last executing test programs: 2m22.76012204s ago: executing program 3 (id=2966): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3a, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) ppoll(&(0x7f0000001400)=[{r0, 0x2420}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x2, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) shutdown(r0, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3a, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) (async) ppoll(&(0x7f0000001400)=[{r0, 0x2420}], 0x1, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x2, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0) (async) 2m22.710217696s ago: executing program 3 (id=2968): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r2, &(0x7f0000000400)=[{0x0}, {&(0x7f00000007c0)="85a5", 0x2}], 0x2, 0x2ffffc, 0x7) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r3) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10, 0x800) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f00000013c0), 0x440000, 0x0) r6 = eventfd2(0x38f75008, 0x801) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001b40)={{0xffffffffffffffff, &(0x7f0000001480)='\x00', 0x2, &(0x7f00000014c0)={@_ha_fsid={[0x9, 0x100]}, {0xc000, 0xb024, 0x7, 0x9}}, 0x5, &(0x7f0000001500), &(0x7f0000001540)=0x2}, 0x4, &(0x7f0000001ac0)=[{0x1, 0x5, &(0x7f0000001580)='GPL\x00', &(0x7f0000001e00)="d66dd6743861ae906144031cba739ad7e0b9b5a7dc8b22430b9e751975a3e9e4db75886823ca015f8ac2b29d955b09e7267eeb85edfbf513a4e2d2af4742115d11a5efa7189db6ee4df49c34e64eee0e4269950f46", 0x55, 0xa}, {0x3, 0x7, &(0x7f0000001600)='\x00', &(0x7f0000001640)="0251f837fdeeb4af9461392bd5c4601874cd9bd0e265e063f015950a0c231155a0155828f4d9845cddaa908d206d5859d1600c8f6a6953b12a84d82f5b5dad1753cb12c261aa0881acafcaca26d0efa2f8abbffb025cd85cffab5519813e5ee5cce449cb418d7cdefaf0bf228354bb70ed8aefdb509ee1e619979e209c547f36d9f1959f5d6e055c6f7001a2d7ab8b0fea52bf105bf6498182bf799282b09e3e498877b6f416b2bb59623989dd1be5563679779ef56bc5f938467b195a3662a1bf92bc364c829a9f4a9400e97ea8967a885b537d7f0c441be3f60eadc0d6fa7b1b2b8e6b22124c0b", 0xe8, 0x8}, {0x1, 0x6, &(0x7f0000001740)='%#%/.[\x00', &(0x7f0000001880)="7f500ee96ad158c2f8f4daab3727c19b6b5451aeee749b5d9d5e2b7ab52ecfa8f5495dec7c9a0919935bf8829da5ccdc034153c65c561a967023b49bef7b72b58e4370a31a36351d749075a316de5671d77f732a6da86505254bc9882e313b95c06c747001ed9fe501ab13d55b1440d11a85f45f73c496fc2cd4039ed8c3e42209cb8b47ec9bfbb4e5213dae78feb852800004e3c7975c905aaa8c0051c1e558d0553f3b19458d9ef5032ee6f134b24eddb162e1b3c310c06f03a7c7783ecfead16e82fb0e6d1bd0c06fdccb1679c148e97f630b2704e0242295079c85d08bb09f6317f7cac149b80647e5cf", 0xec, 0x2a}, {0x2, 0x9, &(0x7f0000001980)='GPL\x00', &(0x7f00000019c0)="fd3956e2b996e07dc66a6672c9e6989db851227274cc01eeed907d38568e6008370da41e33b4cf62425583e1a49ca40958f2f07fd67fe46bed719faa7646c19b513423d12324d7dc41b31bd1f0f440c63e8acae6883cde1d393d5ea6160d8ac829e278695d88be65e834ae297356546b032fff50defe8777071e41d0201e5759aefda5bc67ceec794225884123f8b0a2c39ab969b7aa37556b4224b6b6222485e5871a1bd3fd1fa614b7060a4d9eedd18f14afa2551c3e6598da246908477391aeca89d61ddf4cccb9506cd3f969b5ca385fd66ea417c71517533c4eddac9f6f81b65f6bc1a147091f6a6a71c3cd143506599b41842e5a", 0xf7, 0x20}]}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x48020200) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2, 0x0, 0x9}) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) preadv(r11, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r11, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = eventfd2(0xa, 0x0) io_submit(r3, 0x5, &(0x7f0000001dc0)=[&(0x7f00000012c0)={0x0, 0x0, 0x0, 0x8, 0x1, r4, &(0x7f0000000100)="f318c2a637b868c54a145ae5bfd740012369db853d951573ffcef4eb836b9dbe14992bfceca9c1a0281d082fc232d5f46320703017aaaaddbe01afb845f3f9f97777c1981940faa231eb1ebcbf585e4b68d7497fd2989827434bfb847794dd0d74938ab0dbf670570d645e0604bf6c80b6d1e0a400adbea1d13b4f830e6ae7822fd6d6f3e92ca313852e72b269a2def9fbf8f0a9339c5fbc6bfb065e5b65d724c97593506f2b044be7a7a7d11d3b", 0xae, 0x8, 0x0, 0x2}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000001300)="6feca446fb225408db319254a3bd99477c5835c5f6c993cd5de149595e0ffbdfd51d61ea36b390157dec44e4b2f9e7307207f9103ac942c1c2ee8924190168805f8bfb0625fca2c5876f968ff19579a6ff8dbbf94a17c519399de9264b96db84b1f19e", 0x63, 0x7ff, 0x0, 0x3}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x6, 0x4, r5, &(0x7f0000001400)="095519bf1e96f6612381af973038ee863aa621dc3521b8bf2b45026d760c1113a9651488b33852088db6afa85579d4dd459d7ffe", 0x34, 0x9, 0x0, 0x3, r6}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x1, 0x8000, r7, &(0x7f0000001bc0)="5c9dcd50747c469bfd9c8def2a874060eee4112608db646e7d15cca5c0073b8628c7ce43f90fe22959869ebcbfd3491f993fde26bf5a87d6a2051ed5fed9f1f0b85fb192f4132c18accf5cfe9ddc1f6f239ee2b5619b27291202f10dece133a7030289", 0x63, 0xa, 0x0, 0x2}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x1, 0x2, r8, &(0x7f0000001c80)="7136320ae4cacfb4fd07b54d665808c8bf05323fd868910002902b26231224ca88c62fa95934e7e5d28bfead12b1678c4083a5f3f5024abbe4eff54f330f8c62b0ab13cb574b840bd16dd8dc304d27c9b981faa46988fb6f23928e19c6e4fc1fab639aa8937cbb6e471bd3a581d846c7c89fe84ba698af3cd48e7994b717eb4d077649dde84f5bd989c9c667c5d231999fdca399215d7bda26a378e5afd36fc1e1ac534dab5af44b74d121e62f32747599d73cbdbe46a554cb3236ac85d8aa91cd0f173cac4177cabb0661b6", 0xcc, 0x6, 0x0, 0x1, r13}]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2m21.691054213s ago: executing program 3 (id=2973): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20004cc1}, 0x4040010) 2m21.610939629s ago: executing program 3 (id=2974): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m21.541045653s ago: executing program 3 (id=2975): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x0) 2m21.540134025s ago: executing program 3 (id=2976): r0 = socket(0x18, 0x1, 0xffff0000) getsockopt(r0, 0x200000000114, 0x2718, 0x0, &(0x7f0000000100)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) splice(r0, &(0x7f0000000080)=0x9e0, r1, &(0x7f0000000140)=0x7, 0x800, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) chdir(&(0x7f0000000100)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) (async) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x0, 0x0, 0xb}) close_range(r2, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x13, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a8d25"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) (async) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x13, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a8d25"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RVERSION(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000065ffff"], 0x41) (async) write$P9_RVERSION(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000065ffff"], 0x41) 2m12.350417661s ago: executing program 0 (id=3027): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 2m12.344991852s ago: executing program 0 (id=3029): r0 = syz_open_pts(0xffffffffffffffff, 0x80d00) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x6, 0x2, 0x6dc, 0x3, 0x9, 0x81d}) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0x9}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffb) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000080)=0xb8f) (async, rerun: 64) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)="dec5a7ef6029956757255090600ad1ca169313dba8e0071b99cf1cb3ee191d1dcdb8ac39232921597a09a9814c1da2beac510cfd3e35659539aea52195e9b04afbe9e20467897fd3041536035d23dde516eaefe4fab59fea3dcf55492cd6ec343da303672143dddc7755979f92ecfdbf6f") (async, rerun: 64) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000000200)={&(0x7f00000001c0)=[{&(0x7f0000000140)="9dea9b1c4d711b8c55f6810b4f585f1fc761191d86bb1963c0fd624620fce78995ce33bf2b4fde6ac29fdbc46e14f6ce76a094e0e7aeac6f8b9e69980d37cd2cbef4", 0x42}], 0x1, 0x7, 0x0, 0x8, 0x400, 0x9, 0x5, 0x7fff}) (async) r2 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x30000) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f00000002c0)=0x3) (async, rerun: 32) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x2e, 0x1, 0x9, &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001f40)={{r0, &(0x7f00000004c0)='/dev/nbd#\x00', 0x244b41, &(0x7f0000000500)={@align=0x7581, {0x2, 0x1ff, 0x81, 0x1ba}}, 0x6c6eda69, &(0x7f0000000540), &(0x7f0000000580)=0x80000000}, 0x9, &(0x7f0000001e00)=[{0x3, 0x8, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="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", 0x1000, 0x8}, {0x1, 0x4, &(0x7f0000001600)='#.\x00', &(0x7f0000001640)="bdc20919bb42bd686fa05c50e5bb05aa7e25b0fe0ce40c31d1b044b16e2c3cf39a60100cee3885f6ff011fbf9008cc7400eff24978a2eb9b7ae354948c39d188d53322baba298da6c307b574ad44abea39e2f4d61a0ef61915b0898b7d14e1ed3f598e919d81b7c3f369c2ee6044a017e40eeec19c43d4964fb9ed697ddd3127bf5a0456e99aeee7f0fc81e24269ba26f3eea685e3b833f0366e9e0157b1e5ef942ebada5cb7e483cfa272b13038fe69925dec201848d01e407bf200bb0e7ddc3ff24ffbdae6ed606fa5450155f92461e05d0254d85742dc188d9c383d52385b83c377975ccb6ea5b3e6f51f867bbfe59fb10ddd9573", 0xf6}, {0x3, 0x3ba, &(0x7f0000001740)='\x00', &(0x7f0000001780)="ab97b63e277814e74e4b0fda11d910740cbf8f0455a4d6346dc0f9f05653898e6dd3e0db5c4d4aec670a041d55707bf1dafb72a6588081b64369bf945e5cd3829db36101ffa44ab0a27d06b364dfc6c7ef71be9f4646ff0a7cb2874fe57f13248981018e0bd69a397b87bab5f3cfa191db1cedb275c88af4c3b5fc72771fe5a2b6dfca1a0ce02b6a4325dd5c607d7d0f8fbebb42618297bd233016e6c54885f81983f58e83528dcee63f0afd5b727a6a31d0ec7549cf281449a80eb1b858eeb2f92ec7dfa37a", 0xc6, 0x18}, {0x3, 0xb750, &(0x7f0000001880)='/dev/nbd#\x00', &(0x7f00000018c0)="67ca24773cdc51d41bd2e276269b1f258b380e5aaa3f20d302db563428c62c79c1741501ef5ef8427402064c6de80e7fd8c2e27792321ccbf1a689e314e90e477046a3cdf80ca79aacb4ddb804080364cd6d7d15f3e892f156151050f074dc5717bae90e14f4156540237ed57ed188af63570987d7c2f5620dbabc394871cc4e66243f57", 0x84, 0x28}, {0x3, 0x1, &(0x7f0000001980)='\x00', &(0x7f00000019c0)="f33be9cfa2b09aacf67fe9c879e70c2d9e5e1299c9f74a6c04ec95b65f8cfde006e9074084c5036bffee4cbc79b1fa4a24dcdf5e3681a4010a707191e65c77dc8bb41e65e32d1f31301661b336020a4551854fa7a79f62aba411cb39c50abb243a292c451fa9dbce661028c6b53a6669216e6ae5f3", 0x75, 0x12}, {0x3, 0x9, &(0x7f0000001a40)=':!\\\xfd]]:*^.+,^$\x00', &(0x7f0000001a80)="72adb74ac28d0490b3cd31a363f2a5c481ac455696265dd9b8a738a2876a67503b164f5bfb0d47ae4fd6ddb159c9964b2181415a25b343ad1e7b2533e5b56b16bfe5a5be9648164c7c16ebd9064ea5ca63b6dba99e23410576009f0be3a6a18bfb3195377d584b6ba9374558dd93b145e6b0cf2ff683a3b246ee56382c39492fa3ef03e8", 0x84, 0x38}, {0x1, 0x10001, &(0x7f0000001b40)='\x00', &(0x7f0000001b80)="bc706bf15d876a7db7853d367debe81785b8a63bd4de651e2fe9a8e5e9e5504c2f6af362ff77fc5afe7baf9acc42e0aa999f858a2098ea5f8862d1bdfcd9fdac26d4e69767237b54748bd8419d6f643826887e7077b01b1a39437d28ddaf5d35dbe8db2ef1f985bbbc720483fd3f9973d5a39839ef591d3744b186d0", 0x7c, 0x8}, {0x1, 0x6, &(0x7f0000001c00)='\x00', &(0x7f0000001c40)="123d729f7acb1bc8833a3cde7f5969f287fdf3ab5054b827da109db9731923b2133cac3cffde6e6c01e9563e1aa7bace9592ac38361adc41c38ab8257214ab94ec4004300e610b45001516db22123417f36f4efd48a30b1312b4eba4a646f4b36c23a7b2ff0c5207f496e30b68b92af860dbad115190c2193c84189edbcf0a34e9a8f46f6a4d3b9cc37bccee018df82b01d849650d7ba52196e33075290ec92ae4a47806cb700d96f7441f6c5fb80569b740c91b76e91508c0061f4e32767c8e36c9ce206640c49e4b58949e6152ce9d1a537e812a6209336344187fa345cece34bc74afdd8858075aab7ec67ef492", 0xef, 0x2a}, {0x1, 0x4d, &(0x7f0000001d40)='!,)\x00', &(0x7f0000001d80)="e3560ec843bc7e9c773446803e0006de13dcb87f154a274a222c21d16e75a0403cefcd0f11d0f48e1bc0c6ec1165bcf085f0de537fc82ef109618864068ff988b37fe53ebd9fc9ab61fda4538f3da7b2fb1cc4c93ff8c71f01648bebb24ab439f42e15f72c0d423bae6e1e94d497831db2885230cefc", 0x76, 0x8}]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@cgroup, r3, 0x24, 0x5, 0xffffffffffffffff, @void, @value=r5, @void, @void, r4}, 0x20) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000002000), r5) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000002040)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000002080)={'wg0\x00', 0x0}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000020c0)={'team0\x00', 0x0}) (async) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000002100)={@initdev, @multicast1, 0x0}, &(0x7f0000002140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000002180)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000021c0)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000002440)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002400)={&(0x7f0000002200)={0x1ec, r6, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r11}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc56}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf27}}, {0x8, 0x6, r12}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0xc004}, 0x40004) (async) r13 = open(&(0x7f0000002480)='./file0\x00', 0x189c00, 0x1c1) (async) gettid() ioctl$SNDRV_TIMER_IOCTL_INFO(r13, 0x80e85411, &(0x7f00000024c0)) (async) r14 = openat$zero(0xffffffffffffff9c, &(0x7f00000025c0), 0x100000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r14, 0x84, 0xb, &(0x7f0000002600)={0x8b, 0xfe, 0x8, 0xfb, 0x54, 0x0, 0xc1, 0xa, 0x5, 0x5, 0x5, 0xbc, 0x9, 0x9}, 0xe) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000002640)={0x1, 0x226}) (async) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000002680)={'wlan1\x00'}) (async, rerun: 64) ioctl$KDSKBLED(r1, 0x4b65, 0x3) (rerun: 64) 2m12.248554884s ago: executing program 0 (id=3031): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000000)={0xf, 0x10, 0x0, 0x1, "63eef4e1a4b6b068f0f47d3319471d190105b9eb363062b7fc217a402446beb7"}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f0000000480)=0x80, 0x80800) ioctl$KDMKTONE(r10, 0x4b30, 0x5e000) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x5}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r11, 0x84, 0x13, &(0x7f0000000380)={r12, 0x89da}, &(0x7f00000003c0)=0x8) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="693d26bd7000fcdbdf256d00000008000300", @ANYRES32=r9, @ANYBLOB="f4549af1ce82be1b3acea3b57922d8b832a6802594aa45e16fb368a7b7f73204413d6c94d26038402bac3ad3a4739f43c41c7761ccd2a287eab43ce15c29aec647f38e657f6e230c88c936ff9812688f66c476e9476c51f47c1480780f75d0dd456f8eea2e378cdf5598fab6536d77e78c34ee5be7b274f0e8cb1fb17ab34cd35f2068ca7895ca7d8c8f8df1456dceb26d8d937154d9fd80cf330000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x40) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r13, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r14}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000004c0)=@sco, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000540)='Fg', 0x2}, {&(0x7f00000005c0)="77f2d904031b91bb4d14562efd893b670c60a22edf23b1a4e5e633f1", 0x1c}, {&(0x7f0000000780)="77f942b2ccf662d310fe537772e65f5bdec76b390bd24c056b788d0a6c875350dd9e0ee0c57557a6e932eabf8c340df7d8dda61482db67edd178cbbdde529df007e2d76aa00ea370f404ed0fec9cd7c9668717bd41cb954db86f2b90d5fb75db2e4d41a9c4b7370bb07e56f9f1293fc713f1bbac05cdd2305609f8dbecba23853dab836a430ca8844e527675aea5457db6440f61c03fa647f16176d64c30db828df5df5103679b93e5bb7fe83cda412fa4efc29e", 0xb4}, {&(0x7f0000000840)="10f7b9e3b00991a9158ccdac51ad365f59da7e22148e81ddbe6080b4c0eb746e5d4491fbc477da0312f6d42d55f6792e55045d135f47b92e9ab8e28f487d8ccf98424da99507cb67359d96bc0667a1481dbdf696131d7e", 0x57}, {&(0x7f00000008c0)="608a52729844b9c57cf5d4b9e83b9a68537e9279e34a8a3b7edf2ce74cc4f7c08fa2b3dba049f4291665d5d7fdd81e4b98a5c44fed9fde35436f06e16e10f1728a1466c6dbb6499f16f2990fc72ec05efdf4c5c562f54ddf7cc8071373984a388c8b7e246d964524b644a93877b60c88230903edaa283d88b09894ee43e6791048d4e1455b2aad8da360378756014360d788b2f741d4821addf8b6f8b26523132f38c898288c7c42be9cef052b6ff3ac2ba4bec5108a9e91b06c6deef4f99ea49356f1a54e33baa3151f9325ddbac826d27cb68de49ca98daac717c3d109b3df44afd1699455d95388865c31ac05", 0xee}], 0x5}, 0x4004) r15 = socket$packet(0x11, 0x2, 0x300) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendto$packet(r15, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x11, 0x88a8, r17, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x67}}, 0x14) sendmsg$nl_route(r16, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_getnexthop={0x4c, 0x6a, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r17}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8}, @NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x15afa420a2480840}, 0x4004001) 2m12.180552617s ago: executing program 0 (id=3033): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000040)={0x34, &(0x7f0000000100)=[{0x1d, '\x00', @buffer={"efd276c2de78a4b0520401e0b00a546c932af18fdc53e3ba9286f559d69b4b25", 0x20}, 0x2}]}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1800000015000100000000000000000002020000fc7a52df78f8cf3c108ac34262404395fb98f342260fa05ffc3b7fb681225da4ac9dc4ae27edc022725a378296517f6e98271bc2b4384c19fb4a31c68c5fe971cbdd079a29868c73cc148ab68715879713f575f00e2673676571b9cf4a9d792f668e06fd6a448d9fc1b29c56e8c281e0bd63aac4b8e6406799d47eae6ed0db8f2a16e341c2e6544dc23a7d38d9afd26fbcdc9205db27e1c75b785ff06d39fdf593b72611d5222ae08205aaa95c5001c08e94aed94dffb8", @ANYRES32=0x0], 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) (async) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000040)={0x34, &(0x7f0000000100)=[{0x1d, '\x00', @buffer={"efd276c2de78a4b0520401e0b00a546c932af18fdc53e3ba9286f559d69b4b25", 0x20}, 0x2}]}) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1800000015000100000000000000000002020000fc7a52df78f8cf3c108ac34262404395fb98f342260fa05ffc3b7fb681225da4ac9dc4ae27edc022725a378296517f6e98271bc2b4384c19fb4a31c68c5fe971cbdd079a29868c73cc148ab68715879713f575f00e2673676571b9cf4a9d792f668e06fd6a448d9fc1b29c56e8c281e0bd63aac4b8e6406799d47eae6ed0db8f2a16e341c2e6544dc23a7d38d9afd26fbcdc9205db27e1c75b785ff06d39fdf593b72611d5222ae08205aaa95c5001c08e94aed94dffb8", @ANYRES32=0x0], 0x18}}, 0x0) (async) 2m12.180033519s ago: executing program 0 (id=3034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setreuid(0xee01, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) madvise(&(0x7f0000bdd000/0x2000)=nil, 0x2000, 0xd) memfd_secret(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r3, r3, 0x0, 0x30) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r6 = dup(r5) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r6}, 0x18) ioctl$SOUND_PCM_READ_BITS(r6, 0x80045005, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket(0x2b, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x7, &(0x7f00000003c0)={0x0, 0x0, 0xb}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000022f0bae5670bc7f8f890239d673939dd610300000000000000880000000000000000000000000001ff010000000000000000000000000001"], 0x3a) 2m11.861168397s ago: executing program 0 (id=3035): r0 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005"], 0x178}}, 0x0) r2 = fsmount(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0487470c"], 0x7) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) statx(r2, &(0x7f0000000640)='./file1\x00', 0x1000, 0x80, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="cc010000100000012bbd7000fedbdf25fe800000000000000000000000000019000000000000000000000000000000004e2400004e24faad020080200c000000499ffcc7279a", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="00000000000000000000000000000001000004d62b000000e0000001000000000000000000000000090000000000000002000000000000000200000000000000b70000000000000000800000000000000400000000000000040000000000000005000000000000000200000000000000ff0f00000000000005c5d70f000000000700000000000000c5e00000008000000004000025bd700005350000020001010300000000000000a3001200726663373533396573702863686163686132302d61726d2c6362636d616328616573292900000000000000000000000000000000000000000000000000000000b802000000010000549da77a8a4506471742e4506fc40974e43fc475f5bb425f20ab4d0a122543dc9c7549b1a82f5417f539fec2a8e766f0c1bcbca22e16944d68d8c3d0c537b9efafbac5eaa756d5b243e4d83715706e1df493956a6cf8240008000c000000000028001a0064010100000000000000000000000000fe8000000000000000000000000000bb0a0009dd08001d0008000000"], 0x1cc}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a40)={'sit0\x00', 0x0, 0x0, 0x40, 0x0, 0x6, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x66, 0x7f, 0x5, 0x29, 0x0, @remote, @private=0xa010100}}}}) sendto$packet(r3, &(0x7f0000000980)="897f4930ab9723ea4be5c417f05215145469c75dbf30ae9bd466591f8e9bd99421441a2c04f3d6fd38a15936a6d02b24291d09560808e8879a70437186004a0f4be0b09edcc5f4eec18d057db93d4f4754043ecd7c2ce50bc3484face9602d6c36849302b85a2a272bd1d6531b75dca6051d038179cf6d1b873639b9fa0ce8a3869623ca16ab47e0e8abe2030f638c1b87af38861b6e9a6bbc9c89a5de8f1a7576ddc8cc6ef93298e410707f2b9db059bcce9e82ca4e41b364c5", 0xba, 0x20040014, &(0x7f0000000ac0)={0x11, 0x2, r11, 0x1, 0x9, 0x6, @local}, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x1, 0x49}]}]}, 0xfc}}, 0x0) r12 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200, 0x0) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) sendmsg$BATADV_CMD_SET_HARDIF(r12, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r13, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44084) socket$nl_xfrm(0x10, 0x3, 0x6) 2m11.837635601s ago: executing program 32 (id=3035): r0 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005"], 0x178}}, 0x0) r2 = fsmount(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0487470c"], 0x7) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) statx(r2, &(0x7f0000000640)='./file1\x00', 0x1000, 0x80, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="cc010000100000012bbd7000fedbdf25fe800000000000000000000000000019000000000000000000000000000000004e2400004e24faad020080200c000000499ffcc7279a", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="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"], 0x1cc}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a40)={'sit0\x00', 0x0, 0x0, 0x40, 0x0, 0x6, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x66, 0x7f, 0x5, 0x29, 0x0, @remote, @private=0xa010100}}}}) sendto$packet(r3, &(0x7f0000000980)="897f4930ab9723ea4be5c417f05215145469c75dbf30ae9bd466591f8e9bd99421441a2c04f3d6fd38a15936a6d02b24291d09560808e8879a70437186004a0f4be0b09edcc5f4eec18d057db93d4f4754043ecd7c2ce50bc3484face9602d6c36849302b85a2a272bd1d6531b75dca6051d038179cf6d1b873639b9fa0ce8a3869623ca16ab47e0e8abe2030f638c1b87af38861b6e9a6bbc9c89a5de8f1a7576ddc8cc6ef93298e410707f2b9db059bcce9e82ca4e41b364c5", 0xba, 0x20040014, &(0x7f0000000ac0)={0x11, 0x2, r11, 0x1, 0x9, 0x6, @local}, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x1, 0x49}]}]}, 0xfc}}, 0x0) r12 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200, 0x0) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) sendmsg$BATADV_CMD_SET_HARDIF(r12, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r13, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44084) socket$nl_xfrm(0x10, 0x3, 0x6) 2m6.44974148s ago: executing program 33 (id=2976): r0 = socket(0x18, 0x1, 0xffff0000) getsockopt(r0, 0x200000000114, 0x2718, 0x0, &(0x7f0000000100)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) splice(r0, &(0x7f0000000080)=0x9e0, r1, &(0x7f0000000140)=0x7, 0x800, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) chdir(&(0x7f0000000100)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) (async) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x0, 0x0, 0xb}) close_range(r2, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x13, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a8d25"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) (async) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x13, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a8d25"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RVERSION(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000065ffff"], 0x41) (async) write$P9_RVERSION(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000065ffff"], 0x41) 4.529629454s ago: executing program 1 (id=4019): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x2000, 0xa1) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020800000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480080007006e6174"], 0xc0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x23}, 0x48) 4.419266121s ago: executing program 1 (id=4020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8, ' \x00'}]}}, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000000, 0x32, 0xffffffffffffffff, 0xfb2f000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x6) r6 = fanotify_init(0x81, 0x40000) fanotify_mark(r6, 0x105, 0x40001032, r5, 0x0) read$FUSE(r6, &(0x7f0000002300)={0x2020}, 0x2020) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000012000100000800000000000010000000a9f15a0499d3"], 0x30}], 0x1, 0x0, 0x0, 0x4000}, 0x80) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r7, 0x4004480f, &(0x7f0000000000)=0x3) 1.36955582s ago: executing program 1 (id=4043): r0 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x3010, 0x0, 0x0, 0x2, 0x0, 0x2}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) 1.367234702s ago: executing program 1 (id=4046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="45d94d52a98d4908726ae5c6224144dd37392669f6a41a9d3eadda17a9a56c0bed361684d5e928a58363711c4fa9339f1830425ed916a9e2f6d47a2864db18e3b2f3979528309e05a9840fcf49f4a48efa440ffd5cadce6cb8f19e8eb1f8f7661a6c448f79178002bcb1cbf1c71b19a322eb1bc2822f3a8f001b5c3d6bc1312df08545d7b73b40c9e2de8cd9c81f9139a5db8532d322dd474956c0be6bdd54c6040622893c0000af0a300a4f9dfbb32f1411a19fd0b67eb44785bc68abf443", 0xbf}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async, rerun: 32) modify_ldt$write(0x1, &(0x7f0000000180)={0x94, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) (async, rerun: 32) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x4, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x100000, 0x9, 0x20000058, 0x6, 0x10000008}, 0x60}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 1.249909946s ago: executing program 1 (id=4047): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r8, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r9 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0) sendto$packet(r1, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r2}, 0x14) 769.92603ms ago: executing program 4 (id=4056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0x6000, 0x1a000}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x0, &(0x7f0000000180)=[0x6bd1a311, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x400005, 0x4, 0x401, 0x466c, 0x89004, 0x2, 0x4e, 0x400009, 0x2, 0x49, 0x100000000003, 0x5, 0x400000000002, 0x7fffffff, 0x8, 0x7, 0xc1, 0x8, 0xfffffffffffff000, 0xffffffffffffffff, 0x6, 0x7f, 0x96, 0xffffffff, 0xff, 0x0, 0x4, 0x4, 0x2, 0x3, 0x4000009, 0x8892, 0x1, 0x6, 0x46, 0x2001, 0xfffffffffffffff8, 0xa3de, 0x2cc0000000007ffb, 0x8, 0x5, 0x400, 0x6, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0xfffffffffffff068, 0x4, 0xe6, 0x200000000000101, 0x2, 0xd, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x3, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x5e7, 0xcdc, 0x100004000000007, 0x2, 0x3, 0x2, 0x10000, 0x9, 0x6, 0x4, 0x1, 0x81, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x80000005, 0x8061d, 0x8, 0x7, 0xf6, 0x4, 0x5, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332d, 0x6, 0x5, 0x7, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x20000000000013, 0x40000000000005, 0x8, 0x1, 0x6, 0x200eb4, 0x3, 0x1, 0xb68e, 0xcc, 0x8, 0x1000003]}) 768.533535ms ago: executing program 2 (id=4057): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000180)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 659.660181ms ago: executing program 2 (id=4059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x29, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001200210300"], 0x1c}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r2, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0) r4 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xb7a3, 0xc000, 0xc, 0x2, 0x0, r1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf1, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x102) ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{}, {}], 0x0, 0x0, 0x0}) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000040)={0x8, 0x4, {0x56, 0x40, 0x7d5a, {0x2, 0x10d2}, {0xfd, 0x100}, @ramp={0x7, 0x0, {0x1, 0x6, 0x800, 0x802}}}, {0x52, 0xac4, 0x0, {0x1116, 0x352}, {0xff7d, 0x7ff}, @cond=[{0x41, 0x5, 0x5, 0x4, 0x101, 0x3}, {0x2, 0x401, 0x0, 0xe, 0x400}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x7, 0x8}, {0x8, 0x7}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}]}, 0x3c}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=r5], 0xe4}, 0x1, 0x0, 0x0, 0xc051}, 0x20050840) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xffff, 0x40, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7}, 0x1}}, @TCA_IFE_DMAC={0xa}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 599.417004ms ago: executing program 2 (id=4061): keyctl$negate(0xd, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000300)="b9800000c00f3235000800000f302e0f0766b8b1008ee80f01cf26f30f09e3f366b891000f00d80fc76a30c74424000070ffffc744240200000100c7442406000000000f011424660f38800d05000000", 0x50}], 0x1, 0x43, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e079c0814"], 0xa) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000a0a01010000000000000000020000030900010073797a3000000000c18a97470b8a72"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x84) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000240), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$inet(r7, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000240), 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0xf00}, {&(0x7f00000002c0)="00000000008542f4cdb9eaa26519373f589fc2eb12c86e15e5d786493663546e514e6ad1b23e97c489", 0x5}], 0x2}}], 0x400000000000039, 0x8004) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000008f11d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26f20f090f30660fc775022e0fba600c980fd10f3566b857000f20c035000000800f22c0", 0x53}], 0x1, 0x0, 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet_opts(r8, 0x0, 0x14, 0x0, 0x0) futex_waitv(&(0x7f0000001140)=[{0x737854ef, &(0x7f0000000280)=0xca, 0x2}, {0x2, &(0x7f00000002c0)=0x8000000000000000, 0x82}, {0x4, &(0x7f0000000300)=0x2, 0x82}, {0x6, &(0x7f0000000340)=0xe, 0x82}, {0x6, &(0x7f0000000380)=0x7f, 0x82}, {0x8, &(0x7f00000003c0)=0xa1, 0x82}, {0x0, &(0x7f0000000400)=0x9}, {0xd43, &(0x7f0000000440)=0x5dbb9e53, 0x82}, {0x9, &(0x7f0000000480)=0x1, 0x2}, {0x6, &(0x7f00000004c0)=0x4, 0x2}, {0xa, &(0x7f0000000500)=0x7fffffff, 0x2}, {0xe, &(0x7f0000000540)=0x1, 0x2}, {0xfff, &(0x7f0000000580)=0x2, 0x82}, {0x2dcc, &(0x7f00000005c0)=0x6, 0x82}, {0x3, &(0x7f0000000600)=0x100000000, 0x2}, {0x7, &(0x7f0000000640)=0x4, 0x82}, {0x0, &(0x7f0000000680)=0x6, 0x2}, {0x0, &(0x7f00000006c0)=0x20000000000, 0x2}, {0x6, &(0x7f0000000700)=0xf, 0x82}, {0xa, &(0x7f0000000740)=0x7, 0x82}, {0x7, &(0x7f0000000780)=0x100, 0x2265c24d2b60139f}, {0x6, &(0x7f00000007c0)=0x2, 0x82}, {0x7, &(0x7f0000000800)=0x4, 0x82}, {0x80000000, &(0x7f0000000840)=0x3, 0x2}, {0xffffffffffffffff, &(0x7f0000000880)=0x1}, {0x1000, &(0x7f0000000940)=0x9, 0x82}, {0x0, &(0x7f0000000980)=0x25d, 0x2}, {0x1, &(0x7f00000009c0)=0x7fffffff, 0x82}, {0x9, &(0x7f0000000a00)=0x5af, 0x41}, {0x9, &(0x7f0000000a40)=0x4, 0x82}, {0x7fffffff, &(0x7f0000000a80)=0xfffffffffffffff8, 0x2}, {0x1, &(0x7f0000000ac0)=0xffff, 0x2}, {0x6, &(0x7f0000000b00)=0x2, 0x2}, {0xfffffffffffffffa, &(0x7f0000000b40)=0x7fff, 0x2}, {0x5, &(0x7f0000000b80)=0xf2d, 0x2}, {0x1, &(0x7f0000000bc0)=0x7, 0x82}, {0x1, &(0x7f0000000c00)=0x5, 0x82}, {0x6, &(0x7f0000000c40)=0xf, 0x2}, {0x5, &(0x7f0000000c80)=0xe, 0x2}, {0x932, &(0x7f0000000cc0)=0x2, 0x2}, {0x6, &(0x7f0000000d00)=0x8, 0x82}, {0x8, &(0x7f0000000d40)=0x40, 0x82}, {0x5, &(0x7f0000000d80)=0x5, 0x82}, {0x7, &(0x7f0000000dc0)=0x7, 0x82}, {0x592e, &(0x7f0000000e00)=0x4, 0x2}, {0xdc5, &(0x7f0000000e40)=0x5, 0x82}, {0xffffffff80000000, &(0x7f0000000e80)=0x7f, 0x2}, {0x1, &(0x7f0000000ec0)=0x6, 0x82}, {0xd, &(0x7f0000000f00)=0xffffffff, 0x82}, {0x4, &(0x7f0000000f40), 0x2}, {0xf9, &(0x7f0000000f80)=0xffffffffffffffff, 0x82}, {0x10, &(0x7f0000000fc0)=0x5, 0x82}, {0xeb, &(0x7f0000001000)=0x7ff, 0x2}, {0x2bae7926, &(0x7f0000001040)=0xd8e, 0x2}, {0xfffffffffffffff8, &(0x7f0000001080)=0x10000, 0x82}, {0x2, &(0x7f00000010c0)=0xde}, {0x493, &(0x7f0000001100)=0xa6d4d50, 0x82}], 0x39, 0x0, 0x0, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 598.192005ms ago: executing program 4 (id=4063): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000580)=""/24, 0x18}], 0x1) 490.013904ms ago: executing program 4 (id=4064): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002180)=0x0) (async) r1 = getuid() (async, rerun: 64) fstat(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) statx(0xffffffffffffffff, &(0x7f0000002580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x10, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) getresgid(&(0x7f0000003580), &(0x7f00000035c0), &(0x7f0000003600)=0x0) (async, rerun: 64) getresuid(&(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)=0x0) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000003700)='./file0\x00', &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) (rerun: 64) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000037c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private1}}, &(0x7f00000038c0)=0xe8) (async, rerun: 32) getgroups(0x7, &(0x7f0000003900)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xffffffffffffffff]) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000003940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000005980)='./file0\x00', 0x0, 0x7ff, &(0x7f00000059c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r12 = getgid() (async, rerun: 32) lstat(&(0x7f0000005e00)='./file0\x00', &(0x7f0000005e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000005fc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) getresgid(&(0x7f0000006000)=0x0, &(0x7f0000006040), &(0x7f0000006080)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006200)={&(0x7f0000002000)={0x50, 0x0, 0x2, {0x7, 0x2d, 0x3ff, 0x8000800, 0xffba, 0x0, 0xfffffff9, 0xf, 0x0, 0x0, 0x2, 0x7}}, &(0x7f0000002080)={0x18, 0xfffffffffffffffe, 0x2, {0x960}}, &(0x7f00000020c0)={0x18, 0x0, 0x564f0be9, {0x9}}, &(0x7f0000002100)={0x18, 0x0, 0xd, {0x1ff}}, &(0x7f0000002140)={0x18, 0x0, 0x3, {0x800}}, &(0x7f00000021c0)={0x28, 0x0, 0x95a, {{0x100, 0x1ff, 0x2, r0}}}, &(0x7f0000002200)={0x60, 0x0, 0x7, {{0xc40, 0x80000001, 0x6, 0x1c2, 0x6, 0xff, 0x2, 0x6}}}, &(0x7f0000002280)={0x18, 0xfffffffffffffffe, 0x0, {0xfffffff0}}, &(0x7f00000022c0)={0x12, 0xfffffffffffffffe, 0x9, {':\x00'}}, &(0x7f0000002300)={0x20, 0x0, 0x2}, &(0x7f0000002340)={0x78, 0x0, 0x9, {0xa, 0x9, 0x0, {0x6, 0x7, 0x2, 0x7, 0x9, 0x10001, 0x4e, 0x4, 0x6eb9, 0x6000, 0x5, r1, 0x0, 0x0, 0xfff}}}, &(0x7f0000002440)={0x90, 0xffffffffffffffda, 0x5, {0x0, 0x1, 0x8, 0x7, 0x3, 0x8, {0x1, 0xd, 0x6, 0x180, 0x20, 0x401, 0x4, 0x6, 0x2, 0x6000, 0x6, 0xee00, r2, 0x432, 0xfffffffb}}}, &(0x7f0000002500)={0x48, 0xfffffffffffffffe, 0x6, [{0x6, 0x1, 0x1, 0x6, '{'}, {0x0, 0x0, 0x0, 0x51}]}, &(0x7f0000005ac0)={0x328, 0x0, 0x7, [{{0x0, 0x2, 0xffffffff, 0xfffffffffffffffe, 0x0, 0xd, {0x3, 0x807, 0x9, 0xfffffffffffffff9, 0x3, 0x5, 0xffff58a1, 0x2, 0x4, 0x1000, 0x1, r3, r4, 0x8000, 0x8}}, {0x5, 0x10000000000000, 0x7, 0x4, '@,({*(`'}}, {{0x0, 0x1, 0x6, 0x1, 0x0, 0x4, {0x6, 0x2d, 0x9, 0x7ff, 0x4, 0x10, 0x71, 0x4, 0x0, 0x2000, 0x200, r5, r6, 0x800, 0xffff}}, {0x4, 0x4548, 0x0, 0xffffffff}}, {{0x4, 0x1, 0xf, 0x10, 0x4, 0x2, {0x0, 0x429f, 0x7, 0x26d, 0xfffffffffffffd53, 0x1, 0x8, 0x2, 0x8, 0x2000, 0x1, r7, r8, 0x8, 0x40}}, {0x2, 0x6, 0x9, 0x9, ')i\'^@&$\\-'}}, {{0x4, 0x2, 0x8d, 0x3ea2, 0x2, 0x1, {0x3, 0xffffffffffffffff, 0x2, 0x1ff, 0x7, 0x7, 0x2, 0x6, 0x5, 0x2000, 0x2, 0xee01, r10, 0x27f, 0x5}}, {0x4, 0x5, 0x0, 0x200}}, {{0x5, 0x3, 0x0, 0x5, 0xe, 0x5, {0x4, 0x57, 0xc, 0x0, 0x3, 0x2, 0xfffffff7, 0xf18, 0xb7, 0xc000, 0xd4b3, r11, r12, 0x7, 0x9}}, {0x0, 0x2e56, 0x1, 0x81, '{'}}]}, &(0x7f0000005ec0)={0xa0, 0x0, 0x1, {{0x6, 0x0, 0xe, 0x10, 0x828, 0x7, {0x3, 0xc, 0xfffffffffffffffb, 0x8, 0x8, 0xc, 0xd93c, 0x2fd, 0xffffffff, 0xa000, 0x1, 0xffffffffffffffff, r13, 0x0, 0x9}}, {0x0, 0x1}}}, &(0x7f0000005f80)={0x20, 0xfffffffffffffffe, 0xffffffffffffff01, {0x0, 0x4, 0x0, 0x20}}, &(0x7f00000060c0)={0x130, 0x0, 0x8, {0x8, 0x400, 0x0, '\x00', {0x8000, 0xfffffffb, 0xa97, 0x10, r15, r16, 0x1000, '\x00', 0xfffffffffffffffd, 0x1, 0x4, 0x3ff, {0x5, 0x1ff}, {0x9, 0x20}, {0x2, 0x8}, {0x4, 0xa305}, 0xe455, 0x7, 0xe, 0x6}}}}) mount$cgroup(0x0, &(0x7f00000062c0)='./file0\x00', &(0x7f0000006300), 0x2020024, &(0x7f0000006340)={[{@cpuset_v2_mode}, {@nofavordynmods}, {@clone_children}, {@cpuset_v2_mode}], [{@subj_type={'subj_type', 0x3d, ')i\'^@&$\\-'}}, {@smackfsdef={'smackfsdef', 0x3d, ':'}}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise_type}, {@uid_gt={'uid>', r11}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_eq={'fowner', 0x3d, r9}}]}) (async) r17 = openat$nullb(0xffffffffffffff9c, &(0x7f0000006440), 0x400000, 0x0) ioctl$BLKSSZGET(r17, 0x1268, &(0x7f0000006480)) (async, rerun: 64) ioctl$TUNSETCARRIER(r14, 0x400454e2, &(0x7f00000064c0)=0x1) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000006540)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000006580)={0x0, 0x0}) utimensat(r14, &(0x7f0000006500)='./file0\x00', &(0x7f00000065c0)={{r18, r19/1000+60000}, {r20, r21/1000+60000}}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r14, 0xc06c4124, &(0x7f0000006600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) (async) r22 = io_uring_setup(0x30c6, &(0x7f0000006680)={0x0, 0xa1bb, 0x1000, 0x1, 0xe6, 0x0, r14}) io_uring_setup(0x7558, &(0x7f0000006700)={0x0, 0xb0a5, 0x100, 0x3, 0x343, 0x0, r22}) mount$binder(0x0, &(0x7f0000006780)='./file0\x00', &(0x7f00000067c0), 0x84040, &(0x7f0000006800)={[{@stats}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x3}}, {@stats}], [{@obj_user={'obj_user', 0x3d, ')i\'^@&$\\-'}}, {@audit}, {@audit}, {@obj_role={'obj_role', 0x3d, '@!{'}}, {@fowner_gt={'fowner>', r7}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x38, 0x34, 0x35, 0x65, 0x65, 0x33, 0x61], 0x2d, [0x61, 0x65, 0xa514a3a5af7b6a18, 0x32], 0x2d, [0x39, 0x34, 0x62, 0x64], 0x2d, [0x63, 0x37, 0x31, 0x36], 0x2d, [0x35, 0x39, 0x38, 0x66, 0x35, 0x32, 0x61]}}}, {@smackfsroot={'smackfsroot', 0x3d, 'staff_u'}}]}) fstatfs(r14, &(0x7f0000006900)=""/58) (async) unlink(&(0x7f0000006940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000007840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000008740), &(0x7f0000008780)={'L+', 0x4}, 0x16, 0x0) 489.797648ms ago: executing program 4 (id=4065): mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=virtio,debug=0x00000000000024a7,debug=0x000000000000000f,directio,mmap,cache=none,posixacl,access=user,cache=none,']) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000000100)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f00000000c0)=0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='auxv\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) 422.698944ms ago: executing program 2 (id=4066): socket$alg(0x26, 0x5, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x121403, 0x0) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r1) r2 = gettid() tkill(r2, 0x16) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)={@val={0x8, 0xd}, @val={0x7, 0x0, 0x0, 0x0, 0x14, 0x12}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x29, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xa}}, {0x4e20, 0x4e21, 0x15, 0x0, @opaque="cdfaf48674acfb1d8c93feba77"}}}, 0x37) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000180)={@host}) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1000, 0x201) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x1, 0x1903, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0xd35b, '\x00', @string=0x0}}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000000100)={{@any, 0x7f}, 0x1}) 420.327319ms ago: executing program 5 (id=4067): r0 = socket$packet(0x11, 0x3, 0x300) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x61}, 0x1, 0x0, 0x0, 0x4000}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe80ffff00000e1208000f0100810401a80016ea1f000b400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 32) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (rerun: 32) 419.051429ms ago: executing program 4 (id=4068): memfd_secret(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) 416.157112ms ago: executing program 1 (id=4069): r0 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04b", 0x22}], 0x1}}], 0x1, 0x2090) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r4 = fcntl$dupfd(r3, 0x0, r2) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0xe500, 0x0) ioctl$CDROM_SET_OPTIONS(r6, 0x5320, 0xe) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROM_LOCKDOOR(r7, 0x5329, 0x0) ioctl$CDROMEJECT_SW(r7, 0x530f, 0x0) 350.17114ms ago: executing program 5 (id=4070): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r0) syz_clone3(&(0x7f00000005c0)={0x280a00300, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 346.742675ms ago: executing program 5 (id=4071): syz_emit_ethernet(0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000030000403a00fc000000000000000000000000000000ff0200000007000000000000000000000000604aa19800003c"], 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (rerun: 32) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="b6", 0x1}], 0x1) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async, rerun: 32) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1fffffc, &(0x7f0000000180)=[{0xfffffffffffffffc, 0x2}], 0x1, 0x237, 0x0, 0x2, 0x0, 0x2}) (rerun: 32) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 280.227682ms ago: executing program 2 (id=4072): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0x6000, 0x1a000}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x0, &(0x7f0000000180)=[0x6bd1a311, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x400005, 0x4, 0x401, 0x466c, 0x89004, 0x2, 0x4e, 0x400009, 0x2, 0x49, 0x100000000003, 0x5, 0x400000000002, 0x7fffffff, 0x8, 0x7, 0xc1, 0x8, 0xfffffffffffff000, 0xffffffffffffffff, 0x6, 0x7f, 0x96, 0xffffffff, 0xff, 0x0, 0x4, 0x4, 0x2, 0x3, 0x4000009, 0x8892, 0x1, 0x6, 0x46, 0x2001, 0xfffffffffffffff8, 0xa3de, 0x2cc0000000008008, 0x8, 0x5, 0x400, 0x6, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0xfffffffffffff068, 0x4, 0xe6, 0x200000000000101, 0x2, 0xd, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x3, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x5e7, 0xcdc, 0x100004000000007, 0x2, 0x3, 0x2, 0x10000, 0x9, 0x6, 0x4, 0x1, 0x81, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x80000005, 0x8061d, 0x8, 0x7, 0xf6, 0x4, 0x5, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332d, 0x6, 0x5, 0x7, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x20000000000013, 0x40000000000005, 0x8, 0x1, 0x6, 0x200eb4, 0x3, 0x1, 0xb68e, 0xcc, 0x8, 0x1000003]}) 259.160071ms ago: executing program 5 (id=4073): creat(&(0x7f0000000100)='./file0\x00', 0xecf86c37d53049d0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x20001a, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x5, &(0x7f0000000140), 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 184.869169ms ago: executing program 5 (id=4074): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r2, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x100, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1b}, {0x6, 0x11, 0xf3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff8001}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xffa5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x19d8}}]}, 0x100}, 0x1, 0x0, 0x0, 0x14040841}, 0x8000) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) 129.876006ms ago: executing program 5 (id=4075): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x2000802, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r9, &(0x7f0000000000)=0xb00, 0x12) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7e36, 0x0, 0x0, 0x0, 0x17}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='GPL\x00', 0x9, 0x13, &(0x7f0000000680)=""/19, 0x41000, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000700)=[r9, r9, r9, r9, r9], &(0x7f0000000740)=[{0x5, 0x2, 0x7, 0x5}, {0x2, 0x2, 0x5, 0x1}, {0x4, 0x5, 0xf, 0x4}, {0x1, 0x5, 0x0, 0x8}], 0x10, 0x1}, 0x94) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000b00)={0xc4, 0x0, &(0x7f0000000900)=[@clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@fda={0x66646185, 0x0, 0x0, 0x3f}, @fda={0x66646185, 0x5, 0x2, 0x38}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000340)={0x0, 0x20, 0x40}}}, @request_death={0x400c630e, 0x1}, @increfs={0x40046304, 0x2}, @acquire, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r10}, @flat=@weak_binder={0x77622a85, 0x110b}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/123, 0x7b, 0x2, 0x4}}, &(0x7f00000008c0)={0x0, 0x18, 0x30}}, 0xfe212d575c620c71}], 0xf2, 0x0, &(0x7f0000000a00)="fb6a40d15e3a95a1b4f086933e9c80693dfa67d6bad54809debc43f1d32b00fe3d6fc1373bdb1703f579bb7b6b2febd53ac27af639c3e701050f5986b4475f38f8f215b24f380757c40b32f9a644e7e8bbeeada597253f9689e2e11486b9934dd629effad112fa3197e9243f20d48e2d830316b88246037a4cd40f8bab46bad63248eb43e88bfb56727e0639e94045d6da018ce9c263ec87768776580bd4089aae788169d7b758dedd187b70c601761660f9554caf4d7370100c3a979a01db6ad4d8c4b99a096a6b5f12caf93f23c000bc93d2f9417a8d149ff80ae63ebf8b9f6f69165e3f3124ca068f370ae6c8aeb065f1"}) r11 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000140)="d2ffb49e"}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_CREATE_VM(r9, 0xae01, 0x3e) 129.3965ms ago: executing program 4 (id=4076): arch_prctl$ARCH_GET_CPUID(0x1011) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x801, 0x70bd6a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x4, 0x2c, 0x8001}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x69, 0x0, 0x0, 0x0, 0x10, 0x7, 0x0, 0x88, 0x9, 0x0, 0x0, 0x0, 0x31, 0x83, 0x0, 0x2, 0x0, '\x00', 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000005c0)={0x2, 0x0, @ioapic={0x0, 0x1, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x3}, {0x10, 0x8, 0x9, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0xe9}, {0xfd, 0x5, 0xf5, '\x00', 0x13}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc, '\x00', 0x6}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x1, 0xff, '\x00', 0x1}, {0xd, 0x5, 0x26}, {0xcf, 0xf, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x1, 0x2, 0x6, '\x00', 0x5}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xe, 0x2, '\x00', 0xe9}, {0x7, 0x2, 0x1, '\x00', 0xc2}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xe, 0x87, '\x00', 0x7d}, {0x10, 0x9, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0xa}]}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0x3c}}, 0x4004800) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0x3c}}, 0x4004800) creat(&(0x7f00000000c0)='./file0\x00', 0x48) (async) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) read$msr(r9, &(0x7f0000000280)=""/214, 0xd6) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000002791090000062000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r2}, 0x94) 0s ago: executing program 2 (id=4077): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r8, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r9 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0) sendto$packet(r1, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r2}, 0x14) kernel console output (not intermixed with test programs): 0 [ 429.844801][T17201] ? kernel_text_address+0x8d/0x100 [ 429.844825][T17201] ? __kernel_text_address+0xd/0x30 [ 429.844846][T17201] ? unwind_get_return_address+0x59/0xa0 [ 429.844872][T17201] ? arch_stack_walk+0xa6/0xf0 [ 429.844899][T17201] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 429.844933][T17201] ? stack_trace_save+0x8e/0xc0 [ 429.844958][T17201] ? __pfx_stack_trace_save+0x10/0x10 [ 429.844992][T17201] ? kasan_save_stack+0x3f/0x50 [ 429.845024][T17201] ? kasan_save_stack+0x30/0x50 [ 429.845051][T17201] ? kasan_save_track+0x14/0x30 [ 429.845079][T17201] ? __kasan_kmalloc+0xaa/0xb0 [ 429.845105][T17201] ? get_sg_table.isra.0+0x51/0x470 [ 429.845176][T17201] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 429.845207][T17201] ? policy_nodemask+0xed/0x4f0 [ 429.845230][T17201] alloc_pages_mpol+0x1fb/0x550 [ 429.845252][T17201] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 429.845282][T17201] alloc_pages_noprof+0x136/0x390 [ 429.845305][T17201] get_free_pages_noprof+0x10/0xb0 [ 429.845326][T17201] sg_kmalloc+0x55/0x70 [ 429.845385][T17201] __sg_alloc_table+0x31c/0x490 [ 429.845421][T17201] sg_alloc_table+0x37/0x1c0 [ 429.845449][T17201] ? __pfx_sg_kmalloc+0x10/0x10 [ 429.845480][T17201] get_sg_table.isra.0+0x94/0x470 [ 429.845508][T17201] ? find_held_lock+0x2b/0x80 [ 429.845539][T17201] begin_cpu_udmabuf+0x191/0x250 [ 429.845563][T17201] ? __pfx_begin_cpu_udmabuf+0x10/0x10 [ 429.845587][T17201] dma_buf_begin_cpu_access+0xfe/0x1e0 [ 429.845619][T17201] ? _copy_from_user+0x59/0xd0 [ 429.845642][T17201] dma_buf_ioctl+0x6e5/0x8a0 [ 429.845680][T17201] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 429.845710][T17201] ? __fget_files+0x215/0x3d0 [ 429.845731][T17201] ? hook_file_ioctl_common+0x146/0x410 [ 429.845791][T17201] ? selinux_file_ioctl+0x139/0x290 [ 429.845821][T17201] ? selinux_file_ioctl+0xb4/0x290 [ 429.845853][T17201] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 429.845885][T17201] __x64_sys_ioctl+0x18e/0x210 [ 429.845919][T17201] do_syscall_64+0x106/0xf80 [ 429.846023][T17201] ? clear_bhb_loop+0x40/0x90 [ 429.846049][T17201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.846071][T17201] RIP: 0033:0x7f0a2cb9c819 [ 429.846090][T17201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.846110][T17201] RSP: 002b:00007f0a2daff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.846156][T17201] RAX: ffffffffffffffda RBX: 00007f0a2ce15fa0 RCX: 00007f0a2cb9c819 [ 429.846169][T17201] RDX: 0000200000000580 RSI: 0000000040086200 RDI: 0000000000000006 [ 429.846182][T17201] RBP: 00007f0a2daff090 R08: 0000000000000000 R09: 0000000000000000 [ 429.846194][T17201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.846207][T17201] R13: 00007f0a2ce16038 R14: 00007f0a2ce15fa0 R15: 00007ffff9d5d288 [ 429.846235][T17201] [ 429.848348][ T1338] usb 9-1: USB disconnect, device number 20 [ 430.006156][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 430.006177][ T40] audit: type=1400 audit(942.939:8922): avc: denied { read write } for pid=17203 comm="syz.1.3479" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 430.019517][ T40] audit: type=1400 audit(942.939:8923): avc: denied { open } for pid=17203 comm="syz.1.3479" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 430.031216][ T40] audit: type=1400 audit(942.949:8924): avc: denied { ioctl } for pid=17203 comm="syz.1.3479" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x556e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 430.068430][ T40] audit: type=1400 audit(942.999:8925): avc: denied { create } for pid=17206 comm="syz.1.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 430.077623][ T40] audit: type=1400 audit(942.999:8926): avc: denied { setopt } for pid=17206 comm="syz.1.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 430.087078][ T40] audit: type=1400 audit(942.999:8927): avc: denied { bind } for pid=17206 comm="syz.1.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 430.096649][ T40] audit: type=1400 audit(942.999:8928): avc: denied { name_bind } for pid=17206 comm="syz.1.3480" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 430.104220][ T40] audit: type=1400 audit(942.999:8929): avc: denied { write } for pid=17206 comm="syz.1.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 430.112531][ T40] audit: type=1400 audit(942.999:8930): avc: denied { connect } for pid=17206 comm="syz.1.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 430.121450][ T40] audit: type=1400 audit(942.999:8931): avc: denied { name_connect } for pid=17206 comm="syz.1.3480" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 430.339133][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803ce9b000: rx timeout, send abort [ 430.347020][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803ce9b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 430.480186][T17217] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3484'. [ 430.487070][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3484'. [ 430.490718][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3484'. [ 430.613003][T17222] netlink: 'syz.4.3493': attribute type 9 has an invalid length. [ 430.618087][T17222] netlink: 'syz.4.3493': attribute type 11 has an invalid length. [ 430.621628][T17222] netlink: 'syz.4.3493': attribute type 12 has an invalid length. [ 430.626775][T17222] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.3493'. [ 430.984679][T17231] __nla_validate_parse: 1 callbacks suppressed [ 430.984694][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3488'. [ 430.990763][T17231] netlink: 512 bytes leftover after parsing attributes in process `syz.1.3488'. [ 431.002873][T17231] netlink: 'syz.1.3488': attribute type 13 has an invalid length. [ 431.007182][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3488'. [ 431.007368][T17234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3495'. [ 431.010361][T17231] netlink: 'syz.1.3488': attribute type 13 has an invalid length. [ 431.013186][T17234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3495'. [ 431.016329][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3488'. [ 431.173915][ T5991] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 431.325264][ T5991] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.330030][ T5991] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 431.334166][ T5991] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 431.337448][ T5991] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 431.342326][ T5991] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 431.346958][ T5991] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.351634][ T5991] usb 10-1: config 0 descriptor?? [ 431.353776][ T1338] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 431.516013][ T1338] usb 6-1: config 0 has no interfaces? [ 431.518636][ T1338] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 431.522598][ T1338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.529533][ T1338] usb 6-1: config 0 descriptor?? [ 431.749212][ T53] usb 6-1: USB disconnect, device number 78 [ 431.962404][ T5991] usbhid 10-1:0.0: can't add hid device: -71 [ 431.967935][ T5991] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 431.978162][ T5991] usb 10-1: USB disconnect, device number 22 [ 432.124714][T17262] netlink: 'syz.4.3497': attribute type 2 has an invalid length. [ 432.128020][T17262] netlink: 'syz.4.3497': attribute type 1 has an invalid length. [ 432.131435][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3497'. [ 432.142672][T17262] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 432.162218][T17268] netlink: 'syz.2.3499': attribute type 1 has an invalid length. [ 432.173600][T17268] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 432.764012][ T5304] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 432.934032][ T5304] usb 10-1: Using ep0 maxpacket: 8 [ 432.940511][ T5304] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 432.945294][ T5304] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.947942][ T5304] usb 10-1: Product: syz [ 432.949418][ T5304] usb 10-1: Manufacturer: syz [ 432.951006][ T5304] usb 10-1: SerialNumber: syz [ 432.955653][ T5304] usb 10-1: config 0 descriptor?? [ 432.959656][ T5304] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 432.962594][ T5304] dvb-usb: bulk message failed: -22 (2/0) [ 432.967420][ T5304] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 432.971236][ T5304] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 432.975101][ T5304] usb 10-1: media controller created [ 432.982188][ T5304] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.036661][ T53] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 433.160271][ T5304] dvb-usb: bulk message failed: -22 (1/0) [ 433.192451][ T5304] DVB: Unable to find symbol mt352_attach() [ 433.194512][ T5304] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 433.195702][ T53] usb 9-1: no configurations [ 433.199466][ T53] usb 9-1: can't read configurations, error -22 [ 433.231552][T17294] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 433.235295][T17294] SELinux: failed to load policy [ 433.255706][ T5304] rc_core: IR keymap rc-dvico-portable not found [ 433.257972][ T5304] Registered IR keymap rc-empty [ 433.260481][ T5304] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 433.267311][ T5304] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input40 [ 433.272564][ T5304] dvb-usb: schedule remote query interval to 100 msecs. [ 433.274920][ T5304] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 433.343920][ T53] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 433.356311][T17298] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3508'. [ 433.371306][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3503'. [ 433.385949][ T1169] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.388843][ T1169] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.391851][ T1169] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.394211][ T5304] dvb-usb: bulk message failed: -22 (1/0) [ 433.395553][ T1169] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.438512][ T1338] usb 10-1: USB disconnect, device number 23 [ 433.471369][ T1338] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 433.524558][ T53] usb 9-1: no configurations [ 433.526797][ T53] usb 9-1: can't read configurations, error -22 [ 433.534643][ T53] usb usb9-port1: attempt power cycle [ 433.724018][ T5304] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 433.884751][ T53] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 433.886419][ T5304] usb 6-1: config 0 has no interfaces? [ 433.890662][ T5304] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 433.895217][ T5304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.902479][ T5304] usb 6-1: config 0 descriptor?? [ 433.913836][ T53] usb 9-1: no configurations [ 433.915974][ T53] usb 9-1: can't read configurations, error -22 [ 434.043907][ T53] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 434.065071][ T53] usb 9-1: no configurations [ 434.067152][ T53] usb 9-1: can't read configurations, error -22 [ 434.070498][ T53] usb usb9-port1: unable to enumerate USB device [ 434.119262][ T24] usb 6-1: USB disconnect, device number 79 [ 434.234460][ T5304] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 434.385424][ T5304] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.389155][ T5304] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 434.392810][ T5304] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 434.396457][ T5304] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 434.401253][ T5304] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 434.404413][ T5304] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.408715][ T5304] usb 10-1: config 0 descriptor?? [ 434.713373][T17311] netlink: 'syz.1.3513': attribute type 1 has an invalid length. [ 434.714037][T17312] netlink: 'syz.1.3513': attribute type 1 has an invalid length. [ 434.729167][T17311] 8021q: adding VLAN 0 to HW filter on device bond4 [ 434.748336][T17312] vlan4: entered allmulticast mode [ 434.750687][T17312] macsec0: entered allmulticast mode [ 434.753278][T17312] veth1_macvtap: entered allmulticast mode [ 435.024834][ T5304] usbhid 10-1:0.0: can't add hid device: -71 [ 435.027096][ T5304] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 435.030794][ T5304] usb 10-1: USB disconnect, device number 24 [ 435.037450][ T40] kauditd_printk_skb: 123 callbacks suppressed [ 435.037460][ T40] audit: type=1400 audit(947.969:9055): avc: denied { create } for pid=17326 comm="syz.1.3518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 435.046912][ T40] audit: type=1400 audit(947.969:9056): avc: denied { write } for pid=17326 comm="syz.1.3518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 435.056005][ T40] audit: type=1400 audit(947.969:9057): avc: denied { read } for pid=17326 comm="syz.1.3518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 435.067028][ T40] audit: type=1400 audit(947.969:9058): avc: denied { read } for pid=17326 comm="syz.1.3518" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 435.084737][ T40] audit: type=1400 audit(947.969:9059): avc: denied { open } for pid=17326 comm="syz.1.3518" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 435.099919][ T40] audit: type=1400 audit(948.029:9060): avc: denied { read } for pid=17326 comm="syz.1.3518" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 435.107339][ T40] audit: type=1400 audit(948.029:9061): avc: denied { open } for pid=17326 comm="syz.1.3518" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 435.115506][ T40] audit: type=1400 audit(948.029:9062): avc: denied { ioctl } for pid=17326 comm="syz.1.3518" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 435.128724][ T40] audit: type=1400 audit(948.059:9063): avc: denied { create } for pid=17329 comm="syz.2.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 435.130311][T17330] fuse: Unknown parameter 'f`Cĺ]Lzdap!/' [ 435.135086][ T40] audit: type=1400 audit(948.059:9064): avc: denied { ioctl } for pid=17329 comm="syz.2.3519" path="socket:[81264]" dev="sockfs" ino=81264 ioctlcmd=0x586c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 435.328740][ T5949] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 435.503916][ T1338] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 435.601420][T17354] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3528'. [ 435.655415][ T1338] usb 7-1: config 0 has no interfaces? [ 435.658111][ T1338] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 435.662448][ T1338] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.674254][ T1338] usb 7-1: config 0 descriptor?? [ 435.713951][T17359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.718333][T17359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.722059][T17359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.727562][T17359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.755341][T17364] netlink: 'syz.4.3529': attribute type 11 has an invalid length. [ 435.779400][T17366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6373 sclass=netlink_route_socket pid=17366 comm=syz.1.3532 [ 435.791551][T17366] syz.1.3532 (17366): attempted to duplicate a private mapping with mremap. This is not supported. [ 435.897052][T12450] usb 7-1: USB disconnect, device number 73 [ 436.924274][T17441] __nla_validate_parse: 5 callbacks suppressed [ 436.924286][T17441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3549'. [ 437.247872][T17414] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 437.252653][T17414] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 437.257712][T17414] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 437.561473][T17462] ntfs3(sr0): Primary boot signature is not NTFS. [ 437.564282][T17462] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 437.614302][ T5304] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 437.618691][T17462] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 437.762174][T17471] netfs: Couldn't get user pages (rc=-14) [ 437.765658][T17471] netfs: Zero-sized read [R=1a] [ 437.766913][ T5304] usb 9-1: config 0 has no interfaces? [ 437.770961][ T5304] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 437.776795][ T5304] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.785549][ T5304] usb 9-1: config 0 descriptor?? [ 437.877835][T17398] xt_CT: No such helper "pptp" [ 438.004143][T12450] usb 9-1: USB disconnect, device number 25 [ 438.233810][ T1338] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 438.385978][ T1338] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 438.389752][ T1338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 438.393468][ T1338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 438.397515][ T1338] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 438.402130][ T1338] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 438.405070][ T1338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.409266][ T1338] usb 6-1: config 0 descriptor?? [ 438.503835][ T5949] Bluetooth: hci3: command 0x0406 tx timeout [ 438.525215][T17493] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 438.649161][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3566'. [ 438.649266][T17501] netlink: 'syz.2.3566': attribute type 1 has an invalid length. [ 438.652278][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3566'. [ 438.692488][T17503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3567'. [ 438.943876][ T5975] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 438.993937][ T830] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 439.041973][ T1338] usbhid 6-1:0.0: can't add hid device: -71 [ 439.045226][ T1338] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 439.051590][ T1338] usb 6-1: USB disconnect, device number 80 [ 439.103896][ T5975] usb 9-1: Using ep0 maxpacket: 16 [ 439.107525][ T5975] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 439.110642][ T5975] usb 9-1: config 0 has no interface number 0 [ 439.116700][ T5975] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 439.120535][ T5975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.124136][ T830] usb 7-1: device descriptor read/64, error -71 [ 439.127375][ T5975] usb 9-1: Product: syz [ 439.129677][ T5975] usb 9-1: Manufacturer: syz [ 439.132328][ T5975] usb 9-1: SerialNumber: syz [ 439.137930][ T5975] usb 9-1: config 0 descriptor?? [ 439.142085][ T5975] hub 9-1:0.132: bad descriptor, ignoring hub [ 439.144126][ T5975] hub 9-1:0.132: probe with driver hub failed with error -5 [ 439.149032][ T5975] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.132/input/input41 [ 439.303921][ T5949] Bluetooth: hci1: command 0x0c1a tx timeout [ 439.303970][ T5947] Bluetooth: hci4: command 0x0c1a tx timeout [ 439.383953][ T830] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 439.523927][ T830] usb 7-1: device descriptor read/64, error -71 [ 439.635597][ T830] usb usb7-port1: attempt power cycle [ 439.983787][ T830] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 440.015348][ T830] usb 7-1: device descriptor read/8, error -71 [ 440.190818][ T40] kauditd_printk_skb: 212 callbacks suppressed [ 440.190831][ T40] audit: type=1400 audit(953.119:9277): avc: denied { read write } for pid=17527 comm="syz.5.3574" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 440.205531][ T40] audit: type=1400 audit(953.129:9278): avc: denied { open } for pid=17527 comm="syz.5.3574" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 440.215954][ T40] audit: type=1400 audit(953.129:9279): avc: denied { ioctl } for pid=17506 comm="syz.2.3569" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.219561][T17529] netlink: 'syz.5.3574': attribute type 1 has an invalid length. [ 440.227653][ T40] audit: type=1400 audit(953.129:9280): avc: denied { ioctl } for pid=17527 comm="syz.5.3574" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 440.240158][ T40] audit: type=1400 audit(953.149:9281): avc: denied { read } for pid=17527 comm="syz.5.3574" dev="nsfs" ino=4026534775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 440.251043][ T40] audit: type=1400 audit(953.149:9282): avc: denied { open } for pid=17527 comm="syz.5.3574" path="net:[4026534775]" dev="nsfs" ino=4026534775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 440.256094][ T830] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 440.262697][ T40] audit: type=1400 audit(953.149:9283): avc: denied { create } for pid=17527 comm="syz.5.3574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 440.271123][T17529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.273089][ T40] audit: type=1400 audit(953.149:9284): avc: denied { setopt } for pid=17527 comm="syz.5.3574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 440.283446][ T40] audit: type=1400 audit(953.149:9285): avc: denied { bind } for pid=17527 comm="syz.5.3574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 440.284791][ T830] usb 7-1: device descriptor read/8, error -71 [ 440.295844][ T40] audit: type=1400 audit(953.149:9286): avc: denied { read write } for pid=17527 comm="syz.5.3574" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 440.398247][ T5328] usb 9-1: reset high-speed USB device number 26 using dummy_hcd [ 440.404765][ T830] usb usb7-port1: unable to enumerate USB device [ 440.412475][ T5328] usb 9-1: device reset changed ep0 maxpacket size! [ 440.426522][ T1338] usb 9-1: USB disconnect, device number 26 [ 440.450387][T17542] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3578'. [ 440.457166][T17543] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3578'. [ 440.583989][ T1338] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 440.687794][T17552] can0: slcan on ttynull. [ 440.749168][ T1338] usb 9-1: config 0 has no interfaces? [ 440.751285][ T1338] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 440.755283][ T1338] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.759835][ T1338] usb 9-1: config 0 descriptor?? [ 440.764365][T17551] can0 (unregistered): slcan off ttynull. [ 440.799522][T17561] cgroup: release_agent respecified [ 440.894080][T17563] mmap: syz.1.3584 (17563): VmData 29204480 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 440.976271][ T6026] usb 9-1: USB disconnect, device number 27 [ 441.023015][T17580] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 441.030032][T17580] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3587'. [ 441.085167][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3587'. [ 441.088908][T17580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3587'. [ 441.093829][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3587'. [ 441.127246][T17584] 9p: Bad value for 'wfdno' [ 441.665605][T17614] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26900 sclass=netlink_xfrm_socket pid=17614 comm=syz.1.3599 [ 441.733893][T17620] input: syz1 as /devices/virtual/input/input42 [ 441.861234][T17627] could not allocate digest TFM handle xcbc-aes-ce [ 441.892421][T17639] SET target dimension over the limit! [ 442.088616][T17654] program syz.5.3610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.123971][ T1338] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 442.198125][T17661] ubi: mtd0 is already attached to ubi0 [ 442.207441][T17661] Bluetooth: MGMT ver 1.23 [ 442.260825][T17663] __nla_validate_parse: 2 callbacks suppressed [ 442.260844][T17663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3613'. [ 442.295199][ T1338] usb 6-1: config 0 has no interfaces? [ 442.297256][ T1338] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 442.300281][ T1338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.304676][ T1338] usb 6-1: config 0 descriptor?? [ 442.344661][ T24] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 442.377447][T17664] kvm: kvm [17662]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 442.381327][T17664] kvm: kvm [17662]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 442.474766][T17664] lo: Caught tx_queue_len zero misconfig [ 442.497306][ T24] usb 10-1: config 0 has no interfaces? [ 442.499338][ T24] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 442.502388][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.507814][ T24] usb 10-1: config 0 descriptor?? [ 442.518768][ T24] usb 6-1: USB disconnect, device number 81 [ 442.718172][ T1338] usb 10-1: USB disconnect, device number 25 [ 443.224480][T17686] xt_hashlimit: size too large, truncated to 1048576 [ 443.532858][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3625'. [ 443.537741][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3625'. [ 443.542507][T17713] netlink: 'syz.2.3625': attribute type 20 has an invalid length. [ 443.548222][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3625'. [ 443.552089][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3625'. [ 443.556693][T17713] netlink: 'syz.2.3625': attribute type 20 has an invalid length. [ 443.646928][T17721] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 443.947306][T17739] ceph: No source [ 444.401536][ T5947] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 444.428932][T17755] can: request_module (can-proto-0) failed. [ 444.738205][T17769] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 444.738205][T17769] program syz.2.3641 not setting count and/or reply_len properly [ 444.748420][T17765] bond0: entered promiscuous mode [ 444.750149][T17765] bond_slave_0: entered promiscuous mode [ 444.752287][T17765] bond_slave_1: entered promiscuous mode [ 444.757036][T17765] batadv0: entered promiscuous mode [ 444.759355][T17765] debugfs: 'hsr1' already exists in 'hsr' [ 444.761400][T17765] Cannot create hsr debugfs directory [ 444.765105][T17765] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 444.778408][T17765] bond0: left promiscuous mode [ 444.781014][T17765] bond_slave_0: left promiscuous mode [ 444.788691][T17765] bond_slave_1: left promiscuous mode [ 444.792068][T17765] batadv0: left promiscuous mode [ 444.835963][T17770] i2c i2c-1: Invalid block write size 34 [ 444.980243][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.140954][T17787] syzkaller0: entered promiscuous mode [ 445.142979][T17787] syzkaller0: entered allmulticast mode [ 445.508803][ T40] kauditd_printk_skb: 253 callbacks suppressed [ 445.508822][ T40] audit: type=1400 audit(958.439:9540): avc: denied { unmount } for pid=15873 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 445.521427][ T40] audit: type=1400 audit(958.439:9541): avc: denied { create } for pid=17788 comm="syz.2.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 445.530269][ T40] audit: type=1400 audit(958.459:9542): avc: denied { setopt } for pid=17788 comm="syz.2.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 445.539499][ T40] audit: type=1400 audit(958.459:9543): avc: denied { read write } for pid=17788 comm="syz.2.3647" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 445.548900][ T40] audit: type=1400 audit(958.459:9544): avc: denied { open } for pid=17788 comm="syz.2.3647" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 445.558521][ T40] audit: type=1400 audit(958.459:9545): avc: denied { map } for pid=17788 comm="syz.2.3647" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 445.568679][ T40] audit: type=1400 audit(958.459:9546): avc: denied { execute } for pid=17788 comm="syz.2.3647" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 445.593865][ T40] audit: type=1400 audit(958.499:9547): avc: denied { ioctl } for pid=17788 comm="syz.2.3647" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 445.609169][ T40] audit: type=1400 audit(958.539:9548): avc: denied { create } for pid=17794 comm="syz.1.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 445.620962][ T40] audit: type=1400 audit(958.549:9549): avc: denied { read } for pid=17794 comm="syz.1.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 445.932525][ T5947] Bluetooth: hci1: SCO packet for unknown connection handle 346 [ 445.948208][T17808] could not allocate digest TFM handle cryptd(blake2b-160) [ 446.145112][ T6026] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 446.315565][ T6026] usb 9-1: config 0 has no interfaces? [ 446.317455][ T6026] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 446.320633][ T6026] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.325235][ T6026] usb 9-1: config 0 descriptor?? [ 446.504005][T12450] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 446.538504][ T24] usb 9-1: USB disconnect, device number 28 [ 446.676903][T12450] usb 7-1: config 0 has no interfaces? [ 446.678827][T12450] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 446.681820][T12450] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.691180][T12450] usb 7-1: config 0 descriptor?? [ 446.694762][T17834] xt_ecn: cannot match TCP bits for non-tcp packets [ 446.913458][T12450] usb 7-1: USB disconnect, device number 78 [ 447.114003][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3664'. [ 447.185416][T17848] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 447.369077][T17863] sctp: [Deprecated]: syz.4.3669 (pid 17863) Use of int in maxseg socket option. [ 447.369077][T17863] Use struct sctp_assoc_value instead [ 447.843901][ T1026] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 447.844952][ T24] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 447.919026][T17890] netlink: 'syz.1.3678': attribute type 4 has an invalid length. [ 447.996214][ T24] usb 7-1: config 0 has no interfaces? [ 447.998556][ T24] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 448.002631][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.005940][ T1026] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 448.010201][ T1026] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.011015][ T24] usb 7-1: config 0 descriptor?? [ 448.013722][ T1026] usb 9-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.020021][ T1026] usb 9-1: config 0 interface 0 has no altsetting 0 [ 448.025937][ T1026] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 448.029813][ T1026] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 448.032681][ T1026] usb 9-1: Product: syz [ 448.034284][ T1026] usb 9-1: Manufacturer: syz [ 448.043739][ T1026] usb 9-1: SerialNumber: syz [ 448.048243][ T1026] usb 9-1: config 0 descriptor?? [ 448.051474][ T1026] hub 9-1:0.0: bad descriptor, ignoring hub [ 448.053575][ T1026] hub 9-1:0.0: probe with driver hub failed with error -5 [ 448.079804][ T1026] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 448.097573][ T8878] udevd[8878]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.230648][ T29] usb 7-1: USB disconnect, device number 79 [ 448.414972][ T5947] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 448.419566][ T5947] Bluetooth: hci3: Injecting HCI hardware error event [ 448.426669][ T5947] Bluetooth: hci3: hardware error 0x00 [ 448.507518][ T1026] usb 9-1: reset high-speed USB device number 29 using dummy_hcd [ 448.894187][ T1026] usb 9-1: USB disconnect, device number 29 [ 449.098799][T17932] netlink: 'syz.2.3687': attribute type 11 has an invalid length. [ 449.313438][T17937] sp0: Synchronizing with TNC [ 449.313884][ T1026] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 449.475346][ T1026] usb 9-1: config index 0 descriptor too short (expected 8192, got 36) [ 449.478616][ T1026] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.482083][ T1026] usb 9-1: config 0 has no interfaces? [ 449.484314][ T1026] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 449.487357][ T1026] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.492211][ T1026] usb 9-1: config 0 descriptor?? [ 449.563900][ T5975] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 449.703882][ T830] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 449.713846][ T5975] usb 10-1: Using ep0 maxpacket: 8 [ 449.717298][T17929] can: request_module (can-proto-0) failed. [ 449.720569][ T5975] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.722902][ T1026] usb 9-1: string descriptor 0 read error: -71 [ 449.725488][ T5975] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 449.728580][ T1026] usb 9-1: USB disconnect, device number 30 [ 449.731093][ T5975] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 449.738301][ T5975] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 449.743060][ T5975] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 449.747193][ T5975] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.757190][ T5975] hub 10-1:1.0: bad descriptor, ignoring hub [ 449.759775][ T5975] hub 10-1:1.0: probe with driver hub failed with error -5 [ 449.763376][ T5975] cdc_wdm 10-1:1.0: skipping garbage [ 449.766110][ T5975] cdc_wdm 10-1:1.0: skipping garbage [ 449.771632][ T5975] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 449.775098][ T5975] cdc_wdm 10-1:1.0: Unknown control protocol [ 449.855736][ T830] usb 7-1: config 0 has no interfaces? [ 449.858163][ T830] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 449.861952][ T830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.873810][ T830] usb 7-1: config 0 descriptor?? [ 450.104803][ T5991] usb 7-1: USB disconnect, device number 80 [ 450.134007][ T5975] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 450.296246][ T5975] usb 6-1: config 0 has no interfaces? [ 450.298722][ T5975] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 450.303180][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.310656][ T5975] usb 6-1: config 0 descriptor?? [ 450.493982][ T5947] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 450.517803][ T29] usb 6-1: USB disconnect, device number 82 [ 450.584385][ T24] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 450.605612][ T40] kauditd_printk_skb: 182 callbacks suppressed [ 450.605635][ T40] audit: type=1400 audit(963.539:9732): avc: denied { read write } for pid=17954 comm="syz.1.3695" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 450.619291][ T40] audit: type=1400 audit(963.539:9733): avc: denied { open } for pid=17954 comm="syz.1.3695" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 450.629722][ T40] audit: type=1400 audit(963.539:9734): avc: denied { ioctl } for pid=17954 comm="syz.1.3695" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 450.659622][ T40] audit: type=1400 audit(963.589:9735): avc: denied { ioctl } for pid=17951 comm="syz.4.3694" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.662679][T17939] usb 10-1: reset high-speed USB device number 26 using dummy_hcd [ 450.727080][ T40] audit: type=1400 audit(963.659:9736): avc: denied { name_bind } for pid=17956 comm="syz.2.3696" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 450.735313][ T24] usb 9-1: config 0 has no interfaces? [ 450.739929][ T40] audit: type=1400 audit(963.659:9737): avc: denied { node_bind } for pid=17956 comm="syz.2.3696" saddr=::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 450.744993][ T24] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 450.757537][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.765105][ T24] usb 9-1: config 0 descriptor?? [ 450.831262][ T40] audit: type=1400 audit(963.759:9738): avc: denied { allowed } for pid=17956 comm="syz.2.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 450.842244][T17939] usb 10-1: device firmware changed [ 450.845728][ T40] audit: type=1400 audit(963.769:9739): avc: denied { sqpoll } for pid=17956 comm="syz.2.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 450.852495][T17939] cdc_wdm 10-1:1.0: Error autopm - -16 [ 450.856325][ T40] audit: type=1400 audit(963.779:9740): avc: denied { create } for pid=17956 comm="syz.2.3696" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.858756][T11896] usb 10-1: USB disconnect, device number 26 [ 450.866650][ T40] audit: type=1400 audit(963.779:9741): avc: denied { map } for pid=17956 comm="syz.2.3696" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.987327][ T24] usb 9-1: USB disconnect, device number 31 [ 451.034388][T11896] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 451.135711][T17972] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3700'. [ 451.193771][T11896] usb 10-1: Using ep0 maxpacket: 8 [ 451.197791][T11896] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.202083][T11896] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 451.206519][T11896] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.212237][T11896] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 451.216363][T11896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.223810][T11896] hub 10-1:1.0: bad descriptor, ignoring hub [ 451.226864][T11896] hub 10-1:1.0: probe with driver hub failed with error -5 [ 451.230283][T11896] cdc_wdm 10-1:1.0: skipping garbage [ 451.232780][T11896] cdc_wdm 10-1:1.0: skipping garbage [ 451.235532][T11896] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 451.428294][T17939] pipefs: Unknown parameter 'debug@Z' [ 451.483957][T12450] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 451.534034][T11896] usb 10-1: USB disconnect, device number 27 [ 451.643811][T12450] usb 6-1: Using ep0 maxpacket: 8 [ 451.647608][T12450] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.651314][T12450] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.654558][T12450] usb 6-1: config 0 interface 0 has no altsetting 0 [ 451.656825][T12450] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 451.659710][T12450] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.665283][T12450] usb 6-1: config 0 descriptor?? [ 451.744494][T17981] loop3: detected capacity change from 0 to 524287991 [ 451.843934][ T29] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 451.997890][ T29] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 452.014520][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 452.019032][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 452.024706][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 452.031000][ T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 452.035930][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.044037][ T29] usb 9-1: config 0 descriptor?? [ 452.079299][T12450] mcp2221 0003:04D8:00DD.0011: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 452.090602][T17996] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 452.094963][T17996] IPVS: dh: FWM 3 0x00000003 - no destination available [ 452.098539][ T5975] IPVS: starting estimator thread 0... [ 452.183868][T17998] IPVS: using max 42 ests per chain, 100800 per kthread [ 452.200094][T18001] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 452.251620][T18011] futex_wake_op: syz.5.3714 tries to shift op by -1; fix this program [ 452.476813][ T29] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 452.577205][T18030] kvm: Disabled LAPIC found during irq injection [ 452.667848][T18032] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3720'. [ 452.715141][ T24] usb 9-1: USB disconnect, device number 32 [ 452.748461][T18040] syzkaller1: entered promiscuous mode [ 452.751002][T18040] syzkaller1: entered allmulticast mode [ 453.237153][ T1026] usb 6-1: reset high-speed USB device number 83 using dummy_hcd [ 453.265406][T18051] SET target dimension over the limit! [ 454.177459][T17975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.249554][T18066] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.3731'. [ 454.254699][T18066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=18066 comm=syz.5.3731 [ 454.258864][T18066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=18066 comm=syz.5.3731 [ 454.263098][T18066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=18066 comm=syz.5.3731 [ 454.268520][T18066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=18066 comm=syz.5.3731 [ 454.273575][T18066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=18066 comm=syz.5.3731 [ 454.278092][T18066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=18066 comm=syz.5.3731 [ 454.283122][T18066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=18066 comm=syz.5.3731 [ 454.393960][ T6254] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 454.545804][ T6254] usb 9-1: config 0 has no interfaces? [ 454.547808][ T6254] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 454.551070][ T6254] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.557492][ T6254] usb 9-1: config 0 descriptor?? [ 454.594249][ T24] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 454.680047][ T59] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 454.755138][ T24] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 454.758987][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 454.763216][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 454.767427][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 454.772319][ T24] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 454.775705][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.777763][ T24] usb 10-1: config 0 descriptor?? [ 454.793860][ T6254] usb 9-1: USB disconnect, device number 33 [ 454.837473][ T59] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 454.843239][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 454.848081][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 454.852227][ T59] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 454.858459][ T59] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 454.862765][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.868632][ T59] usb 7-1: config 0 descriptor?? [ 455.006861][T12450] usb 6-1: USB disconnect, device number 83 [ 455.197141][ T24] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 455.303809][ T59] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 455.445788][ T6026] usb 10-1: USB disconnect, device number 28 [ 455.473620][T18082] FAULT_INJECTION: forcing a failure. [ 455.473620][T18082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.479266][T18082] CPU: 2 UID: 0 PID: 18082 Comm: syz.2.3736 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.479296][T18082] Tainted: [L]=SOFTLOCKUP [ 455.479303][T18082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 455.479315][T18082] Call Trace: [ 455.479322][T18082] [ 455.479330][T18082] dump_stack_lvl+0x100/0x190 [ 455.479533][T18082] should_fail_ex.cold+0x5/0xa [ 455.479559][T18082] _copy_to_user+0x32/0xd0 [ 455.479613][T18082] simple_read_from_buffer+0xcb/0x170 [ 455.479666][T18082] proc_fail_nth_read+0x1af/0x230 [ 455.479695][T18082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.479724][T18082] ? rw_verify_area+0xce/0x6d0 [ 455.479750][T18082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.479774][T18082] vfs_read+0x1e4/0xb30 [ 455.479815][T18082] ? __pfx_vfs_read+0x10/0x10 [ 455.479832][T18082] ? __fget_files+0x215/0x3d0 [ 455.479858][T18082] ? __fget_files+0x21f/0x3d0 [ 455.479885][T18082] ksys_read+0x12a/0x250 [ 455.479903][T18082] ? __pfx_ksys_read+0x10/0x10 [ 455.479927][T18082] do_syscall_64+0x106/0xf80 [ 455.480021][T18082] ? clear_bhb_loop+0x40/0x90 [ 455.480044][T18082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.480062][T18082] RIP: 0033:0x7f4814d5d04e [ 455.480079][T18082] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 455.480096][T18082] RSP: 002b:00007f4815bb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 455.480114][T18082] RAX: ffffffffffffffda RBX: 00007f4815bb76c0 RCX: 00007f4814d5d04e [ 455.480126][T18082] RDX: 000000000000000f RSI: 00007f4815bb70a0 RDI: 0000000000000004 [ 455.480160][T18082] RBP: 00007f4815bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 455.480171][T18082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.480181][T18082] R13: 00007f4815016038 R14: 00007f4815015fa0 R15: 00007ffc8a5a7738 [ 455.480207][T18082] [ 455.560644][T11896] usb 7-1: USB disconnect, device number 81 [ 455.604699][ T24] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 455.631476][ T40] kauditd_printk_skb: 139 callbacks suppressed [ 455.631498][ T40] audit: type=1400 audit(968.559:9881): avc: denied { read } for pid=18098 comm="syz.2.3741" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 455.649961][ T40] audit: type=1400 audit(968.569:9882): avc: denied { open } for pid=18098 comm="syz.2.3741" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 455.658820][ T40] audit: type=1400 audit(968.569:9883): avc: denied { ioctl } for pid=18098 comm="syz.2.3741" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 455.697628][ T40] audit: type=1400 audit(968.629:9884): avc: denied { write } for pid=18098 comm="syz.2.3741" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 455.755652][ T24] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 455.759515][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 455.763898][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 455.768837][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 455.778391][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 455.781554][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.786075][ T24] usb 9-1: config 0 descriptor?? [ 455.829519][ T40] audit: type=1400 audit(968.759:9885): avc: denied { create } for pid=18106 comm="syz.2.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 455.836718][ T40] audit: type=1400 audit(968.769:9886): avc: denied { bind } for pid=18106 comm="syz.2.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 455.843962][ T40] audit: type=1400 audit(968.769:9887): avc: denied { setopt } for pid=18106 comm="syz.2.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 455.849590][ T40] audit: type=1400 audit(968.769:9888): avc: denied { accept } for pid=18106 comm="syz.2.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 455.855907][ T40] audit: type=1400 audit(968.769:9889): avc: denied { write } for pid=18106 comm="syz.2.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 455.861924][ T40] audit: type=1400 audit(968.769:9890): avc: denied { read } for pid=18106 comm="syz.2.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 455.893205][T18110] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3743'. [ 455.897187][T18110] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 455.923811][ T59] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 456.075919][ T59] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 456.078626][ T59] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 456.083130][ T59] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 456.088759][ T59] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 456.089963][T18122] Cannot find set identified by id 3 to match [ 456.092861][ T59] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 456.097909][ T59] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 456.104654][ T59] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 456.107155][ T59] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 456.110821][ T59] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 456.122105][ T59] usb 6-1: string descriptor 0 read error: -22 [ 456.124698][ T59] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 456.128436][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.137439][ T59] adutux 6-1:168.0: interrupt endpoints not found [ 456.159158][T18120] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.3748'. [ 456.182604][T18125] IPv6: Can't replace route, no match found [ 456.254607][T18089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3738'. [ 456.268541][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 456.278270][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 456.282709][ T24] usb 9-1: USB disconnect, device number 34 [ 456.336270][T11896] usb 6-1: USB disconnect, device number 84 [ 456.520505][T18137] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3754'. [ 456.806239][T18154] netlink: 'syz.4.3756': attribute type 6 has an invalid length. [ 456.825375][ T59] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 456.864097][ T1026] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 456.929870][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3759'. [ 456.932662][T18161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3759'. [ 457.000953][ T59] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 457.006274][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 457.010997][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 457.016382][ T59] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 457.021984][ T59] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 457.034447][ T1026] usb 7-1: config 0 has no interfaces? [ 457.036310][ T1026] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 457.039143][ T1026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.043098][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.048382][ T59] usb 10-1: config 0 descriptor?? [ 457.050675][ T1026] usb 7-1: config 0 descriptor?? [ 457.260354][ T1026] usb 7-1: USB disconnect, device number 82 [ 457.273872][ T5991] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 457.423845][ T5991] usb 6-1: Using ep0 maxpacket: 32 [ 457.427027][ T5991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.430483][ T5991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.434178][ T5991] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 457.439187][ T5991] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 457.442470][ T5991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.447175][ T5991] usb 6-1: config 0 descriptor?? [ 457.465786][ T59] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 457.715368][ T29] usb 10-1: USB disconnect, device number 29 [ 458.040467][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 458.043380][T18181] netlink: 'syz.2.3766': attribute type 30 has an invalid length. [ 458.046077][T18181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3766'. [ 458.057076][ T5949] block nbd2: Receive control failed (result -32) [ 458.057080][ T5947] block nbd2: Receive control failed (result -32) [ 458.067549][ T5991] usbhid 6-1:0.0: can't add hid device: -71 [ 458.069647][ T5991] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 458.074754][ T5991] usb 6-1: USB disconnect, device number 85 [ 458.204902][ T59] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 458.364253][ T59] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 458.369540][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 458.382546][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 458.387103][ T59] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.393894][ T59] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.398547][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.423360][ T59] usb 9-1: config 0 descriptor?? [ 458.429365][T18212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.435690][T18212] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 458.481767][T18218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3778'. [ 458.667805][T18225] syzkaller0: entered promiscuous mode [ 458.669923][T18225] syzkaller0: entered allmulticast mode [ 458.739405][T18231] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3782'. [ 459.031220][T18179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.037000][T18179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.045389][T18179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.050271][T18179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.160375][T18256] : renamed from vlan0 (while UP) [ 459.464070][ T5975] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 459.560689][ T59] usbhid 9-1:0.0: can't add hid device: -71 [ 459.562696][ T59] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 459.570902][ T59] usb 9-1: USB disconnect, device number 35 [ 459.629203][ T5975] usb 10-1: config 0 has no interfaces? [ 459.631411][ T5975] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 459.636098][ T5975] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.641932][ T5975] usb 10-1: config 0 descriptor?? [ 459.792319][T18311] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3805'. [ 459.854512][ T59] usb 10-1: USB disconnect, device number 30 [ 459.868165][T18313] syzkaller0: entered promiscuous mode [ 459.870619][T18313] syzkaller0: entered allmulticast mode [ 460.083828][ T6026] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 460.235225][ T6026] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 460.239094][ T6026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 460.242621][ T6026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 460.246063][ T6026] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 460.250851][ T6026] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 460.254369][ T6026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.260435][ T6026] usb 7-1: config 0 descriptor?? [ 460.481300][T18317] netlink: 'syz.5.3808': attribute type 18 has an invalid length. [ 460.489624][T18320] input: syz1 as /devices/virtual/input/input48 [ 460.784014][ T6026] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 461.890977][ T1026] usb 7-1: USB disconnect, device number 83 [ 461.895451][ T40] kauditd_printk_skb: 207 callbacks suppressed [ 461.895471][ T40] audit: type=1400 audit(974.829:10098): avc: denied { unlink } for pid=15873 comm="syz-executor" name="file0" dev="tmpfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 461.914023][ T40] audit: type=1400 audit(974.849:10099): avc: denied { read write } for pid=18327 comm="syz.5.3810" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 461.923470][ T40] audit: type=1400 audit(974.849:10100): avc: denied { open } for pid=18327 comm="syz.5.3810" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 461.933746][ T40] audit: type=1400 audit(974.849:10101): avc: denied { ioctl } for pid=18327 comm="syz.5.3810" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 461.979434][ T40] audit: type=1400 audit(974.909:10102): avc: denied { ioctl } for pid=18329 comm="syz.1.3811" path="socket:[87589]" dev="sockfs" ino=87589 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 461.987473][ T40] audit: type=1400 audit(974.919:10103): avc: denied { create } for pid=18329 comm="syz.1.3811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 461.995010][ T40] audit: type=1400 audit(974.919:10104): avc: denied { write } for pid=18329 comm="syz.1.3811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 462.002026][ T40] audit: type=1400 audit(974.919:10105): avc: denied { nlmsg_write } for pid=18329 comm="syz.1.3811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 462.157423][ T40] audit: type=1326 audit(975.089:10106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18334 comm="syz.1.3813" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a879c819 code=0x7ffc0000 [ 462.174151][ T40] audit: type=1326 audit(975.099:10107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18334 comm="syz.1.3813" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a879c819 code=0x7ffc0000 [ 462.484241][T11896] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 462.488944][T18352] netlink: 'syz.2.3819': attribute type 39 has an invalid length. [ 462.507307][T18353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.654410][T11896] usb 6-1: config 0 has no interfaces? [ 462.656707][T11896] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 462.660807][T11896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.688626][T11896] usb 6-1: config 0 descriptor?? [ 462.911721][T12450] usb 6-1: USB disconnect, device number 86 [ 463.236690][T18369] __nla_validate_parse: 1 callbacks suppressed [ 463.236709][T18369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3824'. [ 463.682962][T18383] openvswitch: netlink: Flow key attribute not present in set flow. [ 463.693911][ T29] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 463.713777][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 463.847224][ T29] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 463.852739][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 463.874131][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 463.879439][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 463.903922][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 463.911435][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.918707][ T29] usb 7-1: config 0 descriptor?? [ 464.201318][T18397] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 464.367180][ T29] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 464.602983][ T24] usb 7-1: USB disconnect, device number 84 [ 464.723938][T11896] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 464.853887][T11896] usb 6-1: device descriptor read/64, error -71 [ 465.113897][T11896] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 465.150249][T18412] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 465.157604][T18412] all: renamed from bridge_slave_0 (while UP) [ 465.254275][T11896] usb 6-1: device descriptor read/64, error -71 [ 465.364602][T11896] usb usb6-port1: attempt power cycle [ 465.703906][T11896] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 465.725246][T11896] usb 6-1: device descriptor read/8, error -71 [ 465.773964][ T5947] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 465.861423][T18417] netlink: 'syz.5.3840': attribute type 10 has an invalid length. [ 465.877504][T18417] veth0_vlan: left promiscuous mode [ 465.881837][T18417] veth0_vlan: entered promiscuous mode [ 465.890728][T18417] team0: Device veth0_vlan failed to register rx_handler [ 465.994412][T11896] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 466.015717][T11896] usb 6-1: device descriptor read/8, error -71 [ 466.124956][T11896] usb usb6-port1: unable to enumerate USB device [ 466.943612][ T40] kauditd_printk_skb: 167 callbacks suppressed [ 466.943627][ T40] audit: type=1400 audit(979.869:10275): avc: denied { read } for pid=18468 comm="syz.4.3853" dev="nsfs" ino=4026533981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 466.956420][ T40] audit: type=1400 audit(979.889:10276): avc: denied { open } for pid=18468 comm="syz.4.3853" path="net:[4026533981]" dev="nsfs" ino=4026533981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 466.965703][ T40] audit: type=1400 audit(979.889:10277): avc: denied { create } for pid=18468 comm="syz.4.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 466.973274][ T40] audit: type=1400 audit(979.889:10278): avc: denied { write } for pid=18468 comm="syz.4.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 466.981518][ T40] audit: type=1400 audit(979.889:10279): avc: denied { read } for pid=18468 comm="syz.4.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 466.990741][ T40] audit: type=1400 audit(979.889:10280): avc: denied { create } for pid=18468 comm="syz.4.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 467.000700][ T40] audit: type=1400 audit(979.889:10281): avc: denied { setopt } for pid=18468 comm="syz.4.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 467.094513][ T40] audit: type=1400 audit(980.029:10282): avc: denied { mount } for pid=18472 comm="syz.2.3854" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 467.102810][ T40] audit: type=1400 audit(980.029:10283): avc: denied { remount } for pid=18472 comm="syz.2.3854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 467.109788][ T40] audit: type=1400 audit(980.029:10284): avc: denied { ioctl } for pid=18472 comm="syz.2.3854" path="socket:[89225]" dev="sockfs" ino=89225 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 467.537639][T18493] ipvlan2: entered allmulticast mode [ 467.541008][T18493] batadv_slave_1: entered allmulticast mode [ 467.545177][T18493] batman_adv: batadv0: Adding interface: ipvlan2 [ 467.547427][T18493] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.562550][T18493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.566813][T18493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.570019][T18493] batman_adv: batadv0: Interface activated: ipvlan2 [ 468.303799][T18532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3872'. [ 468.309178][T18532] hsr_slave_0: left promiscuous mode [ 468.313469][T18532] hsr_slave_1: left promiscuous mode [ 468.332599][T18534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.335924][T18534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.363991][T12450] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 468.515414][T12450] usb 6-1: config 0 has no interfaces? [ 468.517495][T12450] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 468.520786][T12450] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.526264][T12450] usb 6-1: config 0 descriptor?? [ 468.671147][T18558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3880'. [ 468.727376][T18561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3881'. [ 468.750560][T12450] usb 6-1: USB disconnect, device number 91 [ 468.758545][T18563] block device autoloading is deprecated and will be removed. [ 468.774974][T18565] Invalid ELF header magic: != ELF [ 468.938700][T18569] ieee802154 phy1 wpan1: encryption failed: -22 [ 469.122969][T18587] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3887'. [ 469.195454][T18593] netlink: 'syz.2.3889': attribute type 4 has an invalid length. [ 469.198241][T18593] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3889'. [ 469.215598][T18593] .`: renamed from bond0 (while UP) [ 469.442251][T18596] trusted_key: encrypted_key: insufficient parameters specified [ 469.447361][T18596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3892'. [ 469.450465][T18596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3892'. [ 469.453630][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3892'. [ 469.465343][T18596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3892'. [ 469.468177][ T154] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.468622][T18596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3892'. [ 469.473644][ T154] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.484686][ T154] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.489111][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.513943][ T830] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 469.678596][ T830] usb 10-1: Using ep0 maxpacket: 8 [ 469.682741][ T830] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 469.686470][ T830] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 469.691809][ T830] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 469.698105][ T830] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 469.706049][ T830] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 469.714041][ T830] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 469.719046][ T830] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 469.724486][ T830] usb 10-1: config 168 interface 0 has no altsetting 0 [ 469.730800][ T830] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 469.734801][ T830] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 469.740411][ T830] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 469.746757][ T830] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 469.751103][ T830] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 469.756117][ T830] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 469.761571][ T830] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 469.767292][ T830] usb 10-1: config 168 interface 0 has no altsetting 0 [ 469.771560][ T830] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 469.776866][ T830] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 469.780485][ T830] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 469.785883][ T830] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 469.791714][ T830] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 469.798556][ T830] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 469.803629][ T830] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 469.809935][ T830] usb 10-1: config 168 interface 0 has no altsetting 0 [ 469.817858][ T830] usb 10-1: string descriptor 0 read error: -22 [ 469.820915][T18626] program syz.1.3901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.821073][ T830] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 469.829094][ T830] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.844506][ T830] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 470.046721][ T830] usb 10-1: USB disconnect, device number 31 [ 470.218457][T18633] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 470.221538][T18633] overlayfs: failed to set xattr on upper [ 470.225041][T18633] overlayfs: ...falling back to redirect_dir=nofollow. [ 470.228647][T18633] overlayfs: ...falling back to index=off. [ 470.231347][T18633] overlayfs: ...falling back to uuid=null. [ 470.234265][T18633] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 470.241463][T18633] vivid-004: disconnect [ 470.247665][T18633] vivid-004: reconnect [ 470.830767][T18651] loop9: detected capacity change from 0 to 7 [ 470.847079][ T8878] Dev loop9: unable to read RDB block 7 [ 470.849781][ T8878] loop9: unable to read partition table [ 470.852765][ T8878] loop9: partition table beyond EOD, truncated [ 470.878616][T18651] Dev loop9: unable to read RDB block 7 [ 470.882337][T18654] netlink: 'syz.5.3908': attribute type 64 has an invalid length. [ 470.892005][T18651] loop9: unable to read partition table [ 470.896314][T18651] loop9: partition table beyond EOD, truncated [ 470.899239][T18651] loop_reread_partitions: partition scan of loop9 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 470.910603][T18656] ip6tnl0: Caught tx_queue_len zero misconfig [ 470.916483][T18656] 9p: Bad value for 'rfdno' [ 471.004586][ T29] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 471.258524][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.262127][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.266276][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 471.270443][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 471.273331][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.280351][ T29] usb 6-1: config 0 descriptor?? [ 471.694843][ T29] hid_parser_main: 4086 callbacks suppressed [ 471.694869][ T29] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 471.705109][ T29] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 471.708837][ T29] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 471.711990][ T29] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 471.714673][ T29] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 471.718081][ T29] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 471.720822][ T29] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 471.724297][ T29] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 471.729125][ T29] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 471.731626][ T29] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 471.756163][ T29] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 471.946001][ T40] kauditd_printk_skb: 258 callbacks suppressed [ 471.946013][ T40] audit: type=1400 audit(984.879:10543): avc: denied { create } for pid=18648 comm="syz.1.3907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 472.001640][ T830] usb 6-1: USB disconnect, device number 92 [ 472.008812][ T40] audit: type=1400 audit(984.939:10544): avc: denied { create } for pid=18706 comm="syz.5.3924" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 472.021551][ T40] audit: type=1400 audit(984.939:10545): avc: denied { create } for pid=18706 comm="syz.5.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.029186][ T40] audit: type=1400 audit(984.939:10546): avc: denied { ioctl } for pid=18706 comm="syz.5.3924" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 472.042201][ T40] audit: type=1400 audit(984.959:10547): avc: denied { create } for pid=18706 comm="syz.5.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 472.051342][ T40] audit: type=1400 audit(984.959:10548): avc: denied { create } for pid=18706 comm="syz.5.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 472.061765][ T40] audit: type=1400 audit(984.959:10549): avc: denied { ioctl } for pid=18706 comm="syz.5.3924" path="socket:[89938]" dev="sockfs" ino=89938 ioctlcmd=0x8991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 472.071131][ T40] audit: type=1400 audit(984.989:10550): avc: denied { sys_module } for pid=18706 comm="syz.5.3924" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 472.078043][T18708] binder: BINDER_SET_CONTEXT_MGR already set [ 472.080846][ T40] audit: type=1400 audit(985.009:10551): avc: denied { read } for pid=18706 comm="syz.5.3924" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 472.082384][T18708] binder: 18706:18708 ioctl 4018620d 200000000100 returned -16 [ 472.094824][ T40] audit: type=1400 audit(985.009:10552): avc: denied { open } for pid=18706 comm="syz.5.3924" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 472.480979][T18725] bond3: option miimon: invalid value (18446744073410318336) [ 472.483935][T18725] bond3: option miimon: allowed values 0 - 2147483647 [ 472.487666][T18725] bond3 (unregistering): Released all slaves [ 472.494285][T12450] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 472.526295][T18727] overlay: filesystem on ./file0 not supported as upperdir [ 472.608157][T18729] kAFS: No cell specified [ 472.624131][T12450] usb 10-1: device descriptor read/64, error -71 [ 472.796443][T18740] netlink: 'syz.2.3933': attribute type 1 has an invalid length. [ 472.818036][T18740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.864092][T12450] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 472.993883][T12450] usb 10-1: device descriptor read/64, error -71 [ 473.003889][ T59] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 473.005045][T18751] [U]  [ 473.009876][T18751] [U] + [ 473.011558][T18751] [U] $܁P~ƊQrAe`G-Rij笨mA)߀No4gV;uQ` [ 473.017644][T18751] [U] Wg-u]}FyȘeƮ)>,>f}a&\msOHn'Ä=#$Ǧ&g C.,jP^{"Oiňo;pʪ6qwS_{CWfs+R~qu›ŸNn! [ 473.025393][T18751] [U] Zph5Laӝ8H [ 473.029827][T18751] [U] V)*Gr [ 473.031665][T18751] [U] g©MD9i^g[&TXd}y^#"Z&|JiYDX~reGiUMNkqGJcӔ0 r088D<U0P9=>ȪU[ƒuW9jl"hZG+EĖ#LY`z2 [ 473.037631][T18751] [U] }{_S|j\ptژ1b-S4!{9C5->M [ 473.039828][T18751] [U] UXBH,~nmIM/a [ 473.041630][T18751] [U] VS6e^ SHk"(*:$}<^YD?rnHEX#X3Ys6 [ 473.044093][T18751] [U] [ 473.047203][T18751] [U] 71D%}7G\4'Kp7U,"^|-B g&@bWRY [ 473.050258][T18751] [U] p~ [ 473.051562][T18751] [U] hQVOK) ƵZ>uY`XԶޖQtBhvMdR/%F8`yǥY䦈Fؾx@-d֛ 0ʩz;D")tRgiL()d6"BnBf?ӛ,ѧ`'Lq 6t2t@F@p6v]t4NξyRΓvP':J۫ۆE*̣];M4TqB_5pM [ 473.065847][T18751] [U] _mֱ9KU""^s6rP [ 473.067970][T18751] [U] ¥U[m j0zOoF|:! /$@RH(Η1K@ǚ/w4|xJ3: [ 473.081347][T18751] [U] V :p\U 5V"cd:nb3Ob,%ǯe j9>\rCˉiVE<\7;娍+ȏ"IƔ/6FNhgw~xcWö}H6TI؆6aA耹C1v]ba9xT  [ 473.086998][T18751] [U] ۼuJD⠙("wZ[(s1yXNׯtAc/piǎj Ѕ#{0`y,Hp+̄j54?@պNa^!4^3" [ 473.090812][T18751] [U] I\xezW80ܚPfzqi^@O [ 473.092624][T18751] [U] gڑ/P+ؒb=pYY1gJd!xKTa;PaoFlu 8:!VD G\zwi=)m)o!Җ>08jͻ*( sLQ@0KeVszKP?e/K MRlya?'EtU{R]ֈS$9Ou(ŀ~le/I8# a ?,#p;R{4Hw"X{\\ .KV2$Ēΐ܀6< [ 473.122390][T18751] [U] q Oulv~-_8?O6$z«eAO_NO/C .byrˋ<[DxҿWWX [ 473.125927][T18751] [U] ܲ|9$n`i(RǿDtA4o/̈́eV2Bln| :KYW&;l1; [ 473.128624][T18751] [U] ;JO6P [ 473.155113][ T59] usb 9-1: config 0 has no interfaces? [ 473.157043][ T59] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 473.160191][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.165837][ T59] usb 9-1: config 0 descriptor?? [ 473.368522][T18750] [U] q1n#G4Y›rMnUf[Xi^='ډz;:Q7 [ 473.384389][ T5304] usb 9-1: USB disconnect, device number 36 [ 473.443811][T12450] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 473.465354][T12450] usb 10-1: device descriptor read/8, error -71 [ 473.580513][T18757] Invalid logical block size (536872960) [ 473.604885][T18757] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 473.610135][T18757] sctp: [Deprecated]: syz.2.3937 (pid 18757) Use of int in maxseg socket option. [ 473.610135][T18757] Use struct sctp_assoc_value instead [ 473.703999][T12450] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 473.724565][T12450] usb 10-1: device descriptor read/8, error -71 [ 473.834277][T12450] usb usb10-port1: unable to enumerate USB device [ 474.185902][T18775] __nla_validate_parse: 14 callbacks suppressed [ 474.185922][T18775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3942'. [ 474.848708][T18794] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3948'. [ 475.184204][T18802] loop5: detected capacity change from 0 to 7 [ 475.189149][ C2] blk_print_req_error: 138 callbacks suppressed [ 475.189168][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.197016][ C2] buffer_io_error: 138 callbacks suppressed [ 475.197033][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 475.203161][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.206484][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 475.210049][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.214029][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 475.217589][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.221321][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 475.224424][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.229151][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 475.235783][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.239841][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 475.244440][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.248986][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 475.252465][T18802] ldm_validate_partition_table(): Disk read failed. [ 475.255690][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.259722][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 475.265162][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.269385][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 475.272971][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.276281][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 475.280216][T18802] Dev loop5: unable to read RDB block 0 [ 475.283910][T18802] loop5: unable to read partition table [ 475.286474][T18802] loop5: partition table beyond EOD, truncated [ 475.289205][T18802] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 475.351491][T18807] usb usb7: usbfs: process 18807 (syz.1.3953) did not claim interface 0 before use [ 475.653832][T12450] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 475.702897][T18817] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 475.797855][T18822] usb usb9: usbfs: process 18822 (syz.4.3960) did not claim interface 0 before use [ 475.815952][T12450] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 475.821169][T12450] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 475.827081][T12450] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 475.831640][T12450] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 475.837658][T12450] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 475.842003][T12450] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.849206][T12450] usb 10-1: config 0 descriptor?? [ 475.951073][T18836] gfs2: error -5 reading superblock [ 476.263278][T12450] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 476.323861][ T1026] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 476.475725][ T1026] usb 7-1: config 0 has no interfaces? [ 476.478109][ T1026] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 476.481942][ T1026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.488204][ T1026] usb 7-1: config 0 descriptor?? [ 476.515727][T18805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.519832][T18805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.525672][T18805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.529304][T18805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.534299][ T830] usb 10-1: USB disconnect, device number 36 [ 476.705973][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3966'. [ 476.711259][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3966'. [ 476.715397][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3966'. [ 476.723782][ T5304] usb 7-1: USB disconnect, device number 85 [ 477.109666][ T40] kauditd_printk_skb: 160 callbacks suppressed [ 477.109687][ T40] audit: type=1400 audit(990.029:10713): avc: denied { allowed } for pid=18865 comm="syz.5.3973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 477.198034][ T40] audit: type=1400 audit(990.129:10714): avc: denied { read append } for pid=18873 comm="syz.5.3975" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 477.206398][ T40] audit: type=1400 audit(990.129:10715): avc: denied { open } for pid=18873 comm="syz.5.3975" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 477.214395][ T40] audit: type=1400 audit(990.129:10716): avc: denied { ioctl } for pid=18873 comm="syz.5.3975" path="/dev/input/event0" dev="devtmpfs" ino=941 ioctlcmd=0x451b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 477.246284][ T40] audit: type=1400 audit(990.179:10717): avc: denied { create } for pid=18877 comm="syz.5.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 477.253365][ T40] audit: type=1400 audit(990.179:10718): avc: denied { bind } for pid=18877 comm="syz.5.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 477.259811][ T40] audit: type=1400 audit(990.179:10719): avc: denied { listen } for pid=18877 comm="syz.5.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 477.267152][ T40] audit: type=1400 audit(990.179:10720): avc: denied { connect } for pid=18877 comm="syz.5.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 477.273900][ T40] audit: type=1400 audit(990.179:10721): avc: denied { create } for pid=18875 comm="syz.4.3976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 477.280947][ T40] audit: type=1400 audit(990.179:10722): avc: denied { ioctl } for pid=18875 comm="syz.4.3976" path="socket:[93198]" dev="sockfs" ino=93198 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 477.293945][T18878] netlink: 'syz.5.3977': attribute type 10 has an invalid length. [ 477.299114][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3977'. [ 477.343941][ T5304] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 477.495677][ T5304] usb 6-1: config 0 has no interfaces? [ 477.498278][ T5304] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 477.502677][ T5304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.514244][ T5304] usb 6-1: config 0 descriptor?? [ 477.574111][T18903] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3984'. [ 477.744002][ T5975] usb 6-1: USB disconnect, device number 93 [ 477.753888][ T830] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 477.926096][ T830] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.931102][ T830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 477.935836][ T830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 477.940243][ T830] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 477.945852][ T830] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 477.949241][ T830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.962896][ T830] usb 9-1: config 0 descriptor?? [ 478.397624][T18913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 478.402154][T18913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 478.411071][T18913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.512105][T18913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 478.516728][T18913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 478.521386][T18913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.616007][T18913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 478.620575][T18913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 478.625949][T18913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.626226][T18926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.641131][T18926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.706347][ T830] usbhid 9-1:0.0: can't add hid device: -71 [ 478.709830][ T830] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 478.711944][T18913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 478.716089][ T830] usb 9-1: USB disconnect, device number 37 [ 478.719221][T18913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 478.723052][T18913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.837695][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.842490][ T13] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 478.846464][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.858360][ T1232] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.862524][ T1232] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 478.866953][ T1232] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.877710][ T1232] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.881321][ T1232] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 478.885594][ T1232] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.903545][ T154] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.913794][ T154] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 478.917263][ T154] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.988925][T18937] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3993'. [ 479.362261][T18954] IPVS: length: 18 != 8 [ 479.398270][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'. [ 479.414071][T18954] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 479.420895][T18954] bond5 (unregistering): Released all slaves [ 479.519126][ T24] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 479.702293][ T24] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 479.707905][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.714160][ T24] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 479.718765][ T24] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 479.722198][ T24] usb 9-1: Manufacturer: syz [ 479.727634][ T24] usb 9-1: config 0 descriptor?? [ 479.804600][ T24] rc_core: IR keymap rc-hauppauge not found [ 479.806760][ T24] Registered IR keymap rc-empty [ 479.809028][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 479.812838][T18961] netlink: 'syz.2.3999': attribute type 1 has an invalid length. [ 479.814145][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input52 [ 479.936541][ C2] igorplugusb 9-1:0.0: Error: urb status = -32 [ 479.939523][ T24] usb 9-1: USB disconnect, device number 38 [ 480.048888][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 480.055406][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 480.060531][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 480.067015][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 480.071792][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 480.112392][T18969] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.4002'. [ 480.116870][T18969] netlink: 'syz.5.4002': attribute type 64 has an invalid length. [ 480.119712][T18969] netlink: 'syz.5.4002': attribute type 4 has an invalid length. [ 480.122639][T18969] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4002'. [ 480.323827][T18966] chnl_net:caif_netlink_parms(): no params data found [ 480.401621][T18966] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.405016][T18966] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.408248][T18966] bridge_slave_0: entered allmulticast mode [ 480.412446][T18966] bridge_slave_0: entered promiscuous mode [ 480.418250][T18966] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.420703][T18966] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.423094][T18966] bridge_slave_1: entered allmulticast mode [ 480.426902][T18966] bridge_slave_1: entered promiscuous mode [ 480.443908][ T29] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 480.445905][T18966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.454518][T18966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.489617][ T1146] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.493228][ T1146] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.531023][T18966] team0: Port device team_slave_0 added [ 480.538714][T18966] team0: Port device team_slave_1 added [ 480.560008][T18966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.562360][T18966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.579185][T18966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.584749][T18966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.587707][T18966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.599676][T18966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.616232][ T1146] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.620670][ T1146] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.636617][ T29] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 480.642574][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 480.648250][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 480.651492][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 480.656676][ T29] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 480.659960][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.666774][ T29] usb 10-1: config 0 descriptor?? [ 480.669619][T18966] hsr_slave_0: entered promiscuous mode [ 480.672102][T18966] hsr_slave_1: entered promiscuous mode [ 480.675072][T18966] debugfs: 'hsr0' already exists in 'hsr' [ 480.676969][T18966] Cannot create hsr debugfs directory [ 480.692538][ T1146] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.696285][ T1146] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.763342][ T1146] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.767863][ T1146] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.981727][ T1146] bridge_slave_1: left allmulticast mode [ 480.984693][ T1146] bridge_slave_1: left promiscuous mode [ 480.987718][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.995543][ T1146] bridge_slave_0: left allmulticast mode [ 480.998365][ T1146] bridge_slave_0: left promiscuous mode [ 481.001574][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.098541][ T29] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 481.210477][ T1146] gretap0 (unregistering): left promiscuous mode [ 481.242702][ T1146] bond2 (unregistering): (slave geneve2): Releasing active interface [ 481.344978][ T53] usb 10-1: USB disconnect, device number 37 [ 481.363823][ T29] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 481.514581][ T29] usb 9-1: device descriptor read/64, error -71 [ 481.549647][ T1146] .` (unregistering): left promiscuous mode [ 481.551568][ T1146] bond_slave_0: left promiscuous mode [ 481.553428][ T1146] bond_slave_1: left promiscuous mode [ 481.561532][ T1146] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.565858][ T1146] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.569943][ T1146] .` (unregistering): Released all slaves [ 481.578329][ T1146] bond1 (unregistering): (slave wlan0): Releasing active interface [ 481.582218][ T1146] bond1 (unregistering): Released all slaves [ 481.590298][ T1146] bond2 (unregistering): Released all slaves [ 481.597363][ T1146] bond3 (unregistering): Released all slaves [ 481.606433][ T1146] bond4 (unregistering): Released all slaves [ 481.613483][ T1146] bond0 (unregistering): Released all slaves [ 481.774053][ T29] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 481.912666][T19027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4014'. [ 481.923409][T19027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4014'. [ 481.935402][ T29] usb 9-1: device descriptor read/64, error -71 [ 481.992557][T19030] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 482.055911][ T29] usb usb9-port1: attempt power cycle [ 482.083376][ T1146] hsr_slave_0: left promiscuous mode [ 482.088539][ T1146] hsr_slave_1: left promiscuous mode [ 482.104698][ T5947] Bluetooth: hci2: command tx timeout [ 482.128061][ T1146] veth1_vlan: left promiscuous mode [ 482.130285][ T1146] veth0_vlan: left promiscuous mode [ 482.172570][ T1146] pimreg9 (unregistering): left allmulticast mode [ 482.409661][ T29] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 482.445544][ T29] usb 9-1: device descriptor read/8, error -71 [ 482.476698][ T40] kauditd_printk_skb: 176 callbacks suppressed [ 482.476716][ T40] audit: type=1400 audit(995.409:10899): avc: denied { create } for pid=18966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 482.477936][T18966] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 482.479723][ T40] audit: type=1400 audit(995.409:10900): avc: denied { write } for pid=18966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 482.479768][ T40] audit: type=1400 audit(995.409:10901): avc: denied { read } for pid=18966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 482.509738][T18966] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 482.533939][T18966] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 482.546231][T18966] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 482.610166][T18966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.620827][T18966] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.631104][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.634449][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.646580][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.647033][ T1146] IPVS: stop unused estimator thread 0... [ 482.649768][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.689941][ T40] audit: type=1400 audit(995.619:10902): avc: denied { module_request } for pid=18966 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 482.704615][ T29] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 482.719127][ T40] audit: type=1400 audit(995.649:10903): avc: denied { sys_module } for pid=18966 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 482.725564][ T29] usb 9-1: device descriptor read/8, error -71 [ 482.729146][ T40] audit: type=1400 audit(995.659:10904): avc: denied { ioctl } for pid=19010 comm="syz.4.4012" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.796183][ T24] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 482.806042][T18966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.832917][T18966] veth0_vlan: entered promiscuous mode [ 482.834204][ T29] usb usb9-port1: unable to enumerate USB device [ 482.838949][T18966] veth1_vlan: entered promiscuous mode [ 482.853926][T18966] veth0_macvtap: entered promiscuous mode [ 482.859624][T18966] veth1_macvtap: entered promiscuous mode [ 482.869860][T18966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.877996][T18966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.885529][ T1232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.888617][ T1232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.893299][ T1232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.897568][ T1232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.944260][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 482.947854][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.951633][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.951875][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.958115][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 482.958362][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.963125][ T24] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 482.963140][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.970776][ T24] usb 10-1: config 0 descriptor?? [ 482.985981][T16423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.988715][T16423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.997830][ T40] audit: type=1400 audit(995.929:10905): avc: denied { mounton } for pid=18966 comm="syz-executor" path="/syzkaller.FiVijO/syz-tmp" dev="sda1" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 483.006446][ T40] audit: type=1400 audit(995.929:10906): avc: denied { mount } for pid=18966 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 483.015368][ T40] audit: type=1400 audit(995.929:10907): avc: denied { mounton } for pid=18966 comm="syz-executor" path="/syzkaller.FiVijO/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 483.024875][ T40] audit: type=1400 audit(995.929:10908): avc: denied { mount } for pid=18966 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 483.284059][ T5991] usb 7-1: new low-speed USB device number 86 using dummy_hcd [ 483.414202][T19070] loop6: detected capacity change from 0 to 524288000 [ 483.435751][ T5991] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 483.438295][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 483.443002][ T5991] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 483.447574][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 483.452295][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 483.459890][ T5991] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 483.462452][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 483.479346][ T5991] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 483.493865][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 483.498638][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 483.505850][ T5991] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 483.509099][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 483.513583][ T5991] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 483.519747][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 483.526181][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 483.532259][ T5991] usb 7-1: string descriptor 0 read error: -22 [ 483.535250][ T5991] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 483.538207][ T5991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.545744][ T5991] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 483.637271][T19071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.641642][T19071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.733822][ T5991] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 483.835160][T19061] netlink: 'syz.2.4001': attribute type 1 has an invalid length. [ 483.863845][ T5991] usb 6-1: device descriptor read/64, error -71 [ 484.113873][ T5991] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 484.174782][ T5947] Bluetooth: hci2: command tx timeout [ 484.243785][ T5991] usb 6-1: device descriptor read/64, error -71 [ 484.354034][ T5991] usb usb6-port1: attempt power cycle [ 484.364202][T19082] tmpfs: Unknown parameter 'usrquota0 [ 484.364202][T19082] 0 [ 484.364202][T19082] 0 [ 484.364202][T19082] ' [ 484.713772][ T5991] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 484.737410][ T5991] usb 6-1: device descriptor read/8, error -71 [ 484.973862][ T5991] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 484.994235][ T5991] usb 6-1: device descriptor read/8, error -71 [ 485.114014][ T5991] usb usb6-port1: unable to enumerate USB device [ 485.303915][T12450] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 485.455503][T12450] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 485.458878][T12450] usb 9-1: config 1 has no interface number 0 [ 485.461031][T12450] usb 9-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 485.464918][T12450] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x5 has an invalid bInterval 200, changing to 11 [ 485.470190][T12450] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 485.473073][T12450] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.475778][T12450] usb 9-1: Product: syz [ 485.477128][T12450] usb 9-1: Manufacturer: syz [ 485.478682][T12450] usb 9-1: SerialNumber: syz [ 485.482820][T19101] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 485.486968][T12450] usb 9-1: Expected 3 endpoints, found: 2 [ 485.531935][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 485.550598][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 485.560916][ T24] usb 10-1: USB disconnect, device number 38 [ 485.579598][T19103] syzkaller0: entered promiscuous mode [ 485.582625][T19103] syzkaller0: entered allmulticast mode [ 485.701492][ T5304] usb 9-1: USB disconnect, device number 43 [ 485.751895][T19110] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4034'. [ 485.936827][ T830] usb 7-1: USB disconnect, device number 86 [ 486.027115][T19118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4038'. [ 486.032129][T19118] netlink: 'syz.2.4038': attribute type 1 has an invalid length. [ 486.129361][T19120] syzkaller0: entered promiscuous mode [ 486.132160][T19120] syzkaller0: entered allmulticast mode [ 486.226858][T19123] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 486.234133][T19123] block device autoloading is deprecated and will be removed. [ 486.264063][ T5947] Bluetooth: hci2: command tx timeout [ 486.392942][T19120] ufs: You didn't specify the type of your ufs filesystem [ 486.392942][T19120] [ 486.392942][T19120] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 486.392942][T19120] [ 486.392942][T19120] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 486.404294][T19120] ufs: failed to set blocksize [ 486.608680][ T8878] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 487.044165][T19168] nbd: couldn't find a device at index 0 [ 487.079184][T19172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4054'. [ 487.122188][T19174] Invalid logical block size (536872960) [ 487.125947][T19175] Invalid logical block size (536872960) [ 487.253140][T19186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4059'. [ 487.262563][T19186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4059'. [ 487.299947][T19186] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4059'. [ 487.342452][T19196] netlink: 'syz.5.4062': attribute type 1 has an invalid length. [ 487.345459][T19196] netlink: 'syz.5.4062': attribute type 2 has an invalid length. [ 487.348199][T19196] netlink: 'syz.5.4062': attribute type 2 has an invalid length. [ 487.473717][T19208] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 41 [ 487.479166][T19210] netlink: 'syz.5.4067': attribute type 11 has an invalid length. [ 487.482080][T19210] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4067'. [ 487.487478][T19211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=767 sclass=netlink_route_socket pid=19211 comm=syz.5.4067 [ 487.591771][ T40] kauditd_printk_skb: 202 callbacks suppressed [ 487.591793][ T40] audit: type=1400 audit(1000.519:11111): avc: denied { ioctl } for pid=19219 comm="syz.5.4071" path="socket:[94846]" dev="sockfs" ino=94846 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 487.652719][ T40] audit: type=1400 audit(1000.579:11112): avc: denied { read write } for pid=19227 comm="syz.5.4073" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 487.665038][ T40] audit: type=1400 audit(1000.579:11113): avc: denied { open } for pid=19227 comm="syz.5.4073" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 487.677216][ T40] audit: type=1400 audit(1000.599:11114): avc: denied { mounton } for pid=19227 comm="syz.5.4073" path="/262/file0" dev="tmpfs" ino=1395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 487.690806][ T40] audit: type=1400 audit(1000.599:11115): avc: denied { mount } for pid=19227 comm="syz.5.4073" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 487.702507][T19231] XFS (nullb0): Invalid superblock magic number [ 487.704740][ T40] audit: type=1400 audit(1000.599:11116): avc: denied { read } for pid=19227 comm="syz.5.4073" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 487.725170][ T40] audit: type=1400 audit(1000.599:11117): avc: denied { open } for pid=19227 comm="syz.5.4073" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 487.736629][ T40] audit: type=1400 audit(1000.599:11118): avc: denied { read } for pid=19227 comm="syz.5.4073" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 487.744869][ T40] audit: type=1400 audit(1000.599:11119): avc: denied { open } for pid=19227 comm="syz.5.4073" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 487.754243][ T40] audit: type=1400 audit(1000.599:11120): avc: denied { create } for pid=19227 comm="syz.5.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 488.052237][T19254] [ 488.053309][T19254] ====================================================== [ 488.055701][T19254] WARNING: possible circular locking dependency detected [ 488.058020][T19254] syzkaller #0 Tainted: G L [ 488.060789][T19254] ------------------------------------------------------ [ 488.063568][T19254] syz.5.4075/19254 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 488.065807][T19254] ffff88802bba0148 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4f8/0xd90 [ 488.070252][T19254] [ 488.070252][T19254] but task is already holding lock: [ 488.073314][T19254] ffff888056fd1488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 488.077280][T19254] [ 488.077280][T19254] which lock already depends on the new lock. [ 488.077280][T19254] [ 488.081705][T19254] [ 488.081705][T19254] the existing dependency chain (in reverse order) is: [ 488.085740][T19254] [ 488.085740][T19254] -> #3 (&of->mutex){+.+.}-{4:4}: [ 488.089021][T19254] __mutex_lock+0x1a2/0x1b90 [ 488.091075][T19254] kernfs_seq_start+0x4f/0x2a0 [ 488.092883][T19254] seq_read_iter+0x2c1/0x1270 [ 488.094595][T19254] kernfs_fop_read_iter+0x46c/0x610 [ 488.096366][T19254] copy_splice_read+0x4ba/0xb90 [ 488.098096][T19254] do_splice_read+0x285/0x370 [ 488.099859][T19254] splice_direct_to_actor+0x2a1/0xa30 [ 488.102455][T19254] do_splice_direct+0x174/0x240 [ 488.104718][T19254] do_sendfile+0xadc/0xe20 [ 488.106610][T19254] __x64_sys_sendfile64+0x1d8/0x220 [ 488.108758][T19254] do_syscall_64+0x106/0xf80 [ 488.110492][T19254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.112616][T19254] [ 488.112616][T19254] -> #2 (&p->lock){+.+.}-{4:4}: [ 488.114863][T19254] __mutex_lock+0x1a2/0x1b90 [ 488.116569][T19254] seq_read_iter+0xe1/0x1270 [ 488.118400][T19254] proc_reg_read_iter+0x220/0x310 [ 488.120314][T19254] copy_splice_read+0x4ba/0xb90 [ 488.122655][T19254] do_splice_read+0x285/0x370 [ 488.124967][T19254] splice_file_to_pipe+0x82/0x120 [ 488.127544][T19254] do_sendfile+0x366/0xe20 [ 488.129952][T19254] __x64_sys_sendfile64+0x1d8/0x220 [ 488.132663][T19254] do_syscall_64+0x106/0xf80 [ 488.134887][T19254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.137562][T19254] [ 488.137562][T19254] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 488.139870][T19254] __mutex_lock+0x1a2/0x1b90 [ 488.141717][T19254] anon_pipe_write+0x163/0x1d40 [ 488.143976][T19254] __kernel_write_iter+0x6b2/0x920 [ 488.146804][T19254] __kernel_write+0xf6/0x140 [ 488.149621][T19254] autofs_notify_daemon+0x50d/0xd90 [ 488.152411][T19254] autofs_wait+0x10fd/0x1b50 [ 488.154663][T19254] autofs_mount_wait+0x132/0x3b0 [ 488.157035][T19254] autofs_d_automount+0x490/0x950 [ 488.159409][T19254] __traverse_mounts+0x1b9/0x8a0 [ 488.161709][T19254] step_into_slowpath+0xb7e/0xf90 [ 488.164149][T19254] path_lookupat+0x58b/0xc40 [ 488.166449][T19254] filename_lookup+0x202/0x590 [ 488.169011][T19254] user_path_at+0x3c/0x60 [ 488.171604][T19254] __x64_sys_mount+0x1fb/0x310 [ 488.174284][T19254] do_syscall_64+0x106/0xf80 [ 488.176519][T19254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.179298][T19254] [ 488.179298][T19254] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 488.182646][T19254] __lock_acquire+0x14b8/0x2630 [ 488.184882][T19254] lock_acquire+0x1cf/0x380 [ 488.187098][T19254] __mutex_lock+0x1a2/0x1b90 [ 488.189531][T19254] autofs_notify_daemon+0x4f8/0xd90 [ 488.192536][T19254] autofs_wait+0x10fd/0x1b50 [ 488.194880][T19254] autofs_mount_wait+0x132/0x3b0 [ 488.197306][T19254] autofs_d_automount+0x490/0x950 [ 488.199230][T19254] __traverse_mounts+0x1b9/0x8a0 [ 488.201409][T19254] step_into_slowpath+0xb7e/0xf90 [ 488.203761][T19254] path_lookupat+0x58b/0xc40 [ 488.206584][T19254] filename_lookup+0x202/0x590 [ 488.209143][T19254] kern_path+0x37/0x50 [ 488.211158][T19254] lookup_bdev+0xd8/0x280 [ 488.213451][T19254] resume_store+0x1d6/0x460 [ 488.215733][T19254] kobj_attr_store+0x58/0x80 [ 488.218079][T19254] sysfs_kf_write+0xf2/0x150 [ 488.220422][T19254] kernfs_fop_write_iter+0x3e0/0x5f0 [ 488.223009][T19254] vfs_write+0x6ac/0x1070 [ 488.225475][T19254] ksys_write+0x12a/0x250 [ 488.227886][T19254] do_syscall_64+0x106/0xf80 [ 488.230262][T19254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.232948][T19254] [ 488.232948][T19254] other info that might help us debug this: [ 488.232948][T19254] [ 488.237147][T19254] Chain exists of: [ 488.237147][T19254] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 488.237147][T19254] [ 488.242219][T19254] Possible unsafe locking scenario: [ 488.242219][T19254] [ 488.245703][T19254] CPU0 CPU1 [ 488.248178][T19254] ---- ---- [ 488.250418][T19254] lock(&of->mutex); [ 488.252134][T19254] lock(&p->lock); [ 488.254802][T19254] lock(&of->mutex); [ 488.257550][T19254] lock(&sbi->pipe_mutex); [ 488.259422][T19254] [ 488.259422][T19254] *** DEADLOCK *** [ 488.259422][T19254] [ 488.262879][T19254] 4 locks held by syz.5.4075/19254: [ 488.264816][T19254] #0: ffff88802587aef8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 488.267706][T19254] #1: ffff88802d95a420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 488.270590][T19254] #2: ffff888056fd1488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 488.274629][T19254] #3: ffff88801bfd4f08 (kn->active#86){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 488.278883][T19254] [ 488.278883][T19254] stack backtrace: [ 488.281537][T19254] CPU: 0 UID: 0 PID: 19254 Comm: syz.5.4075 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.281560][T19254] Tainted: [L]=SOFTLOCKUP [ 488.281565][T19254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 488.281574][T19254] Call Trace: [ 488.281581][T19254] [ 488.281588][T19254] dump_stack_lvl+0x100/0x190 [ 488.281612][T19254] print_circular_bug.cold+0x178/0x1c7 [ 488.281633][T19254] check_noncircular+0x146/0x160 [ 488.281657][T19254] __lock_acquire+0x14b8/0x2630 [ 488.281672][T19254] lock_acquire+0x1cf/0x380 [ 488.281682][T19254] ? autofs_notify_daemon+0x4f8/0xd90 [ 488.281703][T19254] ? __pfx___might_resched+0x10/0x10 [ 488.281717][T19254] ? lockdep_unlock+0x5a/0xc0 [ 488.281735][T19254] ? __lock_acquire+0xd73/0x2630 [ 488.281747][T19254] __mutex_lock+0x1a2/0x1b90 [ 488.281760][T19254] ? autofs_notify_daemon+0x4f8/0xd90 [ 488.281780][T19254] ? autofs_notify_daemon+0x4f8/0xd90 [ 488.281798][T19254] ? autofs_notify_daemon+0x4a0/0xd90 [ 488.281816][T19254] ? autofs_notify_daemon+0x4a0/0xd90 [ 488.281836][T19254] ? __pfx___mutex_lock+0x10/0x10 [ 488.281848][T19254] ? __mutex_unlock_slowpath+0x15c/0x790 [ 488.281867][T19254] ? mark_held_locks+0x40/0x70 [ 488.281879][T19254] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 488.281899][T19254] ? from_kgid_munged+0xab/0x130 [ 488.281919][T19254] ? autofs_notify_daemon+0x4f8/0xd90 [ 488.281938][T19254] autofs_notify_daemon+0x4f8/0xd90 [ 488.281958][T19254] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 488.281976][T19254] ? kernfs_fop_write_iter+0x3e0/0x5f0 [ 488.281991][T19254] ? vfs_write+0x6ac/0x1070 [ 488.282002][T19254] ? ksys_write+0x12a/0x250 [ 488.282018][T19254] ? lockdep_init_map_type+0x5c/0x250 [ 488.282031][T19254] ? lockdep_init_map_type+0x5c/0x250 [ 488.282044][T19254] autofs_wait+0x10fd/0x1b50 [ 488.282064][T19254] ? __pfx_autofs_wait+0x10/0x10 [ 488.282083][T19254] ? find_held_lock+0x2b/0x80 [ 488.282099][T19254] ? path_has_submounts+0xcf/0x120 [ 488.282118][T19254] ? do_raw_spin_unlock+0x145/0x1e0 [ 488.282132][T19254] ? find_held_lock+0x2b/0x80 [ 488.282149][T19254] autofs_mount_wait+0x132/0x3b0 [ 488.282168][T19254] autofs_d_automount+0x490/0x950 [ 488.282187][T19254] __traverse_mounts+0x1b9/0x8a0 [ 488.282204][T19254] step_into_slowpath+0xb7e/0xf90 [ 488.282225][T19254] ? __pfx_step_into_slowpath+0x10/0x10 [ 488.282244][T19254] ? lookup_slow+0x5b/0x70 [ 488.282260][T19254] ? lookup_slow+0x5b/0x70 [ 488.282278][T19254] path_lookupat+0x58b/0xc40 [ 488.282298][T19254] filename_lookup+0x202/0x590 [ 488.282311][T19254] ? __pfx_filename_lookup+0x10/0x10 [ 488.282329][T19254] ? __asan_memcpy+0x3c/0x60 [ 488.282354][T19254] ? do_getname_kernel+0x1be/0x250 [ 488.282371][T19254] kern_path+0x37/0x50 [ 488.282384][T19254] lookup_bdev+0xd8/0x280 [ 488.282399][T19254] ? __pfx_lookup_bdev+0x10/0x10 [ 488.282413][T19254] ? __asan_memcpy+0x3c/0x60 [ 488.282431][T19254] resume_store+0x1d6/0x460 [ 488.282447][T19254] ? __pfx_resume_store+0x10/0x10 [ 488.282466][T19254] ? find_held_lock+0x2b/0x80 [ 488.282482][T19254] ? sysfs_file_kobj+0xe4/0x290 [ 488.282499][T19254] ? sysfs_file_kobj+0xe4/0x290 [ 488.282517][T19254] ? __pfx_resume_store+0x10/0x10 [ 488.282531][T19254] kobj_attr_store+0x58/0x80 [ 488.282544][T19254] ? __pfx_kobj_attr_store+0x10/0x10 [ 488.282555][T19254] sysfs_kf_write+0xf2/0x150 [ 488.282573][T19254] kernfs_fop_write_iter+0x3e0/0x5f0 [ 488.282588][T19254] ? __pfx_sysfs_kf_write+0x10/0x10 [ 488.282607][T19254] vfs_write+0x6ac/0x1070 [ 488.282617][T19254] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 488.282635][T19254] ? __pfx_vfs_write+0x10/0x10 [ 488.282650][T19254] ksys_write+0x12a/0x250 [ 488.282661][T19254] ? __pfx_ksys_write+0x10/0x10 [ 488.282672][T19254] ? kcov_ioctl+0x16a/0x720 [ 488.282690][T19254] do_syscall_64+0x106/0xf80 [ 488.282708][T19254] ? clear_bhb_loop+0x40/0x90 [ 488.282722][T19254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.282736][T19254] RIP: 0033:0x7f936859c819 [ 488.282748][T19254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.282761][T19254] RSP: 002b:00007f93693cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 488.282774][T19254] RAX: ffffffffffffffda RBX: 00007f9368816360 RCX: 00007f936859c819 [ 488.282781][T19254] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 000000000000000b [ 488.282789][T19254] RBP: 00007f9368632c91 R08: 0000000000000000 R09: 0000000000000000 [ 488.282796][T19254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.282804][T19254] R13: 00007f93688163f8 R14: 00007f9368816360 R15: 00007ffdf2fcc0b8 [ 488.282816][T19254] [ 488.515406][T19254] PM: Image not found (code -22) [ 488.930247][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.934808][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.998183][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.002565][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.058203][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.062512][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.125348][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.129677][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.238624][ T13] bridge_slave_1: left allmulticast mode [ 489.240760][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.244463][ T13] bridge_slave_0: left allmulticast mode [ 489.246322][ T13] bridge_slave_0: left promiscuous mode [ 489.248486][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.320333][ T13] team0: Port device geneve0 removed [ 489.547479][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.553035][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.558419][ T13] bond0 (unregistering): Released all slaves [ 489.563823][ T13] bond1 (unregistering): Released all slaves [ 489.570681][ T13] bond2 (unregistering): Released all slaves [ 489.860159][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.865918][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.868324][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.871579][ T13] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 489.874754][ T13] batman_adv: batadv0: Removing interface: ipvlan2 [ 489.880296][ T13] veth1_macvtap: left promiscuous mode [ 489.882512][ T13] veth0_macvtap: left promiscuous mode [ 489.893908][ T13] veth1_vlan: left promiscuous mode [ 489.996639][ T13] team0 (unregistering): Port device team_slave_1 removed [ 490.001465][ T13] team0 (unregistering): Port device team_slave_0 removed [ 490.390816][ T13] IPVS: stop unused estimator thread 0... [ 490.529674][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.592899][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.687809][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.769164][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.846845][ T13] bridge_slave_1: left allmulticast mode [ 490.849453][ T13] bridge_slave_1: left promiscuous mode [ 490.852223][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.856517][ T13] bridge_slave_0: left allmulticast mode [ 490.858866][ T13] bridge_slave_0: left promiscuous mode [ 490.861055][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.027396][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.033940][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.038555][ T13] bond0 (unregistering): Released all slaves [ 491.373545][ T13] hsr_slave_0: left promiscuous mode [ 491.376723][ T13] hsr_slave_1: left promiscuous mode [ 491.379452][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.382588][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.387429][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.391079][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.402654][ T13] veth1_macvtap: left promiscuous mode [ 491.405578][ T13] veth0_macvtap: left promiscuous mode [ 491.407871][ T13] veth1_vlan: left promiscuous mode [ 491.410185][ T13] veth0_vlan: left promiscuous mode [ 491.471626][ T13] team0 (unregistering): Port device team_slave_1 removed [ 491.481761][ T13] team0 (unregistering): Port device team_slave_0 removed