last executing test programs: 3m19.669681856s ago: executing program 2 (id=262): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0x0, &(0x7f00000000c0), 0x800, 0x0) (async) openat$kvm(0x0, &(0x7f00000000c0), 0x800, 0x0) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xa}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xa}}, './file0\x00'}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) read$FUSE(r1, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0x100, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r6, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000100)='./file1\x00', r4, r6) (async) lchown(&(0x7f0000000100)='./file1\x00', r4, r6) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) (async) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r7, 0x8934, &(0x7f0000000040)=':') 3m19.611898762s ago: executing program 2 (id=266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x38, r1, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80, 0x76}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3a}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x20004000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async, rerun: 32) recvmsg$unix(r4, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) (async) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="43922974", @ANYRES16=r1, @ANYBLOB="090f26bd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) 3m19.488645012s ago: executing program 2 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0xc00, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRESDEC=r2], 0x3c}, 0x1, 0x0, 0x0, 0x892}, 0x20004055) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$rtc(0xfffffffffffffffc, 0x0, 0x0) 3m19.298867082s ago: executing program 2 (id=269): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0xf) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) stat(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_clone(0xc0080, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000380)={0x4, 0x6, 0x6, 0x1, 0x2, 0x6, 0x1, 0x6, 0x35}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m19.238812564s ago: executing program 2 (id=270): io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x1}]) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4, 0x2}, 0x20) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000066001f03"], 0x6c}], 0x1}, 0x0) 3m18.978631954s ago: executing program 2 (id=271): sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x6c, 0x3ed, 0x300, 0x70bd25, 0x25dfdbfe, "df27daec7cbf33c4352ba564eb3ffd44b87bb12b670cbf051c410410b9a7bbec46794fcc21384727d612a394c2a3891154020a1ae4e02141fe31fc0bdb73e79cc38593648325b454f166245f7763ff45c5d63646be846ea950ec", ["", ""]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x401) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x70bd2a, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffff}}, 0x1c}, 0x1, 0x0, 0x0, 0xb71b46126d0b821b}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x3) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0xd0}}, 0x0) 3m18.915168519s ago: executing program 32 (id=271): sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x6c, 0x3ed, 0x300, 0x70bd25, 0x25dfdbfe, "df27daec7cbf33c4352ba564eb3ffd44b87bb12b670cbf051c410410b9a7bbec46794fcc21384727d612a394c2a3891154020a1ae4e02141fe31fc0bdb73e79cc38593648325b454f166245f7763ff45c5d63646be846ea950ec", ["", ""]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x401) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x70bd2a, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffff}}, 0x1c}, 0x1, 0x0, 0x0, 0xb71b46126d0b821b}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x3) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0xd0}}, 0x0) 2m56.259676763s ago: executing program 3 (id=646): pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0x8}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x45) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="0a000000010001", 0x7) r3 = timerfd_create(0x9, 0x80000) splice(r0, 0x0, r3, 0x0, 0x4ffe7, 0x0) (async) splice(r0, 0x0, r3, 0x0, 0x4ffe7, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0xb6, 0x103000) socket(0x28, 0x5, 0x0) (async) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x7fff}}, './file0\x00'}) socket$inet6(0x10, 0x3, 0x0) (async) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000036000701040000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$pppl2tp(r9, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x2, 0x4, 0x3, 0x1}}, 0x26) (async) connect$pppl2tp(r9, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x2, 0x4, 0x3, 0x1}}, 0x26) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff3c, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r7, @ANYRES64=r6, @ANYRES64, @ANYRESDEC=r4, @ANYRESDEC=r8, @ANYRES32=0x0, @ANYRESOCT=r9, @ANYRESOCT=r7], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r10 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$notify(r11, 0x402, 0x9) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000100001042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c0010400060000000000000009000100626f6e640000000004000280"], 0x34}}, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x2002, 0x0, 0x0) (async) recvfrom$inet6(r6, 0x0, 0x0, 0x2002, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}, 0x8}}}, 0x84) 2m56.19976408s ago: executing program 3 (id=647): r0 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) read$fb(r0, &(0x7f0000000000)=""/4, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) creat(&(0x7f0000000300)='./file0\x00', 0xe5) (async) read$fb(r0, &(0x7f0000000000)=""/4, 0x4) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) (async) 2m56.155911829s ago: executing program 3 (id=649): syz_emit_ethernet(0x229, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x1f3, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, @mcast2, {[@hopopts={0x2c}, @hopopts={0x5e, 0xd, '\x00', [@hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0xd}, @calipso={0x7, 0x40, {0x1, 0xe, 0x1, 0x5, [0xf, 0x0, 0x7ff, 0xfffffffffffffc00, 0xc, 0x101, 0x100]}}, @hao={0xc9, 0x10, @remote}]}], @ndisc_ns={0x87, 0x0, 0x0, @private2, [{0xe, 0x7, "0ec9449343fd84bffd173abd4129ce0ebb80d047af7183590265026931114318fed1a7a9ba5ca1118f57a6203c4aed4dc7bf7a5cd1f8d1"}, {0x1, 0x16, "c448adc3c2f3787d9946e525727ecb078839305fae82720f09784018fd59ffc07ea1d422c241ede9d5dd90fba0624fd3ffd38d5b6a356f51bd2cd5cb85acbd57c0c337c165aeee609820faf0147d76afa9fb5c2015e3e602021a3c138607cc583d2aa164c9c94cfdf5474f907ebd1b58bb5469c8387ddfb168664f30942e0ae7d1121691add81e8b113acc7c553cbf08ac2ff51f24a13f957302dd0037c545bac9f560c1a3f13b1198572f6976530db841050fb0"}, {0x2, 0xe, "212891dd5e65ab1ab74ac82c14116d049cef138317e1e2e7613a319ea6f834789470848006415792502d683cb0a7ee85ab11ef3fd2814ed377aea4512c57384566b822d4721f9bcb897efd5a8e63290bb7c4cc6785f45e0f7d5b3851dc74b0a81ebaebf0231861b2b49be9c17a22"}]}}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/igmp6\x00') r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) preadv(r2, &(0x7f0000000900)=[{&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f00000008c0)}], 0x3, 0xffffffff, 0x9) write$6lowpan_control(r1, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000600), 0x121740, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x59, 0x0, 0x200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0xa}, 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f0000000100)) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000400)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002780)='\f', 0x1}], 0x1}, 0x4040040) read$FUSE(r3, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1f4, 0x37, 0x1, 0x70bd25, 0x25dfdbfe, {0x2}, [@generic="a306aeff2d835193e9f090a4e646049d2c82ada1da8fd43bc0e4f47a5053e4452dd451bc16d5ee65eabc7467d3fed571abff8e8bb3be3842f15f8bba6654e85add77bf3873a0ca1ea1997538e7d95a233c07c4d1908e6a273d2304e36232fd2a951d47a0cc94daf86fa536f4a9324de6706e356c3171eba609b54f54add45fa98eadd52bba785b2f983611b433928b3837b8d121e8bf01f3fe11afd494475dbade7c00386701c2e588c516d2960657fc981c1de7cf060f493b56bff9091d2523", @generic="b1573e1608d46b27a6d55462a77c908aff25f687abb550c37f1da260a6df1ac9a5b7e700b1735096e52cf5411753116c17e7d916baddc0ed5f9b879666a202d30b28774311baa966e47a8983112a6b3e2bdfdfebb7e31984beaece1717b3bd2f85c065a00e073d3a31395900133a4df8f3fbac49f142eaf43aad8dc8cbd16ca280c7c55790725ad6dec81f96ed698eebe68394173840c92b52964d8575db87d0f0e6a1fc6ec32c3688fa4314e48ccf4fe546c4c9528ddf2ab6fbeb89e0379dd772", @generic="70511aa58f272e2233213c52265712b0a1955059e627522d56c1b6b52caf4ce90dabc3dd175988a56c383ab55114dcb16b0342b106f5ae680ab13406de61f2b6c3338d9a61477093d4267f5d80b0e5c6bdc2e37e7de71f3e53b9221d790747"]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8180}, 0x840) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) 2m56.148396448s ago: executing program 3 (id=652): syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, {[@hopopts={0x2f, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @enc_lim, @ra={0x5, 0x2, 0x453}, @jumbo={0xc2, 0x4, 0xc}, @ra={0x5, 0x2, 0x80}]}]}}}}}, 0x0) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000000)=@srh={0x38, 0x8, 0x4, 0x4, 0x0, 0x40, 0x9, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, @ipv4={'\x00', '\xff\xff', @broadcast}]}, 0x48) 2m40.436855694s ago: executing program 3 (id=670): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x13a0094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x36, 0x0, @val=@netfilter={0x5, 0x0, 0xf03}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x80049363, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f000000a5c0)='./file0\x00', &(0x7f000000a600)) 2m40.363541709s ago: executing program 3 (id=673): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = userfaultfd(0x80001) (rerun: 32) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async, rerun: 32) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x40, 0x9}) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r2, 0xe4776000) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) (async, rerun: 32) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x24}, 0x1c) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x534e8e, 0x0, 0x0, 0x200000, 0x0, 0x334e8f, 0x200000a00000}) 2m25.340421389s ago: executing program 33 (id=673): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = userfaultfd(0x80001) (rerun: 32) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async, rerun: 32) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x40, 0x9}) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r2, 0xe4776000) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) (async, rerun: 32) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x24}, 0x1c) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x534e8e, 0x0, 0x0, 0x200000, 0x0, 0x334e8f, 0x200000a00000}) 4.286115884s ago: executing program 5 (id=3225): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_emit_ethernet(0x106, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r7, 0x24, 0x0, 0x83, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r7, 0xc040564b, &(0x7f00000002c0)={0x9, 0x0, 0x201b, 0x80000001, 0x2, {0x8, 0x2}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.358115876s ago: executing program 4 (id=3239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x8a01}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=0x0, @ANYBLOB="ff"], 0x20}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r6, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd_index=0x2, 0x4, 0x100000000000000, 0xf, 0x10, 0x1, {0x2, r7}}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES64=r1, @ANYRESDEC=r1], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x8804}, 0xc800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r5, @ANYBLOB="01bfa662d341856de836fcac341fa0e459309785d00d0cc4872851e66c7b0584f11681f076fc9928395013", @ANYRES8=r8, @ANYRES16=r2, @ANYRES16=r7, @ANYRES64=r3, @ANYBLOB="8eb807ecd3de28daab84d5bc50c6a41ecf98e5c3ae09b773b4ac00003fef9cf24267b3366573c345f2109a4ba30116503dac3fe60f3220c4a6b848dd397c2d1df50d41a31ba867b7de7d8a72aafa140cc15e96b9e924f0ba62fc4e31a8ed98424c1e63a20478d393369913d9426e07ac0c20ab8af7a4c25d5669ed98e27404bcb3da951f65be8d7a535a016a8cc1ef3303357ee140", @ANYRESDEC=r7], 0xa0}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r10, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xa, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r10, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xead, 0x3a}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xb}, @NL80211_ATTR_BSS_BASIC_RATES={0x22, 0x24, [{0xb}, {0x4}, {0x2}, {0x48, 0x1}, {0x24}, {0x48, 0x1}, {0x1, 0x1}, {0xc, 0x1}, {}, {0x12, 0x1}, {0x0, 0x1}, {0x4}, {0x36, 0x1}, {0xd}, {0x16, 0x1}, {0x12, 0x1}, {0xb, 0x1}, {0x48}, {0x1, 0x1}, {}, {0x12, 0x1}, {0x18, 0x1}, {0x3, 0x1}, {0x24}, {0x60}, {0x24}, {0x60}, {0x3, 0x1}, {0x6}, {0x48}]}]}, 0x4c}}, 0x80) 3.357123764s ago: executing program 5 (id=3240): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x10600) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000040)={0x9, 0x0, 0x1006, 0x3000, 0x5, {0x10000, 0x9}}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0xc0085666, &(0x7f0000000080)={0x2, 0x4}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0x4, 0x8}}) syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x10600) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000040)={0x9, 0x0, 0x1006, 0x3000, 0x5, {0x10000, 0x9}}) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0xc0085666, &(0x7f0000000080)={0x2, 0x4}) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0x4, 0x8}}) (async) 3.288017155s ago: executing program 5 (id=3241): mount(0x0, 0x0, 0x0, 0x2818405, &(0x7f0000001980)='dax\x00\x00lwayc') (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 32) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fdffffff182a0000", @ANYRES32, @ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000001185b0000010000000000000000000000186900000b0000000000000000000000000000000000000000184400000300"/125, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, r0}, 0x94) (async, rerun: 32) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f00000005c0)="0000ebe8", 0x4, 0x14000b01, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x80}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfd12}}, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x12003, 0x0) (async, rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) (async) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async, rerun: 64) r6 = accept4(r5, 0x0, 0x0, 0x800) (rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x20}, 0x50) (async) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.286923676s ago: executing program 5 (id=3243): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept4(r0, 0x0, 0x0, 0x800) open_by_handle_at(r0, &(0x7f0000000100)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0xe, 0x47, 0x3, 0x9, 0x2, 0x8000000000000000}}, 0x101000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2f) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000), 0x8) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, 0x24) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x18) r7 = socket$inet(0x2, 0xa, 0x0) setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r5, 0x8010aebc, &(0x7f0000000440)={0x8080000, 0x205000}) 3.219853132s ago: executing program 0 (id=3244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f00000004c0)={{&(0x7f0000820000/0x2000)=nil, 0x2000}}) listen(r3, 0x0) r5 = socket(0x1e, 0x805, 0x0) r6 = syz_clone(0x1000000, &(0x7f0000001f80), 0x0, 0x0, 0x0, 0x0) process_vm_readv(r6, &(0x7f0000002280)=[{&(0x7f0000002180)=""/62, 0x3e}], 0x1, &(0x7f0000002780)=[{&(0x7f00000022c0)=""/223, 0xdf}], 0x1, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r3, 0x0, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000400000008000400e000000114000600626fdd96ee706e64300000000000000000000000080005000000000067833989dadb08df30469cd739ea5da63a193e03cf3bec9eb4b25e1cebce38bf28019ee2560f19d3358bfa570b6b37c8b15cefd1df31ebbf444298d38f58dec8a29bd851a6b8cd81e0b3bd5cea39ea94a929a7d2a2fef2ac5416da63c16a5afc178e8eae81a250dad93df7a60c70df137435ec1b7ae4f8ab2608d84c8d487fd7de6fea67f9122afee9370244b456f3dfae89ccb39349d7"], 0x38}}, 0x0) r8 = accept4(r1, 0x0, 0x0, 0x0) bind$can_j1939(r8, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x100, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010101, 0x800, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x33}, {@in=@remote, 0x0, 0x32}, @in6=@mcast2, {0x3, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x0, 0x0, 0x0, 0x96}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x20008084) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r10, 0x4018aebd, &(0x7f0000000100)={0x4}) 3.21895423s ago: executing program 4 (id=3245): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0xa, 0xfffc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10010, 0xf, 0x0, 0x3}}]}}]}, 0x44}}, 0x4000010) fstat(r3, &(0x7f0000000500)) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="420000000300000000000000000000000000000000000000217f"], 0x42) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000000000000000000dc1100000000000b000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) read$FUSE(r1, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), 0x122200, &(0x7f0000000600)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r8, @ANYBLOB="3c406fcb826e7ba1e4f51a5e5efeb954c4a78960ad2efa24701882bc18a360b7c3eb73a944aa0ca7f64cfb9ae7826493330df75b6949e593d3b286b8bf7fab77808a0607ba9a25434af5eec3e2c07f10fbb3ec244fb1d3359a6d284fc666321b099199f5f05a1ac636f20327292ccf01d97ea9dec477ca2c639ce63d090000007880b6cb082b0195867bdd0e1a9b2cf41d8734abb21383d0632b733e961560a8ab3cb0cec0082868a9517884bc867e"]) 3.129901001s ago: executing program 4 (id=3246): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000180)={[{}, {@subsystem='blkio'}]}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b000100697036746e6c00043400028005000600"], 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x4b45, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x0, 0x8, 0xf7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x5c}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x6050}, 0x0) 2.881967749s ago: executing program 1 (id=3248): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7fffffff, 0x200d01) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000000)=0x1) 2.88151829s ago: executing program 4 (id=3249): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000002440)={'syz1\x00', {}, 0x31, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0xff, 0xffffff48, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xae47, 0x2, 0x1, 0x8}, 0x26, [0x8, 0x3ff, 0x9, 0x6, 0xbadc, 0x2, 0x80000001, 0x7, 0x1, 0x8, 0x4, 0xffff, 0x5, 0x7ff, 0x53, 0xf4f7, 0x77, 0x9, 0xfffffff9, 0x636a, 0xffff, 0x8, 0x255b, 0x81, 0x8, 0x7, 0xffffffff, 0x2, 0xfffffffd, 0x7, 0x5, 0x3, 0xfffffff7, 0x62dbf2cf, 0x9, 0x7, 0x4, 0xe72, 0x3acf, 0xa49, 0x0, 0xfff, 0x8, 0x8000003, 0x0, 0x7, 0x40, 0x6, 0x5, 0xfffffffd, 0x8, 0x8, 0x7f5, 0x400, 0xfffffff3, 0xf, 0x3, 0x1, 0x81, 0xb1a, 0x7, 0x3, 0x8001, 0x265b21d6], [0x7, 0x5, 0x7, 0x9, 0x8, 0xc, 0x7, 0x2, 0x0, 0x9371, 0x3ff, 0x9, 0x8, 0x5, 0x8, 0x1, 0x5, 0x6, 0x5, 0x5, 0x365, 0x3, 0x7, 0xff, 0x0, 0x42, 0x7, 0x0, 0x0, 0x101, 0xfffffff7, 0x2, 0x81, 0x3, 0x2, 0xf7, 0x80000000, 0x5, 0xaa3, 0x40, 0x8, 0x7, 0x80000001, 0x2, 0xf84e, 0xfffffffe, 0x1107, 0x5, 0x3, 0x5, 0x9, 0x501b, 0x4, 0x8, 0x0, 0x8, 0x5, 0x10000, 0x7, 0x8, 0x2, 0x800000, 0x1, 0xa840], [0xd, 0x1e9, 0x7, 0x8, 0xfff, 0xf, 0x7, 0x9, 0x62, 0x8, 0x6, 0x400000d3, 0x598b, 0x1, 0x3, 0x56d3, 0x9, 0x5, 0x2, 0x1, 0x3, 0x2, 0x8, 0x7, 0x40, 0x9, 0x200, 0xff, 0x7, 0x8001, 0xc, 0x3, 0x5, 0x4, 0x6, 0x0, 0xd3, 0x955b, 0x8001, 0x5, 0x1, 0x800, 0xc1e59a3d, 0x9, 0x1, 0xa76, 0x1, 0xfffffffd, 0x80, 0x3, 0x45, 0x2, 0x59, 0x5, 0xd91, 0x1, 0x8, 0xef, 0x7, 0x1c, 0xfffffff9, 0x3, 0x5], [0xc25, 0x40, 0x0, 0x2, 0xeb2d, 0x0, 0x9, 0x0, 0x4, 0x9, 0x558c, 0x4, 0x4, 0xffffffff, 0x0, 0x1, 0xb94, 0x3, 0x800, 0x8, 0x9, 0x7, 0x1, 0x3, 0x9, 0x910, 0x2, 0x9, 0x0, 0xfffffffa, 0x101, 0x3000, 0x35, 0x5, 0x1000, 0x9, 0x2, 0x6, 0x9, 0x6f5a506b, 0x8, 0x1, 0x5, 0x9, 0x41cc, 0x800, 0x101, 0xfff, 0x5, 0x0, 0x5, 0x34, 0x9, 0x8, 0x4, 0x7f, 0x3, 0xe29, 0x1, 0x4, 0x6, 0x0, 0xe, 0x1400000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x1, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x3, 0x3, 0x101, 0x70, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0xa, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff36, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x2, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf19], [0x81, 0x4, 0x6, 0x9, 0x7, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0x3ff, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x21, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0xf, 0x2, 0x80003e, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x5, 0x0, 0x9, 0x2, 0x7, 0x6, 0x8, 0x0, 0xffffffff, 0x100ff, 0xfffffffc, 0xfd, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x3, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0x4, 0x0, 0x64, 0x7ffffffe, 0x5, 0xa48, 0x5, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0x0, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x1, 0x8], [0x1ff, 0x2, 0x4, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x3, 0x9, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x2, 0x6, 0x1, 0xa, 0x6, 0x0, 0x6, 0x6, 0x80000001, 0x1, 0x9, 0x34, 0x6, 0xfffffffe, 0x6, 0xae, 0x1, 0x9]}, 0x45c) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) close(r1) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000980)) 2.881095227s ago: executing program 1 (id=3250): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="f78d9ca38fff26f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed", 0x39}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da9884560b0033079725f33a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c4430400", 0x65}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e23, 0xe, @mcast1, 0x5}, {0xa, 0x4e22, 0x80, @mcast1, 0xffff60fa}, 0x1, {[0x7, 0xf, 0x3, 0x7, 0x6, 0x2, 0x80000000, 0x76]}}, 0x5c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = socket(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000300)={0x2d, 0x1, 0x4001}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044004}, 0x4000000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c0016000e"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.879468249s ago: executing program 1 (id=3251): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @local}}, 0x0, 0x4}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}], 0x1, 0x8040) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000c40)={'syz1\x00', {0x96ae, 0x0, 0x0, 0xf5d3}, 0x45, [0x5, 0x9, 0xa, 0x6, 0x2, 0x9, 0x400, 0x80000000, 0xffff28a7, 0x5, 0x89, 0xfffffff7, 0x40, 0xb, 0xc9f, 0x8e, 0x401, 0x4, 0xfffffffe, 0x9, 0xdc62, 0x3, 0x4, 0x5a5, 0x3, 0x800, 0xffff0000, 0x9, 0xfffffff9, 0x4, 0x9, 0x4, 0x800, 0x1, 0x3da98467, 0xfffffffe, 0x4, 0xfffffffd, 0x3, 0x7ace3c9e, 0x5, 0x72, 0x0, 0x7a, 0x3, 0x4, 0x7f, 0x0, 0xb, 0x80000001, 0x1, 0x73d, 0x4, 0x6, 0x3, 0x200, 0xb629, 0x4, 0x9, 0x3, 0xffff, 0x5, 0x3, 0x7], [0x8, 0x7ff, 0x0, 0x1, 0x7, 0xfffffffd, 0x9, 0x8001, 0x8, 0x1, 0xff, 0x52ed, 0x6, 0xffffffff, 0x9, 0x2e5c, 0xc, 0x7, 0x3, 0x15e5, 0xfffffffe, 0x7, 0xfffffffc, 0x37a800, 0x0, 0x0, 0xc2, 0x1, 0x39, 0x6, 0x3, 0x4, 0xffffff7d, 0x3, 0x3, 0xd90, 0x0, 0x9, 0x4909, 0x8, 0xff, 0x759da7d8, 0x0, 0x4, 0x46c2, 0x14, 0xfffffffd, 0x4, 0xfffffffb, 0x356, 0x5, 0x400, 0x7fffffff, 0x1, 0x4, 0x40, 0x20bc, 0x1, 0xfffffffe, 0x5, 0xb4, 0x8, 0x8, 0x5], [0x1, 0x5, 0x1ff, 0x7, 0x7, 0xb08, 0x1, 0x6, 0x5, 0x2, 0x5, 0x5, 0x5, 0xa09, 0xfffffff8, 0x8, 0x400, 0x10, 0xa62b, 0x399, 0x0, 0x7, 0x7ff, 0x8, 0x5, 0x5, 0x3, 0x6, 0x8, 0x6, 0x0, 0x923, 0x6, 0x101, 0x6, 0x80, 0x0, 0x7, 0x6, 0x6, 0x80000001, 0x4, 0x5, 0x6, 0x2, 0x2, 0x1, 0xad3, 0xfffffffc, 0x8, 0xc1, 0x9, 0x4, 0x1, 0x7, 0xfffffffa, 0x7, 0x8, 0x9, 0x1, 0xe081, 0x9, 0x1ff, 0x3], [0xcd, 0x6, 0x5f, 0x7, 0xff, 0x3, 0x1, 0xb927, 0x5d, 0x6, 0xfffffffa, 0xfffffffd, 0x6, 0x1, 0x1, 0x0, 0x7, 0x6, 0xd7, 0x7, 0x2, 0x81, 0x3, 0x3, 0x8, 0xfffff801, 0x2, 0x647, 0x3390, 0xe6b1, 0x7, 0xfb, 0x0, 0x7, 0x354, 0x7, 0xfffffffa, 0x446d, 0x0, 0x6, 0xfffffff2, 0x1, 0x800, 0x9, 0x4, 0x7, 0xcf4, 0x9eca, 0x1, 0x3, 0x5, 0x8, 0xc28d, 0x8000, 0x9, 0x2, 0x7, 0x5e, 0xa04, 0x101, 0x0, 0x400, 0x7ff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r5 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x2cbe5243, 0x400001) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r5, 0x800455d1, &(0x7f0000000240)) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e23, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2, 0x40000}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2d, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e21, 0x3, @empty, 0x2800}}, 0xf, 0x4, 0x20000, 0x2, 0xe, 0x0, 0x5}, 0x9c) 2.861849972s ago: executing program 1 (id=3252): pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes128, 0x3, @desc1}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x12, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a8d"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000200)={0x5, 0x3d, "f79aa98321b66f61b85ac06bb0311d2380e7c8d79dd6e7e8c37b2b711b0f87022f0f64ad981641eec6b632a347a15df6ff573c74c2907cb5be92f9270f"}) socket$inet6_udp(0xa, 0x2, 0x0) epoll_create1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000000440), &(0x7f0000000480)=0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x88102, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x40f0f022}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x10, 0x7, 0x3ff}, 0x3, 0x10, &(0x7f0000000280)={{0x3, 0x2, 0x7, 0x6}}, 0x10000, &(0x7f0000000300)="bff1cbaa0aa624ba0dd839baede5cdb3789886dedd9785e478dd68", 0x2}}) 2.719808968s ago: executing program 1 (id=3253): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) socketpair$unix(0x1, 0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04000000000000000000"], 0xe) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) openat$cgroup_ro(r2, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffffffffffff8ab9, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f018, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x14}}, 0x0) close(0x3) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/215, &(0x7f0000000100)=0xd7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc4fffffe) 1.819712109s ago: executing program 1 (id=3254): r0 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x0, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000600)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r5, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x19, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000380)={0x0, &(0x7f00000000c0)=[&(0x7f0000000140)="134c0c4e1a341fe6f3dce3972bca18f05f43cdf8695c8bd9504bdc975b2c05995a51378611c133fa749cdf84055e35223c6bb079197ea2fc13c9aa16662528c8d5d6961612fff95140a94017753989a5c85bda9759f66bc42da609babc4bb9af698d582afdc187e65dcd7a4e08e6d5794cc5964c062fee888b4435c3ae622308df498ee5e223e031a888fcec73ec15eac55e4a80c28f69b363a0a9fd126f0dbc", &(0x7f0000000200)="abce2a597252c9a8993cae640d335c52706b3efb493cbea00c8574628f67897a83af3d4dde4cddc173ba1e63f2e0ecbcb8fdf0058b7d63fb52f911884df6809654ac9775", &(0x7f0000000280)="2808646c6c60febd587e3b930d89e500cbdf17fd81ae4c0c46b944737c5af947034f289fb8f2d21b57a985e33fe53020e9aae60a1a8f7a1842e4eef1cff4f66af4beb8d228b1c282a7d474bd1f0f57d1c87514c4653c43db03062d61799c867b847f4a3b3ccac53dc61d4b7d9f4d1633aff215c2862ff4d12c59dc716b9ca9ed90b829c44ba56ef693e96f9027f1094843ebbe61bdba3c096afbe6cc6829c04405422dcb43fa70661999d4822c42c538550bef189fe315090dcef41c8cc02ce31251bb6ac2e5b7"], 0xa}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000003c0)=0x2) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400100, 0x0) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000080)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400a0000000000000000000000020000000", @ANYRES16=r9, @ANYBLOB="31042abd700000dc9f251600000018000180140002006e657464657673696d300000000000000500040001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, 0x79, 0x1}, &(0x7f00000004c0)=0x90) 189.548732ms ago: executing program 4 (id=3255): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c045}, 0x4008000) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') r1 = signalfd(r0, &(0x7f00000000c0)={[0x80000000]}, 0x8) ioctl$CDROMPLAYBLK(r1, 0x5317, &(0x7f0000000140)={0x2, 0x1}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='[:]:/', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000040)={{0x0, 0x0, 0x8001, 0x7, 0x80, 0x7, 0xfffffffffffffffc, 0xffffff5f, 0x1, 0x5, 0x8, 0xfffffffffffffffc, 0xc21a, 0x2913, 0x1}, 0x8, [0x0]}) 187.840005ms ago: executing program 0 (id=3256): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000000b80)={0x48}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./file0\x00', &(0x7f0000000280)=[0x5], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 186.840492ms ago: executing program 4 (id=3257): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x1, 0x2d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv4_getaddr={0x20, 0x16, 0x300, 0x70bd2d, 0x25dfdbfc, {0x2, 0x1f, 0x2, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0x3c0}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@dellink={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x18130, 0x412}, [@IFLA_VF_PORTS={0x4}]}, 0x24}}, 0x4) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) r4 = timerfd_create(0x7, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1, 0x1a54c1) mmap$usbmon(&(0x7f0000fef000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x6a1e) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001300010000000000fcffffff07000000", @ANYRES32=r8, @ANYBLOB="000000050000000014001a80100005800c000280080001"], 0x34}}, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x1) timerfd_settime(r4, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x3938700}}, 0x0) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 128.79889ms ago: executing program 5 (id=3258): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r1, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r12 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000005c0), 0x80001, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r12, 0xc02064a5, &(0x7f00000006c0)={r2, 0x2, &(0x7f0000000600)=[0x7, 0x1943], &(0x7f0000000640)=[0x3ff, 0xf9c4, 0x2, 0x9, 0x5, 0x6000], &(0x7f0000000680)=[0x5]}) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r11}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x1, '\x00', 0x0, r10, 0x3, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2f, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd52}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe36a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1ff, 0x12, &(0x7f0000000100)=""/18, 0x41000, 0x6, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x3, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r11, r10, r10, r10, r10, r14, r0, r10], 0x0, 0x10, 0x10}, 0x94) ioctl$DRM_IOCTL_DROP_MASTER(r10, 0x641f) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x4}) close(r0) r15 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001680), 0x80, 0x0) ioctl$CDROMRESUME(r15, 0x5302) 120.558926ms ago: executing program 0 (id=3259): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9300c000800"], 0x11) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000042a39f66f474c5124e4b2c716d6791d700000000000000000000006119a0000200000095060000000000003b0a647c8d3b5a42dc2e56fc6046aa4ae0e2466ec74bf9613edbfefb0841c28e8bdfd9ccdf6ebb9a1575a51053b8613db8df2387fcca6567f6c5143ebe95fda657826eebfdebffc041fb9fa555cca7ba2e36cb08788744350dbb9831da25e99b3f9ea64a46440d1da91fb0909919bb65cc6a1d02a0b05e34a717e96a37f60f19ea9fd971c8846288906f2187aeff2d1858e0aafa94fb411274a314f7b99d2709572084489116881ea233667436400fae65c7151693436c1ec15a1e47ca48fb162f5320027cfe8e76fe29d3d854bdcaa7a75125f57b44cff2c000c19942be65f50b658a8cb8"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x100, 0x739, &(0x7f0000000300)="ff", 0x0, 0x149c, 0x503, 0xfffffffffffffd01, 0xff1d, 0x0, 0x0, 0x2, 0xffff80fe, 0x3fffffff}, 0xffffffffffffff4a) ppoll(&(0x7f0000000080)=[{r3, 0x2000}, {r2, 0x1242}], 0x2, &(0x7f0000000100), &(0x7f0000000140)={[0x6]}, 0x8) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x48801) ioctl$LOOP_GET_STATUS(r4, 0x4c00, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80080002000400000008001b"], 0x34}}, 0x4040004) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_GET_DEVICE_ATTR_vm(r5, 0x4018aee2, &(0x7f0000000380)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000340)={0x3}}) 70.239055ms ago: executing program 0 (id=3260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) r2 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB="c562757a6938308bea35e39a841acd90da6b20a79895846f1cdb0b", @ANYRES32=r2, @ANYRES64=r2], 0x40}}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) 68.995614ms ago: executing program 0 (id=3261): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) r0 = io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setrlimit(0x2, &(0x7f0000000040)={0x4, 0x23ffffd}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r1, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="364c000004"], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 66.64775ms ago: executing program 5 (id=3262): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$802154_raw(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)='He,!', 0x4}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000000)='./file0\x00', 0x0) (async) lstat(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0x4, 0x6}, 0x6) splice(r4, 0x0, r5, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e19008dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b890c7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43c554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4c9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce64e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a0d000000e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9ef7d5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5e666c438f5d0f40f911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfd00d9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6eafaf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f00064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b2e4e552cc9e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a456281d18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4ed8830d00008998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd59fde0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb890d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab53391af2fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ecace84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a70bed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815d928bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4260093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a3cfafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8a3f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0xfffffffd, 0x0, {0x5, 0x10001, 0x5, 0x80000001, 0x1, 0xfffffffffffffffd, 0x81, 0x80, 0xb87b, 0x8000, 0x9e7, 0x0, 0x0, 0x3d, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0xfffffffd, 0x0, {0x5, 0x10001, 0x5, 0x80000001, 0x1, 0xfffffffffffffffd, 0x81, 0x80, 0xb87b, 0x8000, 0x9e7, 0x0, 0x0, 0x3d, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) (async) r7 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xfffffffffffffffb) read$snddsp(r7, &(0x7f0000000280)=""/147, 0x93) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f0000000000)={0x6, 'rose0\x00', {0x9}, 0x52d}) 0s ago: executing program 0 (id=3263): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00013abd7000ca91a004ffdbdf25250000000a0001007770616e310000000c0005000203aaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x24000052}, 0x8000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$fuse(0x0, 0x0, 0x0, 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB="66033d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'ip6gre0\x00'}, 0x18) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0285628, &(0x7f0000000240)={0x1, @win={{}, 0x1, 0x0, 0x0, 0x0, 0x0}}) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000140)={0x100000001, {{0xa, 0x40, 0xfffffffd, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000001050400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c000280050001"], 0x58}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x0, 0x23, 0x7, 0x7ff}, {0x4d, 0x1, 0x5, 0x8}, {0x7, 0x42, 0x9, 0x2}, {0x0, 0xb, 0x40, 0x7fff}]}) r11 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r11, 0x0, 0x48f, &(0x7f0000000000)={0x5e, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 'fo\x00', 0x0, 0xfff, 0x75}, 0x2c) close(r0) ioctl$SIOCRSSL2CALL(r10, 0x89e2, &(0x7f0000000380)=@bcast) kernel console output (not intermixed with test programs): cket pid=13205 comm=syz.1.2125 [ 201.167104][T13193] hsr_slave_0: entered promiscuous mode [ 201.172822][T13193] hsr_slave_1: entered promiscuous mode [ 201.175895][T13193] debugfs: 'hsr0' already exists in 'hsr' [ 201.178271][T13193] Cannot create hsr debugfs directory [ 201.232732][ T839] usb 10-1: USB disconnect, device number 4 [ 201.285954][T13193] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.289640][T13193] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.367822][T13193] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.371885][T13193] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.448711][T13193] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.452870][T13193] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.537747][T13193] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.541546][T13193] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.680104][T13193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.686208][T13193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.692180][T13193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.698162][T13193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.746098][T13193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.755701][T13193] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.780037][ T7455] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.783036][ T7455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.805298][T13214] Can't find ip_set type hashvnet [ 201.820176][ T7550] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.823435][ T7550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.967480][T13193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.981742][ T5934] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 201.987282][T13228] __nla_validate_parse: 4 callbacks suppressed [ 201.987293][T13228] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2129'. [ 201.997372][T13193] veth0_vlan: entered promiscuous mode [ 202.002890][T13193] veth1_vlan: entered promiscuous mode [ 202.017073][T13193] veth0_macvtap: entered promiscuous mode [ 202.021332][T13193] veth1_macvtap: entered promiscuous mode [ 202.030107][T13193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.037566][T13193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.040984][ T6002] usb 10-1: Service connection timeout for: 256 [ 202.043007][ T6002] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 202.045308][ T7555] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.045940][ T6002] ath9k_htc: Failed to initialize the device [ 202.048931][ T7555] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.052861][ T839] usb 10-1: ath9k_htc: USB layer deinitialized [ 202.058906][ T7555] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.064799][ T7555] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.108315][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.112411][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.135662][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.139004][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.159108][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2131'. [ 202.170542][ T6018] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 202.175275][T13236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.178048][T13236] IPv6: NLM_F_CREATE should be set when creating new route [ 202.321984][ T6018] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 202.325398][ T6018] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 202.328821][ T6018] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.332979][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.337533][T13225] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 202.339884][T13225] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 202.344356][ T6018] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.404592][T13259] netlink: 'syz.4.2138': attribute type 10 has an invalid length. [ 202.407166][T13259] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2138'. [ 202.532734][T13260] smc: net device bond0 applied user defined pnetid SYZ2 [ 202.546882][ T839] usb 6-1: USB disconnect, device number 19 [ 202.547730][T13225] random: crng reseeded on system resumption [ 202.560708][T13264] Bluetooth: MGMT ver 1.23 [ 202.597139][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 202.597150][ T40] audit: type=1326 audit(1763991679.510:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.2140" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4f598f749 code=0x0 [ 202.630546][T13271] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2141'. [ 202.674260][T13274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13274 comm=syz.4.2142 [ 202.718444][T13276] overlay: Unknown parameter '/' [ 202.761240][ T5934] Bluetooth: hci0: command tx timeout [ 202.789257][ T40] audit: type=1400 audit(1763991679.700:723): avc: denied { bind } for pid=13279 comm="syz.4.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 202.800441][ T40] audit: type=1400 audit(1763991679.700:724): avc: denied { listen } for pid=13279 comm="syz.4.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.268150][T13291] loop6: detected capacity change from 0 to 7 [ 203.273547][T13291] Dev loop6: unable to read RDB block 7 [ 203.275976][T13291] loop6: unable to read partition table [ 203.278638][T13291] loop6: partition table beyond EOD, truncated [ 203.281016][T13291] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 203.427243][T13299] overlayfs: missing 'workdir' [ 203.449673][ T40] audit: type=1400 audit(1763991680.360:725): avc: denied { write } for pid=13302 comm="syz.0.2155" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 203.764845][T13322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.767970][T13322] bond0: (slave bond1): Enslaving as an active interface with an up link [ 203.824681][T13328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2159'. [ 203.871426][T13326] sctp: [Deprecated]: syz.0.2162 (pid 13326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.871426][T13326] Use struct sctp_sack_info instead [ 203.911729][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'. [ 204.024876][ T40] audit: type=1400 audit(1763991680.930:726): avc: denied { write } for pid=13344 comm="syz.0.2167" name="/" dev="9p" ino=71827769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.033674][ T40] audit: type=1400 audit(1763991680.940:727): avc: denied { unmount } for pid=12911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 204.052571][T13348] "syz.1.2169" (13348) uses obsolete ecb(arc4) skcipher [ 204.164655][T13352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2169'. [ 204.168539][T13352] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13352 comm=syz.1.2169 [ 204.255933][T13357] SELinux: failed to load policy [ 204.542542][T13373] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 204.579354][ T40] audit: type=1400 audit(1763991681.490:728): avc: denied { accept } for pid=13377 comm="syz.4.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.581617][T13378] netlink: 'syz.4.2175': attribute type 2 has an invalid length. [ 204.588058][T13378] net_ratelimit: 10 callbacks suppressed [ 204.588070][T13378] A link change request failed with some changes committed already. Interface vet0_virt_wif may have been left with an inconsistent configuration, please check. [ 204.660435][T13381] overlayfs: failed to resolve './file0': -2 [ 204.664274][T13381] overlayfs: failed to resolve './file0': -2 [ 204.668153][T13381] overlayfs: failed to resolve './file0': -2 [ 204.672845][T13381] overlayfs: failed to resolve './file0': -2 [ 204.675072][T13381] overlayfs: failed to resolve './file0': -2 [ 204.677554][T13381] overlayfs: failed to resolve './file0': -2 [ 204.679661][T13381] overlayfs: failed to resolve './file0': -2 [ 204.811256][T13391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13391 comm=syz.0.2180 [ 204.826077][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2180'. [ 204.830557][T13393] fuse: Bad value for 'user_id' [ 204.832663][T13393] fuse: Bad value for 'user_id' [ 204.850528][ T5934] Bluetooth: hci0: command tx timeout [ 204.888662][T13398] program syz.5.2179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.999406][ T40] audit: type=1400 audit(1763991681.910:729): avc: denied { getopt } for pid=13414 comm="syz.4.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 205.016830][ T40] audit: type=1400 audit(1763991681.930:730): avc: denied { mounton } for pid=13418 comm="syz.5.2190" path="/298/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 205.030016][T13424] gfs2: error -5 reading superblock [ 205.041099][T13424] gfs2: error -5 reading superblock [ 205.061186][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2192'. [ 205.071719][T13429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.074553][T13429] IPv6: NLM_F_CREATE should be set when creating new route [ 205.112008][ T40] audit: type=1400 audit(1763991682.030:731): avc: denied { watch_mount } for pid=13437 comm="syz.4.2194" path="/475" dev="tmpfs" ino=2494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 205.238788][T13457] fuse: Bad value for 'fd' [ 205.362275][T13462] netlink: 'syz.1.2202': attribute type 7 has an invalid length. [ 205.613341][T13475] netlink: 'syz.4.2203': attribute type 1 has an invalid length. [ 205.618296][T13475] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 205.661361][T13489] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 205.725653][T13501] @0: renamed from bond_slave_1 [ 205.797789][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2211'. [ 205.842344][T13513] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 205.863228][T13513] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.868514][T13514] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.874149][T13516] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.879094][T13514] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.884643][T13513] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.934452][T13521] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 205.938746][T13521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.095468][T13530] exFAT-fs (nbd1): unable to read boot sector [ 206.097446][T13530] exFAT-fs (nbd1): failed to read boot sector [ 206.099383][T13530] exFAT-fs (nbd1): failed to recognize exfat type [ 206.325744][T13549] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 206.329111][T13550] overlayfs: failed to get inode (-116) [ 206.338263][T13550] overlayfs: failed to get inode (-116) [ 206.343267][T13549] overlayfs: failed to get inode (-116) [ 206.346468][T13549] overlayfs: failed to get inode (-116) [ 206.786066][T13588] ip6t_REJECT: ECHOREPLY is not supported [ 206.920641][ T5934] Bluetooth: hci0: command tx timeout [ 206.930617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 207.003414][T13601] syzkaller1: entered promiscuous mode [ 207.005878][T13601] syzkaller1: entered allmulticast mode [ 207.013012][T13601] tmpfs: Unknown parameter 'usrquotaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 207.063784][T13604] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.067157][T13604] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.122729][T13609] openvswitch: netlink: Duplicate or invalid key (type 0). [ 207.125815][T13609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.141568][T13609] netlink: 'syz.0.2242': attribute type 1 has an invalid length. [ 207.145215][T13609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.382647][T13638] random: crng reseeded on system resumption [ 207.480740][T13645] __nla_validate_parse: 4 callbacks suppressed [ 207.480751][T13645] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2251'. [ 207.523127][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2251'. [ 207.570012][T13645] kvm: kvm [13644]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 207.574611][T13645] kvm: kvm [13644]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 207.911230][T10363] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 207.930625][T13658] overlayfs: failed to resolve './bus': -2 [ 208.072467][T10363] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.076543][T10363] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 208.080404][T10363] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 208.084676][T10363] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 208.088460][T10363] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.095195][T13652] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.099346][T10363] hub 9-1:1.0: bad descriptor, ignoring hub [ 208.101864][T10363] hub 9-1:1.0: probe with driver hub failed with error -5 [ 208.105020][T10363] cdc_wdm 9-1:1.0: skipping garbage [ 208.107062][T10363] cdc_wdm 9-1:1.0: skipping garbage [ 208.111997][T10363] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 208.114407][T10363] cdc_wdm 9-1:1.0: Unknown control protocol [ 208.211383][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 208.211394][ T40] audit: type=1400 audit(1763991685.130:772): avc: denied { setopt } for pid=13666 comm="syz.1.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 208.410614][T10363] usb 9-1: USB disconnect, device number 11 [ 208.427125][T13675] pimreg: entered allmulticast mode [ 208.431521][T13675] pimreg: left allmulticast mode [ 208.527112][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'. [ 208.565250][T13682] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2263'. [ 208.618542][T13691] netlink: 'syz.1.2266': attribute type 1 has an invalid length. [ 208.621401][T13691] netlink: 'syz.1.2266': attribute type 1 has an invalid length. [ 208.623998][T13691] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.2266'. [ 208.637544][T13691] afs: Unknown parameter 'eyn' [ 208.667295][T13694] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2268'. [ 208.674784][T13696] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2268'. [ 208.866821][ T40] audit: type=1400 audit(1764515973.781:773): avc: denied { allowed } for pid=13717 comm="syz.4.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 208.874273][T13718] vcan1: entered allmulticast mode [ 209.010524][ T5934] Bluetooth: hci0: command tx timeout [ 209.281274][T13736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=13736 comm=syz.1.2281 [ 209.288586][T13736] netlink: 'syz.1.2281': attribute type 1 has an invalid length. [ 209.417790][T13740] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.420304][T13740] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.454225][ T40] audit: type=1400 audit(1764515974.368:774): avc: denied { connect } for pid=13741 comm="syz.1.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 209.746183][T13747] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 209.803305][ T40] audit: type=1326 audit(1764515974.705:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13748 comm="syz.4.2286" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffaa378f749 code=0xffff0000 [ 209.814217][ T40] audit: type=1326 audit(1764515974.705:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13748 comm="syz.4.2286" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffaa378f749 code=0xffff0000 [ 210.954981][ T6808] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 211.109659][ T6808] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 211.113521][ T6808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.116608][ T6808] usb 9-1: Product: syz [ 211.118273][ T6808] usb 9-1: Manufacturer: syz [ 211.120183][ T6808] usb 9-1: SerialNumber: syz [ 211.126673][ T6808] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 211.146424][T10363] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 211.359134][ T6808] usb 9-1: USB disconnect, device number 12 [ 211.448316][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2288'. [ 211.448320][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2288'. [ 211.535879][ T40] audit: type=1400 audit(1764515976.432:777): avc: denied { create } for pid=13769 comm="syz.5.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 211.545249][ T40] audit: type=1400 audit(1764515976.432:778): avc: denied { read } for pid=13769 comm="syz.5.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 211.574802][T13777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.582006][T13777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.821561][ T5934] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 211.823370][ T5944] Bluetooth: hci2: command 0x1003 tx timeout [ 211.828046][ T29] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 211.892604][T13784] netlink: 'syz.1.2297': attribute type 10 has an invalid length. [ 211.896089][T13784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2297'. [ 211.920286][T13784] dummy0: entered promiscuous mode [ 211.922401][T13784] batman_adv: batadv0: Interface deactivated: dummy0 [ 211.924615][T13784] batman_adv: batadv0: Removing interface: dummy0 [ 211.927561][T13784] bridge0: port 3(dummy0) entered blocking state [ 211.930397][T13784] bridge0: port 3(dummy0) entered disabled state [ 211.933285][T13784] dummy0: entered allmulticast mode [ 212.008665][ T29] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 212.011274][ T29] usb 10-1: can't read configurations, error -71 [ 212.077177][T13809] netlink: 'syz.1.2304': attribute type 10 has an invalid length. [ 212.080357][T13809] bond0: (slave wlan1): Opening slave failed [ 212.147988][ T40] audit: type=1400 audit(1764515977.037:779): avc: denied { ioctl } for pid=13810 comm="syz.0.2305" path="socket:[60820]" dev="sockfs" ino=60820 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 212.224650][T10363] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 212.227582][T10363] ath9k_htc: Failed to initialize the device [ 212.235145][ T6808] usb 9-1: ath9k_htc: USB layer deinitialized [ 212.282936][T13820] random: crng reseeded on system resumption [ 212.347527][T13824] netlink: 'syz.0.2308': attribute type 10 has an invalid length. [ 212.350823][T13824] dummy0: entered promiscuous mode [ 212.354813][T13824] bridge0: port 3(dummy0) entered blocking state [ 212.357960][T13824] bridge0: port 3(dummy0) entered disabled state [ 212.360704][T13824] dummy0: entered allmulticast mode [ 212.365415][T13822] 8021q: VLANs not supported on sit0 [ 212.481387][T13835] openvswitch: netlink: Missing key (keys=40, expected=100) [ 212.528369][T13839] netlink: 'syz.0.2313': attribute type 10 has an invalid length. [ 212.536399][T13839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.541578][ T6808] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 212.546415][T13839] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 212.555003][T13841] IPv6: sit1: Disabled Multicast RS [ 212.616402][T13848] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 212.619889][T13848] __nla_validate_parse: 3 callbacks suppressed [ 212.619899][T13848] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2318'. [ 212.660953][ T40] audit: type=1400 audit(1764515977.544:780): avc: denied { watch_sb } for pid=13850 comm="syz.1.2320" path="/66" dev="tmpfs" ino=374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 212.669454][ T40] audit: type=1400 audit(1764515977.544:781): avc: denied { getopt } for pid=13854 comm="syz.5.2321" lport=55494 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 212.677899][ T6808] usb 9-1: device descriptor read/64, error -71 [ 212.881376][T13864] netlink: 'syz.5.2323': attribute type 1 has an invalid length. [ 212.893234][T13864] bond6: entered promiscuous mode [ 212.895168][T13864] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.900866][T13864] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2323'. [ 212.903859][T13864] bond6: entered allmulticast mode [ 212.915943][T13864] bond6: (slave bridge14): making interface the new active one [ 212.919088][T13864] bridge14: entered promiscuous mode [ 212.921684][T13864] bridge14: entered allmulticast mode [ 212.925095][T13864] bond6: (slave bridge14): Enslaving as an active interface with an up link [ 212.929856][ T6808] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 212.969669][T13867] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2324'. [ 213.070989][ T6808] usb 9-1: device descriptor read/64, error -71 [ 213.187654][ T6808] usb usb9-port1: attempt power cycle [ 213.203993][T13884] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2329'. [ 213.280074][T13886] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2330'. [ 213.336083][T13887] netlink: 'syz.5.2330': attribute type 10 has an invalid length. [ 213.340040][T13887] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2330'. [ 213.344138][T13887] dummy0: entered promiscuous mode [ 213.348996][T13887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2330'. [ 213.402575][T13889] tmpfs: Bad value for 'mpol' [ 213.477178][T13894] overlayfs: failed to clone upperpath [ 213.482184][T13896] overlayfs: failed to clone upperpath [ 213.544349][ T6808] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 213.565442][ T6808] usb 9-1: device descriptor read/8, error -71 [ 213.576378][T13853] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 213.577164][T13909] xt_NFQUEUE: number of total queues is 0 [ 213.625246][T13917] random: crng reseeded on system resumption [ 213.663207][T13916] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2338'. [ 213.728137][T13922] pim6reg: entered allmulticast mode [ 213.739483][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2342'. [ 213.806256][ T6808] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 213.827982][ T6808] usb 9-1: device descriptor read/8, error -71 [ 213.883567][T13924] team0 (unregistering): Port device team_slave_0 removed [ 213.890852][T13924] team0 (unregistering): Port device team_slave_1 removed [ 213.938917][ T6808] usb usb9-port1: unable to enumerate USB device [ 214.293457][ T40] audit: type=1400 audit(1764515979.171:782): avc: denied { write } for pid=13948 comm="syz.5.2350" path="socket:[59120]" dev="sockfs" ino=59120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 214.696514][T13959] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2353'. [ 214.722980][ T5934] Bluetooth: hci0: command 0x0c20 tx timeout [ 214.736430][T13966] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 214.740215][T13966] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 214.743811][T13966] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 214.747276][T13966] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 214.750659][T13966] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 214.754211][T13966] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 214.758165][T13966] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 214.761672][T13966] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 214.765136][T13966] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 214.957914][ T40] audit: type=1400 audit(1764515979.827:783): avc: denied { unmount } for pid=12911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 215.001494][T13978] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 215.172571][T14000] binder: 13998:14000 ioctl c028aa03 200000001480 returned -22 [ 215.239575][T14005] FAULT_INJECTION: forcing a failure. [ 215.239575][T14005] name failslab, interval 1, probability 0, space 0, times 0 [ 215.243992][T14005] CPU: 0 UID: 0 PID: 14005 Comm: syz.4.2366 Not tainted syzkaller #0 PREEMPT(full) [ 215.244008][T14005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.244015][T14005] Call Trace: [ 215.244028][T14005] [ 215.244032][T14005] dump_stack_lvl+0x16c/0x1f0 [ 215.244055][T14005] should_fail_ex+0x512/0x640 [ 215.244072][T14005] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 215.244090][T14005] should_failslab+0xc2/0x120 [ 215.244103][T14005] kmem_cache_alloc_noprof+0x75/0x6e0 [ 215.244119][T14005] ? create_new_namespaces+0x30/0xa90 [ 215.244136][T14005] ? create_new_namespaces+0x30/0xa90 [ 215.244149][T14005] create_new_namespaces+0x30/0xa90 [ 215.244163][T14005] ? bpf_lsm_capable+0x9/0x10 [ 215.244175][T14005] ? security_capable+0x7e/0x260 [ 215.244193][T14005] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 215.244208][T14005] ksys_unshare+0x45b/0xa40 [ 215.244224][T14005] ? __pfx_ksys_unshare+0x10/0x10 [ 215.244238][T14005] ? ksys_write+0x1ac/0x250 [ 215.244252][T14005] __x64_sys_unshare+0x31/0x40 [ 215.244266][T14005] do_syscall_64+0xcd/0xfa0 [ 215.244278][T14005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.244288][T14005] RIP: 0033:0x7ffaa378f749 [ 215.244297][T14005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.244308][T14005] RSP: 002b:00007ffaa19ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 215.244318][T14005] RAX: ffffffffffffffda RBX: 00007ffaa39e5fa0 RCX: 00007ffaa378f749 [ 215.244325][T14005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 215.244331][T14005] RBP: 00007ffaa19ee090 R08: 0000000000000000 R09: 0000000000000000 [ 215.244337][T14005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.244343][T14005] R13: 00007ffaa39e6038 R14: 00007ffaa39e5fa0 R15: 00007ffeb0faf0f8 [ 215.244357][T14005] [ 215.370308][T14010] netlink: 'syz.4.2368': attribute type 1 has an invalid length. [ 215.385879][T14010] 8021q: adding VLAN 0 to HW filter on device bond7 [ 215.416633][T14011] bond7: (slave veth9): Enslaving as an active interface with a down link [ 215.431100][T14010] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 215.434179][T14010] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 215.465035][T14019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.467929][T14019] IPv6: NLM_F_CREATE should be set when creating new route [ 215.568423][T14029] netlink: 'syz.5.2373': attribute type 10 has an invalid length. [ 215.576807][T14029] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 215.645643][T14036] overlayfs: failed to clone upperpath [ 215.768122][T14042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.771240][T14042] IPv6: NLM_F_CREATE should be set when creating new route [ 215.830964][ T29] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 215.978537][ T40] audit: type=1400 audit(1764515980.839:784): avc: denied { setattr } for pid=14052 comm="syz.5.2385" name="NETLINK" dev="sockfs" ino=61100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.993743][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 215.996776][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.000018][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.004229][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 216.008925][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.013458][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.016285][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.064791][ T40] audit: type=1400 audit(1764515980.929:785): avc: denied { getopt } for pid=14068 comm="syz.4.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 216.101220][T14071] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.103641][T14071] IPv6: NLM_F_CREATE should be set when creating new route [ 216.228064][T14032] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 216.232834][ T29] usb 5-1: GET_CAPABILITIES returned 0 [ 216.236378][ T29] usbtmc 5-1:16.0: can't read capabilities [ 216.242445][T14086] netlink: 'syz.5.2395': attribute type 4 has an invalid length. [ 216.286649][T14091] syz.5.2397: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 216.292908][T14091] CPU: 1 UID: 0 PID: 14091 Comm: syz.5.2397 Not tainted syzkaller #0 PREEMPT(full) [ 216.292925][T14091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 216.292933][T14091] Call Trace: [ 216.292938][T14091] [ 216.292943][T14091] dump_stack_lvl+0x16c/0x1f0 [ 216.292958][T14091] warn_alloc+0x248/0x3a0 [ 216.292977][T14091] ? __pfx_warn_alloc+0x10/0x10 [ 216.292993][T14091] ? __pfx_stack_trace_save+0x10/0x10 [ 216.293016][T14091] ? kasan_save_stack+0x42/0x60 [ 216.293028][T14091] ? kasan_save_stack+0x33/0x60 [ 216.293040][T14091] ? kasan_save_track+0x14/0x30 [ 216.293050][T14091] ? xskq_create+0x52/0x1d0 [ 216.293065][T14091] ? xsk_setsockopt+0x74e/0x9a0 [ 216.293079][T14091] ? do_sock_setsockopt+0xf3/0x1d0 [ 216.293097][T14091] ? xskq_create+0xfb/0x1d0 [ 216.293111][T14091] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 216.293130][T14091] ? xskq_create+0xfb/0x1d0 [ 216.293147][T14091] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 216.293166][T14091] ? xskq_create+0xfb/0x1d0 [ 216.293180][T14091] vmalloc_user_noprof+0x9e/0xe0 [ 216.293194][T14091] ? xskq_create+0xfb/0x1d0 [ 216.293208][T14091] xskq_create+0xfb/0x1d0 [ 216.293224][T14091] xsk_setsockopt+0x74e/0x9a0 [ 216.293238][T14091] ? __pfx_xsk_setsockopt+0x10/0x10 [ 216.293251][T14091] ? find_held_lock+0x2b/0x80 [ 216.293267][T14091] ? selinux_socket_setsockopt+0x6a/0x80 [ 216.293279][T14091] ? __pfx_xsk_setsockopt+0x10/0x10 [ 216.293293][T14091] do_sock_setsockopt+0xf3/0x1d0 [ 216.293311][T14091] __sys_setsockopt+0x1a0/0x230 [ 216.293327][T14091] __x64_sys_setsockopt+0xbd/0x160 [ 216.293340][T14091] ? do_syscall_64+0x91/0xfa0 [ 216.293350][T14091] ? lockdep_hardirqs_on+0x7c/0x110 [ 216.293362][T14091] do_syscall_64+0xcd/0xfa0 [ 216.293373][T14091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.293404][T14091] RIP: 0033:0x7f2eac18f749 [ 216.293416][T14091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.293428][T14091] RSP: 002b:00007f2eaa3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 216.293439][T14091] RAX: ffffffffffffffda RBX: 00007f2eac3e5fa0 RCX: 00007f2eac18f749 [ 216.293447][T14091] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 216.293453][T14091] RBP: 00007f2eac213f91 R08: 0000000000000004 R09: 0000000000000000 [ 216.293460][T14091] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.293466][T14091] R13: 00007f2eac3e6038 R14: 00007f2eac3e5fa0 R15: 00007ffd69dff378 [ 216.293483][T14091] [ 216.293488][T14091] Mem-Info: [ 216.378115][T14091] active_anon:32036 inactive_anon:115 isolated_anon:0 [ 216.378115][T14091] active_file:2327 inactive_file:43485 isolated_file:0 [ 216.378115][T14091] unevictable:18164 dirty:361 writeback:0 [ 216.378115][T14091] slab_reclaimable:9639 slab_unreclaimable:77846 [ 216.378115][T14091] mapped:25493 shmem:21694 pagetables:1614 [ 216.378115][T14091] sec_pagetables:312 bounce:0 [ 216.378115][T14091] kernel_misc_reclaimable:0 [ 216.378115][T14091] free:421258 free_pcp:10962 free_cma:0 [ 216.392521][T14091] Node 0 active_anon:127888kB inactive_anon:460kB active_file:9228kB inactive_file:173724kB unevictable:51076kB isolated(anon):0kB isolated(file):0kB mapped:101856kB dirty:1416kB writeback:0kB shmem:83448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:16336kB pagetables:6240kB sec_pagetables:1248kB all_unreclaimable? no Balloon:0kB [ 216.403162][T14091] Node 1 active_anon:256kB inactive_anon:0kB active_file:80kB inactive_file:216kB unevictable:21580kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:28kB writeback:0kB shmem:3328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 216.413368][T14091] Node 0 DMA free:11232kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:3468kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:224kB local_pcp:72kB free_cma:0kB [ 216.422881][T14091] lowmem_reserve[]: 0 1239 1239 1239 1239 [ 216.424806][T14091] Node 0 DMA32 free:104196kB boost:0kB min:27580kB low:34472kB high:41364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:127964kB inactive_anon:460kB active_file:9228kB inactive_file:173724kB unevictable:47608kB writepending:1416kB zspages:0kB present:2080628kB managed:1269468kB mlocked:0kB bounce:0kB free_pcp:18136kB local_pcp:4520kB free_cma:0kB [ 216.435609][T14091] lowmem_reserve[]: 0 0 0 0 0 [ 216.437163][T14091] Node 1 Normal free:1569604kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:256kB inactive_anon:0kB active_file:80kB inactive_file:216kB unevictable:21580kB writepending:28kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:25912kB local_pcp:388kB free_cma:0kB [ 216.447915][T14091] lowmem_reserve[]: 0 0 0 0 0 [ 216.449401][T14091] Node 0 DMA: 19*4kB (UM) 26*8kB (UM) 12*16kB (UM) 9*32kB (UME) 2*64kB (ME) 7*128kB (UME) 5*256kB (ME) 4*512kB (UME) 4*1024kB (ME) 1*2048kB (U) 0*4096kB = 11260kB [ 216.454557][T14091] Node 0 DMA32: 1135*4kB (UME) 758*8kB (UME) 151*16kB (UME) 325*32kB (UME) 99*64kB (UME) 61*128kB (UME) 50*256kB (UME) 31*512kB (UME) 13*1024kB (UM) 10*2048kB (UM) 1*4096kB (M) = 104124kB [ 216.460753][T14091] Node 1 Normal: 2*4kB (U) 4*8kB (ME) 2*16kB (UM) 155*32kB (UM) 87*64kB (UME) 33*128kB (UE) 11*256kB (UE) 47*512kB (UME) 32*1024kB (UME) 22*2048kB (UM) 354*4096kB (UM) = 1569512kB [ 216.466242][T14091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.469097][T14091] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 216.472074][T14091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.475566][T14091] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 216.478451][T14091] 83898 total pagecache pages [ 216.479938][T14091] 0 pages in swap cache [ 216.481273][T14091] Free swap = 124996kB [ 216.482633][T14091] Total swap = 124996kB [ 216.483946][T14091] 1048443 pages RAM [ 216.485164][T14091] 0 pages HighMem/MovableOnly [ 216.486713][T14091] 281763 pages reserved [ 216.488033][T14091] 0 pages cma reserved [ 216.577001][T14100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.579354][T14100] IPv6: NLM_F_CREATE should be set when creating new route [ 216.802087][T14118] program syz.0.2374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.235457][T14129] snd_aloop snd_aloop.0: control 2:112:5:syz0:4 is already present [ 217.236235][ T40] audit: type=1326 audit(1764515982.091:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.4.2408" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffaa378f749 code=0x0 [ 217.238826][T14129] snd_aloop snd_aloop.0: control 2:112:5:syz0:4 is already present [ 217.249349][T14129] snd_aloop snd_aloop.0: control 2:112:5:syz0:4 is already present [ 217.253220][T14129] snd_aloop snd_aloop.0: control 2:112:5:syz0:4 is already present [ 217.256961][T14129] snd_aloop snd_aloop.0: control 2:112:5:syz0:4 is already present [ 217.259828][T14129] snd_aloop snd_aloop.0: control 2:112:5:syz0:4 is already present [ 217.264140][T14129] snd_aloop snd_aloop.0: control 2:112:5:syz0:4 is already present [ 217.266848][T14129] snd_aloop snd_aloop.0: control 2:112:5:syz0:4 is already present [ 217.269649][T14129] snd_aloop snd_aloop.0: control 2:112:5:syz0:4 is already present [ 217.274288][T14129] snd_aloop snd_aloop.0: control 2:112:5:syz0:4 is already present [ 217.277398][T14129] snd_aloop snd_aloop.0: control 2:112:5:syz0:4 is already present [ 217.280017][T14129] snd_aloop snd_aloop.0: control 2:112:5:syz0:4 is already present [ 217.282707][T14129] snd_aloop snd_aloop.0: control 2:112:5:syz0:4 is already present [ 217.285369][T14129] snd_aloop snd_aloop.0: control 2:112:5:syz0:4 is already present [ 217.325662][T14134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.328229][T14134] IPv6: NLM_F_CREATE should be set when creating new route [ 217.635155][T14142] 8021q: adding VLAN 0 to HW filter on device bond8 [ 218.059119][T14147] __nla_validate_parse: 13 callbacks suppressed [ 218.059131][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2414'. [ 218.064561][T14147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.126909][ T839] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 218.153528][T14147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.277968][ T839] usb 9-1: Using ep0 maxpacket: 8 [ 218.284651][ T839] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 218.288497][ T839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.291221][ T839] usb 9-1: Product: syz [ 218.292973][ T839] usb 9-1: Manufacturer: syz [ 218.295097][ T839] usb 9-1: SerialNumber: syz [ 218.300264][ T839] usb 9-1: config 0 descriptor?? [ 218.323011][T14150] net_ratelimit: 45 callbacks suppressed [ 218.323027][T14150] netlink: zone id is out of range [ 218.327677][T14150] netlink: zone id is out of range [ 218.330003][T14150] netlink: get zone limit has 4 unknown bytes [ 218.335246][T14150] xt_ecn: cannot match TCP bits for non-tcp packets [ 218.338948][T14150] syzkaller1: left promiscuous mode [ 218.340820][T14150] syzkaller1: left allmulticast mode [ 218.344438][T14150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.506563][ T839] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 218.520251][ T839] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 218.524650][ T839] usb 9-1: USB disconnect, device number 17 [ 218.559514][T14163] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2420'. [ 218.616244][T10965] usb 5-1: USB disconnect, device number 15 [ 218.894489][T14177] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2425'. [ 219.062417][T14189] netlink: 'syz.4.2427': attribute type 4 has an invalid length. [ 219.179627][ T29] hid (null): invalid report_size 25453 [ 219.185941][ T29] hid_parser_main: 28 callbacks suppressed [ 219.185958][ T29] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 219.190845][ T29] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 219.193897][ T29] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 219.197211][ T29] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 219.199677][ T29] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 219.202570][ T29] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 219.206651][ T29] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 219.209832][ T29] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 219.212484][ T29] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 219.215688][ T29] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 219.220471][ T29] hid-generic 000C:0007:000C.0008: invalid report_size 25453 [ 219.223537][ T29] hid-generic 000C:0007:000C.0008: item 0 2 1 7 parsing failed [ 219.227328][ T29] hid-generic 000C:0007:000C.0008: probe with driver hid-generic failed with error -22 [ 219.244942][T14211] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2432'. [ 219.440522][T14243] tmpfs: Bad value for 'mpol' [ 219.984493][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2443'. [ 220.093149][T14287] xt_l2tp: v2 doesn't support IP mode [ 220.234316][T14293] netlink: 'syz.4.2447': attribute type 10 has an invalid length. [ 220.804851][T10363] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 220.879862][T14315] overlayfs: failed to clone lowerpath [ 220.879895][T14316] overlayfs: failed to clone lowerpath [ 220.885789][T14315] overlayfs: failed to clone lowerpath [ 220.955718][T10363] usb 5-1: Using ep0 maxpacket: 32 [ 220.959328][T10363] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 220.963307][T10363] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 220.967324][T10363] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 220.970994][T10363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 220.974255][T10363] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 220.979079][T10363] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 220.983341][T10363] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 220.986450][T10363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.990401][T10363] usb 5-1: config 0 descriptor?? [ 220.996156][ T40] audit: type=1400 audit(1764515985.815:787): avc: denied { connect } for pid=14319 comm="syz.5.2454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 221.121756][ T40] audit: type=1326 audit(1764515985.945:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.5.2458" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac18f749 code=0x7ffc0000 [ 221.125153][T14337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2459'. [ 221.133922][ T40] audit: type=1326 audit(1764515985.945:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.5.2458" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac18f749 code=0x7ffc0000 [ 221.144284][ T40] audit: type=1326 audit(1764515985.964:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.5.2458" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f2eac18f749 code=0x7ffc0000 [ 221.152203][ T40] audit: type=1326 audit(1764515985.964:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.5.2458" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac18f749 code=0x7ffc0000 [ 221.159728][ T40] audit: type=1326 audit(1764515985.964:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.5.2458" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac18f749 code=0x7ffc0000 [ 221.166931][ T40] audit: type=1326 audit(1764515985.964:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.5.2458" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2eac18f749 code=0x7ffc0000 [ 221.174566][ T40] audit: type=1326 audit(1764515985.964:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.5.2458" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac18f749 code=0x7ffc0000 [ 221.182415][ T40] audit: type=1326 audit(1764515985.964:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.5.2458" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac18f749 code=0x7ffc0000 [ 221.191041][ T40] audit: type=1326 audit(1764515985.964:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.5.2458" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2eac18f749 code=0x7ffc0000 [ 221.207424][T10363] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 221.412825][ C3] usblp0: nonzero read bulk status received: -71 [ 221.414400][T10363] usb 5-1: USB disconnect, device number 16 [ 221.484532][T14358] netlink: 'syz.5.2465': attribute type 2 has an invalid length. [ 221.598389][T14370] netlink: 'syz.5.2467': attribute type 39 has an invalid length. [ 221.604957][T14370] veth0_macvtap: left promiscuous mode [ 221.635093][T14306] usblp0: removed [ 222.232753][T14354] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 222.364965][T14412] nbd0: detected capacity change from 0 to 127 [ 222.371876][ T5934] block nbd0: Receive control failed (result -104) [ 222.371941][ T8479] block nbd0: Send control failed (result -32) [ 222.378220][ T8479] block nbd0: Request send failed, requeueing [ 222.383725][ T8479] block nbd0: Dead connection, failed to find a fallback [ 222.388135][ T8479] block nbd0: shutting down sockets [ 222.388142][ T2222] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.390707][ T8479] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.395023][ T2222] buffer_io_error: 6 callbacks suppressed [ 222.395034][ T2222] Buffer I/O error on dev nbd0, logical block 1, async page read [ 222.405430][ T8479] Buffer I/O error on dev nbd0, logical block 2, async page read [ 222.409024][ T8479] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.413145][ T8479] Buffer I/O error on dev nbd0, logical block 3, async page read [ 222.699532][T14428] 9pnet_fd: Insufficient options for proto=fd [ 223.236486][T14459] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 223.239726][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2487'. [ 223.386394][T14463] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_1 [ 223.720693][T14469] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 223.774436][T14471] netlink: 'syz.4.2492': attribute type 1 has an invalid length. [ 223.787763][T14471] bond9: entered promiscuous mode [ 223.789655][T14471] 8021q: adding VLAN 0 to HW filter on device bond9 [ 223.812957][T14471] 8021q: adding VLAN 0 to HW filter on device bond10 [ 223.818799][T14471] bond9: (slave bond10): making interface the new active one [ 223.821967][T14471] bond10: entered promiscuous mode [ 223.824901][T14471] bond9: (slave bond10): Enslaving as an active interface with an up link [ 223.872072][T14475] fuse: Bad value for 'user_id' [ 223.873889][T14475] fuse: Bad value for 'user_id' [ 223.994603][T14479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2494'. [ 223.999161][T14479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2494'. [ 224.208313][T14481] openvswitch: netlink: IP tunnel dst address not specified [ 224.219139][T14481] libceph: resolve ' [ 224.219139][T14481] -&fYǝa2i [ 224.219139][T14481] .?&*&' (ret=-3): failed [ 224.283342][T14492] block device autoloading is deprecated and will be removed. [ 224.288810][T14492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2498'. [ 224.291748][T14492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2498'. [ 224.384513][T14508] fuse: Bad value for 'fd' [ 224.486099][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2509'. [ 224.516009][ T60] hid_parser_main: 53 callbacks suppressed [ 224.516023][ T60] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 224.520761][ T60] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 224.524088][ T60] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 224.527209][ T60] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 224.532299][ T60] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 224.535100][ T60] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 224.538042][ T60] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 224.540737][ T60] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 224.543250][ T60] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 224.545811][ T60] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 224.575733][ T60] hid-generic 0005:00B6:0009.0009: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 224.626653][T14528] fido_id[14528]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 225.439483][T14551] 9pnet: Found fid 0 not clunked [ 225.688613][ T2222] block nbd0: Connection timed out, retrying (0/1 alive) [ 225.691555][ T2222] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.694510][ T2222] Buffer I/O error on dev nbd0, logical block 0, async page read [ 225.699339][ T8479] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.702457][ T8479] Buffer I/O error on dev nbd0, logical block 0, async page read [ 225.705012][ T8479] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.708486][ T8479] Buffer I/O error on dev nbd0, logical block 1, async page read [ 225.711659][ T8479] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.714492][ T8479] Buffer I/O error on dev nbd0, logical block 2, async page read [ 225.718599][ T8479] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.719864][T14567] overlayfs: failed to clone upperpath [ 225.721585][ T8479] Buffer I/O error on dev nbd0, logical block 3, async page read [ 225.726490][ T8479] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.727556][T14567] overlayfs: failed to clone lowerpath [ 225.729793][ T8479] Buffer I/O error on dev nbd0, logical block 0, async page read [ 225.729901][ T8479] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.737700][ T8479] Buffer I/O error on dev nbd0, logical block 1, async page read [ 225.741930][ T8479] ldm_validate_partition_table(): Disk read failed. [ 225.745039][ T8479] Dev nbd0: unable to read RDB block 0 [ 225.748030][ T8479] nbd0: unable to read partition table [ 225.754807][ T8479] ldm_validate_partition_table(): Disk read failed. [ 225.759195][ T8479] Dev nbd0: unable to read RDB block 0 [ 225.762004][ T8479] nbd0: unable to read partition table [ 225.872044][T14577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2524'. [ 226.106960][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2540'. [ 226.113548][T14619] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=14619 comm=syz.1.2541 [ 226.116892][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 226.116908][ T40] audit: type=1800 audit(1764515990.903:865): pid=14603 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2533" name="file0" dev="9p" ino=71827777 res=0 errno=0 [ 226.149022][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2542'. [ 226.154430][T14622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2542'. [ 226.174194][T14624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.177229][T14624] IPv6: NLM_F_CREATE should be set when creating new route [ 226.315023][T14634] could not allocate digest TFM handle blake2s-128-generic [ 226.373411][T14645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.375896][T14645] IPv6: NLM_F_CREATE should be set when creating new route [ 226.454487][T14655] erspan0: entered promiscuous mode [ 226.456817][T14655] gretap0: entered promiscuous mode [ 226.538716][ T40] audit: type=1400 audit(1764515991.331:866): avc: denied { read } for pid=14662 comm="syz.5.2558" name="file0" dev="tmpfs" ino=2437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 226.539326][T14663] tmpfs: User quota inode hardlimit too large. [ 226.691581][ T55] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 226.858277][ T40] audit: type=1400 audit(1764515991.649:867): avc: denied { read } for pid=14672 comm="syz.4.2561" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 226.865979][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 226.867763][ T40] audit: type=1400 audit(1764515991.649:868): avc: denied { open } for pid=14672 comm="syz.4.2561" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 226.878728][ T55] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 226.882271][ T55] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 226.887404][ T55] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.893176][ T55] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 226.896979][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.934030][T14684] netlink: 'syz.5.2564': attribute type 32 has an invalid length. [ 226.977676][T14688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.980406][T14688] IPv6: NLM_F_CREATE should be set when creating new route [ 227.115419][T14652] binder: 14651:14652 ioctl c0306201 200000000000 returned -22 [ 227.125003][T14706] tipc: MTU too low for tipc bearer [ 227.185095][ T55] usb 5-1: string descriptor 0 read error: -71 [ 227.192109][ T55] usb 5-1: USB disconnect, device number 17 [ 227.488262][ T40] audit: type=1400 audit(1764515992.275:869): avc: denied { ioctl } for pid=14736 comm="syz.4.2583" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 227.501555][T14737] xt_connbytes: Forcing CT accounting to be enabled [ 227.667922][T14773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.670974][T14773] IPv6: NLM_F_CREATE should be set when creating new route [ 227.740501][T14777] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 227.799217][T14780] tipc: Started in network mode [ 227.801054][T14780] tipc: Node identity 4, cluster identity 4711 [ 227.803233][T14780] tipc: Node number set to 4 [ 227.906910][T14793] ipvlan2: entered allmulticast mode [ 227.908900][T14793] team0: entered allmulticast mode [ 227.910622][T14793] team_slave_0: entered allmulticast mode [ 227.912636][T14793] team_slave_1: entered allmulticast mode [ 227.915480][T14793] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 227.948266][T14795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.950665][T14795] IPv6: NLM_F_CREATE should be set when creating new route [ 227.986503][ T5934] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 228.215472][T14825] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 228.218517][T14825] futex_wake_op: syz.4.2608 tries to shift op by 32; fix this program [ 228.281471][ T29] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 228.425251][T14836] netlink: 'syz.1.2612': attribute type 1 has an invalid length. [ 228.442050][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 228.445952][ T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 228.448762][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.452270][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.458071][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.462724][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.466907][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 228.470107][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.681243][ T29] usb 5-1: usb_control_msg returned -32 [ 228.683158][ T29] usbtmc 5-1:16.0: can't read capabilities [ 228.686122][T14752] __nla_validate_parse: 17 callbacks suppressed [ 228.686132][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2586'. [ 229.035858][T14857] usbtmc 5-1:16.0: control status returned 0 [ 229.201476][T14867] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 229.239584][ T55] usb 5-1: USB disconnect, device number 18 [ 229.272535][T14872] veth0_to_bridge: entered promiscuous mode [ 229.343905][T14879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49920 sclass=netlink_route_socket pid=14879 comm=syz.5.2623 [ 229.349090][T14879] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.2623'. [ 229.389095][T14848] ceph: No mds server is up or the cluster is laggy [ 229.389118][T14845] ceph: No mds server is up or the cluster is laggy [ 229.525201][T14891] fuse: Bad value for 'fd' [ 229.579850][T14900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2630'. [ 229.616036][ T40] audit: type=1400 audit(1764516250.389:870): avc: denied { sqpoll } for pid=14906 comm="syz.1.2631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 229.710337][T14914] batman_adv: batadv0: Adding interface: vlan2 [ 229.712394][T14914] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.721159][T14914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.726964][T14914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.731338][T14914] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 229.879303][T14918] 9pnet_virtio: no channels available for device syz [ 229.925080][T14931] netlink: 'syz.1.2640': attribute type 2 has an invalid length. [ 229.927623][T14931] netlink: 'syz.1.2640': attribute type 1 has an invalid length. [ 229.960278][ T40] audit: type=1400 audit(1764516250.738:871): avc: denied { bind } for pid=14933 comm="syz.1.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 229.967026][ T40] audit: type=1400 audit(1764516250.738:872): avc: denied { listen } for pid=14933 comm="syz.1.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 230.103500][T14871] veth0_to_bridge: left promiscuous mode [ 230.367974][T14943] futex_wake_op: syz.4.2643 tries to shift op by -1; fix this program [ 230.397884][T14943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.403159][T14943] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.409353][T14943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.440664][ T7555] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 230.444466][ T7555] bond0: (slave c@0): link status definitely down, disabling slave [ 230.447153][ T7555] bond0: (slave batadv0): link status definitely down, disabling slave [ 230.450749][ T7555] bond0: (slave team0): link status definitely down, disabling slave [ 230.456453][ T7555] bond0: now running without any active interface! [ 230.586306][T14951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.134242][T14994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2658'. [ 231.501421][T15022] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2665'. [ 231.505534][T15021] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2665'. [ 231.600846][T15026] syz.5.2667 (15026) used greatest stack depth: 19720 bytes left [ 231.747499][ T40] audit: type=1400 audit(1764516252.518:873): avc: denied { read } for pid=15036 comm="syz.5.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 232.173555][T15073] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2682'. [ 232.318252][ T839] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 232.469878][ T839] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.474625][ T839] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 232.479048][ T839] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.482799][ T839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.489157][T15067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 232.494799][ T839] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.729335][ T60] usb 9-1: USB disconnect, device number 18 [ 233.298160][T15085] overlayfs: failed to resolve './file0/file0': -2 [ 233.391192][T15097] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2691'. [ 233.396820][T15097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2691'. [ 233.530630][T15095] : renamed from bridge_slave_0 [ 234.019537][ T5934] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 234.024333][ T5934] Bluetooth: hci4: Injecting HCI hardware error event [ 234.027968][ T5934] Bluetooth: hci4: hardware error 0x00 [ 234.044029][T15107] xt_hashlimit: max too large, truncated to 1048576 [ 234.047235][T15107] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 235.076266][T15116] bond0: entered promiscuous mode [ 235.078586][T15116] bond_slave_0: entered promiscuous mode [ 235.081177][T15116] bond_slave_1: entered promiscuous mode [ 235.083797][T15116] bond1: entered promiscuous mode [ 235.088902][T15116] batadv0: entered promiscuous mode [ 235.092695][T15116] debugfs: 'hsr1' already exists in 'hsr' [ 235.095009][T15116] Cannot create hsr debugfs directory [ 235.097436][T15116] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 235.103110][T15116] bond0: left promiscuous mode [ 235.104719][T15123] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2700'. [ 235.105323][T15116] bond_slave_0: left promiscuous mode [ 235.109967][T15123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2700'. [ 235.112333][T15116] bond_slave_1: left promiscuous mode [ 235.115152][T15124] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2700'. [ 235.117599][T15116] bond1: left promiscuous mode [ 235.120358][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2700'. [ 235.125900][T15116] batadv0: left promiscuous mode [ 235.160079][T15121] netlink: 'syz.5.2699': attribute type 2 has an invalid length. [ 235.171309][T15126] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 235.174805][T15126] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 235.178679][T15126] overlayfs: failed to set uuid (578/file0, err=-13); falling back to uuid=null. [ 235.227303][T15133] xt_hashlimit: max too large, truncated to 1048576 [ 235.354693][T15148] netlink: 'syz.1.2709': attribute type 21 has an invalid length. [ 235.358774][T15148] netlink: 'syz.1.2709': attribute type 4 has an invalid length. [ 235.434268][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2713'. [ 235.437053][T15155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2713'. [ 235.440606][T15155] netlink: 'syz.5.2713': attribute type 18 has an invalid length. [ 235.443101][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2713'. [ 235.468586][T15163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2714'. [ 235.472016][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2715'. [ 235.506072][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2716'. [ 235.541760][T15170] overlayfs: failed to clone upperpath [ 235.731525][T15185] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15185 comm=syz.5.2723 [ 236.030687][T15196] tmpfs: Unknown parameter 'mPol' [ 236.217641][T15207] netlink: 'syz.1.2732': attribute type 4 has an invalid length. [ 236.225850][T15207] netlink: 'syz.1.2732': attribute type 4 has an invalid length. [ 236.585374][ T40] audit: type=1400 audit(1764516257.358:874): avc: denied { mounton } for pid=15235 comm="syz.4.2741" path="/582/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 236.596696][ T40] audit: type=1400 audit(1764516257.358:875): avc: denied { remount } for pid=15235 comm="syz.4.2741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 236.731584][T15247] erspan1: entered allmulticast mode [ 237.148260][ T5934] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 237.434472][ T40] audit: type=1326 audit(1764516258.208:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.2742" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b0f8f749 code=0x7fc00000 [ 237.445705][ T40] audit: type=1326 audit(1764516258.208:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.2742" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44b0f8f749 code=0x7fc00000 [ 237.456166][ T40] audit: type=1326 audit(1764516258.208:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.2742" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b0f8f749 code=0x7fc00000 [ 237.466874][ T40] audit: type=1326 audit(1764516258.208:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.2742" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b0f8f749 code=0x7fc00000 [ 237.477441][ T40] audit: type=1326 audit(1764516258.208:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.2742" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b0f8f749 code=0x7fc00000 [ 237.488295][ T40] audit: type=1326 audit(1764516258.208:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.2742" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b0f8f749 code=0x7fc00000 [ 237.497483][ T40] audit: type=1326 audit(1764516258.208:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.2742" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b0f8f749 code=0x7fc00000 [ 237.505916][ T40] audit: type=1326 audit(1764516258.208:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.2742" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b0f8f749 code=0x7fc00000 [ 237.515172][ T40] audit: type=1326 audit(1764516258.208:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.2742" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b0f8f749 code=0x7fc00000 [ 237.523463][ T40] audit: type=1326 audit(1764516258.208:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.2742" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b0f8f749 code=0x7fc00000 [ 237.581836][T15275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.841848][T15300] netlink: 'syz.4.2763': attribute type 2 has an invalid length. [ 237.845732][T15300] netlink: 'syz.4.2763': attribute type 2 has an invalid length. [ 238.275548][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.282259][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.285949][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.288822][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.291591][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.406939][T15343] xt_l2tp: missing protocol rule (udp|l2tpip) [ 238.442138][T15334] chnl_net:caif_netlink_parms(): no params data found [ 238.513656][T15334] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.516878][T15334] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.520278][T15334] bridge_slave_0: entered allmulticast mode [ 238.523341][T15334] bridge_slave_0: entered promiscuous mode [ 238.527767][T15334] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.530776][T15334] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.533130][T15334] bridge_slave_1: entered allmulticast mode [ 238.535715][T15334] bridge_slave_1: entered promiscuous mode [ 238.601133][T15334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.607889][T15334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.646290][T15334] team0: Port device team_slave_0 added [ 238.650113][T15334] team0: Port device team_slave_1 added [ 238.680595][T15334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.682837][T15334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.691869][T15334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.696294][T15334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.698573][T15334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.706339][T15334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.761662][T15334] hsr_slave_0: entered promiscuous mode [ 238.764217][T15334] hsr_slave_1: entered promiscuous mode [ 238.767044][T15334] debugfs: 'hsr0' already exists in 'hsr' [ 238.770048][T15334] Cannot create hsr debugfs directory [ 238.792514][T15380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15380 comm=syz.1.2790 [ 238.798638][T15380] fuse: Unknown parameter 'dd' [ 238.837468][T15385] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 239.047923][T15407] fuse: Bad value for 'fd' [ 239.084322][ T5944] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 239.346899][T15334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.352776][T15334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.358502][T15334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.362949][T15334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.401385][T15437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15437 comm=syz.1.2805 [ 239.422158][T15334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.443830][T15334] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.452294][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.454683][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.461477][ T8979] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.464424][ T8979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.548567][T15442] fuse: Unknown parameter 'r' [ 239.621143][T15334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.810652][T15334] veth0_vlan: entered promiscuous mode [ 239.817189][T15334] veth1_vlan: entered promiscuous mode [ 239.837751][T15334] veth0_macvtap: entered promiscuous mode [ 239.843381][T15334] veth1_macvtap: entered promiscuous mode [ 239.854417][T15334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.864216][T15334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.873446][ T7453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.876868][ T7453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.883141][ T7453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.886791][ T7453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.949432][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.952720][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.957682][T15467] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 239.961833][T15467] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 239.983586][ T7555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.985988][ T7555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.269403][T15476] __nla_validate_parse: 14 callbacks suppressed [ 240.269421][T15476] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2814'. [ 240.338310][ T5944] Bluetooth: hci2: command tx timeout [ 240.416284][T15486] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.423540][T15486] bond0: (slave wg0): Error: Device can not be enslaved while up [ 240.532496][T15492] 9pnet_fd: Insufficient options for proto=fd [ 240.638028][T15505] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2822'. [ 240.761425][T15518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2823'. [ 240.764962][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2823'. [ 240.772137][ T5944] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 240.772716][T15523] all: renamed from lo (while UP) [ 240.796748][T15526] sctp: [Deprecated]: syz.4.2828 (pid 15526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.796748][T15526] Use struct sctp_sack_info instead [ 240.806014][T15526] sctp: [Deprecated]: syz.4.2828 (pid 15526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.806014][T15526] Use struct sctp_sack_info instead [ 240.825553][ T7453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.830496][ T7453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.069810][T15574] overlayfs: failed to clone upperpath [ 241.090360][T15578] (syz.4.2846,15578,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 241.093989][T15578] (syz.4.2846,15578,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 241.096342][T15578] (syz.4.2846,15578,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 241.100985][T15578] (syz.4.2846,15578,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 241.432070][T15612] netlink: 'syz.0.2856': attribute type 2 has an invalid length. [ 241.588411][T15618] bond1: ARP target 4.0.0.0 is already present [ 241.591061][T15618] bond1: option arp_ip_target: invalid value (4) [ 241.595302][T15618] bond1 (unregistering): Released all slaves [ 241.646016][T15622] netlink: 'syz.5.2860': attribute type 11 has an invalid length. [ 241.866558][T15634] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2862'. [ 241.875112][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2862'. [ 241.959484][T15638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.963528][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2865'. [ 241.967113][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2865'. [ 241.970773][T15638] netlink: 'syz.5.2865': attribute type 13 has an invalid length. [ 242.067138][T15654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2872'. [ 242.125231][T15668] openvswitch: netlink: IP tunnel dst address not specified [ 242.130064][T15668] [U] [ 242.131855][T15668] [U] [ 242.133094][T15668] [U] [ 242.134402][T15668] [U] [ 242.135666][T15668] [U] [ 242.136851][T15668] [U] [ 242.138074][T15668] [U] [ 242.139257][T15668] [U] [ 242.142329][T15668] [U] [ 242.143569][T15668] [U] [ 242.144753][T15668] [U] [ 242.145952][T15668] [U] [ 242.147225][T15668] [U] [ 242.148687][T15668] [U] [ 242.149937][T15668] [U] [ 242.151150][T15668] [U] [ 242.152579][T15668] [U] [ 242.153805][T15668] [U] [ 242.155001][T15668] [U] [ 242.156200][T15668] [U] [ 242.157436][T15668] [U] [ 242.158646][T15668] [U] [ 242.159981][T15668] [U] [ 242.161256][T15668] [U] [ 242.163956][T15668] [U] [ 242.165388][T15668] [U] [ 242.166665][T15668] [U] [ 242.168028][T15668] [U] [ 242.169855][T15668] [U] [ 242.171071][T15668] [U] [ 242.172277][T15668] [U] [ 242.173478][T15668] [U] [ 242.174722][T15668] [U] [ 242.175959][T15668] [U] [ 242.177382][T15668] [U] [ 242.178654][T15668] [U] [ 242.180276][T15668] [U] [ 242.181600][T15668] [U] [ 242.182793][T15668] [U] [ 242.184069][T15668] [U] [ 242.185312][T15668] [U] [ 242.186498][T15668] [U] [ 242.187695][T15668] [U] [ 242.188881][T15668] [U] [ 242.190260][T15668] [U] [ 242.191568][T15668] [U] [ 242.192818][T15668] [U] [ 242.194103][T15668] [U] [ 242.195554][T15668] [U] [ 242.196920][T15668] [U] [ 242.196993][T15681] openvswitch: netlink: IP tunnel dst address not specified [ 242.198233][T15668] [U] [ 242.198283][T15668] [U] [ 242.212680][T15681] [U] [ 242.216936][T15684] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2882'. [ 242.418246][ T5944] Bluetooth: hci2: command tx timeout [ 242.501615][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 242.501630][ T40] audit: type=1400 audit(1764516263.278:909): avc: denied { getopt } for pid=15707 comm="syz.0.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 242.561824][T15708] : entered promiscuous mode [ 242.965782][T15719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.139692][ T5944] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 243.142447][ T5944] Bluetooth: hci1: Injecting HCI hardware error event [ 243.145837][ T5944] Bluetooth: hci1: hardware error 0x00 [ 243.172768][T15736] netlink: 'syz.1.2898': attribute type 21 has an invalid length. [ 243.178284][T15736] IPv6: NLM_F_CREATE should be specified when creating new route [ 243.299223][T15742] overlay: Unknown parameter 'smackfsfloor' [ 243.357891][ T40] audit: type=1400 audit(1764516264.128:910): avc: denied { connect } for pid=15749 comm="syz.4.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 243.454474][ T40] audit: type=1400 audit(1764516264.228:911): avc: denied { append } for pid=15758 comm="syz.4.2905" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 243.465328][ T40] audit: type=1400 audit(1764516264.228:912): avc: denied { map } for pid=15758 comm="syz.4.2905" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 243.473290][ T40] audit: type=1400 audit(1764516264.228:913): avc: denied { execute } for pid=15758 comm="syz.4.2905" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 243.587140][T15778] netlink: 'syz.0.2912': attribute type 1 has an invalid length. [ 243.602377][T15776] sit0: entered promiscuous mode [ 243.606228][T15776] netlink: 'syz.1.2911': attribute type 1 has an invalid length. [ 243.629522][T15778] bond1: entered promiscuous mode [ 243.632336][T15778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.722197][T15783] bridge_slave_1 (unregistering): left allmulticast mode [ 243.726340][T15783] bridge_slave_1 (unregistering): left promiscuous mode [ 243.729638][T15783] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.835199][T15686] Set syz1 is full, maxelem 65536 reached [ 243.875872][ T40] audit: type=1326 audit(1764516264.648:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.5.2918" exe="/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f2eac1c3e89 code=0x50000 [ 243.884776][ T40] audit: type=1326 audit(1764516264.648:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.5.2918" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac18f749 code=0x50000 [ 243.894148][ T40] audit: type=1326 audit(1764516264.648:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.5.2918" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac18f749 code=0x50000 [ 243.902593][ T40] audit: type=1326 audit(1764516264.648:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.5.2918" exe="/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f2eac146357 code=0x50000 [ 243.910721][ T40] audit: type=1326 audit(1764516264.648:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.5.2918" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eac18f749 code=0x50000 [ 244.342054][T15808] fuse: Unknown parameter 'LAU [ 244.342054][T15808] WSQ*Ő/1 k{xʅ7pxһ2(vzIbmban y<\Ũ}l^E~yyg50;#0x0000000000000008' [ 244.415480][T15811] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 244.499785][ T5934] Bluetooth: hci2: command tx timeout [ 244.528297][T10363] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 244.560171][T15827] netlink: 'syz.1.2926': attribute type 22 has an invalid length. [ 244.568596][T15827] netlink: 'syz.1.2926': attribute type 22 has an invalid length. [ 244.571292][ T7455] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.574897][ T7455] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.583210][ T7455] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.586271][ T7455] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.634089][T15833] netlink: 'syz.4.2928': attribute type 10 has an invalid length. [ 244.657366][T15833] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 244.689411][T10363] usb 5-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.693899][T10363] usb 5-1: config 1 interface 0 has no altsetting 0 [ 244.699631][T10363] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 244.702667][T10363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.705571][T10363] usb 5-1: Product: ᐇ [ 244.706955][T10363] usb 5-1: Manufacturer: ‰妎꾌㟯 [ 244.709531][T10363] usb 5-1: SerialNumber: 䏣ొ멤ម燫尽붱漰眰ꩧ뼷Ɱ춺Ⓧ᎖㵽鈹䭱K햡࿻尋㡡⒲᳗ଢ଼腉펅팫Ҟ㋜퀄嚜䌺ⓝˀ㗕궢쀙襪⇁Ἃ♥੔冪ᓽ븴퓿䊒䅩鍌⇊ᾓ翟떋넷䷾౤吒븄᧣踨꫹ﮰ胄衋靂庌謶騍ꅿ䃪ᯥ쟾ꑖퟩ뒚섞境ラ訯ﱔю૛댭襇 [ 244.940294][T10363] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 10 proto 1 vid 0x0525 pid 0xA4A8 [ 244.956128][T10363] usb 5-1: USB disconnect, device number 19 [ 244.979047][T10363] usblp0: removed [ 245.111556][T15859] 9pnet: Unknown protocol version 9p20 [ 245.230057][ T5944] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 245.594108][T15878] ip6t_REJECT: ECHOREPLY is not supported [ 245.717424][T15880] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.790762][T15880] bridge_slave_1 (unregistering): left allmulticast mode [ 245.793217][T15880] bridge_slave_1 (unregistering): left promiscuous mode [ 245.796010][T15880] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.926317][T15892] netlink: 'syz.4.2941': attribute type 1 has an invalid length. [ 246.186309][T15907] __nla_validate_parse: 6 callbacks suppressed [ 246.186321][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2947'. [ 246.224914][T15912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2948'. [ 246.401137][T15921] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 246.404868][T15921] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 246.408681][T15921] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 246.411490][T15921] UDF-fs: Scanning with blocksize 2048 failed [ 246.449615][T15921] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 246.455231][T15921] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 246.465206][T15921] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 246.467940][T15921] UDF-fs: Scanning with blocksize 4096 failed [ 246.470228][T15921] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1) [ 246.500142][T15923] cgroup: Unknown subsys name 'cpuset' [ 246.578298][ T5944] Bluetooth: hci2: command tx timeout [ 246.902154][T15955] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2962'. [ 247.621551][T15967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2966'. [ 247.625417][T15968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2966'. [ 247.876482][T15975] input: syz1 as /devices/virtual/input/input19 [ 247.919436][T15984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2971'. [ 247.922865][T15984] netlink: 'syz.4.2971': attribute type 13 has an invalid length. [ 247.941248][T15984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2971'. [ 247.945092][T15984] netlink: 'syz.4.2971': attribute type 13 has an invalid length. [ 247.980500][ T40] kauditd_printk_skb: 54742 callbacks suppressed [ 247.980510][ T40] audit: type=1400 audit(1764516268.758:55661): avc: denied { read } for pid=15986 comm="syz.4.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.037558][T15990] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 248.041531][T15990] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 248.051467][T15994] overlayfs: failed to clone upperpath [ 248.181736][T15991] delete_channel: no stack [ 248.633672][T16014] netlink: 'syz.5.2984': attribute type 1 has an invalid length. [ 248.653279][T16014] bond7: entered promiscuous mode [ 248.655211][T16014] 8021q: adding VLAN 0 to HW filter on device bond7 [ 248.687658][T16022] netlink: 396 bytes leftover after parsing attributes in process `syz.5.2986'. [ 248.785371][ T40] audit: type=1400 audit(1764516269.558:55662): avc: denied { getopt } for pid=16023 comm="syz.5.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 248.892745][T16034] netlink: 'syz.4.2990': attribute type 1 has an invalid length. [ 249.502770][T16049] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2994'. [ 249.506222][T16049] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2994'. [ 249.795784][T16055] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 249.911060][T16064] netlink: 'syz.0.2999': attribute type 20 has an invalid length. [ 249.918022][ T7453] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.918375][T16064] netlink: 'syz.0.2999': attribute type 20 has an invalid length. [ 249.921606][ T7453] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.927924][ T7453] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.931089][ T7453] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.967994][T16066] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 250.005355][ T40] audit: type=1400 audit(1764516270.778:55663): avc: denied { read } for pid=16067 comm="syz.0.3001" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 250.013546][ T40] audit: type=1400 audit(1764516270.778:55664): avc: denied { open } for pid=16067 comm="syz.0.3001" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 250.667209][ T40] audit: type=1400 audit(1764516271.438:55665): avc: denied { name_bind } for pid=16089 comm="syz.1.3009" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 250.674474][ T40] audit: type=1400 audit(1764516271.438:55666): avc: denied { name_connect } for pid=16089 comm="syz.1.3009" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 250.700460][T16097] comedi comedi3: comedi_config --init_data is deprecated [ 250.710870][T16097] netlink: 'syz.4.3011': attribute type 2 has an invalid length. [ 250.785069][ T40] audit: type=1400 audit(1764516271.558:55667): avc: denied { create } for pid=16107 comm="syz.5.3016" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 250.785102][T16110] o2cb: This node has not been configured. [ 250.785127][T16110] o2cb: Cluster check failed. Fix errors before retrying. [ 250.800218][T16110] (syz.5.3016,16110,3):user_dlm_register:674 ERROR: status = -22 [ 250.803273][T16110] (syz.5.3016,16110,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 250.809797][T16112] o2cb: This node has not been configured. [ 250.812182][T16112] o2cb: Cluster check failed. Fix errors before retrying. [ 250.814994][T16112] (syz.5.3016,16112,1):user_dlm_register:674 ERROR: status = -22 [ 250.817944][T16112] (syz.5.3016,16112,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 250.877782][T16117] xfrm1: entered promiscuous mode [ 250.880208][T16117] xfrm1: entered allmulticast mode [ 250.957715][ T40] audit: type=1400 audit(1764516271.728:55668): avc: denied { write } for pid=16120 comm="syz.0.3020" name="001" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 250.979755][T16121] usb usb4: usbfs: process 16121 (syz.0.3020) did not claim interface 0 before use [ 251.167930][T16131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16131 comm=syz.5.3023 [ 251.205285][ T5944] Bluetooth: hci0: unexpected event for opcode 0x043d [ 251.300122][T16143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.307010][T16143] NILFS (nullb0): couldn't find nilfs on the device [ 251.314185][T10953] hid_parser_main: 4086 callbacks suppressed [ 251.314196][T10953] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 251.319722][T10953] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz0] on syz0 [ 251.363178][T16149] fido_id[16149]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 251.664110][T16181] __nla_validate_parse: 9 callbacks suppressed [ 251.664126][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3038'. [ 251.976153][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3044'. [ 252.267221][ T5966] libceph: connect (1)[c::]:6789 error -97 [ 252.271775][ T5966] libceph: mon0 (1)[c::]:6789 connect error [ 252.409520][T16233] ceph: No mds server is up or the cluster is laggy [ 252.926075][T16262] dummy0: left allmulticast mode [ 252.928693][T16262] bridge0: port 3(dummy0) entered disabled state [ 252.932500][T16262] batman_adv: batadv0: Adding interface: dummy0 [ 252.934489][T16262] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.942624][T16262] batman_adv: batadv0: Interface activated: dummy0 [ 253.295527][T16282] netlink: 'syz.0.3069': attribute type 1 has an invalid length. [ 253.298772][T16282] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3069'. [ 253.405552][ T40] audit: type=1400 audit(1764516274.178:55669): avc: denied { connect } for pid=16290 comm="syz.0.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 253.413511][ T40] audit: type=1400 audit(1764516274.178:55670): avc: denied { write } for pid=16290 comm="syz.0.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 253.444072][ T40] audit: type=1400 audit(1764516274.218:55671): avc: denied { ioctl } for pid=16290 comm="syz.0.3072" path="socket:[74168]" dev="sockfs" ino=74168 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 253.479041][T16302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3073'. [ 253.512636][ T40] audit: type=1326 audit(1764516274.288:55672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.4.3075" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f304238f749 code=0x0 [ 253.653483][T16320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3079'. [ 253.656468][T16320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3079'. [ 253.731850][T16322] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3080'. [ 253.792268][ T40] audit: type=1400 audit(1764516274.568:55673): avc: denied { bind } for pid=16329 comm="syz.1.3082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.073306][T16356] xt_NFQUEUE: number of total queues is 0 [ 254.076169][T16357] /dev/nullb0: Can't lookup blockdev [ 254.165176][T16366] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3091'. [ 254.170560][T16366] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3091'. [ 254.175670][T16368] sock: sock_set_timeout: `syz.1.3094' (pid 16368) tries to set negative timeout [ 254.201758][ T40] audit: type=1400 audit(1764516274.978:55674): avc: denied { accept } for pid=16367 comm="syz.1.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 254.201946][T16368] netlink: 'syz.1.3094': attribute type 4 has an invalid length. [ 254.217889][T16368] netlink: 'syz.1.3094': attribute type 4 has an invalid length. [ 254.372376][ T40] audit: type=1400 audit(1764516275.148:55675): avc: denied { search } for pid=16381 comm="syz.1.3100" name="/" dev="configfs" ino=3111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.573970][T16403] syz_tun: entered allmulticast mode [ 254.596899][T16402] syz_tun: left allmulticast mode [ 254.633913][T16405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3107'. [ 254.701451][T16411] 9pnet_virtio: no channels available for device syz [ 255.077671][T16434] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 255.260927][T16453] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 255.404422][T16463] geneve1: entered allmulticast mode [ 255.541670][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.616231][T16469] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20000 [ 255.934305][T16480] binder: 16479:16480 ioctl 4068aea3 200000000080 returned -22 [ 256.040061][T16482] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 256.197203][T16491] fuse: Unknown parameter '- 000000000000007' [ 256.199420][ T5944] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 256.277875][ T5934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.282131][ T5934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.285299][ T5934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.291627][ T5934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.296359][ T5934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.409108][T16500] chnl_net:caif_netlink_parms(): no params data found [ 256.627857][T16500] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.630394][T16500] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.633351][T16500] bridge_slave_0: entered allmulticast mode [ 256.636264][T16500] bridge_slave_0: entered promiscuous mode [ 256.639850][T16500] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.642353][T16500] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.644657][T16500] bridge_slave_1: entered allmulticast mode [ 256.648245][T16500] bridge_slave_1: entered promiscuous mode [ 256.721106][ T8979] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.725584][ T8979] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 256.737185][T16500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.743703][T16500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.791014][T16500] team0: Port device team_slave_0 added [ 256.796960][T16500] team0: Port device team_slave_1 added [ 256.816920][ T8979] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.821945][ T8979] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 256.862779][T16500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.865425][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.873708][T16500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.879358][T16500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.882876][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.893436][T16500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.908447][T16510] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.918000][ T8979] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.921930][ T8979] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 257.001400][ T8979] bond0: (slave netdevsim0): Releasing backup interface [ 257.006672][ T8979] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.010375][ T8979] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 257.023372][T16500] hsr_slave_0: entered promiscuous mode [ 257.025755][T16500] hsr_slave_1: entered promiscuous mode [ 257.027846][T16500] debugfs: 'hsr0' already exists in 'hsr' [ 257.030336][T16500] Cannot create hsr debugfs directory [ 257.245374][ T8979] bridge_slave_0: left allmulticast mode [ 257.247120][ T8979] bridge_slave_0: left promiscuous mode [ 257.249270][ T8979] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.326767][T16552] __nla_validate_parse: 3 callbacks suppressed [ 257.326784][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3152'. [ 257.462966][ T8979] erspan0 (unregistering): left promiscuous mode [ 257.482911][ T8979] gretap0 (unregistering): left promiscuous mode [ 257.537748][ T8979] bond4 (unregistering): (slave geneve3): Releasing active interface [ 257.548259][T10965] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 257.552160][ T8979] bond1 (unregistering): (slave geneve2): Releasing active interface [ 257.699819][T10965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.703899][T10965] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 257.707625][T10965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.714161][T10965] usb 5-1: config 0 descriptor?? [ 257.719772][T10965] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 257.850669][ T8979] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 257.854144][ T8979] bridge4 (unregistering): left promiscuous mode [ 257.856162][ T8979] bridge4 (unregistering): left allmulticast mode [ 257.931247][T10965] usb 5-1: USB disconnect, device number 20 [ 258.267253][ T8979] bond5 (unregistering): (slave bridge10): Releasing active interface [ 258.338336][ T5934] Bluetooth: hci3: command tx timeout [ 258.517873][ T8979] bond6 (unregistering): (slave bridge14): Releasing backup interface [ 258.521090][ T8979] bridge14 (unregistering): left promiscuous mode [ 258.523501][ T8979] bridge14 (unregistering): left allmulticast mode [ 259.040044][ T8979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.044679][ T8979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.049092][ T8979] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 259.052108][ T8979] veth0: left promiscuous mode [ 259.054891][ T8979] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 259.058598][ T8979] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 259.062269][ T8979] bond0 (unregistering): Released all slaves [ 259.148149][ T8979] bond1 (unregistering): Released all slaves [ 259.235355][ T8979] bond2 (unregistering): Released all slaves [ 259.317641][ T8979] bond3 (unregistering): Released all slaves [ 259.324865][ T8979] bond4 (unregistering): Released all slaves [ 259.331366][ T8979] bond5 (unregistering): Released all slaves [ 259.414453][ T8979] bond6 (unregistering): Released all slaves [ 259.515380][ T8979] bond7 (unregistering): Released all slaves [ 259.539659][T16552] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 259.543012][T16552] team0: Device ipvlan3 is already an upper device of the team interface [ 259.574878][T16564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3156'. [ 259.628782][ T40] audit: type=1400 audit(1764516280.398:55676): avc: denied { setattr } for pid=16567 comm="syz.4.3157" name="NETLINK" dev="sockfs" ino=75861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 259.636135][ T8979] : left promiscuous mode [ 259.796523][ T8979] IPVS: stopping backup sync thread 11679 ... [ 259.959221][ T6002] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 260.002508][ T8979] hsr_slave_0: left promiscuous mode [ 260.005165][ T8979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.007596][ T8979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.021623][ T8979] veth1_macvtap: left promiscuous mode [ 260.023637][ T8979] veth1_vlan: left promiscuous mode [ 260.025647][ T8979] veth0_vlan: left promiscuous mode [ 260.083097][ T8979] pim6reg (unregistering): left allmulticast mode [ 260.108206][ T6002] usb 9-1: Using ep0 maxpacket: 8 [ 260.111769][ T6002] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 260.115812][ T6002] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.119721][ T6002] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.123384][ T6002] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 260.128526][ T6002] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 260.131637][ T6002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.137603][ T6002] usbtmc 9-1:16.0: bulk endpoints not found [ 260.421411][ T5934] Bluetooth: hci3: command tx timeout [ 260.701275][T16608] IPv4: Oversized IP packet from 172.20.20.24 [ 260.704131][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 260.706493][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 260.938790][ T8979] team0 (unregistering): Port device team_slave_1 removed [ 261.035671][ T8979] team0 (unregistering): Port device team_slave_0 removed [ 261.733246][T16500] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 261.737740][T16500] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 261.744629][T16610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3164'. [ 261.749211][T16614] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 261.754443][T16500] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 261.762336][T16500] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 261.845178][T16500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.857974][T16500] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.865519][ T8981] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.867755][ T8981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.874709][ T7550] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.877736][ T7550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.000882][ T40] audit: type=1400 audit(1764516282.778:55677): avc: denied { read } for pid=16630 comm="syz.0.3169" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 262.017868][ T40] audit: type=1400 audit(1764516282.778:55678): avc: denied { open } for pid=16630 comm="syz.0.3169" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 262.071909][ T40] audit: type=1400 audit(1764516282.848:55679): avc: denied { write } for pid=16630 comm="syz.0.3169" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 262.075912][T16500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.146688][ T40] audit: type=1400 audit(1764516282.918:55680): avc: denied { ioctl } for pid=16630 comm="syz.0.3169" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 262.281434][ T60] IPVS: starting estimator thread 0... [ 262.287829][T16500] veth0_vlan: entered promiscuous mode [ 262.295613][T16500] veth1_vlan: entered promiscuous mode [ 262.317307][T16500] veth0_macvtap: entered promiscuous mode [ 262.324439][T16500] veth1_macvtap: entered promiscuous mode [ 262.336362][T16500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.343292][T16500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.355933][ T7453] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.359584][ T7453] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.367588][ T7453] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.372191][T16658] IPVS: using max 43 ests per chain, 103200 per kthread [ 262.375864][ T7453] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.404918][T16663] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3173'. [ 262.420820][ T7453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.424145][ T7453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.442800][ T7550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.446256][ T7550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.509793][ T5934] Bluetooth: hci3: command tx timeout [ 262.537415][T16672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.542539][T16670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3175'. [ 262.571398][T16674] EXT4-fs (sr0): unable to read superblock [ 262.579831][T16676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3178'. [ 262.618767][T16678] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3179'. [ 262.622298][ T40] audit: type=1400 audit(1764516283.398:55681): avc: denied { listen } for pid=16677 comm="syz.5.3179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 262.622813][T16678] binder: 16677:16678 ioctl c0306201 200000000000 returned -22 [ 262.736187][ T55] usb 9-1: USB disconnect, device number 19 [ 262.837284][T16696] netlink: 'syz.1.3183': attribute type 1 has an invalid length. [ 262.872292][T16696] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 262.876142][T16696] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 262.884169][T16699] EXT4-fs (nbd5): unable to read superblock [ 262.934987][T16701] gretap1: entered promiscuous mode [ 262.941600][T16701] bond4: (slave gretap1): making interface the new active one [ 262.944128][T16701] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 262.958945][T16696] macvlan2: entered promiscuous mode [ 262.961336][T16696] macvlan2: entered allmulticast mode [ 262.964301][T16696] bond4: entered promiscuous mode [ 262.967289][T16696] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 262.977095][T16696] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 262.983322][T16696] bond4: left promiscuous mode [ 263.271387][T16712] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 263.275263][T16712] SELinux: failed to load policy [ 263.286003][T16712] cifs: Bad value for 'port' [ 263.294459][T16714] trusted_key: encrypted_key: insufficient parameters specified [ 263.309704][T16715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3189'. [ 263.651138][T16749] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3201'. [ 263.661946][T16753] orangefs_devreq_open: device cannot be opened in blocking mode [ 263.725210][T16749] : renamed from bridge_slave_0 (while UP) [ 263.907005][T16770] xfrm0 speed is unknown, defaulting to 1000 [ 263.912237][T16770] xfrm0 speed is unknown, defaulting to 1000 [ 263.918380][T16770] xfrm0 speed is unknown, defaulting to 1000 [ 263.924895][T16770] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 263.941199][T16770] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 263.960434][T16773] fuse: Unknown parameter 'ro7aisA00000000000000/0040000' [ 263.984915][T16770] xfrm0 speed is unknown, defaulting to 1000 [ 263.988037][T16770] xfrm0 speed is unknown, defaulting to 1000 [ 263.993787][T16770] xfrm0 speed is unknown, defaulting to 1000 [ 263.997781][T16770] xfrm0 speed is unknown, defaulting to 1000 [ 264.003274][T16770] xfrm0 speed is unknown, defaulting to 1000 [ 264.006923][T16770] xfrm0 speed is unknown, defaulting to 1000 [ 264.072989][T16778] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 264.109659][T16783] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3210'. [ 264.116373][T16786] random: crng reseeded on system resumption [ 264.142653][T16786] PM: hibernation: Image mismatch: memory size [ 264.359097][T16801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3218'. [ 264.363065][T16801] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3218'. [ 264.366853][T16801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3218'. [ 264.448253][ T55] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 264.454212][T16807] netlink: 'syz.1.3220': attribute type 7 has an invalid length. [ 264.504145][ T40] audit: type=1800 audit(1764516285.278:55682): pid=16811 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3222" name="nullb0" dev="tmpfs" ino=749 res=0 errno=0 [ 264.578367][ T5934] Bluetooth: hci3: command tx timeout [ 264.580621][T16814] 9pnet_virtio: no channels available for device 127.0.0.1 [ 264.587842][T16814] 9pnet_fd: Insufficient options for proto=fd [ 264.598333][ T55] usb 9-1: Using ep0 maxpacket: 16 [ 264.603353][ T55] usb 9-1: config 9 has an invalid interface number: 243 but max is 0 [ 264.606652][ T55] usb 9-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 264.610731][ T55] usb 9-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 264.614829][ T55] usb 9-1: config 9 has no interface number 0 [ 264.617459][ T55] usb 9-1: config 9 interface 243 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 264.622064][ T55] usb 9-1: config 9 interface 243 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 264.626573][ T55] usb 9-1: config 9 interface 243 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 264.631257][ T55] usb 9-1: config 9 interface 243 altsetting 4 endpoint 0x9 has invalid wMaxPacketSize 0 [ 264.635457][ T55] usb 9-1: config 9 interface 243 altsetting 4 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 264.640043][ T55] usb 9-1: config 9 interface 243 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 264.645345][ T55] usb 9-1: config 9 interface 243 altsetting 4 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 264.650439][ T55] usb 9-1: config 9 interface 243 has no altsetting 0 [ 264.655376][ T55] usb 9-1: New USB device found, idVendor=0fd9, idProduct=003f, bcdDevice= 1.8f [ 264.658754][T10965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.662871][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.666500][ T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.669923][ T55] usb 9-1: Product: 䀁 [ 264.671726][ T55] usb 9-1: Manufacturer: ᐬᔝ웙⬺横鞩埨ሹ먡箤`橪煴ᠬ朋墛麝䍘㡗ꀡ탰䌪㊏쾱⡌놶浔غ⨕邺鏸퍈㧅啛仅밃↘ӭ虣磁ﺑ㶜僜媚ᨼ欨餲焛뇏ⲫा볻㦳僉⤽웥๵멞햹઄앙䠄ḇ䬣鈀芖槂鴅舻Ὕ꩷냿⎙㿏㦷굼참븍퓾䌑徽繀诚瘢啐⦩櫴殺烲紴䍍dz㗴神⎑ [ 264.687545][ T55] usb 9-1: SerialNumber: syz [ 264.688185][T16814] /dev/nullb0: Can't lookup blockdev [ 264.870335][ T40] audit: type=1326 audit(1764516285.648:55683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16819 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1458f749 code=0x7ffc0000 [ 264.880129][ T40] audit: type=1326 audit(1764516285.648:55684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16819 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1458f749 code=0x7ffc0000 [ 264.889855][ T40] audit: type=1326 audit(1764516285.648:55685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16819 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc1458f749 code=0x7ffc0000 [ 264.900098][ T40] audit: type=1326 audit(1764516285.648:55686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16819 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1458f749 code=0x7ffc0000 [ 264.910376][ T40] audit: type=1326 audit(1764516285.648:55687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16819 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7efc1458f749 code=0x7ffc0000 [ 264.921163][ T40] audit: type=1326 audit(1764516285.648:55688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16819 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1458f749 code=0x7ffc0000 [ 264.923405][ T55] dvb-usb: found a 'Elgato EyeTV DTT rev. 2' in cold state, will try to load a firmware [ 264.930364][ T40] audit: type=1326 audit(1764516285.648:55689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16819 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc1458f749 code=0x7ffc0000 [ 264.930400][ T40] audit: type=1326 audit(1764516285.648:55690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16819 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1458f749 code=0x7ffc0000 [ 264.930421][ T40] audit: type=1326 audit(1764516285.648:55691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16819 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc14591667 code=0x7ffc0000 [ 264.930443][ T40] audit: type=1326 audit(1764516285.648:55692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16819 comm="syz.5.3225" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7efc145915dc code=0x7ffc0000 [ 264.985536][ T55] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 264.989681][ T55] dib0700: firmware download failed at 7 with -8 [ 265.000289][ T55] usb 9-1: USB disconnect, device number 20 [ 265.168170][T16836] binfmt_misc: register: failed to install interpreter file ./file0 [ 265.224544][T16839] lo: entered allmulticast mode [ 265.227344][T16838] lo: left allmulticast mode [ 265.471401][T16850] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=257 sclass=netlink_xfrm_socket pid=16850 comm=syz.4.3234 [ 265.541641][T16855] vlan2: entered allmulticast mode [ 265.543381][T16855] veth0_to_bond: entered allmulticast mode [ 265.581956][T16861] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 265.587801][T16861] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.653068][T16864] netlink: 'syz.0.3237': attribute type 2 has an invalid length. [ 265.699940][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.799821][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.848269][T16890] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 266.011439][T16898] cgroup: subsys name conflicts with all [ 266.418626][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.465089][T16923] futex_wake_op: syz.1.3253 tries to shift op by -1; fix this program [ 266.748622][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.754476][ T839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.760352][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.709124][ T8979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.713280][ T839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.720202][ T839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.778612][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.858280][T16882] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 268.761730][T16882] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 268.764364][T16882] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 268.777298][T16882] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 268.783157][T16882] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 268.785412][T16882] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 268.793070][T16882] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 268.828608][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.900779][ T5934] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 268.907764][T16939] netlink: 'syz.0.3259': attribute type 2 has an invalid length. [ 269.065435][T16953] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 269.069282][T16951] __nla_validate_parse: 9 callbacks suppressed [ 269.069293][T16951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3263'. [ 269.075987][T16951] IPVS: set_ctl: invalid protocol: 94 172.30.0.1:20002 [ 269.078041][T16954] [ 269.079269][T16954] ====================================================== [ 269.082488][T16954] WARNING: possible circular locking dependency detected [ 269.085507][T16954] syzkaller #0 Not tainted [ 269.087502][T16954] ------------------------------------------------------ [ 269.090404][T16954] syz.5.3262/16954 is trying to acquire lock: [ 269.092873][T16954] ffff8880474d0068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 269.095548][T16954] [ 269.095548][T16954] but task is already holding lock: [ 269.097930][T16954] ffff888105ad2420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x27d/0x360 [ 269.100890][T16954] [ 269.100890][T16954] which lock already depends on the new lock. [ 269.100890][T16954] [ 269.104648][T16954] [ 269.104648][T16954] the existing dependency chain (in reverse order) is: [ 269.108459][T16954] [ 269.108459][T16954] -> #4 (sb_writers#6){.+.+}-{0:0}: [ 269.111939][T16954] mnt_want_write+0x6f/0x450 [ 269.114200][T16954] ovl_create_object+0x12c/0x300 [ 269.116680][T16954] lookup_open.isra.0+0x11d3/0x1580 [ 269.119139][T16954] path_openat+0x893/0x2cb0 [ 269.121423][T16954] do_filp_open+0x20b/0x470 [ 269.123556][T16954] do_sys_openat2+0x11b/0x1d0 [ 269.125323][T16954] __x64_sys_openat+0x174/0x210 [ 269.127018][T16954] do_syscall_64+0xcd/0xfa0 [ 269.128764][T16954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.130859][T16954] [ 269.130859][T16954] -> #3 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}: [ 269.133988][T16954] down_read+0x9b/0x480 [ 269.135471][T16954] walk_component+0x345/0x5b0 [ 269.137151][T16954] path_lookupat+0x142/0x6d0 [ 269.139003][T16954] filename_lookup+0x224/0x5f0 [ 269.140656][T16954] kern_path+0x35/0x50 [ 269.142173][T16954] lookup_bdev+0xd8/0x280 [ 269.143765][T16954] resume_store+0x1d6/0x460 [ 269.145453][T16954] kobj_attr_store+0x58/0x80 [ 269.147641][T16954] sysfs_kf_write+0xf2/0x150 [ 269.149726][T16954] kernfs_fop_write_iter+0x3af/0x570 [ 269.151973][T16954] vfs_write+0x7d3/0x11d0 [ 269.153725][T16954] ksys_write+0x12a/0x250 [ 269.155550][T16954] do_syscall_64+0xcd/0xfa0 [ 269.157331][T16954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.159437][T16954] [ 269.159437][T16954] -> #2 (&of->mutex){+.+.}-{4:4}: [ 269.161832][T16954] __mutex_lock+0x193/0x1060 [ 269.163629][T16954] kernfs_seq_start+0x4f/0x2a0 [ 269.165366][T16954] seq_read_iter+0x2c1/0x12d0 [ 269.167073][T16954] kernfs_fop_read_iter+0x46c/0x610 [ 269.168925][T16954] copy_splice_read+0x618/0xc20 [ 269.171043][T16954] do_splice_read+0x285/0x370 [ 269.173159][T16954] splice_direct_to_actor+0x2a1/0xa30 [ 269.175162][T16954] do_splice_direct+0x174/0x240 [ 269.176932][T16954] do_sendfile+0xb06/0xe50 [ 269.178583][T16954] __x64_sys_sendfile64+0x1d8/0x220 [ 269.180451][T16954] do_syscall_64+0xcd/0xfa0 [ 269.182165][T16954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.184416][T16954] [ 269.184416][T16954] -> #1 (&p->lock){+.+.}-{4:4}: [ 269.187152][T16954] __mutex_lock+0x193/0x1060 [ 269.189352][T16954] seq_read_iter+0xe1/0x12d0 [ 269.191492][T16954] proc_reg_read_iter+0x11b/0x310 [ 269.193817][T16954] copy_splice_read+0x618/0xc20 [ 269.196070][T16954] do_splice_read+0x285/0x370 [ 269.198207][T16954] splice_file_to_pipe+0x109/0x120 [ 269.200508][T16954] do_sendfile+0x400/0xe50 [ 269.202619][T16954] __x64_sys_sendfile64+0x1d8/0x220 [ 269.204711][T16954] do_syscall_64+0xcd/0xfa0 [ 269.206744][T16954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.209365][T16954] [ 269.209365][T16954] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 269.211700][T16954] __lock_acquire+0x126f/0x1c90 [ 269.213688][T16954] lock_acquire+0x179/0x350 [ 269.215852][T16954] __mutex_lock+0x193/0x1060 [ 269.217958][T16954] pipe_lock+0x64/0x80 [ 269.219533][T16954] iter_file_splice_write+0x1ea/0x12e0 [ 269.221944][T16954] do_splice+0x1478/0x1fc0 [ 269.223968][T16954] __do_splice+0x27d/0x360 [ 269.225793][T16954] __x64_sys_splice+0x187/0x250 [ 269.227776][T16954] do_syscall_64+0xcd/0xfa0 [ 269.229737][T16954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.231842][T16954] [ 269.231842][T16954] other info that might help us debug this: [ 269.231842][T16954] [ 269.235630][T16954] Chain exists of: [ 269.235630][T16954] &pipe->mutex --> &ovl_i_mutex_dir_key[depth]#2 --> sb_writers#6 [ 269.235630][T16954] [ 269.240737][T16954] Possible unsafe locking scenario: [ 269.240737][T16954] [ 269.243730][T16954] CPU0 CPU1 [ 269.245883][T16954] ---- ---- [ 269.248223][T16954] rlock(sb_writers#6); [ 269.249974][T16954] lock(&ovl_i_mutex_dir_key[depth]#2); [ 269.253191][T16954] lock(sb_writers#6); [ 269.256069][T16954] lock(&pipe->mutex); [ 269.257780][T16954] [ 269.257780][T16954] *** DEADLOCK *** [ 269.257780][T16954] [ 269.261046][T16954] 1 lock held by syz.5.3262/16954: [ 269.263219][T16954] #0: ffff888105ad2420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x27d/0x360 [ 269.267821][T16954] [ 269.267821][T16954] stack backtrace: [ 269.270096][T16954] CPU: 0 UID: 0 PID: 16954 Comm: syz.5.3262 Not tainted syzkaller #0 PREEMPT(full) [ 269.270159][T16954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 269.270166][T16954] Call Trace: [ 269.270172][T16954] [ 269.270180][T16954] dump_stack_lvl+0x116/0x1f0 [ 269.270195][T16954] print_circular_bug+0x275/0x350 [ 269.270216][T16954] check_noncircular+0x14c/0x170 [ 269.270236][T16954] __lock_acquire+0x126f/0x1c90 [ 269.270248][T16954] lock_acquire+0x179/0x350 [ 269.270257][T16954] ? pipe_lock+0x64/0x80 [ 269.270269][T16954] ? __pfx___might_resched+0x10/0x10 [ 269.270283][T16954] ? pipe_lock+0x64/0x80 [ 269.270292][T16954] __mutex_lock+0x193/0x1060 [ 269.270303][T16954] ? pipe_lock+0x64/0x80 [ 269.270315][T16954] ? __pfx___mutex_lock+0x10/0x10 [ 269.270327][T16954] ? rcu_is_watching+0x12/0xc0 [ 269.270341][T16954] ? trace_kmalloc+0x2b/0xd0 [ 269.270352][T16954] ? __kmalloc_noprof+0x34f/0x880 [ 269.270368][T16954] ? pipe_lock+0x64/0x80 [ 269.270377][T16954] pipe_lock+0x64/0x80 [ 269.270387][T16954] iter_file_splice_write+0x1ea/0x12e0 [ 269.270400][T16954] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 269.270415][T16954] ? preempt_schedule_thunk+0x16/0x30 [ 269.270431][T16954] ? preempt_schedule_common+0x44/0xc0 [ 269.270449][T16954] ? __pfx_iter_file_splice_write+0x10/0x10 [ 269.270460][T16954] ? __lock_acquire+0xb8a/0x1c90 [ 269.270474][T16954] ? __pfx_iter_file_splice_write+0x10/0x10 [ 269.270485][T16954] do_splice+0x1478/0x1fc0 [ 269.270497][T16954] ? find_held_lock+0x2b/0x80 [ 269.270509][T16954] ? __might_fault+0xe3/0x190 [ 269.270524][T16954] ? __might_fault+0x13b/0x190 [ 269.270548][T16954] ? __pfx_do_splice+0x10/0x10 [ 269.270565][T16954] __do_splice+0x27d/0x360 [ 269.270576][T16954] ? __pfx___do_splice+0x10/0x10 [ 269.270588][T16954] __x64_sys_splice+0x187/0x250 [ 269.270600][T16954] do_syscall_64+0xcd/0xfa0 [ 269.270611][T16954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.270623][T16954] RIP: 0033:0x7efc1458f749 [ 269.270632][T16954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.270642][T16954] RSP: 002b:00007efc127b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 269.270653][T16954] RAX: ffffffffffffffda RBX: 00007efc147e6180 RCX: 00007efc1458f749 [ 269.270659][T16954] RDX: 000000000000000b RSI: 0000000000000000 RDI: 000000000000000a [ 269.270665][T16954] RBP: 00007efc14613f91 R08: 0000000000000006 R09: 0000000000000000 [ 269.270671][T16954] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 269.270678][T16954] R13: 00007efc147e6218 R14: 00007efc147e6180 R15: 00007ffd7d14daa8 [ 269.270687][T16954] [ 269.938191][ T5934] Bluetooth: hci2: command 0x0c1a tx timeout [ 270.828231][ T5934] Bluetooth: hci3: command 0x0c1a tx timeout [ 270.898589][ T6002] net_ratelimit: 3 callbacks suppressed [ 270.898600][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.904057][ T7550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.907765][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.910892][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.938510][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.028257][ T5934] Bluetooth: hci2: command 0x0c1a tx timeout [ 272.908186][ T5934] Bluetooth: hci3: command 0x0c1a tx timeout [ 272.979043][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.778519][ T839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.018300][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.098875][ T5934] Bluetooth: hci2: command 0x0c1a tx timeout [ 274.978222][ T5934] Bluetooth: hci3: command 0x0c1a tx timeout [ 275.068220][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.100942][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.818895][ T839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.138629][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.178262][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog