] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 294.221908][T17770] usb usb8: usbfs: process 17770 (syz.4.3587) did not claim interface 3 before use [ 294.296293][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 294.408394][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 294.483582][T17792] dlm: no locking on control device [ 294.484653][T17793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3593'. [ 294.525860][ T13] bond4: (slave lo): failed to get link speed/duplex [ 294.645693][ T6134] bond4: (slave lo): failed to get link speed/duplex [ 294.657468][T17813] validate_nla: 1 callbacks suppressed [ 294.657480][T17813] netlink: 'syz.1.3598': attribute type 1 has an invalid length. [ 294.755978][ T6546] bond4: (slave lo): failed to get link speed/duplex [ 294.875866][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.876066][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 294.876096][ T5293] Bluetooth: hci0: command 0x041b tx timeout [ 294.995439][ T34] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 295.069280][T17834] Invalid source name [ 295.070595][T17834] UBIFS error (pid: 17834): cannot open "./file0", error -22 [ 295.141023][T17824] No such timeout policy "syz1" [ 295.147662][ T34] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 295.148143][ T40] audit: type=1326 audit(295.067:30312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.6.3603" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc52698f7c9 code=0x0 [ 295.151608][ T34] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 295.166211][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 295.171404][ T34] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 295.183429][ T34] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 295.186447][ T34] usb 9-1: Product: syz [ 295.187973][ T34] usb 9-1: Manufacturer: syz [ 295.189559][ T34] usb 9-1: SerialNumber: syz [ 295.192695][ T34] usb 9-1: config 0 descriptor?? [ 295.195708][ T34] hub 9-1:0.0: bad descriptor, ignoring hub [ 295.197716][ T34] hub 9-1:0.0: probe with driver hub failed with error -5 [ 295.201721][ T34] usb 9-1: selecting invalid altsetting 0 [ 295.358138][T17860] netlink: 'syz.5.3611': attribute type 1 has an invalid length. [ 295.494915][T17864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3612'. [ 295.498564][T17864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3612'. [ 295.529396][T17866] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3613'. [ 295.533612][T17866] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3613'. [ 295.587936][T17869] fuse: Bad value for 'fd' [ 295.677517][ T2296] usb 9-1: reset high-speed USB device number 21 using dummy_hcd [ 295.916637][T17882] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 296.042551][ T40] audit: type=1400 audit(295.957:30313): avc: denied { audit_control } for pid=17818 comm="syz.4.3600" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 296.228648][T17894] Bluetooth: MGMT ver 1.23 [ 296.253343][T17899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3625'. [ 296.256814][T17899] bridge_slave_0: left allmulticast mode [ 296.258808][T17899] bridge_slave_0: left promiscuous mode [ 296.261125][T17899] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.345751][ T34] usb 9-1: USB disconnect, device number 21 [ 296.597620][T17914] netlink: 'syz.5.3629': attribute type 1 has an invalid length. [ 296.789028][T17885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.793916][T17885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.799341][T17885] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 296.802327][T17885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.913679][T17934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3631'. [ 296.954473][T17938] x_tables: duplicate underflow at hook 1 [ 296.994651][ T40] audit: type=1400 audit(296.907:30314): avc: denied { lock } for pid=17943 comm="syz.5.3638" path="socket:[76081]" dev="sockfs" ino=76081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 297.052939][ T40] audit: type=1400 audit(296.967:30315): avc: denied { mounton } for pid=17943 comm="syz.5.3638" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 297.053044][T17945] overlay: filesystem on ./bus is read-only [ 297.091906][ T5939] Bluetooth: hci1: unexpected event 0x0e length: 1 < 3 [ 297.140043][ T40] audit: type=1400 audit(297.057:30316): avc: denied { write } for pid=17960 comm="syz.1.3643" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 297.149941][ T40] audit: type=1400 audit(297.057:30317): avc: denied { open } for pid=17960 comm="syz.1.3643" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 297.160595][ T40] audit: type=1400 audit(297.057:30318): avc: denied { ioctl } for pid=17960 comm="syz.1.3643" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 297.962152][T17996] IPv6: Can't replace route, no match found [ 297.966207][T17996] netlink: 'syz.5.3655': attribute type 1 has an invalid length. [ 298.067004][ T2296] SELinux: failure in sel_netif_sid_slow(), invalid network interface (132) [ 298.078127][ T5939] Bluetooth: hci3: command 0x0405 tx timeout [ 298.215434][ T2296] SELinux: failure in sel_netif_sid_slow(), invalid network interface (132) [ 298.334484][ T40] audit: type=1326 audit(298.247:30319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17978 comm="syz.1.3651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb958f7c9 code=0x7fc00000 [ 298.401654][ T40] audit: type=1326 audit(298.317:30320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18014 comm="syz.1.3662" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4fb958f7c9 code=0x0 [ 298.672168][ T6546] .` (unregistering): Released all slaves [ 298.694235][ T5939] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 298.707509][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3664'. [ 298.790807][ T6546] bond1 (unregistering): Released all slaves [ 298.804437][ T6546] bond2 (unregistering): Released all slaves [ 298.805202][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout [ 298.875296][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.878066][ T5939] Bluetooth: hci0: command 0x041b tx timeout [ 298.945833][ T6546] bond3 (unregistering): Released all slaves [ 298.952953][ T6546] bond4 (unregistering): Released all slaves [ 299.067364][ T6546] bond5 (unregistering): Released all slaves [ 299.074259][ T6546] bond6 (unregistering): Released all slaves [ 299.081350][ T6546] bond0 (unregistering): Released all slaves [ 299.088059][ T6546] bond7 (unregistering): Released all slaves [ 299.115169][ T6545] net_ratelimit: 33 callbacks suppressed [ 299.115186][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 299.193258][ T40] audit: type=1400 audit(299.107:30321): avc: denied { connect } for pid=18031 comm="syz.6.3668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 299.225522][ T6545] bond4: (slave lo): failed to get link speed/duplex [ 299.254587][ T40] audit: type=1400 audit(299.167:30322): avc: denied { write } for pid=18031 comm="syz.6.3668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 299.265359][ T6546] tipc: Disabling bearer [ 299.278511][ T6546] tipc: Left network mode [ 299.280443][T18034] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3669'. [ 299.319337][ T6546] IPVS: stopping backup sync thread 7336 ... [ 299.331349][T18044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3671'. [ 299.365900][ T6549] bond4: (slave lo): failed to get link speed/duplex [ 299.477391][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 299.585194][ T6552] bond4: (slave lo): failed to get link speed/duplex [ 299.643645][ T6546] hsr_slave_0: left promiscuous mode [ 299.647219][ T6546] hsr_slave_1: left promiscuous mode [ 299.648676][T18081] netlink: 'syz.1.3684': attribute type 1 has an invalid length. [ 299.657810][T18080] netlink: 'syz.5.3685': attribute type 2 has an invalid length. [ 299.678409][ T6546] pimreg (unregistering): left allmulticast mode [ 299.693605][ T6546] pim6reg (unregistering): left allmulticast mode [ 299.700183][ T40] audit: type=1400 audit(299.617:30323): avc: denied { unmount } for pid=18086 comm="syz.5.3686" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 299.774440][T18097] IPVS: fo: FWM 3 0x00000003 - no destination available [ 299.956180][T18116] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3691'. [ 300.329155][ T5997] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 300.478159][T18126] xfrm0 speed is unknown, defaulting to 1000 [ 300.486553][ T5997] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 300.489716][ T5997] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 300.493101][ T5997] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.495128][ T6144] bond4: (slave lo): failed to get link speed/duplex [ 300.501574][ T5997] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 300.505806][ T5997] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.509180][ T5997] usb 11-1: Product: syz [ 300.510995][ T5997] usb 11-1: Manufacturer: syz [ 300.513092][ T5997] usb 11-1: SerialNumber: syz [ 300.520744][ T5997] hub 11-1:1.0: bad descriptor, ignoring hub [ 300.523319][ T5997] hub 11-1:1.0: probe with driver hub failed with error -5 [ 300.574908][T18134] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3696'. [ 300.605377][ T6549] bond4: (slave lo): failed to get link speed/duplex [ 300.677197][ T40] audit: type=1326 audit(300.587:30324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18137 comm="syz.5.3698" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f4d3db86667 code=0x0 [ 300.681118][T18140] xfrm0 speed is unknown, defaulting to 1000 [ 300.689593][T18140] xfrm0 speed is unknown, defaulting to 1000 [ 300.692138][T18140] xfrm0 speed is unknown, defaulting to 1000 [ 300.728765][T18140] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 300.732966][ T5997] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 300.748270][ T224] bond4: (slave lo): failed to get link speed/duplex [ 300.759981][T18140] xfrm0 speed is unknown, defaulting to 1000 [ 300.762661][T18140] xfrm0 speed is unknown, defaulting to 1000 [ 300.771035][T18140] xfrm0 speed is unknown, defaulting to 1000 [ 300.775366][T18140] xfrm0 speed is unknown, defaulting to 1000 [ 300.780081][T18140] xfrm0 speed is unknown, defaulting to 1000 [ 300.784346][T18140] xfrm0 speed is unknown, defaulting to 1000 [ 300.796212][T18140] xfrm0 speed is unknown, defaulting to 1000 [ 300.801770][T18140] xfrm0 speed is unknown, defaulting to 1000 [ 300.842923][ T6546] IPVS: stop unused estimator thread 0... [ 300.855606][T18174] bond4: (slave lo): failed to get link speed/duplex [ 300.863144][ T40] audit: type=1400 audit(300.777:30325): avc: denied { set_context_mgr } for pid=18176 comm="syz.1.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 300.877183][ T40] audit: type=1400 audit(300.797:30326): avc: denied { call } for pid=18176 comm="syz.1.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 300.926006][T18182] ------------[ cut here ]------------ [ 300.928224][T18182] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 300.930515][T18182] WARNING: net/mac80211/main.c:425 at 0x0, CPU#1: syz.1.3702/18182 [ 300.932945][T18182] Modules linked in: [ 300.935538][T18182] CPU: 1 UID: 0 PID: 18182 Comm: syz.1.3702 Not tainted syzkaller #0 PREEMPT(full) [ 300.940151][T18182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 300.944763][T18182] RIP: 0010:ieee80211_link_info_change_notify+0x1e9/0x3d0 [ 300.948371][T18182] Code: 6d e6 f2 f6 48 8b 74 24 08 48 81 c6 20 01 00 00 48 89 74 24 08 e8 57 e6 f2 f6 48 8d 3d 70 18 ca 05 8b 54 24 04 48 8b 74 24 08 <67> 48 0f b9 3a e8 3d e6 f2 f6 4c 89 e2 48 b8 00 00 00 00 00 fc ff [ 300.955255][T18182] RSP: 0018:ffffc90005c3fb20 EFLAGS: 00010287 [ 300.957212][T18182] RAX: 00000000000007e8 RBX: ffff888025970d80 RCX: ffffc9002e44b000 [ 300.959883][T18182] RDX: 0000000000000000 RSI: ffff888025970120 RDI: ffffffff90951250 [ 300.962893][T18182] RBP: 0000000000040000 R08: 0000000000000005 R09: 0000000000000000 [ 300.966017][T18182] R10: 0000000000000000 R11: 00000000a284beac R12: ffff8880259717b8 [ 300.969243][T18182] R13: ffff888025972590 R14: 0000000000000000 R15: ffff888029220e80 [ 300.971774][T18182] FS: 00007f4fba34e6c0(0000) GS:ffff8880d6a9c000(0000) knlGS:0000000000000000 [ 300.974704][T18182] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.977197][T18182] CR2: 000000110c2472bb CR3: 000000004ef76000 CR4: 0000000000352ef0 [ 300.980289][T18182] Call Trace: [ 300.981725][T18182] [ 300.982976][T18182] ieee80211_recalc_txpower+0xe4/0x110 [ 300.986107][T18182] ieee80211_set_tx_power+0x2b8/0x10d0 [ 300.987898][T18182] cfg80211_wext_siwtxpower+0x311/0x660 [ 300.989779][T18182] ? full_name_hash+0xbc/0x110 [ 300.991327][T18182] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 300.993282][T18182] ioctl_standard_call+0xb5/0x1d0 [ 300.995040][T18182] ? __pfx_ioctl_standard_call+0x10/0x10 [ 300.996960][T18182] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 300.999074][T18182] wireless_process_ioctl.constprop.0+0x291/0x3d0 [ 301.001668][T18182] wext_handle_ioctl+0x226/0x2a0 [ 301.003367][T18182] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 301.005156][T18182] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 301.006806][T18182] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 301.009017][T18182] sock_ioctl+0x3a1/0x6b0 [ 301.010427][T18182] ? __pfx_sock_ioctl+0x10/0x10 [ 301.012029][T18182] ? hook_file_ioctl_common+0x145/0x410 [ 301.013888][T18182] ? selinux_file_ioctl+0x180/0x270 [ 301.016170][T18182] ? selinux_file_ioctl+0xb4/0x270 [ 301.017922][T18182] ? __pfx_sock_ioctl+0x10/0x10 [ 301.019587][T18182] __x64_sys_ioctl+0x18e/0x210 [ 301.021150][T18182] do_syscall_64+0xcd/0xf80 [ 301.022650][T18182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.024603][T18182] RIP: 0033:0x7f4fb958f7c9 [ 301.026156][T18182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.033380][T18182] RSP: 002b:00007f4fba34e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.036214][T18182] RAX: ffffffffffffffda RBX: 00007f4fb97e5fa0 RCX: 00007f4fb958f7c9 [ 301.038798][T18182] RDX: 0000200000000280 RSI: 0000000000008b26 RDI: 0000000000000003 [ 301.041555][T18182] RBP: 00007f4fb9613f91 R08: 0000000000000000 R09: 0000000000000000 [ 301.044110][T18182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.047296][T18182] R13: 00007f4fb97e6038 R14: 00007f4fb97e5fa0 R15: 00007ffce5f61a68 [ 301.049870][T18182] [ 301.050874][T18182] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 301.053524][T18182] CPU: 1 UID: 0 PID: 18182 Comm: syz.1.3702 Not tainted syzkaller #0 PREEMPT(full) [ 301.056817][T18182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 301.060340][T18182] Call Trace: [ 301.061460][T18182] [ 301.062459][T18182] dump_stack_lvl+0x3d/0x1f0 [ 301.064066][T18182] vpanic+0x640/0x6f0 [ 301.065427][T18182] panic+0xca/0xd0 [ 301.066706][T18182] ? __pfx_panic+0x10/0x10 [ 301.068205][T18182] check_panic_on_warn+0xab/0xb0 [ 301.069924][T18182] __warn+0x108/0x3c0 [ 301.071319][T18182] __report_bug+0x2a0/0x520 [ 301.072909][T18182] ? __pfx___report_bug+0x10/0x10 [ 301.074673][T18182] report_bug_entry+0xb2/0x220 [ 301.076556][T18182] ? ieee80211_link_info_change_notify+0x1e9/0x3d0 [ 301.078982][T18182] handle_bug+0x18a/0x260 [ 301.080467][T18182] exc_invalid_op+0x17/0x50 [ 301.081970][T18182] asm_exc_invalid_op+0x1a/0x20 [ 301.083533][T18182] RIP: 0010:ieee80211_link_info_change_notify+0x1e9/0x3d0 [ 301.085962][T18182] Code: 6d e6 f2 f6 48 8b 74 24 08 48 81 c6 20 01 00 00 48 89 74 24 08 e8 57 e6 f2 f6 48 8d 3d 70 18 ca 05 8b 54 24 04 48 8b 74 24 08 <67> 48 0f b9 3a e8 3d e6 f2 f6 4c 89 e2 48 b8 00 00 00 00 00 fc ff [ 301.091932][T18182] RSP: 0018:ffffc90005c3fb20 EFLAGS: 00010287 [ 301.093887][T18182] RAX: 00000000000007e8 RBX: ffff888025970d80 RCX: ffffc9002e44b000 [ 301.096363][T18182] RDX: 0000000000000000 RSI: ffff888025970120 RDI: ffffffff90951250 [ 301.098850][T18182] RBP: 0000000000040000 R08: 0000000000000005 R09: 0000000000000000 [ 301.101372][T18182] R10: 0000000000000000 R11: 00000000a284beac R12: ffff8880259717b8 [ 301.103907][T18182] R13: ffff888025972590 R14: 0000000000000000 R15: ffff888029220e80 [ 301.106534][T18182] ieee80211_recalc_txpower+0xe4/0x110 [ 301.108558][T18182] ieee80211_set_tx_power+0x2b8/0x10d0 [ 301.110608][T18182] cfg80211_wext_siwtxpower+0x311/0x660 [ 301.112474][T18182] ? full_name_hash+0xbc/0x110 [ 301.114098][T18182] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 301.116042][T18182] ioctl_standard_call+0xb5/0x1d0 [ 301.117721][T18182] ? __pfx_ioctl_standard_call+0x10/0x10 [ 301.119593][T18182] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 301.121585][T18182] wireless_process_ioctl.constprop.0+0x291/0x3d0 [ 301.123706][T18182] wext_handle_ioctl+0x226/0x2a0 [ 301.125305][T18182] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 301.127103][T18182] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 301.128762][T18182] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 301.131240][T18182] sock_ioctl+0x3a1/0x6b0 [ 301.132704][T18182] ? __pfx_sock_ioctl+0x10/0x10 [ 301.134455][T18182] ? hook_file_ioctl_common+0x145/0x410 [ 301.136532][T18182] ? selinux_file_ioctl+0x180/0x270 [ 301.138248][T18182] ? selinux_file_ioctl+0xb4/0x270 [ 301.139934][T18182] ? __pfx_sock_ioctl+0x10/0x10 [ 301.141487][T18182] __x64_sys_ioctl+0x18e/0x210 [ 301.143211][T18182] do_syscall_64+0xcd/0xf80 [ 301.144908][T18182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.147346][T18182] RIP: 0033:0x7f4fb958f7c9 [ 301.149060][T18182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.155590][T18182] RSP: 002b:00007f4fba34e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.158772][T18182] RAX: ffffffffffffffda RBX: 00007f4fb97e5fa0 RCX: 00007f4fb958f7c9 [ 301.161537][T18182] RDX: 0000200000000280 RSI: 0000000000008b26 RDI: 0000000000000003 [ 301.164340][T18182] RBP: 00007f4fb9613f91 R08: 0000000000000000 R09: 0000000000000000 [ 301.166958][T18182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.169490][T18182] R13: 00007f4fb97e6038 R14: 00007f4fb97e5fa0 R15: 00007ffce5f61a68 [ 301.172091][T18182] [ 301.173758][T18182] Kernel Offset: disabled [ 301.175146][T18182] Rebooting in 86400 seconds..