last executing test programs: 1m41.152101103s ago: executing program 3 (id=583): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x4, 0x4) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1m40.281608566s ago: executing program 3 (id=588): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000000)="670f78d566b9ce0a00000f32660f3a095f6e90ba2000ec66b9800000c00f326635002000000f30baf80c66b824a2e38d66efbafc0cb000ee660f3881862dd1baf80c66b8f818ff8966efbafc0cb03cee2c89df8f7524", 0x56}], 0x1, 0x8, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40000, 0x1) readlinkat(r10, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=""/249, 0xf9) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) 1m40.016866897s ago: executing program 3 (id=592): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000"/51, @ANYRES8], 0x0) 1m40.016460657s ago: executing program 3 (id=593): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x10, @void}, 0x10) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000040)={{}, "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"}) (async) madvise(&(0x7f0000ff5000/0x8000)=nil, 0x8000, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000001080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000010c0), 0x42000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001140)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001180)={r3, 0xc1, "b65c9c26d89f6ca825673238bb4f15924535eedfce72addfd56f7067fb3c0ce86e848f6a01b58ab11ba8a753f5ee7938bfc3dfabafc870909d36ec41754a12b55518a18ff5345bc750bf6de205ccccb6335dc1da71d0c9d21466d56a619b1521fdb88bf06b7855cd74688b978425c2dac1e4db6598d49f3b025216b93b00333031eba35c29fa437a3eaa85c50dbb9b1c265885cf046755f0bed591294f279c3d2ce96f4be9684f069be5810ea8cedd2e978794aac086ae48fb244107ad88446db3"}, &(0x7f0000001280)=0xc9) (async) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff6000/0x2000)=nil}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000001300)={0x0, 0x1, r2}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000001340)) (async) write$P9_RREADLINK(r2, &(0x7f0000001380)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000001680)={0x2, 0x0, &(0x7f0000001400)=""/219, &(0x7f0000001500)=""/140, &(0x7f00000015c0)=""/153, 0x7000}) (async) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000016c0)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001ac0)=@assoc_value={r4, 0x8}, 0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000001b00), 0x608001, 0x0) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002c80)={r2, 0x20, &(0x7f0000002c40)={&(0x7f0000001b40)=""/216, 0xd8, 0x0, &(0x7f0000001c40)=""/4096, 0x1000}}, 0x10) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000002d00)={&(0x7f0000002cc0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000002e00)={r6, 0x0, r7, 0x0, 0x0, 0x4, &(0x7f0000002dc0)=[0x0, 0x0, 0x0, 0x0]}) (async) r8 = openat$cgroup_procs(r2, &(0x7f0000002e40)='tasks\x00', 0x2, 0x0) mmap(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x6, 0x80112, r8, 0xdeff1000) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x8000000) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000002e80)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000003f00)={0x28, 0x0, r9, 0x1000, &(0x7f0000002f00)=""/4096}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000003f40)={{0x1, 0x1, 0x18, r8, {r0}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000004080)={&(0x7f0000003f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) 1m40.016229354s ago: executing program 3 (id=594): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000010140)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0800080007000200000014000000462000ae00680000030690780a010100ac1414bb000000004e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="510d000190780008ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe0b4145f2cde7565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e426076f4e0671dc5aab1358ab653fbfb400000000000000"], 0xbc) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fz:', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x182df000) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0x10c, 0x150, 0x150, 0x0, 0xf8010000, 0x1d4, 0x238, 0x238, 0x1d4, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'tunl0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xff], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) r5 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x48000) ioctl$SNDRV_PCM_IOCTL_PAUSE(r7, 0x40044145, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m39.743375074s ago: executing program 3 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000b40)=ANY=[@ANYBLOB="043e6b0d02090000aaaaaaaaaa1000900500046f000600000000000000080000"], 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0x11, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x1, 0x0, 0x8, 0xa, 0x1, 0xfffffffffffffffc}, @generic={0x5, 0x4, 0x7, 0x3, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x39}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x980914, 0xb}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000190001002dbd7000fcdbdf251d01020015000200000000a06c5cd1ce72ee3a9b2c0603000054b511902381fccb06000000150004000100000005020000b3f6b1b8554b91369d9644a23c27"], 0x44}}, 0x40800) syz_emit_ethernet(0x165, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c200000100000000000088a8000081"], 0x0) r3 = syz_usb_connect(0x0, 0xb5, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xd3, 0xc9, 0x5f, 0x20, 0xbfd, 0x12, 0x4632, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x1, 0xf, 0xb, 0x50, 0x1, [{{0x9, 0x4, 0xa9, 0x0, 0x1, 0x40, 0x62, 0xc, 0x1, [@generic={0x5c, 0xc, "00e57c55b6ab3f6e6bd7e7977cec358bf57422066c9172b1c04927a639f29ec8bc8f136fe62f4fdb1a741002b6eb6b9bf9d0da14e80b4d2fff12fdb637bd22ccb0c50ebe6c26fd60e0cc6a3cf6dbe15ce1dcd10d7be7bcf4fdc0"}], [{{0x9, 0x5, 0x7, 0xc, 0x8, 0x6, 0x3, 0x2, [@generic={0x2c, 0x23, "a0c4be1728be444304c8f92a52b08429f684513904afaca5eedfdf04c03de2b2df3d184b3f5e522d2bba"}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x8, 0x5, 0x30, 0x10, 0x3}, 0x6e, &(0x7f0000000140)={0x5, 0xf, 0x6e, 0x4, [@generic={0x38, 0x10, 0x4, "7f507ecea8575fe0cb4e9e240e33f1ef0138d0f007e32cbe8f277e5fbcc62f3ae30b41c979c97f61133fc944f2d8bc6ee1d73d33f6"}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x689, 0xf00f, 0xfff8, [0x3f00, 0x0, 0xf, 0xff00f0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0x0, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x20, 0x3, 0xf7, 0x6}]}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x419}}, {0xdb, &(0x7f0000000200)=@string={0xdb, 0x3, "e87c2ae367011d7a615b412fb238f3bcc5657911e2bfb1aae27d841f9dc4db03207292c71158852085a4b9fc4eaf43806dd4df90d4aa8548efc07d2a0a6ca2a5b51c8d80899e99caa00422bb75766c5da65859a2c5b4c41e1c62a07f57aaac76178b726fa0b29b01750a32fb45af976d8f1e543f136951f4fd4480b96d5b9c193b31a0ec3854d9b68ac8fa535c308cbef7716435a2428b57453290dc3f9d62cbccd3ca965b882488725e64a993caf494b15a3bcc95bc19a0fbd44c60a80f06a3b7719620a23170c8bcd8fd9786411a1f3ad01ba51e42bd4e66"}}, {0x54, &(0x7f0000000300)=@string={0x54, 0x3, "117cbc89966c0e2d74b48e8bb7a103b928f059930785c0239ea9ed18b65917bc8b10893444fff83cdaf068f13f305b39233c0e01e24c04f8500d6ba9616d3ee5eaf51589752a87d04fe5ae0ac34aee5b949f"}}, {0xa0, &(0x7f0000000380)=@string={0xa0, 0x3, "63d48d3f41158264242900061d56045f16db729e634138d39691067d5a7338a182a9179c8f7fed942b4ce1e40d22656f816109f7c9e7168cf32fdcd4a3fb69c5771e4d5889e1540ff238286276aba86a949e66977caf1b184a19adbea8c26e5abcb8e4ef07afb68c73039e9239b77336575d6d8820caf98690985a01d7e6768d7236dbd9a3571ab6c4895e1893b9c08e2cbc97f5ea9003b8781e37378503"}}, {0xdf, &(0x7f0000000440)=@string={0xdf, 0x3, "853cb29236a27cf89a81e3642da9d714ff19fa815c5708dc072ad47c144a8099bdf668b83e3698ab596d52a11294352eba33c134bd0f2ff6c09823dee71f0adf1cfe79bc5dd0740db707f389e24839bb2266ab8114d3dcf804798b9c1a4de9911f6c327826e5f5f2809cb1cdfd1d807b4ef434510498b742146c8d8c3cd152d7f488c31f8c6f40e8336d66d69e1c0984c791feeac11c47633f9da9729b77524012b4da466b352ab70be0f4168d30d7d0a36ddd2d9a505da27ba8d04b8a393e3e24ae863c2c4522b7bb5373c450eee35a52af900bd27202e96ffb399111"}}, {0x2e, &(0x7f0000000a40)=ANY=[@ANYBLOB="2e038ca4826b79de3b45d1869d47153031d2a84ead8916fb7321cba8b20d00a1950d8cf32e11bc25d4ba5172b6a3795593f423e641e9390b"]}, {0xcd, &(0x7f0000000580)=@string={0xcd, 0x3, "3cc77a8c8afeac85587955c8624c1aa0565e2c123897a63fd2f7a747aaa508be4568c71ce8c962a0ee1faddcdf2af2485a2f96811db83ffd644f947508c13c4fe5bb52b9f457b627d742c4a488667c7871cc68a65287ed75c1032109297b5d46adf7ea1a2a9e1de2d92fb853bd401e253b0deaab1b5443539ea0d18b340d2dc85c7a024fe8a96425416e4923a2145a92333a5f58ff02315955261f9d2347a126c0bf9d905a91be56c840f564f104640fe5825f92bf795da899ffd5aaa114b0dd88efbe0fc3d7293516c7ac"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x4001}}]}) syz_usb_control_io$rtl8150(r3, &(0x7f0000000940)={0x14, &(0x7f0000000740)={0x20, 0xb, 0xc1, {0xc1, 0xa, "047a7d5bbda2bc7b4e24d69877501ca29e082c8a3c0e475cd5d2926314e0116018550b3cec7e07008e9c3fbe10ec8b20c0baa2c02158b3a2d1f2a716b86d34b9e181e1619c837de172287b34a7e03b089cc1e832ea334efa3cef768267c2cc3c6346790177f1f535ecf1370b3b6f6d7c9d669673f228c0ae2e8e18493d186b89c23853ae653620b3d6f88b357b424c88ecfa52e76fcbfada1215db777c88f09613292b4218d7d3c4f5616c18cb51915d5e37c03db54f3335f806abe4f2416d"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a00)={0x20, 0xb, 0x26, "6d5259443787f84a028ec936263ba6fd790939a0a77c2e50ac0a969bed65c870585f8cf5ccf0"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x42}, &(0x7f0000000b40)={0xc0, 0x5, 0x5, "3a16b49a04"}, &(0x7f0000000b80)}) 1m24.731776999s ago: executing program 32 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000b40)=ANY=[@ANYBLOB="043e6b0d02090000aaaaaaaaaa1000900500046f000600000000000000080000"], 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0x11, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x1, 0x0, 0x8, 0xa, 0x1, 0xfffffffffffffffc}, @generic={0x5, 0x4, 0x7, 0x3, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x39}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x980914, 0xb}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000190001002dbd7000fcdbdf251d01020015000200000000a06c5cd1ce72ee3a9b2c0603000054b511902381fccb06000000150004000100000005020000b3f6b1b8554b91369d9644a23c27"], 0x44}}, 0x40800) syz_emit_ethernet(0x165, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c200000100000000000088a8000081"], 0x0) r3 = syz_usb_connect(0x0, 0xb5, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xd3, 0xc9, 0x5f, 0x20, 0xbfd, 0x12, 0x4632, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x1, 0xf, 0xb, 0x50, 0x1, [{{0x9, 0x4, 0xa9, 0x0, 0x1, 0x40, 0x62, 0xc, 0x1, [@generic={0x5c, 0xc, "00e57c55b6ab3f6e6bd7e7977cec358bf57422066c9172b1c04927a639f29ec8bc8f136fe62f4fdb1a741002b6eb6b9bf9d0da14e80b4d2fff12fdb637bd22ccb0c50ebe6c26fd60e0cc6a3cf6dbe15ce1dcd10d7be7bcf4fdc0"}], [{{0x9, 0x5, 0x7, 0xc, 0x8, 0x6, 0x3, 0x2, [@generic={0x2c, 0x23, "a0c4be1728be444304c8f92a52b08429f684513904afaca5eedfdf04c03de2b2df3d184b3f5e522d2bba"}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x8, 0x5, 0x30, 0x10, 0x3}, 0x6e, &(0x7f0000000140)={0x5, 0xf, 0x6e, 0x4, [@generic={0x38, 0x10, 0x4, "7f507ecea8575fe0cb4e9e240e33f1ef0138d0f007e32cbe8f277e5fbcc62f3ae30b41c979c97f61133fc944f2d8bc6ee1d73d33f6"}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x689, 0xf00f, 0xfff8, [0x3f00, 0x0, 0xf, 0xff00f0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0x0, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x20, 0x3, 0xf7, 0x6}]}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x419}}, {0xdb, &(0x7f0000000200)=@string={0xdb, 0x3, "e87c2ae367011d7a615b412fb238f3bcc5657911e2bfb1aae27d841f9dc4db03207292c71158852085a4b9fc4eaf43806dd4df90d4aa8548efc07d2a0a6ca2a5b51c8d80899e99caa00422bb75766c5da65859a2c5b4c41e1c62a07f57aaac76178b726fa0b29b01750a32fb45af976d8f1e543f136951f4fd4480b96d5b9c193b31a0ec3854d9b68ac8fa535c308cbef7716435a2428b57453290dc3f9d62cbccd3ca965b882488725e64a993caf494b15a3bcc95bc19a0fbd44c60a80f06a3b7719620a23170c8bcd8fd9786411a1f3ad01ba51e42bd4e66"}}, {0x54, &(0x7f0000000300)=@string={0x54, 0x3, "117cbc89966c0e2d74b48e8bb7a103b928f059930785c0239ea9ed18b65917bc8b10893444fff83cdaf068f13f305b39233c0e01e24c04f8500d6ba9616d3ee5eaf51589752a87d04fe5ae0ac34aee5b949f"}}, {0xa0, &(0x7f0000000380)=@string={0xa0, 0x3, "63d48d3f41158264242900061d56045f16db729e634138d39691067d5a7338a182a9179c8f7fed942b4ce1e40d22656f816109f7c9e7168cf32fdcd4a3fb69c5771e4d5889e1540ff238286276aba86a949e66977caf1b184a19adbea8c26e5abcb8e4ef07afb68c73039e9239b77336575d6d8820caf98690985a01d7e6768d7236dbd9a3571ab6c4895e1893b9c08e2cbc97f5ea9003b8781e37378503"}}, {0xdf, &(0x7f0000000440)=@string={0xdf, 0x3, "853cb29236a27cf89a81e3642da9d714ff19fa815c5708dc072ad47c144a8099bdf668b83e3698ab596d52a11294352eba33c134bd0f2ff6c09823dee71f0adf1cfe79bc5dd0740db707f389e24839bb2266ab8114d3dcf804798b9c1a4de9911f6c327826e5f5f2809cb1cdfd1d807b4ef434510498b742146c8d8c3cd152d7f488c31f8c6f40e8336d66d69e1c0984c791feeac11c47633f9da9729b77524012b4da466b352ab70be0f4168d30d7d0a36ddd2d9a505da27ba8d04b8a393e3e24ae863c2c4522b7bb5373c450eee35a52af900bd27202e96ffb399111"}}, {0x2e, &(0x7f0000000a40)=ANY=[@ANYBLOB="2e038ca4826b79de3b45d1869d47153031d2a84ead8916fb7321cba8b20d00a1950d8cf32e11bc25d4ba5172b6a3795593f423e641e9390b"]}, {0xcd, &(0x7f0000000580)=@string={0xcd, 0x3, "3cc77a8c8afeac85587955c8624c1aa0565e2c123897a63fd2f7a747aaa508be4568c71ce8c962a0ee1faddcdf2af2485a2f96811db83ffd644f947508c13c4fe5bb52b9f457b627d742c4a488667c7871cc68a65287ed75c1032109297b5d46adf7ea1a2a9e1de2d92fb853bd401e253b0deaab1b5443539ea0d18b340d2dc85c7a024fe8a96425416e4923a2145a92333a5f58ff02315955261f9d2347a126c0bf9d905a91be56c840f564f104640fe5825f92bf795da899ffd5aaa114b0dd88efbe0fc3d7293516c7ac"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x4001}}]}) syz_usb_control_io$rtl8150(r3, &(0x7f0000000940)={0x14, &(0x7f0000000740)={0x20, 0xb, 0xc1, {0xc1, 0xa, "047a7d5bbda2bc7b4e24d69877501ca29e082c8a3c0e475cd5d2926314e0116018550b3cec7e07008e9c3fbe10ec8b20c0baa2c02158b3a2d1f2a716b86d34b9e181e1619c837de172287b34a7e03b089cc1e832ea334efa3cef768267c2cc3c6346790177f1f535ecf1370b3b6f6d7c9d669673f228c0ae2e8e18493d186b89c23853ae653620b3d6f88b357b424c88ecfa52e76fcbfada1215db777c88f09613292b4218d7d3c4f5616c18cb51915d5e37c03db54f3335f806abe4f2416d"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a00)={0x20, 0xb, 0x26, "6d5259443787f84a028ec936263ba6fd790939a0a77c2e50ac0a969bed65c870585f8cf5ccf0"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x42}, &(0x7f0000000b40)={0xc0, 0x5, 0x5, "3a16b49a04"}, &(0x7f0000000b80)}) 41.791732673s ago: executing program 0 (id=1746): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 41.712202137s ago: executing program 0 (id=1748): socketpair(0x28, 0x80000, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'bond_slave_0\x00', {}, 0xff80}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@deltaction={0x68, 0x31, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9c7}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x14) r3 = fsmount(0xffffffffffffffff, 0x0, 0xfb) write$P9_RREADLINK(r3, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) write$P9_RVERSION(r3, &(0x7f0000000240)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0xa00, 0x0) fsetxattr$security_evm(r4, &(0x7f00000002c0), &(0x7f0000000300)=@ng={0x4, 0x17, "8a3617689be2581e72bd11ff1ed2"}, 0x10, 0x3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000340)) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000000380)) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f00000003c0)={'gre0\x00', {0x2, 0x4e24, @empty}}) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r5) r6 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) write$selinux_validatetrans(r7, &(0x7f0000000500)={'system_u:object_r:apt_var_log_t:s0', 0x20, 'system_u:object_r:devicekit_var_run_t:s0', 0x20, 0x4, 0x20, '/usr/sbin/ntpd\x00'}, 0x70) connect$inet6(r0, &(0x7f0000000580)={0xa, 0x4e21, 0xf, @empty, 0x9}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f00000005c0)={{0xa8, 0x7}, 'port0\x00', 0x2, 0x42, 0x6, 0x12, 0x7, 0x3, 0x10001, 0x0, 0x2, 0x5}) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$tun(r3, &(0x7f0000000680)={@val={0x0, 0x8847}, @val={0x2, 0x0, 0x2971, 0x3, 0x8000, 0x6}, @eth={@local, @multicast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @local, @remote, @random="440040a56e85", @private1}}}}}, 0x50) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r6, 0x80000000) write$selinux_validatetrans(r3, &(0x7f0000000700)={'system_u:object_r:tmpfs_t:s0', 0x20, 'system_u:object_r:logrotate_var_lib_t:s0', 0x20, 0x5, 0x20, 'unconfined\x00'}, 0x66) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000007c0)={&(0x7f0000000780)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000880)={&(0x7f0000000840)=[r8], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000008c0)={0x8, 0x0, [{0xaae, 0x0, 0x2}, {0x95b, 0x0, 0x8}, {0x897, 0x0, 0x9}, {0x3f6, 0x0, 0x7fff}, {0xb92, 0x0, 0x7}, {0x271}, {0x81b, 0x0, 0xf}, {0x819, 0x0, 0xfff}]}) write$P9_RVERSION(r9, &(0x7f0000000980)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) 41.711930823s ago: executing program 0 (id=1749): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a01001400030000657464657673696d300000000900001800168014000180100002000600306d450d000008000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x80, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x5e1d, 0x6}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2700, 0x8) syz_emit_ethernet(0x556, &(0x7f0000000780)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='reno', 0x4) 41.639465749s ago: executing program 0 (id=1750): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0xfffffffe, 0x0, 0x4, 0x7, 0xfffffffffffffffd, 0x9, 0x0, 0x8000000000000000, 0x0, 0x3, 0x2486, 0x3, 0x0, 0x0, 0x0, 0x80003600000, 0xfffffffffffffffd, 0x0, 0x2000000002, 0x0, 0x71, 0xa30, 0x0, 0x9, 0x2a}) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r1, 0x0, 0x7}, 0x38) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) timer_create(0x0, 0x0, 0x0) setpgid(0x0, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000200)={0xc0, 0x0, 0x8000}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000200)={0xc0, 0x0, 0x8000}) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f00000000c0)=0x5de, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f00000000c0)=0x5de, 0x4) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 41.512434723s ago: executing program 0 (id=1751): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, &(0x7f0000000000)=0x10000) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x80) getpgrp(0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0xfce1) 41.234218449s ago: executing program 0 (id=1755): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 41.157206606s ago: executing program 33 (id=1755): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.407019938s ago: executing program 5 (id=2415): timer_create(0x0, &(0x7f0000000400)={0x0, 0x26}, &(0x7f0000000040)) rt_sigprocmask(0x1, &(0x7f0000000340)={[0x9]}, &(0x7f0000000380), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f00000003c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0x2d, 0x31, 0x3a, 0x31, 0x2f]}}}, 0x4e}]}) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@inode32}]}) setxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601030000000000000000000000001c0007800500140007000400080012400005000008000840000000000900020073797a300000002005000100070000000c000300686173683a697000050005000a000000050004"], 0x60}}, 0x20008000) lremovexattr(&(0x7f00000000c0)='.\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0x1006) 2.237740298s ago: executing program 5 (id=2416): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xb696, 0x10}, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0xa, 0x20, 0x1}}]}}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.163367s ago: executing program 2 (id=2418): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b13e, 0x800, 0x6, 0x3a2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r1, 0xa1) socketpair(0x18, 0x2, 0x411376f6, &(0x7f0000000080)={0xffffffffffffffff}) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000500)=""/207, 0xcf}], 0x4) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.088487938s ago: executing program 5 (id=2420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x100, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x47ca, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r3 = socket$inet_sctp(0x2, 0x400000000001, 0x84) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x9}]}, 0x10) sendto$inet(r3, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r3, 0xda8c) accept4(r3, 0x0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@can={{0x2}, 0x1, 0x2, 0x0, 0x0, "69908b952e0f9a67"}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x29, 0x7, 0xb, 0x3ff, 0x22, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, 0x700, 0x10, 0x0, 0x6}}) 2.002421104s ago: executing program 2 (id=2424): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) fsetxattr(r1, &(0x7f0000000100)=@known='system.advise\x00', &(0x7f00000000c0)='-*\x00', 0x3, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x2000, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000b, 0x10010, r1, 0x180000000) 1.928146044s ago: executing program 2 (id=2425): socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000002c0)={r3}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000200)="00214717a70700000100000000000100eb9c04710400dae6cc1f10efc35b1b12d83e2af37c55e04cd6a58b2085667ba774fdc2512cd2b10f65e7636f168f243f81cbb0ceb80c847a5544918e7b", 0x4d}], 0x1, 0xee, 0x4000008) r6 = dup(r0) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200) r7 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000002a80)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb14x\x0f\xdf\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xed\x13\xb6\xc2\xdb]@F\xe3?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xbb]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18K\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]NUT\x84q\x12\xa8\xf5MJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00', 0xfffffffffffffffd) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000003540)={0x2020}, 0x2020) 1.723467565s ago: executing program 2 (id=2427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r2, 0x0, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1.723355408s ago: executing program 2 (id=2428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00}, 0x4000000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0) ioctl$SOUND_MIXER_INFO(r3, 0x805c4d65, &(0x7f0000000080)) (async) ioctl$SOUND_MIXER_INFO(r3, 0x805c4d65, &(0x7f0000000080)) 1.628734209s ago: executing program 2 (id=2429): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000065ffff"], 0x41) (async) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000065ffff"], 0x41) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dfc83c8b095a75406bec2485de78e0ac941196a5f28ac06a131c8bcdd7d1ba3f5f0187b3bcbf51477b9b576c535a6f7714200e0289b22b6106fcd56656695f244c2767b977ea919b567b76b6b67867b7d52a85a1d1ced70650259b4628b5125d89bbef37229563fc708", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dfc83c8b095a75406bec2485de78e0ac941196a5f28ac06a131c8bcdd7d1ba3f5f0187b3bcbf51477b9b576c535a6f7714200e0289b22b6106fcd56656695f244c2767b977ea919b567b76b6b67867b7d52a85a1d1ced70650259b4628b5125d89bbef37229563fc708", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000380)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000380)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf2d3900000008000300", @ANYRES32=r9, @ANYBLOB="10005a800c00018005000a"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r11, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x3, 0x4, 0x4, 0x5, 0x81, 0x9, 0x7, 0xe, 0x80, 0x2, 0xbb8, 0x8, 0x9, 0x4, 0x7f, 0x400]}, @NL80211_ATTR_SSID={0x4}]}, 0x4c}}, 0xc00) (async) sendmsg$NL80211_CMD_ASSOCIATE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r11, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x3, 0x4, 0x4, 0x5, 0x81, 0x9, 0x7, 0xe, 0x80, 0x2, 0xbb8, 0x8, 0x9, 0x4, 0x7f, 0x400]}, @NL80211_ATTR_SSID={0x4}]}, 0x4c}}, 0xc00) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r13, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x138, 0x20, 0x100, 0x70bd2d, 0x25dfdbfd, {0x7}, [@generic="29710dd3690149c59bbb442f19ab65b96e29fdfa7afea26527e2808bd3b9f17fb123cfae01522581541156e82693f71d81d8dc31eb56db6ec4e5fe4ec10bbcd05b2e9ff6057dd0448c5b351952dbe7300b1696ab4d9eb3f3f41f05e2a6530f9ccdd0293614d548ff82218d9a02ba644ef24e1e04b23151531c16c6b7bac51b88c29a97d7e6407e1776a7d226446f9d2c27e40b48dc46dae85133597dc5447c679b6d49e5ceeaebd121392e5cc6346f9a4cf7533d772a4234ced2aa36d3fb1849e2fcd65024", @generic="dce9356d5fdfaa6401a051585d10f24c0b91d53e07cd05e99ada070ec6273bcdc6134b55dc36793bbd858762648e2e1f7e3a66dbf5a15ac87203390b3b907f06c79e2d7e487f4326250e278d8e55bcaab5104223", @generic="2670ee6f3af46fd31b"]}, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) getgid() 1.543506596s ago: executing program 1 (id=2431): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) r1 = socket(0x10, 0x803, 0xfff) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x14, 0x10, 0x70bd2d, 0x25dfdbff, {0x9, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x27, 0x1, "de5835e7240773c049c2f9dc3d4fee9983c28c06fcd223e5934f25e4ac37a9a85430ff"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x20004000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000200), 0x83, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x0, 0xb8, 0x2, &(0x7f00000004c0)={0xfa, "f4e1a230be8f46463fb1a5f1b46f44eaa25e485b747a07678118bc00"}}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYBLOB="0500060001000000050007000000000005000300df00000008000200"], 0x68}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'veth1_macvtap\x00', {0x3}, 0x4}) 1.542754747s ago: executing program 1 (id=2432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a480000000c0a010100000000000000000a0000090900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000011400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x90}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffea}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x1, r2], &(0x7f0000000440)=[{0x1, 0x5, 0x5, 0x4}, {0x2, 0x3, 0x5}], 0x10, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='io_uring_queue_async_work\x00', r3, 0x0, 0x8}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, r5, 0x1, 0x70bd2b, 0x25dfdbf8, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}, {0x6}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x4040000) 1.468687956s ago: executing program 1 (id=2433): socket$unix(0x1, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x66a42, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) open(&(0x7f00000001c0)='./file0\x00', 0x48afd, 0x180) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x103000) open$dir(&(0x7f0000000080)='./file0\x00', 0x28080, 0x108) epoll_create(0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.463562806s ago: executing program 1 (id=2434): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x70, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x70, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) 1.383303198s ago: executing program 1 (id=2435): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003540)={0x2020}, 0x2020) 1.382477252s ago: executing program 1 (id=2436): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121e83, 0xec) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r3, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x24044080) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r9, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "1a3952b5"}]}}, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090108000000000000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b700000000000000950000000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000e636417a65158feaa663a7c7390a530f522360235417e5b7d7cfcba2567917914bef1e6fdc731383031c674bb10562f41edf08dc9bc3fe8542fa106ed8ca224c14f3ac028f1870e5e5f456565ecb77494ad978fcf14c4bac2ea7582b29d37a683bf02b3fb9ba13d6dc7e365b280a03dcaf2a56538d6e5165814c52ed943529a350631cd01e5dd542013a90782b27523d2b38ffb475fda5db7ca9483eeab98f13bd8c4cc7d81ffd48be9fa44f2f1dc8eb30727938", @ANYRES32=0x0, @ANYBLOB="e779a888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32, @ANYBLOB], 0x44}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = userfaultfd(0x80801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r11, 0x8010aa02, &(0x7f0000000840)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r13], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 1.158173829s ago: executing program 5 (id=2437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002b40)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x10c000) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@local, 0x3}, @local, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x200}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100fdfffffffbdbdf254f0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800ab000000000008000b000000000006001100ffff0000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000200)={0x81, 0x8}, 0x2) 891.366453ms ago: executing program 4 (id=2438): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@local, 0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x2}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@local}, @my=0x1, 0x0, 0x0, 0x421, 0x0, 0x0, 0x0, 0x7f}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000040000005a", @ANYBLOB="c6c415fa91058c0fe6e98d7e3b5ec44ab7f08aee9e1abb3cf878fbe2534d9e2ff4d7a766d4785f5774493a090545acb2bee67fc58e15fd55b8eacf490e44878beeb741f0c54297be715c47c35b617564497ada1a97efbade5b183b872d2069140a72b575ace09b9efd8f4c32a33df50b0d17d6b37fe81a6d903e6da8b44524f3472c2a971d4861bf170803b0c89f"]) 890.371573ms ago: executing program 4 (id=2439): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) ioctl$USBDEVFS_DISCARDURB(r4, 0x550b, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) (async) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) (async) r5 = accept4(r0, 0x0, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x61) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INIT(r8, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x64480000, 0xfffe, 0x800, 0x7, 0xa15, 0x0, 0x0, 0x40}}, 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) (async) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x272, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) (rerun: 32) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x24, r10, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) (async, rerun: 32) sendmsg$alg(r5, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="fbd89b3e89", 0x5}], 0x1}, 0x34000041) (rerun: 32) 708.957489ms ago: executing program 4 (id=2440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000009c0)="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", 0x110}], 0x1}}], 0x1, 0x4008810) (async, rerun: 32) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) (async) r5 = fsopen(&(0x7f0000000280)='devpts\x00', 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044800}, 0x810) (async) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206030000000000000000000700000705000100070000000900020073797a31000000000c000780080008400000001c0500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0xad, 0x2, 0x1, 0x0, 0xf7}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r7, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x7], [{0x600, 0xffffffff}, {0x2, 0x7fff}, {0x0, 0xffff}, {0x6}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x42}, {}, {}, {0x0, 0x89}, {0x0, 0x10200000}], 0x10}) 708.608302ms ago: executing program 4 (id=2441): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1c, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000079220000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000f38400000083000000bf09000000000000550901000000000095000000000000008f0106000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000004b90008080000001859000003000000000000000000000018000000070000000000000007000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0xdac, 0x97, &(0x7f0000000680)=""/151, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x2, 0x200, 0x4}, 0x10, 0x31b, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) r0 = socket(0x10, 0x3, 0xffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x3, 0x1, 0x9, 0x9, 0x1004000000201, 0x80000001, 0x80, 0xfffffffffffffffe, 0x80003}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x601, 0x2, &(0x7f0000000300)=[r4, r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000005c0)=[0x9, 0x3, 0xffffffff, 0x1, 0x1, 0x81, 0x82e, 0x2, 0x7, 0x6, 0xffffffff], 0x0, 0x8}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) 600.298194ms ago: executing program 4 (id=2442): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c40)}, 0x40050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000040)={0x0, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x104, 0xfffffffffffffffa, 0x2, 0x8, 0x0, 0x1, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1000000d, 0x8, 0x0, 0x10000000000007, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x9, 0x9, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x5, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x4, 0x4000008, 0xdac, 0xe90, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x100000000000002, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0x685d, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x8bfbf04]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r5 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) ioctl$RTC_WKALM_RD(r5, 0x40187013, &(0x7f0000000440)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000276000/0xd000)=nil, 0xd000, 0x2000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 270.761457ms ago: executing program 4 (id=2443): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r1, 0x0, r1) (async) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$TCFLSH(r2, 0x400455c8, 0x4) (async) ioctl$TCFLSH(r2, 0x400455c8, 0x4) r4 = dup(r0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000a80)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00283afffe8000ff00000000000000e5b6617800fe8000000000000000000000000000aa"], 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000a80)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00283afffe8000ff00000000000000e5b6617800fe8000000000000000000000000000aa"], 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 776.048µs ago: executing program 5 (id=2444): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003540)={0x2020}, 0x2020) 0s ago: executing program 5 (id=2445): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4001800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x20, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r4, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3940eb28d44bd314}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x2c}}, 0x801) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)=0x0) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x86}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x82}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x8800) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r5) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000009c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r10, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x200008d5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x849) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r12, 0x4068aea3, &(0x7f0000000b00)={0xa4, 0x0, 0x1}) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000b80), 0x10800, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r13, 0x3b72, &(0x7f0000000bc0)={0x24, 0x4, 0x7ff, 0x4, "e6830033dacb0781fdf4f307"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000c00), 0x12) timer_gettime(0x0, &(0x7f0000000c40)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r5) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000cc0)="6c12fe548326ae49f99f09edef214852ee3e8525a1cc85fdee764b59f1b261ef075b7864", 0x24) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000e00)={&(0x7f0000000dc0)=[0x0, 0x0], 0x100, 0x2, 0x7}) kernel console output (not intermixed with test programs): 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.733073][ T9762] RSP: 002b:00007f7ae6782038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.733091][ T9762] RAX: ffffffffffffffda RBX: 00007f7ae5be5fa0 RCX: 00007f7ae598f7c9 [ 135.733100][ T9762] RDX: 000000000000ffed RSI: 0000200000000140 RDI: 0000000000000003 [ 135.733109][ T9762] RBP: 00007f7ae6782090 R08: 0000000000000000 R09: 0000000000000000 [ 135.733117][ T9762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.733123][ T9762] R13: 00007f7ae5be6038 R14: 00007f7ae5be5fa0 R15: 00007ffc36a46fc8 [ 135.733137][ T9762] [ 135.918803][ T9780] syz.4.1356 (9780): drop_caches: 0 [ 135.927767][ T9783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1357'. [ 135.956417][ T9787] fuse: Bad value for 'user_id' [ 135.958304][ T9787] fuse: Bad value for 'user_id' [ 135.962178][ T5936] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 135.968213][ T9789] can0: slcan on ttyprintk. [ 136.032471][ T9785] can0 (unregistered): slcan off ttyprintk. [ 136.093527][ T9806] FAULT_INJECTION: forcing a failure. [ 136.093527][ T9806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.099250][ T9806] CPU: 1 UID: 0 PID: 9806 Comm: syz.2.1362 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.099277][ T9806] Tainted: [L]=SOFTLOCKUP [ 136.099288][ T9806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.099298][ T9806] Call Trace: [ 136.099304][ T9806] [ 136.099311][ T9806] dump_stack_lvl+0x16c/0x1f0 [ 136.099338][ T9806] should_fail_ex+0x512/0x640 [ 136.099368][ T9806] _copy_from_user+0x2e/0xd0 [ 136.099394][ T9806] kstrtouint_from_user+0xd6/0x1d0 [ 136.099414][ T9806] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 136.099431][ T9806] ? __lock_acquire+0x436/0x2890 [ 136.099456][ T9806] ? lock_acquire+0x179/0x330 [ 136.099481][ T9806] proc_fail_nth_write+0x83/0x220 [ 136.099500][ T9806] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 136.099524][ T9806] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 136.099540][ T9806] vfs_write+0x2a0/0x11d0 [ 136.099564][ T9806] ? __pfx___mutex_lock+0x10/0x10 [ 136.099590][ T9806] ? __pfx_vfs_write+0x10/0x10 [ 136.099618][ T9806] ? __fget_files+0x20e/0x3c0 [ 136.099649][ T9806] ksys_write+0x12a/0x250 [ 136.099669][ T9806] ? __pfx_ksys_write+0x10/0x10 [ 136.099697][ T9806] do_syscall_64+0xcd/0xf80 [ 136.099722][ T9806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.099739][ T9806] RIP: 0033:0x7fbafeb8e27f [ 136.099753][ T9806] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 136.099769][ T9806] RSP: 002b:00007fbaffaf1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 136.099785][ T9806] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbafeb8e27f [ 136.099796][ T9806] RDX: 0000000000000001 RSI: 00007fbaffaf10a0 RDI: 0000000000000004 [ 136.099806][ T9806] RBP: 00007fbaffaf1090 R08: 0000000000000000 R09: 0000000000000000 [ 136.099815][ T9806] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 136.099825][ T9806] R13: 00007fbafede6128 R14: 00007fbafede6090 R15: 00007ffc6bdc2698 [ 136.099849][ T9806] [ 136.194039][ T9817] veth0_to_team: entered promiscuous mode [ 136.203661][ T9817] veth0_to_team: left promiscuous mode [ 136.209105][ T9820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1368'. [ 136.223751][ T40] audit: type=1400 audit(1768624812.140:595): avc: denied { setattr } for pid=9821 comm="syz.2.1369" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 136.239704][ T9827] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.312346][ T9838] JFS: charset not found [ 136.381560][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 136.399423][ T9853] netlink: 'syz.4.1378': attribute type 39 has an invalid length. [ 136.416583][ T9855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=9855 comm=syz.0.1377 [ 136.456881][ T40] audit: type=1400 audit(1768624812.370:596): avc: denied { ioctl } for pid=9859 comm="syz.0.1380" path="socket:[27381]" dev="sockfs" ino=27381 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.466258][ T9860] CIFS mount error: No usable UNC path provided in device string! [ 136.466258][ T9860] [ 136.470583][ T9860] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 136.484562][ T40] audit: type=1400 audit(1768624812.400:597): avc: denied { read } for pid=9859 comm="syz.0.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 136.519085][ T9864] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.592400][ T9871] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 136.742206][ T9886] kvm: pic: non byte write [ 136.788782][ T9898] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.900636][ T9912] netlink: 'syz.2.1395': attribute type 11 has an invalid length. [ 137.091367][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 137.251629][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 137.255504][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.258558][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.265532][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.269535][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.275581][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.279089][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.335259][ T9961] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 137.386411][ T9957] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.388683][ T9957] netlink: 'syz.2.1412': attribute type 21 has an invalid length. [ 137.391711][ T9957] netlink: 'syz.2.1412': attribute type 21 has an invalid length. [ 137.421277][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 137.486694][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 137.488681][ T24] usbtmc 5-1:16.0: can't read capabilities [ 137.575066][ T142] usb 5-1: USB disconnect, device number 27 [ 137.609254][ T9994] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 137.688385][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.690981][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.739122][ T5951] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 137.834925][T10018] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 138.471167][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 138.547755][T10077] SELinux: policydb magic number 0x77c028c does not match expected magic number 0xf97cff8c [ 138.551967][T10077] SELinux: failed to load policy [ 138.749756][T10095] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 139.079629][T10126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10126 comm=syz.4.1467 [ 139.288690][T10158] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.292134][T10158] netlink: 'syz.0.1479': attribute type 1 has an invalid length. [ 139.306640][T10158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.315267][T10158] vlan2: entered promiscuous mode [ 139.316792][T10158] bond2: entered promiscuous mode [ 139.323961][T10158] gretap2: entered promiscuous mode [ 139.329200][T10158] bond2: (slave gretap2): making interface the new active one [ 139.332951][T10158] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 139.404793][T10154] netlink: 'syz.4.1477': attribute type 4 has an invalid length. [ 139.492458][T10172] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 139.495320][T10172] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 139.511567][ C2] net_ratelimit: 1 callbacks suppressed [ 139.511614][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.613801][T10175] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 139.616148][T10175] overlayfs: failed to set xattr on upper [ 139.618020][T10175] overlayfs: ...falling back to redirect_dir=nofollow. [ 139.620126][T10175] overlayfs: ...falling back to metacopy=off. [ 139.623984][T10175] overlayfs: ...falling back to index=off. [ 139.626020][T10175] overlayfs: ...falling back to uuid=null. [ 139.767976][T10189] __nla_validate_parse: 11 callbacks suppressed [ 139.767992][T10189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1492'. [ 139.828431][T10197] CUSE: unknown device info "" [ 139.830021][T10197] CUSE: zero length info key specified [ 139.947172][T10211] ksmbd: Unknown IPC event: 1, ignore. [ 140.077785][T10221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1502'. [ 140.106039][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 140.106051][ T40] audit: type=1400 audit(1768624816.020:622): avc: denied { getopt } for pid=10222 comm="syz.0.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.541248][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 140.553869][ T5951] Bluetooth: hci2: Malformed LE Event: 0x0d [ 141.071195][T10255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1512'. [ 141.076379][T10253] futex_wake_op: syz.4.1513 tries to shift op by -1; fix this program [ 141.273631][T10276] zonefs (loop2) ERROR: Not a zoned block device [ 141.338724][ T6974] Bluetooth: hci0: Frame reassembly failed (-84) [ 141.382337][T10284] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 141.409772][T10271] tmpfs: Unknown parameter 'X/' [ 141.522198][T10296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1524'. [ 141.554419][T10301] gfs2: error -5 reading superblock [ 141.591138][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 141.594906][T10305] validate_nla: 1 callbacks suppressed [ 141.594921][T10305] netlink: 'syz.2.1528': attribute type 1 has an invalid length. [ 141.623719][T10305] bond9: (slave geneve2): making interface the new active one [ 141.627226][T10305] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 141.632692][ T6974] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 141.636488][ T6974] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 141.640636][ T6974] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 141.644990][ T6974] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 141.953022][T10326] loop4: detected capacity change from 0 to 524287936 [ 141.996369][T10328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1536'. [ 142.148368][ T40] audit: type=1400 audit(1768624818.060:623): avc: denied { watch } for pid=10329 comm="syz.4.1537" path="/203/file0" dev="tmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 142.275238][ T40] audit: type=1326 audit(1768624818.190:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ea38f7c9 code=0x7ffc0000 [ 142.282512][ T40] audit: type=1326 audit(1768624818.190:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ea38f7c9 code=0x7ffc0000 [ 142.289696][ T40] audit: type=1326 audit(1768624818.190:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7ff4ea38f7c9 code=0x7ffc0000 [ 142.297162][ T40] audit: type=1326 audit(1768624818.190:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ea38f7c9 code=0x7ffc0000 [ 142.304742][ T40] audit: type=1326 audit(1768624818.190:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ea38f7c9 code=0x7ffc0000 [ 142.312745][ T40] audit: type=1326 audit(1768624818.190:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7ff4ea38f7c9 code=0x7ffc0000 [ 142.320045][ T40] audit: type=1326 audit(1768624818.190:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ea38f7c9 code=0x7ffc0000 [ 142.328348][ T40] audit: type=1326 audit(1768624818.190:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ea38f7c9 code=0x7ffc0000 [ 142.418608][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'. [ 142.621227][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 142.635359][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 142.720457][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 142.723498][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 142.790070][T10399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1561'. [ 142.854500][T10399] nbd: device at index 64 is going down [ 142.909202][ T5939] udevd[5939]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 142.920771][ T5945] udevd[5945]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 142.933412][T10413] veth1_vlan: Device is already in use. [ 142.987864][T10418] openvswitch: netlink: Flow actions attr not present in new flow. [ 143.280394][T10424] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 143.341377][ T5951] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 143.600606][T10455] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 143.661265][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 143.668916][T10459] kAFS: unparsable volume name [ 143.779405][ T5951] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 143.781790][ T5951] Bluetooth: Wrong link type (-22) [ 143.784648][ T5951] Bluetooth: hci2: link tx timeout [ 143.786430][ T5951] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.811911][ T142] libceph: connect (1)[c::]:6789 error -101 [ 143.814076][ T142] libceph: mon0 (1)[c::]:6789 connect error [ 143.820642][ T142] libceph: connect (1)[c::]:6789 error -101 [ 143.823923][ T142] libceph: mon0 (1)[c::]:6789 connect error [ 144.082984][ T142] libceph: connect (1)[c::]:6789 error -101 [ 144.085306][ T142] libceph: mon0 (1)[c::]:6789 connect error [ 144.085614][T10496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.593970][ T142] libceph: connect (1)[c::]:6789 error -101 [ 144.595970][ T142] libceph: mon0 (1)[c::]:6789 connect error [ 144.612923][T10471] ceph: No mds server is up or the cluster is laggy [ 144.701183][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 144.705577][T10503] autofs4:pid:10503:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 144.709885][T10503] autofs4:pid:10503:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 144.800708][T10512] __nla_validate_parse: 4 callbacks suppressed [ 144.800723][T10512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1603'. [ 144.817757][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 144.842354][T10512] netlink: 'syz.2.1603': attribute type 7 has an invalid length. [ 144.855968][ T6974] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.856044][T10512] netlink: 'syz.2.1603': attribute type 7 has an invalid length. [ 144.859740][ T6974] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.867841][ T6974] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.875201][ T6974] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.879893][T10511] [U] [ 144.948148][T10529] pim6reg1: entered promiscuous mode [ 144.950085][T10529] pim6reg1: entered allmulticast mode [ 145.121756][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 145.121766][ T40] audit: type=1400 audit(1768624821.040:645): avc: denied { create } for pid=10538 comm="syz.0.1613" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.130130][ T40] audit: type=1400 audit(1768624821.040:646): avc: denied { unlink } for pid=10538 comm="syz.0.1613" name="file0" dev="tmpfs" ino=2000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.163611][T10544] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 145.164513][T10542] y0: renamed from bridge_slave_0 [ 145.168357][T10544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10544 comm=syz.0.1615 [ 145.191163][ T1330] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 145.204853][ T40] audit: type=1400 audit(1768624821.120:647): avc: denied { create } for pid=10545 comm="syz.2.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.210817][ T40] audit: type=1400 audit(1768624821.120:648): avc: denied { bind } for pid=10545 comm="syz.2.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.213222][T10546] erspan2: entered allmulticast mode [ 145.216814][ T40] audit: type=1400 audit(1768624821.120:649): avc: denied { setopt } for pid=10545 comm="syz.2.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.225098][ T40] audit: type=1400 audit(1768624821.120:650): avc: denied { accept } for pid=10545 comm="syz.2.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.230983][ T40] audit: type=1400 audit(1768624821.120:651): avc: denied { write } for pid=10545 comm="syz.2.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.238731][ T40] audit: type=1400 audit(1768624821.120:652): avc: denied { read } for pid=10545 comm="syz.2.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.331528][ T1330] usb 9-1: device descriptor read/64, error -71 [ 145.445697][ T40] audit: type=1400 audit(1768624821.360:653): avc: denied { read } for pid=10555 comm="syz.2.1620" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 145.453912][ T40] audit: type=1400 audit(1768624821.360:654): avc: denied { open } for pid=10555 comm="syz.2.1620" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 145.535139][T10562] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1623'. [ 145.538158][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 145.571565][T10564] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 145.571565][T10564] program syz.2.1624 not setting count and/or reply_len properly [ 145.582364][ T1330] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 145.610133][T10567] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 145.613858][T10567] team0: Device ipvlan2 is already an upper device of the team interface [ 145.734451][ T1330] usb 9-1: device descriptor read/64, error -71 [ 145.741217][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 145.801686][T10586] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1630'. [ 145.805958][T10586] PM: Enabling pm_trace changes system date and time during resume. [ 145.805958][T10586] PM: Correct system time has to be restored manually after resume. [ 145.821268][ T5936] Bluetooth: hci2: command 0x0406 tx timeout [ 145.849590][ T1330] usb usb9-port1: attempt power cycle [ 145.939284][T10600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1636'. [ 145.994320][T10602] netlink: 'syz.1.1637': attribute type 2 has an invalid length. [ 146.005182][T10602] !: entered promiscuous mode [ 146.009076][T10602] netlink: 'syz.1.1637': attribute type 2 has an invalid length. [ 146.012209][T10602] !: left promiscuous mode [ 146.060026][T10603] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1637'. [ 146.142607][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 146.201324][ T1330] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 146.232640][ T1330] usb 9-1: device descriptor read/8, error -71 [ 146.273764][T10616] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1643'. [ 146.276737][T10617] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1643'. [ 146.471566][ T1330] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 146.489363][T10636] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 146.491676][ T1330] usb 9-1: device descriptor read/8, error -71 [ 146.581201][ T34] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 146.612704][ T1330] usb usb9-port1: unable to enumerate USB device [ 146.731618][ T34] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 146.735120][ T34] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 146.738359][ T34] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.751126][ T34] usb 5-1: config 64 interface 0 has no altsetting 0 [ 146.754291][ T34] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 146.757949][ T34] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.762790][ T34] usb 5-1: config 64 interface 0 has no altsetting 0 [ 146.766731][ T34] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 146.770374][ T34] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.774917][ T34] usb 5-1: config 64 interface 0 has no altsetting 0 [ 146.778616][ T34] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 146.781176][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 146.782962][ T34] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.788404][ T34] usb 5-1: config 64 interface 0 has no altsetting 0 [ 146.791854][ T34] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 146.794904][ T34] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.798233][ T34] usb 5-1: config 64 interface 0 has no altsetting 0 [ 146.801905][ T34] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 146.805280][ T34] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.809423][ T34] usb 5-1: config 64 interface 0 has no altsetting 0 [ 146.812387][ T34] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 146.815239][ T34] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.818590][ T34] usb 5-1: config 64 interface 0 has no altsetting 0 [ 146.822207][ T34] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 146.825402][ T34] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.829867][ T34] usb 5-1: config 64 interface 0 has no altsetting 0 [ 146.835076][ T34] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 146.838923][ T34] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 146.842693][ T34] usb 5-1: Product: syz [ 146.844535][ T34] usb 5-1: Manufacturer: syz [ 146.846711][ T34] usb 5-1: SerialNumber: syz [ 146.858516][ T34] yurex 5-1:64.0: USB YUREX device now attached to Yurex #0 [ 147.069974][ T34] usb 5-1: USB disconnect, device number 28 [ 147.074723][ T34] yurex 5-1:64.0: USB YUREX #0 now disconnected [ 147.208548][T10673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.212138][T10673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.821267][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 147.893633][ T29] libceph: connect (1)[c::]:6789 error -101 [ 147.896259][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 147.939560][T10686] netlink: 'syz.0.1664': attribute type 12 has an invalid length. [ 147.975326][ T29] libceph: connect (1)[c::]:6789 error -101 [ 147.978224][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 148.151431][ T29] libceph: connect (1)[c::]:6789 error -101 [ 148.153403][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 148.241680][ T29] libceph: connect (1)[c::]:6789 error -101 [ 148.243802][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 148.661644][ T29] libceph: connect (1)[c::]:6789 error -101 [ 148.664270][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 148.718629][T10682] ceph: No mds server is up or the cluster is laggy [ 148.722151][T10686] ceph: No mds server is up or the cluster is laggy [ 148.861181][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 149.037544][T10729] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 149.201300][T10760] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 149.239457][T10762] hsr_slave_1 (unregistering): left promiscuous mode [ 149.446057][T10783] netlink: 'syz.1.1698': attribute type 6 has an invalid length. [ 149.542330][T10791] MINIX-fs: unable to read superblock [ 149.546431][T10791] netlink: 'syz.4.1702': attribute type 9 has an invalid length. [ 149.549946][T10791] netlink: 'syz.4.1702': attribute type 9 has an invalid length. [ 149.556171][T10791] netlink: 'syz.4.1702': attribute type 9 has an invalid length. [ 149.559887][T10791] netlink: 'syz.4.1702': attribute type 9 has an invalid length. [ 149.563772][T10791] netlink: 'syz.4.1702': attribute type 9 has an invalid length. [ 149.567500][T10791] netlink: 'syz.4.1702': attribute type 9 has an invalid length. [ 149.571533][T10791] netlink: 'syz.4.1702': attribute type 9 has an invalid length. [ 149.575080][T10791] netlink: 'syz.4.1702': attribute type 9 has an invalid length. [ 149.901419][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 150.119073][T10827] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 150.122254][T10827] SELinux: failed to load policy [ 150.150847][ T40] kauditd_printk_skb: 96 callbacks suppressed [ 150.150860][ T40] audit: type=1400 audit(1768624826.060:751): avc: denied { name_bind } for pid=10828 comm="syz.0.1715" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 150.184398][ T40] audit: type=1400 audit(1768624826.100:752): avc: denied { create } for pid=10830 comm="syz.0.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 150.186165][T10831] sit0: entered promiscuous mode [ 150.190612][ T40] audit: type=1400 audit(1768624826.100:753): avc: denied { write } for pid=10830 comm="syz.0.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 150.201682][T10831] __nla_validate_parse: 42 callbacks suppressed [ 150.201695][T10831] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1716'. [ 150.232819][ T40] audit: type=1400 audit(1768624826.150:754): avc: denied { name_bind } for pid=10832 comm="syz.0.1717" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 150.241554][ T40] audit: type=1400 audit(1768624826.150:755): avc: denied { node_bind } for pid=10832 comm="syz.0.1717" saddr=100.1.1.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 150.257846][ T40] audit: type=1400 audit(1768624826.170:756): avc: denied { create } for pid=10834 comm="syz.0.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.258694][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1718'. [ 150.269722][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1718'. [ 150.376510][ T40] audit: type=1400 audit(1768624826.290:757): avc: denied { read } for pid=10834 comm="syz.0.1718" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 150.386401][ T40] audit: type=1400 audit(1768624826.300:758): avc: denied { open } for pid=10834 comm="syz.0.1718" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 150.395568][ T40] audit: type=1400 audit(1768624826.300:759): avc: denied { ioctl } for pid=10834 comm="syz.0.1718" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 150.427819][ T40] audit: type=1400 audit(1768624826.340:760): avc: denied { create } for pid=10839 comm="syz.1.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.437184][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1720'. [ 150.440655][T10840] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 150.562435][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1728'. [ 150.623052][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 150.722180][T10887] ref_ctr increment failed for inode: 0x854 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803faae200 [ 150.867678][T10897] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 150.883862][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 150.897957][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 150.941161][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 151.009058][T10916] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 151.023211][T10916] overlay: filesystem on ./bus not supported as upperdir [ 151.491839][T10360] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.576713][T10360] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.601325][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'. [ 151.637302][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.643461][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.650150][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.654313][ T5936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.658828][ T5936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.674252][T10360] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.704934][T10939] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.762601][T10360] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.838355][T10939] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.899442][T10937] chnl_net:caif_netlink_parms(): no params data found [ 151.988479][T10939] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.011965][T10937] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.021178][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.024922][T10937] bridge_slave_0: entered allmulticast mode [ 152.027766][T10937] bridge_slave_0: entered promiscuous mode [ 152.041540][T10963] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1762'. [ 152.053730][T10937] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.055859][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 152.056717][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.060496][T10937] bridge_slave_1: entered allmulticast mode [ 152.063244][T10937] bridge_slave_1: entered promiscuous mode [ 152.076717][T10360] bridge_slave_1: left allmulticast mode [ 152.081839][T10360] bridge_slave_1: left promiscuous mode [ 152.083776][T10360] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.087599][T10360] bridge_slave_0: left allmulticast mode [ 152.089951][T10360] bridge_slave_0: left promiscuous mode [ 152.091876][T10360] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.101333][T10360] batman_adv: batadv0: Interface deactivated: gretap1 [ 152.241046][T10360] batman_adv: batadv0: Removing interface: gretap1 [ 152.250417][T10360] bond2 (unregistering): (slave gretap2): Releasing active interface [ 152.275198][T10360] dvmrp8 (unregistering): left allmulticast mode [ 152.505807][T10360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.509753][T10360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.513217][T10360] bond0 (unregistering): Released all slaves [ 152.575791][T10360] bond1 (unregistering): Released all slaves [ 152.647610][T10360] bond2 (unregistering): Released all slaves [ 152.676272][T10939] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.702203][T10937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.710600][T10937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.735320][T10937] team0: Port device team_slave_0 added [ 152.739667][T10937] team0: Port device team_slave_1 added [ 152.758586][T10360] : left promiscuous mode [ 152.768498][T10937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.771203][T10937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.782460][T10937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.791046][T10937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.793305][T10937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.801453][T10937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.824436][T10937] hsr_slave_0: entered promiscuous mode [ 152.828390][T10937] hsr_slave_1: entered promiscuous mode [ 152.903496][ T1330] IPVS: starting estimator thread 0... [ 152.909834][T10988] y0: left allmulticast mode [ 152.912158][T10988] y0: left promiscuous mode [ 152.914284][T10988] bridge0: port 1(y0) entered disabled state [ 152.919873][T10988] bridge_slave_1: left allmulticast mode [ 152.922801][T10988] bridge_slave_1: left promiscuous mode [ 152.925311][T10988] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.931868][T10988] bond0: (slave bond_slave_0): Releasing backup interface [ 152.937074][T10988] bond0: (slave bond_slave_1): Releasing backup interface [ 152.942060][T10988] team0: Port device team_slave_0 removed [ 152.946684][T10988] team0: Port device team_slave_1 removed [ 152.949480][T10988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.953395][T10988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.957450][T10988] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.964144][T10984] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.970941][ T46] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.007948][T10996] IPVS: using max 33 ests per chain, 79200 per kthread [ 153.011058][ T7783] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.058994][ T46] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.076843][ T46] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.123908][T11008] overlay: filesystem on ./file0 not supported as upperdir [ 153.157391][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 153.183953][T10937] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.192077][T10937] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.198160][T10937] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.212582][T10937] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.222975][T10360] hsr_slave_0: left promiscuous mode [ 153.225275][T10360] hsr_slave_1: left promiscuous mode [ 153.227343][T10360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.229799][T10360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.240496][T10360] veth1_macvtap: left promiscuous mode [ 153.242611][T10360] veth0_macvtap: left promiscuous mode [ 153.245222][T10360] veth1_vlan: left promiscuous mode [ 153.247039][T10360] veth0_vlan: left promiscuous mode [ 153.557001][T10360] team0 (unregistering): Port device team_slave_1 removed [ 153.587127][T10360] team0 (unregistering): Port device team_slave_0 removed [ 153.852405][ T5951] Bluetooth: hci0: command tx timeout [ 153.870504][T11027] bond10: entered promiscuous mode [ 153.872363][T11027] 8021q: adding VLAN 0 to HW filter on device bond10 [ 153.883094][T10937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.912003][T10937] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.917933][ T7781] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.920320][ T7781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.932697][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.934982][ T7784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.111028][T10937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.141097][T11057] openvswitch: netlink: IP tunnel dst address not specified [ 154.163756][T10360] IPVS: stop unused estimator thread 0... [ 154.279986][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 154.364032][T10937] veth0_vlan: entered promiscuous mode [ 154.365990][T11090] binder: 11088:11090 ioctl c0306201 2000000004c0 returned -14 [ 154.373676][T10937] veth1_vlan: entered promiscuous mode [ 154.377837][T11082] syzkaller0: entered promiscuous mode [ 154.379671][T11082] syzkaller0: entered allmulticast mode [ 154.407682][T10937] veth0_macvtap: entered promiscuous mode [ 154.412636][T10937] veth1_macvtap: entered promiscuous mode [ 154.424054][T10937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.432238][T10937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.438281][ T1145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.451103][ T1145] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.456063][ T1145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.462611][ T1145] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.500800][ T7784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.503736][ T7784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.519702][ T7783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.522295][ T7783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.799776][T11114] tmpfs: Unknown parameter 'usrquota$' [ 155.392035][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 155.456264][ T1330] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 155.508041][ T5951] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 155.512016][ T5951] Bluetooth: Wrong link type (-22) [ 155.545323][T11154] bridge2: entered promiscuous mode [ 155.547080][T11154] bridge2: entered allmulticast mode [ 155.628744][ T1330] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.632807][ T1330] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 155.637851][ T1330] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.641311][ T1330] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.646431][ T1330] usb 10-1: config 0 descriptor?? [ 155.652807][ T1330] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 155.890997][T11166] __nla_validate_parse: 9 callbacks suppressed [ 155.891016][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1819'. [ 155.903489][T11169] futex_wake_op: syz.4.1820 tries to shift op by -1; fix this program [ 155.987163][T11179] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=11179 comm=syz.2.1823 [ 156.031624][ T40] kauditd_printk_skb: 109 callbacks suppressed [ 156.031634][ T40] audit: type=1400 audit(1768624831.619:870): avc: denied { ioctl } for pid=11180 comm="syz.2.1824" path="socket:[35341]" dev="sockfs" ino=35341 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 156.043762][T11181] Bluetooth: MGMT ver 1.23 [ 156.065863][ T5951] Bluetooth: hci0: command tx timeout [ 156.169944][T11187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.172760][ T29] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 156.173317][T11187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.322225][ T29] usb 9-1: device descriptor read/64, error -71 [ 156.493337][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 156.578919][ T29] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 156.717813][ T29] usb 9-1: device descriptor read/64, error -71 [ 156.757197][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'. [ 156.793461][ T40] audit: type=1400 audit(1768624832.339:871): avc: denied { write } for pid=11205 comm="syz.2.1831" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 156.858616][ T29] usb usb9-port1: attempt power cycle [ 156.975796][ T40] audit: type=1400 audit(1768624832.508:872): avc: denied { read } for pid=11218 comm="syz.2.1835" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 156.987879][ T40] audit: type=1400 audit(1768624832.508:873): avc: denied { open } for pid=11218 comm="syz.2.1835" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 156.997418][ T40] audit: type=1400 audit(1768624832.508:874): avc: denied { ioctl } for pid=11218 comm="syz.2.1835" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 157.102971][ T40] audit: type=1400 audit(1768624832.629:875): avc: denied { ioctl } for pid=11216 comm="syz.1.1834" path="socket:[35389]" dev="sockfs" ino=35389 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 157.103374][T11222] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1834'. [ 157.117442][T11222] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1834'. [ 157.231066][ T29] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 157.253071][ T29] usb 9-1: device descriptor read/8, error -71 [ 157.519853][ T29] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 157.552711][ T29] usb 9-1: device descriptor read/8, error -71 [ 157.615948][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 157.670004][ T29] usb usb9-port1: unable to enumerate USB device [ 157.992454][ T40] audit: type=1400 audit(1768624833.461:876): avc: denied { bind } for pid=11240 comm="syz.2.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.000252][ T40] audit: type=1400 audit(1768624833.461:877): avc: denied { name_bind } for pid=11240 comm="syz.2.1843" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 158.009192][ T40] audit: type=1400 audit(1768624833.461:878): avc: denied { node_bind } for pid=11240 comm="syz.2.1843" saddr=fc01::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 158.043461][ T40] audit: type=1400 audit(1768624833.499:879): avc: denied { read } for pid=11245 comm="syz.2.1844" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 158.055650][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'. [ 158.062520][T11246] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1844'. [ 158.300475][ T5951] Bluetooth: hci0: command tx timeout [ 158.402621][ T24] usb 10-1: USB disconnect, device number 2 [ 158.440430][T11257] dvmrp1: tun_chr_ioctl cmd 1074025676 [ 158.442220][T11257] dvmrp1: owner set to 0 [ 158.447375][T11257] dvmrp1: tun_chr_ioctl cmd 1074025676 [ 158.449408][T11257] dvmrp1: owner set to 0 [ 158.452040][T11260] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 158.669888][T11282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.673529][T11282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.713750][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1855'. [ 158.717248][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 159.123650][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 159.286878][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.290570][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 159.296239][ T10] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.299924][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.306588][ T10] usb 10-1: config 0 descriptor?? [ 159.310337][ T10] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 159.497302][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1864'. [ 159.563201][T11313] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 159.578590][T11318] overlayfs: failed to clone upperpath [ 159.699428][T11329] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 159.829254][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 159.869247][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'. [ 159.906183][T11356] Invalid argument reading file caps for ./file0 [ 160.131071][T11381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1888'. [ 160.191673][T11386] cgroup: Unknown subsys name 'cpuset' [ 160.447144][T11416] netlink: zone id is out of range [ 160.513896][ T5936] Bluetooth: hci0: command tx timeout [ 160.756282][T11445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11445 comm=syz.1.1909 [ 160.859395][T11463] raw_sendmsg: syz.1.1913 forgot to set AF_INET. Fix it! [ 160.951980][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.983500][T11483] loop7: detected capacity change from 0 to 7 [ 161.065401][T11483] Dev loop7: unable to read RDB block 7 [ 161.068342][ C0] blk_print_req_error: 11 callbacks suppressed [ 161.068357][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 161.075123][ C0] buffer_io_error: 11 callbacks suppressed [ 161.075138][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 161.080322][T11483] loop7: unable to read partition table [ 161.082443][T11483] loop7: partition table beyond EOD, truncated [ 161.084510][T11483] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 161.159140][T11487] tmpfs: Unknown parameter 'mpb}΁refer' [ 161.283529][ T5936] Bluetooth: hci1: command 0x1003 tx timeout [ 161.285918][ T5951] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 161.600240][T11503] validate_nla: 28 callbacks suppressed [ 161.600253][T11503] netlink: 'syz.2.1924': attribute type 1 has an invalid length. [ 161.616005][T11503] 8021q: adding VLAN 0 to HW filter on device bond12 [ 161.631108][T10360] Bluetooth: hci1: Frame reassembly failed (-84) [ 161.633262][T10360] Bluetooth: hci1: Frame reassembly failed (-84) [ 161.635327][T11503] bond12: (slave batadv1): Opening slave failed [ 161.898224][T11513] __nla_validate_parse: 5 callbacks suppressed [ 161.898236][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1928'. [ 161.933758][T11519] netlink: 'syz.1.1929': attribute type 4 has an invalid length. [ 161.946810][T11519] netlink: 'syz.1.1929': attribute type 10 has an invalid length. [ 161.955482][T11519] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 162.037217][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 162.037233][ T40] audit: type=1400 audit(1768624837.240:901): avc: denied { sqpoll } for pid=11522 comm="syz.1.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 162.053399][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 162.085269][ T29] usb 10-1: USB disconnect, device number 3 [ 162.090027][ T40] audit: type=1400 audit(1768624837.287:902): avc: denied { getopt } for pid=11524 comm="syz.1.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.258462][T11537] tmpfs: Unknown parameter 'grEquota' [ 162.375388][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1937'. [ 162.447748][T11552] vlan0: entered allmulticast mode [ 162.448950][ T40] audit: type=1400 audit(1768624837.623:903): avc: denied { write } for pid=11550 comm="syz.1.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 162.452562][T11552] veth0_vlan: entered allmulticast mode [ 162.718929][ T40] audit: type=1400 audit(1768624837.876:904): avc: denied { accept } for pid=11563 comm="syz.4.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 162.777880][ T40] audit: type=1400 audit(1768624837.932:905): avc: denied { wake_alarm } for pid=11565 comm="syz.4.1945" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.809767][ T40] audit: type=1400 audit(1768624837.960:906): avc: denied { setopt } for pid=11565 comm="syz.4.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 162.887736][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1947'. [ 162.887793][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1947'. [ 162.981562][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1948'. [ 163.046754][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1951'. [ 163.060801][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1951'. [ 163.165309][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 163.213809][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1957'. [ 163.249667][ T40] audit: type=1400 audit(1768624838.372:907): avc: denied { remount } for pid=11612 comm="syz.4.1961" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 163.253608][T11613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1961'. [ 163.268520][T11613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.288935][ T40] audit: type=1400 audit(1768624838.409:908): avc: denied { unmount } for pid=8043 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 163.323868][T11618] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 163.326587][T11618] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 163.331317][T11618] vhci_hcd vhci_hcd.0: Device attached [ 163.340504][T11620] vhci_hcd: connection closed [ 163.345315][ T7784] vhci_hcd vhci_hcd.5: stop threads [ 163.352105][ T7784] vhci_hcd vhci_hcd.5: release socket [ 163.354307][ T7784] vhci_hcd vhci_hcd.5: disconnect device [ 163.512411][ T40] audit: type=1400 audit(1768624838.624:909): avc: denied { write } for pid=11628 comm="syz.4.1966" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 163.726359][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1969'. [ 163.797145][ T5936] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 163.826874][ T40] audit: type=1400 audit(1768624838.914:910): avc: denied { bind } for pid=11651 comm="syz.4.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.829543][T11652] atomic_op ffff888058a0a998 conn xmit_atomic 0000000000000000 [ 163.849731][ T5936] Bluetooth: hci1: command 0x1003 tx timeout [ 163.849753][ T5951] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 163.957087][T11663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.963061][T11663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.998330][T11666] tipc: Started in network mode [ 164.000354][T11666] tipc: Node identity ac1414aa, cluster identity 4711 [ 164.002885][T11666] tipc: Enabled bearer , priority 10 [ 164.277292][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 164.665647][T11726] overlayfs: failed to clone upperpath [ 164.668607][T11727] overlayfs: failed to clone upperpath [ 165.196892][ T24] tipc: Node number set to 2886997162 [ 165.207578][ T29] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 165.369539][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 165.373521][ T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.386990][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.394980][ T29] usb 9-1: config 0 descriptor?? [ 165.400090][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 165.402711][ T29] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 165.419427][T11756] openvswitch: netlink: Flow key attr not present in new flow. [ 165.569677][T10360] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.572950][T10360] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.576783][T10360] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.580474][T10360] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.639129][T11782] rdma_op ffff88803d8739f0 conn xmit_rdma 0000000000000000 [ 165.671286][T11785] overlayfs: failed to clone upperpath [ 165.717659][T11795] sctp: [Deprecated]: syz.2.2019 (pid 11795) Use of int in max_burst socket option. [ 165.717659][T11795] Use struct sctp_assoc_value instead [ 165.918909][T11815] openvswitch: netlink: IP tunnel dst address not specified [ 166.501455][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 166.546357][T11870] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 166.549508][T11870] netlink: 'syz.2.2035': attribute type 30 has an invalid length. [ 166.762535][T11903] syzkaller1: entered promiscuous mode [ 166.764260][T11903] syzkaller1: entered allmulticast mode [ 167.129570][T11941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.224311][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.227639][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.231749][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.237211][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.242651][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.322213][T10043] syz_tun (unregistering): left allmulticast mode [ 167.325728][T10043] bond0: (slave syz_tun): Releasing backup interface [ 167.353792][T11953] Bluetooth: MGMT ver 1.23 [ 167.371325][T11945] chnl_net:caif_netlink_parms(): no params data found [ 167.427224][T11945] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.429538][T11945] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.432057][T11945] bridge_slave_0: entered allmulticast mode [ 167.435363][T11945] bridge_slave_0: entered promiscuous mode [ 167.440853][T11945] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.443993][T11945] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.446976][T11945] bridge_slave_1: entered allmulticast mode [ 167.450554][T11945] bridge_slave_1: entered promiscuous mode [ 167.454341][T11965] __nla_validate_parse: 22 callbacks suppressed [ 167.454354][T11965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2056'. [ 167.475750][T11945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.482999][T11945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.498846][T11967] netlink: zone id is out of range [ 167.500506][T11967] netlink: zone id is out of range [ 167.502081][T11967] netlink: zone id is out of range [ 167.503664][T11967] netlink: zone id is out of range [ 167.505316][T11967] netlink: zone id is out of range [ 167.506499][T11945] team0: Port device team_slave_0 added [ 167.508626][T11967] netlink: zone id is out of range [ 167.510811][T11967] netlink: zone id is out of range [ 167.511432][T11945] team0: Port device team_slave_1 added [ 167.532494][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 167.532509][ T40] audit: type=1400 audit(1768624842.384:947): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 167.536080][T11945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.546454][ T40] audit: type=1400 audit(1768624842.384:948): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 167.549692][T11945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.565066][T11945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.569460][T11945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.571740][T11945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.579634][T11945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.587867][T11967] netlink: 'syz.2.2057': attribute type 4 has an invalid length. [ 167.607025][T11945] hsr_slave_0: entered promiscuous mode [ 167.609343][T11945] hsr_slave_1: entered promiscuous mode [ 167.612173][T11945] debugfs: 'hsr0' already exists in 'hsr' [ 167.614227][T11945] Cannot create hsr debugfs directory [ 167.676648][T11945] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.750768][T11945] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.765890][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2058'. [ 167.819459][T11977] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 167.821557][T11977] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.824099][T11977] vhci_hcd vhci_hcd.0: Device attached [ 167.826367][T11978] vhci_hcd: cannot find the pending unlink 1023 [ 167.826449][T11977] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2060'. [ 167.826500][T11945] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.848663][T11978] vhci_hcd: connection closed [ 167.848866][T10360] vhci_hcd vhci_hcd.2: stop threads [ 167.852042][T10360] vhci_hcd vhci_hcd.2: release socket [ 167.853813][T10360] vhci_hcd vhci_hcd.2: disconnect device [ 167.886398][T11945] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.984403][T11982] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2061'. [ 168.027775][T11945] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 168.035413][T11945] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 168.045789][T11945] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 168.051031][T11945] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 168.053136][ T40] audit: type=1400 audit(1768624842.861:949): avc: denied { append } for pid=11985 comm="syz.5.2063" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 168.071106][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2063'. [ 168.110259][T11945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.120322][T11945] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.125929][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.128269][ T7784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.133716][ T7781] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.136221][ T7781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.179902][ T1330] usb 9-1: USB disconnect, device number 17 [ 168.199228][ T40] audit: type=1400 audit(1768624843.001:950): avc: denied { getopt } for pid=11994 comm="syz.5.2064" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.288944][T11945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.353646][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2066'. [ 168.425105][T11945] veth0_vlan: entered promiscuous mode [ 168.431000][T11945] veth1_vlan: entered promiscuous mode [ 168.448748][T11945] veth0_macvtap: entered promiscuous mode [ 168.456966][T11945] veth1_macvtap: entered promiscuous mode [ 168.466960][ T40] audit: type=1400 audit(1768624843.253:951): avc: denied { bind } for pid=12012 comm="syz.4.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 168.477228][T12022] tmpfs: Bad value for 'mpol' [ 168.477828][T11945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.487097][T11945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.495387][ T7783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.499334][ T7783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.503982][ T7783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.511569][ T7783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.552400][ T6974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.555132][ T6974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.569343][ T7783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.571812][ T7783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.758380][ T34] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 168.919114][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 168.923223][ T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.926208][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.930620][ T34] usb 9-1: config 0 descriptor?? [ 168.937700][ T34] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 169.409736][ T5936] Bluetooth: hci1: command tx timeout [ 169.482036][T12067] can0: slcan on ttyprintk. [ 169.549491][T12066] can0 (unregistered): slcan off ttyprintk. [ 169.736636][ T40] audit: type=1400 audit(1768624844.441:952): avc: denied { getopt } for pid=12076 comm="syz.2.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.782771][ T40] audit: type=1400 audit(1768624844.479:953): avc: denied { mount } for pid=12076 comm="syz.2.2086" name="/" dev="rpc_pipefs" ino=39659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 169.801189][ T40] audit: type=1400 audit(1768624844.497:954): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 169.853087][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2088'. [ 169.855935][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2088'. [ 169.903891][ T40] audit: type=1400 audit(1768624844.600:955): avc: denied { bind } for pid=12093 comm="syz.1.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 169.986594][ T40] audit: type=1400 audit(1768624844.666:956): avc: denied { audit_write } for pid=12094 comm="syz.2.2090" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 169.986662][T12115] tmpfs: Bad value for 'huge' [ 170.096444][T12121] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2097'. [ 170.940408][T12168] netlink: 'syz.1.2111': attribute type 2 has an invalid length. [ 170.943447][T12168] netlink: 'syz.1.2111': attribute type 1 has an invalid length. [ 170.946859][T12168] netlink: 'syz.1.2111': attribute type 1 has an invalid length. [ 171.140954][T12180] lo speed is unknown, defaulting to 1000 [ 171.147374][T12180] lo speed is unknown, defaulting to 1000 [ 171.151019][T12180] lo speed is unknown, defaulting to 1000 [ 171.237220][T12182] trusted_key: syz.5.2114 sent an empty control message without MSG_MORE. [ 171.262584][T12180] infiniband syz1: set active [ 171.265471][ T34] lo speed is unknown, defaulting to 1000 [ 171.267420][T12180] infiniband syz1: added lo [ 171.273607][T12180] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 171.275327][T12180] infiniband syz1: Couldn't open port 1 [ 171.296368][T12180] RDS/IB: syz1: added [ 171.297940][T12180] smc: adding ib device syz1 with port count 1 [ 171.299994][T12180] smc: ib device syz1 port 1 has no pnetid [ 171.304035][ T34] lo speed is unknown, defaulting to 1000 [ 171.304624][ T5936] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 171.307543][T12180] lo speed is unknown, defaulting to 1000 [ 171.308680][ T5936] Bluetooth: hci0: Injecting HCI hardware error event [ 171.313868][ T5936] Bluetooth: hci0: hardware error 0x00 [ 171.406212][T12180] lo speed is unknown, defaulting to 1000 [ 171.435648][T12202] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.437877][T12202] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.439942][T12202] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.442608][T12202] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.444707][T12202] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.446770][T12202] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.448901][T12202] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.451002][T12202] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.456084][T12202] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.458291][T12202] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.492013][T12180] lo speed is unknown, defaulting to 1000 [ 171.633854][ T5951] Bluetooth: hci1: command tx timeout [ 171.663406][T12180] lo speed is unknown, defaulting to 1000 [ 171.676980][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 171.689533][T12219] gfs2: error -5 reading superblock [ 171.731904][ T1330] usb 9-1: USB disconnect, device number 18 [ 171.755141][T12180] lo speed is unknown, defaulting to 1000 [ 171.760750][T12224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2125'. [ 172.061446][ C0] net_ratelimit: 54 callbacks suppressed [ 172.061458][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 172.887142][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 172.887153][ T40] audit: type=1400 audit(1768624847.387:975): avc: denied { create } for pid=12255 comm="syz.4.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 173.141317][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 173.173448][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.303204][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 173.307289][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.310101][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.314295][ T9] usb 10-1: config 0 descriptor?? [ 173.317868][ T9] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 173.526424][ T5936] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 173.770926][T12274] netlink: 'syz.2.2140': attribute type 1 has an invalid length. [ 173.794666][T12274] 8021q: adding VLAN 0 to HW filter on device bond14 [ 173.809457][T12274] vlan3: entered promiscuous mode [ 173.811036][T12274] bond14: entered promiscuous mode [ 173.816668][T12274] gretap1: entered promiscuous mode [ 173.868648][ T5936] Bluetooth: hci1: command tx timeout [ 173.945305][T12284] __nla_validate_parse: 1 callbacks suppressed [ 173.945315][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2143'. [ 174.005917][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2146'. [ 174.045223][T12305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.048744][T12305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.285533][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 174.344480][T12314] tc_dump_action: action bad kind [ 174.347375][T12314] netlink: 'syz.4.2151': attribute type 3 has an invalid length. [ 174.350062][T12314] netlink: 'syz.4.2151': attribute type 1 has an invalid length. [ 174.352545][T12314] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2151'. [ 174.360043][T12314] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 174.363380][T12314] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 174.366506][T12314] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 174.368983][T12314] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 174.412087][T12316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2152'. [ 174.476522][T12323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2154'. [ 174.480151][ T40] audit: type=1400 audit(1768624848.884:976): avc: denied { ioctl } for pid=12322 comm="syz.4.2154" path="socket:[42040]" dev="sockfs" ino=42040 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 174.487982][T12323] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2154'. [ 174.491139][T12323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2154'. [ 174.597964][T12332] loop6: detected capacity change from 0 to 2640 [ 174.600998][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.603540][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.606074][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.609953][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.612390][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.614876][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.617888][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.620347][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.622898][ T5945] ldm_validate_partition_table(): Disk read failed. [ 174.625198][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.628517][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.631615][ T5945] Dev loop6: unable to read RDB block 0 [ 174.634051][ T5945] loop6: unable to read partition table [ 174.637396][T12332] ldm_validate_partition_table(): Disk read failed. [ 174.639862][T12332] Dev loop6: unable to read RDB block 0 [ 174.642016][T12332] loop6: unable to read partition table [ 174.643961][T12332] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 174.730976][ T40] audit: type=1400 audit(1768624849.108:977): avc: denied { relabelfrom } for pid=12343 comm="syz.4.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 174.738356][ T40] audit: type=1400 audit(1768624849.108:978): avc: denied { relabelto } for pid=12343 comm="syz.4.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 174.952272][ T40] audit: type=1400 audit(1768624849.323:979): avc: denied { read } for pid=12355 comm="syz.1.2163" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 174.962822][ T40] audit: type=1400 audit(1768624849.323:980): avc: denied { open } for pid=12355 comm="syz.1.2163" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 174.973546][ T40] audit: type=1400 audit(1768624849.333:981): avc: denied { ioctl } for pid=12355 comm="syz.1.2163" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 174.984249][ T40] audit: type=1400 audit(1768624849.333:982): avc: denied { read } for pid=12357 comm="syz.2.2166" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 174.996573][ T40] audit: type=1400 audit(1768624849.333:983): avc: denied { open } for pid=12357 comm="syz.2.2166" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 175.005805][ T40] audit: type=1400 audit(1768624849.333:984): avc: denied { ioctl } for pid=12357 comm="syz.2.2166" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 175.250609][T12378] cgroup2: Unknown parameter 'memory_lj' [ 175.255546][T12378] tmpfs: Bad value for 'nr_inodes' [ 175.262630][T12380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2173'. [ 175.382994][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2178'. [ 175.388377][T12406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.392811][T12406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.397485][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 175.416488][T12409] loop2: detected capacity change from 0 to 7 [ 175.422981][ T5945] Dev loop2: unable to read RDB block 7 [ 175.425112][ T5945] loop2: AHDI p1 p2 p3 [ 175.426700][ T5945] loop2: partition table partially beyond EOD, truncated [ 175.430369][ T5945] loop2: p1 start 1601398130 is beyond EOD, truncated [ 175.432759][ T5945] loop2: p2 start 1702059890 is beyond EOD, truncated [ 175.438986][T12409] Dev loop2: unable to read RDB block 7 [ 175.441400][T12409] loop2: AHDI p1 p2 p3 [ 175.443215][T12409] loop2: partition table partially beyond EOD, truncated [ 175.446050][T12409] loop2: p1 start 1601398130 is beyond EOD, truncated [ 175.448782][T12409] loop2: p2 start 1702059890 is beyond EOD, truncated [ 176.019431][T12424] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 176.050333][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2187'. [ 176.082164][ T5936] Bluetooth: hci1: command tx timeout [ 176.098253][ T9] usb 10-1: USB disconnect, device number 4 [ 176.125517][T12443] can0: slcan on ttyS3. [ 176.139873][T12446] macsec0: entered allmulticast mode [ 176.141654][T12446] bridge0: entered allmulticast mode [ 176.143601][T12446] bridge0: port 1(macsec0) entered blocking state [ 176.145983][T12446] bridge0: port 1(macsec0) entered disabled state [ 176.151296][T12446] bridge0: left allmulticast mode [ 176.175962][T12444] lo speed is unknown, defaulting to 1000 [ 176.242279][T12442] can0 (unregistered): slcan off ttyS3. [ 176.244578][T12449] v: renamed from ip6_vti0 (while UP) [ 176.286724][T12447] lo speed is unknown, defaulting to 1000 [ 176.509527][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 177.018149][T12469] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.038596][T12468] : entered promiscuous mode [ 177.204595][ T5972] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 177.343460][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 177.367400][ T5972] usb 10-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.371434][ T5972] usb 10-1: config 1 interface 0 has no altsetting 0 [ 177.375371][ T5972] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.378275][ T5972] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.380754][ T5972] usb 10-1: Product: 㠁 [ 177.382181][ T5972] usb 10-1: Manufacturer: 抁딳翱쒌硫⤂軓 [ 177.384108][ T5972] usb 10-1: SerialNumber: syz [ 177.388217][T12463] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 177.449332][T12481] netlink: 'syz.2.2203': attribute type 10 has an invalid length. [ 177.484435][T12483] netlink: 'syz.2.2204': attribute type 5 has an invalid length. [ 177.488235][T12483] netlink: 'syz.2.2204': attribute type 5 has an invalid length. [ 177.521082][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.524085][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.529003][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.531939][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.535707][T12488] kAFS: unable to lookup cell '(,' [ 177.536483][ T9] usb 6-1: config 0 descriptor?? [ 177.538608][T12488] kAFS: unable to lookup cell '(,' [ 177.540993][T12488] kAFS: unable to lookup cell '(,' [ 177.541995][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 177.542718][T12488] kAFS: unable to lookup cell '(,' [ 177.547015][T12488] kAFS: unable to lookup cell '(,' [ 177.548727][T12488] kAFS: unable to lookup cell '(,' [ 177.550421][T12488] kAFS: unable to lookup cell '(,' [ 177.552077][T12488] kAFS: unable to lookup cell '(,' [ 177.553739][T12488] kAFS: unable to lookup cell '(,' [ 177.555458][T12488] kAFS: unable to lookup cell '(,' [ 177.557173][T12488] kAFS: unable to lookup cell '(,' [ 177.559464][T12488] kAFS: unable to lookup cell '(,' [ 177.561291][T12488] kAFS: unable to lookup cell '(,' [ 177.563016][T12488] kAFS: unable to lookup cell '(,' [ 177.564775][T12488] kAFS: unable to lookup cell '(,' [ 177.566800][T12488] kAFS: unable to lookup cell '(,' [ 177.569081][T12488] kAFS: unable to lookup cell '(,' [ 177.570770][T12488] kAFS: unable to lookup cell '(,' [ 177.572447][T12488] kAFS: unable to lookup cell '(,' [ 177.574106][T12488] kAFS: unable to lookup cell '(,' [ 177.575729][T12488] kAFS: unable to lookup cell '(,' [ 177.577389][T12488] kAFS: unable to lookup cell '(,' [ 177.579267][T12488] kAFS: unable to lookup cell '(,' [ 177.580927][T12488] kAFS: unable to lookup cell '(,' [ 177.582637][T12488] kAFS: unable to lookup cell '(,' [ 177.584278][T12488] kAFS: unable to lookup cell '(,' [ 177.585866][T12488] kAFS: unable to lookup cell '(,' [ 177.587488][T12488] kAFS: unable to lookup cell '(,' [ 177.589188][T12488] kAFS: unable to lookup cell '(,' [ 177.591076][T12488] kAFS: unable to lookup cell '(,' [ 177.592641][T12488] kAFS: unable to lookup cell '(,' [ 177.594222][T12488] kAFS: unable to lookup cell '(,' [ 177.595855][T12488] kAFS: unable to lookup cell '(,' [ 177.612721][ T5972] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 177.620308][ T5972] usb 10-1: USB disconnect, device number 5 [ 177.621497][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.131385][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.135087][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.137342][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.139702][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.141853][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.144203][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.146596][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.148806][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.150984][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.153116][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.155237][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.157439][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.159724][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.161906][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.164038][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.166232][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.169105][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.171827][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.174463][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.177197][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.180465][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.182597][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.185163][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.187891][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.190669][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.193304][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.195531][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.197671][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.199991][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.202146][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.204419][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.206590][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.208713][ T5936] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 178.320029][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 178.320041][ T40] audit: type=1326 audit(1768624852.466:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.4.2214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3cb8f7c9 code=0x7ffc0000 [ 178.329893][ T40] audit: type=1326 audit(1768624852.466:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.4.2214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3cb8f7c9 code=0x7ffc0000 [ 178.336818][ T40] audit: type=1326 audit(1768624852.466:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.4.2214" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a3cb8f7c9 code=0x7ffc0000 [ 178.343729][ T40] audit: type=1326 audit(1768624852.466:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.4.2214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3cb8f7c9 code=0x7ffc0000 [ 178.350943][ T40] audit: type=1326 audit(1768624852.466:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.4.2214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3cb8f7c9 code=0x7ffc0000 [ 178.358421][ T40] audit: type=1326 audit(1768624852.466:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.4.2214" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1a3cb8f7c9 code=0x7ffc0000 [ 178.365931][ T40] audit: type=1400 audit(1768624852.466:1004): avc: denied { bind } for pid=12518 comm="syz.4.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.371973][ T40] audit: type=1326 audit(1768624852.466:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.4.2214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3cb8f7c9 code=0x7ffc0000 [ 178.379042][ T40] audit: type=1326 audit(1768624852.466:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.4.2214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3cb8f7c9 code=0x7ffc0000 [ 178.386236][ T40] audit: type=1326 audit(1768624852.466:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.4.2214" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1a3cb8f7c9 code=0x7ffc0000 [ 178.414377][T12525] : entered promiscuous mode [ 178.448565][T12527] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 178.673544][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.676651][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.680422][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.685174][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.687988][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.713345][T12543] lo speed is unknown, defaulting to 1000 [ 178.733654][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.910616][T12543] chnl_net:caif_netlink_parms(): no params data found [ 178.998839][ T9338] syz_tun (unregistering): left allmulticast mode [ 179.016823][T12565] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 179.036489][T12568] : renamed from vlan0 (while UP) [ 179.040043][T12543] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.043035][T12543] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.049369][T12543] bridge_slave_0: entered allmulticast mode [ 179.053068][T12543] bridge_slave_0: entered promiscuous mode [ 179.057452][T12543] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.061946][T12543] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.065484][T12543] bridge_slave_1: entered allmulticast mode [ 179.068447][T12543] bridge_slave_1: entered promiscuous mode [ 179.072579][ T9338] raw-gadget.0 gadget.2: failed to queue disconnect event [ 179.090983][T12543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.096874][T12543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.115418][T12543] team0: Port device team_slave_0 added [ 179.118586][T12543] team0: Port device team_slave_1 added [ 179.131185][T12543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.133333][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.141276][T12543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.145358][T12543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.147517][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.155278][T12543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.176668][T12543] hsr_slave_0: entered promiscuous mode [ 179.178888][T12543] hsr_slave_1: entered promiscuous mode [ 179.180936][T12543] debugfs: 'hsr0' already exists in 'hsr' [ 179.182947][T12543] Cannot create hsr debugfs directory [ 179.249123][T12543] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.252396][T12543] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 179.336678][T12543] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.340453][T12543] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 179.406130][T12543] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.410258][T12543] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 179.490510][T12543] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.494732][T12543] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 179.546099][ T5972] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 179.597991][T12543] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.602559][T12543] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.606806][T12543] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.612002][T12543] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.653568][T12543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.662734][T12543] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.670625][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.672865][ T7784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.681553][T10360] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.683865][T10360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.723010][ T5972] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 179.726695][ T5972] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.730439][ T5972] usb 9-1: Product: syz [ 179.732175][ T5972] usb 9-1: Manufacturer: syz [ 179.734107][ T5972] usb 9-1: SerialNumber: syz [ 179.741601][ T5972] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 179.763420][ T29] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 179.818935][T12543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.845935][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 179.852008][T12543] veth0_vlan: entered promiscuous mode [ 179.860132][T12543] veth1_vlan: entered promiscuous mode [ 179.884880][T12543] veth0_macvtap: entered promiscuous mode [ 179.891480][T12543] veth1_macvtap: entered promiscuous mode [ 179.906490][T12543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.916459][T12543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.924792][ T7783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.928385][ T7783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.933193][ T7783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.936621][ T7783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.985933][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.992732][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.006672][ T7784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.009205][ T7784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.043374][T12594] netlink: 'syz.2.2222': attribute type 33 has an invalid length. [ 180.043443][T12595] netlink: 'syz.2.2222': attribute type 33 has an invalid length. [ 180.046329][T12594] __nla_validate_parse: 6 callbacks suppressed [ 180.046342][T12594] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2222'. [ 180.053982][T12595] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2222'. [ 180.298555][ T9] usb 6-1: USB disconnect, device number 11 [ 180.375588][T12611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2236'. [ 180.378674][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2236'. [ 180.390510][T12613] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 180.599780][T12620] xt_hashlimit: size too large, truncated to 1048576 [ 180.754117][T12626] lo speed is unknown, defaulting to 1000 [ 180.872076][ T29] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 180.874372][ T5951] Bluetooth: hci2: command tx timeout [ 180.876800][ T29] ath9k_htc: Failed to initialize the device [ 180.901583][ T29] usb 9-1: ath9k_htc: USB layer deinitialized [ 180.968212][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 181.224827][ T5936] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 181.225101][ T5951] Bluetooth: hci3: command 0x1003 tx timeout [ 181.270959][T12642] openvswitch: netlink: Flow actions attr not present in new flow. [ 181.280211][T12642] Illegal XDP return value 257380542 on prog (id 305) dev N/A, expect packet loss! [ 181.428080][ T54] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 181.454953][T12661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2255'. [ 181.482438][T12659] netlink: 'syz.5.2254': attribute type 1 has an invalid length. [ 181.589844][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.593237][ T54] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.597666][ T54] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.600729][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.604953][ T54] usb 7-1: config 0 descriptor?? [ 181.615468][ T54] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 181.791520][ T1330] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 181.953105][ T1330] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 181.955654][ T1330] usb 6-1: config 1 has no interface number 0 [ 181.957838][ T1330] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x42, changing to 0x2 [ 181.961388][ T1330] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 181.964662][ T1330] usb 6-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 181.969527][ T1330] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 181.972343][ T1330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.975125][ T1330] usb 6-1: Product: syz [ 181.976514][ T1330] usb 6-1: Manufacturer: syz [ 181.977962][ T1330] usb 6-1: SerialNumber: syz [ 181.984397][T12668] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 181.989424][ T1330] usb 6-1: Expected 3 endpoints, found: 2 [ 181.993867][T12680] netlink: 'syz.5.2261': attribute type 1 has an invalid length. [ 182.070887][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 182.207035][ T54] usb 6-1: USB disconnect, device number 12 [ 182.224732][T12686] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 182.227846][T12686] overlayfs: missing 'lowerdir' [ 182.334905][T12691] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 182.337355][T12691] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 182.370852][T12693] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2265'. [ 182.374727][T12693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2265'. [ 182.428008][T12668] xt_hashlimit: size too large, truncated to 1048576 [ 182.518281][ T6024] usb 9-1: USB disconnect, device number 19 [ 182.569148][T12701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12701 comm=syz.5.2267 [ 182.620922][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2267'. [ 182.631010][T12706] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 182.644239][T12706] exFAT-fs (nullb0): invalid boot record signature [ 182.646535][T12706] exFAT-fs (nullb0): failed to read boot sector [ 182.648719][T12706] exFAT-fs (nullb0): failed to recognize exfat type [ 182.651572][T12707] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 182.654916][T12707] exFAT-fs (nullb0): invalid boot record signature [ 182.657091][T12707] exFAT-fs (nullb0): failed to read boot sector [ 182.659435][T12707] exFAT-fs (nullb0): failed to recognize exfat type [ 182.684408][T12707] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 182.715517][T12711] lo speed is unknown, defaulting to 1000 [ 182.897360][T12720] lo speed is unknown, defaulting to 1000 [ 183.085410][ T6024] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 183.096041][ T5936] Bluetooth: hci2: command tx timeout [ 183.172510][T12728] netlink: 'syz.1.2275': attribute type 23 has an invalid length. [ 183.181694][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 183.192746][T12730] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2276'. [ 183.248804][T12733] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 183.252079][T12733] SELinux: failed to load policy [ 183.257894][ T6024] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 183.260729][ T6024] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 183.264480][ T6024] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 183.267791][ T6024] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 183.271459][ T6024] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 183.277200][ T6024] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 183.280264][ T6024] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 183.282783][ T6024] usb 9-1: Product: syz [ 183.284093][ T6024] usb 9-1: Manufacturer: syz [ 183.292278][ T6024] cdc_wdm 9-1:1.0: skipping garbage [ 183.293993][ T6024] cdc_wdm 9-1:1.0: skipping garbage [ 183.296630][ T6024] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 183.298719][ T6024] cdc_wdm 9-1:1.0: Unknown control protocol [ 183.620170][ T1330] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 183.792384][ T1330] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.795756][ T1330] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 183.799045][ T1330] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.802174][ T1330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.810063][T12747] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 183.817163][ T1330] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.882055][ T40] kauditd_printk_skb: 161 callbacks suppressed [ 183.882071][ T40] audit: type=1400 audit(1768624857.666:1169): avc: denied { read write } for pid=12716 comm="syz.4.2272" name="cdc-wdm0" dev="devtmpfs" ino=3325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 183.895100][ T40] audit: type=1400 audit(1768624857.666:1170): avc: denied { open } for pid=12716 comm="syz.4.2272" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 184.033997][T12747] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2282'. [ 184.056377][T12747] syz.1.2282 (12747): /proc/12746/oom_adj is deprecated, please use /proc/12746/oom_score_adj instead. [ 184.226529][ T54] usb 6-1: USB disconnect, device number 13 [ 184.293577][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 184.324610][T12758] netlink: 'syz.5.2284': attribute type 10 has an invalid length. [ 184.329630][T12758] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 184.333005][T12758] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 184.336927][T12758] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 184.381210][ T6024] usb 7-1: USB disconnect, device number 30 [ 184.470278][ T40] audit: type=1400 audit(1768624858.217:1171): avc: denied { getopt } for pid=12770 comm="syz.2.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.615231][ T40] audit: type=1400 audit(1768624858.358:1172): avc: denied { connect } for pid=12775 comm="syz.2.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.732559][ T40] audit: type=1400 audit(1768624858.470:1173): avc: denied { ioctl } for pid=12791 comm="syz.1.2293" path="cgroup:[4026532925]" dev="nsfs" ino=4026532925 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 185.003762][T12826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1809 sclass=netlink_route_socket pid=12826 comm=syz.5.2303 [ 185.056646][T12838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12838 comm=syz.5.2306 [ 185.061990][ T40] audit: type=1400 audit(1768624858.769:1174): avc: denied { write } for pid=12836 comm="syz.1.2307" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 185.066064][T12838] netlink: 'syz.5.2306': attribute type 1 has an invalid length. [ 185.122061][ T40] audit: type=1400 audit(1768624858.825:1175): avc: denied { read write } for pid=12846 comm="syz.1.2309" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 185.129634][ T40] audit: type=1400 audit(1768624858.825:1176): avc: denied { open } for pid=12846 comm="syz.1.2309" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 185.143908][ T40] audit: type=1400 audit(1768624858.853:1177): avc: denied { ioctl } for pid=12846 comm="syz.1.2309" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 185.148682][ T10] IPVS: starting estimator thread 0... [ 185.158489][ T40] audit: type=1400 audit(1768624858.863:1178): avc: denied { map } for pid=12846 comm="syz.1.2309" path="socket:[45153]" dev="sockfs" ino=45153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 185.203873][T12854] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 185.242176][T12858] bad cache= option: nonw [ 185.242176][T12858] [ 185.266619][T12851] IPVS: using max 47 ests per chain, 112800 per kthread [ 185.270624][T12858] CIFS: VFS: bad cache= option: nonw [ 185.275940][T12858] CIFS mount error: No usable UNC path provided in device string! [ 185.275940][T12858] [ 185.279858][T12858] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 185.286468][T12858] netlink: 'syz.1.2313': attribute type 10 has an invalid length. [ 185.300665][T12858] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 185.324632][T12858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.331276][ T5936] Bluetooth: hci2: command tx timeout [ 185.405855][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 185.441202][T12867] __nla_validate_parse: 6 callbacks suppressed [ 185.441214][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2315'. [ 185.461436][T12866] NFSD: Failed to start, no listeners configured. [ 185.640407][T12872] pim6reg1: entered promiscuous mode [ 185.643739][T12872] pim6reg1: entered allmulticast mode [ 185.701740][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2318'. [ 185.705159][T12874] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2318'. [ 185.708258][T12874] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2318'. [ 185.908558][T12898] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2324'. [ 185.966555][T12905] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 185.969681][T12905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2326'. [ 186.047384][ T10] usb 9-1: USB disconnect, device number 20 [ 186.162194][T12936] netlink: 'syz.5.2336': attribute type 1 has an invalid length. [ 186.177944][T12936] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.191807][T12936] bond3: (slave geneve2): making interface the new active one [ 186.196332][T12936] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 186.304345][T12949] nbd: device at index 4 is going down [ 186.380781][T12959] overlayfs: conflicting options: userxattr,redirect_dir=on [ 186.384347][T12959] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 186.387265][T12959] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 186.528410][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 186.589670][T12975] netlink: 'syz.1.2347': attribute type 1 has an invalid length. [ 186.589712][T12976] netlink: 'syz.1.2347': attribute type 1 has an invalid length. [ 186.593161][T12975] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2347'. [ 186.596303][T12976] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2347'. [ 186.634475][T12979] GUP no longer grows the stack in syz.4.2349 (12979): 200000007000-20000000a000 (200000004000) [ 186.639115][T12979] CPU: 1 UID: 0 PID: 12979 Comm: syz.4.2349 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.639132][T12979] Tainted: [L]=SOFTLOCKUP [ 186.639136][T12979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.639142][T12979] Call Trace: [ 186.639146][T12979] [ 186.639149][T12979] dump_stack_lvl+0x16c/0x1f0 [ 186.639186][T12979] gup_vma_lookup+0x1d2/0x220 [ 186.639201][T12979] __get_user_pages+0x241/0x3590 [ 186.639218][T12979] ? __x64_sys_setsockopt+0xbd/0x160 [ 186.639229][T12979] ? do_syscall_64+0xcd/0xf80 [ 186.639242][T12979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.639253][T12979] ? __pfx___get_user_pages+0x10/0x10 [ 186.639270][T12979] __gup_longterm_locked+0x2dd/0x17e0 [ 186.639285][T12979] ? __lock_acquire+0x3e0/0x2890 [ 186.639300][T12979] ? __pfx___gup_longterm_locked+0x10/0x10 [ 186.639320][T12979] pin_user_pages+0x13c/0x160 [ 186.639333][T12979] ? __pfx_pin_user_pages+0x10/0x10 [ 186.639352][T12979] xdp_umem_create+0x741/0x1270 [ 186.639371][T12979] xsk_setsockopt+0x9cf/0xc00 [ 186.639386][T12979] ? __pfx_xsk_setsockopt+0x10/0x10 [ 186.639409][T12979] ? selinux_socket_setsockopt+0x6a/0x80 [ 186.639440][T12979] ? __pfx_xsk_setsockopt+0x10/0x10 [ 186.639459][T12979] do_sock_setsockopt+0xf3/0x1d0 [ 186.639483][T12979] __sys_setsockopt+0x1a0/0x230 [ 186.639497][T12979] __x64_sys_setsockopt+0xbd/0x160 [ 186.639507][T12979] ? do_syscall_64+0x91/0xf80 [ 186.639520][T12979] ? lockdep_hardirqs_on+0x7c/0x110 [ 186.639533][T12979] do_syscall_64+0xcd/0xf80 [ 186.639547][T12979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.639557][T12979] RIP: 0033:0x7f1a3cb8f7c9 [ 186.639566][T12979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.639575][T12979] RSP: 002b:00007f1a3d9ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 186.639585][T12979] RAX: ffffffffffffffda RBX: 00007f1a3cde5fa0 RCX: 00007f1a3cb8f7c9 [ 186.639592][T12979] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 186.639597][T12979] RBP: 00007f1a3cc13f91 R08: 0000000000000020 R09: 0000000000000000 [ 186.639603][T12979] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 186.639609][T12979] R13: 00007f1a3cde6038 R14: 00007f1a3cde5fa0 R15: 00007ffcf6df2668 [ 186.639623][T12979] [ 186.750601][T12985] geneve3: entered promiscuous mode [ 186.752277][T12985] geneve3: entered allmulticast mode [ 186.755283][T10359] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.758110][T10359] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.761136][T10359] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.764447][T10359] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.796638][T12989] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 186.799393][T12989] overlayfs: missing 'lowerdir' [ 186.801480][T12989] netlink: 'syz.1.2352': attribute type 10 has an invalid length. [ 186.804006][T12989] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2352'. [ 186.859400][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2352'. [ 186.977523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 186.983933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 186.988845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 187.081416][T13000] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.104898][T12996] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12996 comm=syz.1.2355 [ 187.112241][T12996] netlink: 'syz.1.2355': attribute type 1 has an invalid length. [ 187.134197][T12996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.191267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 187.202528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 187.351251][T13009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13009 comm=syz.2.2359 [ 187.372614][T13009] bridge_slave_1: left allmulticast mode [ 187.379248][T13009] bridge_slave_1: left promiscuous mode [ 187.382155][T13009] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.386594][T13009] bridge_slave_0: left allmulticast mode [ 187.388281][T13009] bridge_slave_0: left promiscuous mode [ 187.390611][T13009] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.554786][ T5936] Bluetooth: hci2: command tx timeout [ 187.629572][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 187.705707][T13025] PID 13025 killed due to inadequate hugepage pool [ 188.031423][T13054] netlink: 'syz.2.2373': attribute type 8 has an invalid length. [ 188.092996][T13060] netlink: 'syz.2.2375': attribute type 10 has an invalid length. [ 188.102803][T13061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.110111][T13060] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 188.210305][T13076] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 0, id = 0 [ 188.291908][T13084] tipc: Started in network mode [ 188.294132][T13084] tipc: Node identity 84e, cluster identity 4711 [ 188.296121][T13084] tipc: Node number set to 2126 [ 188.322457][T13091] netlink: 'syz.1.2381': attribute type 4 has an invalid length. [ 188.344123][T13091] tipc: Started in network mode [ 188.344148][T13091] tipc: Node identity 16c8020c7ed5, cluster identity 4711 [ 188.357310][T13091] tipc: Enabled bearer , priority 0 [ 188.375487][T13091] syzkaller0: entered promiscuous mode [ 188.375502][T13091] syzkaller0: entered allmulticast mode [ 188.393650][T13091] tipc: Resetting bearer [ 188.398234][T13091] netlink: 'syz.1.2381': attribute type 4 has an invalid length. [ 188.415657][T13089] tipc: Resetting bearer [ 188.425271][T13089] tipc: Disabling bearer [ 188.666393][T13119] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 188.670732][T13119] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 188.673676][T13119] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 188.676024][T13119] UDF-fs: Scanning with blocksize 512 failed [ 188.678931][T13119] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 188.682055][T13119] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 188.685090][T13119] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 188.687519][T13119] UDF-fs: Scanning with blocksize 1024 failed [ 188.691564][T13119] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 188.694788][T13119] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 188.697750][T13119] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 188.700729][T13119] UDF-fs: Scanning with blocksize 2048 failed [ 188.702968][T13119] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 188.705906][T13119] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 188.708795][T13119] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 188.711373][T13119] UDF-fs: Scanning with blocksize 4096 failed [ 188.713234][T13119] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 188.741913][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.048953][T13131] vlan2: entered allmulticast mode [ 189.051106][T13131] bond0: entered allmulticast mode [ 189.058715][T13131] bond_slave_0: entered allmulticast mode [ 189.061155][T13131] bond_slave_1: entered allmulticast mode [ 189.065390][T13131] syz_tun: entered allmulticast mode [ 189.174514][T13142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.177730][T13142] batadv_slave_0: entered promiscuous mode [ 189.179670][T13142] batadv_slave_0: entered allmulticast mode [ 189.188800][T13142] SELinux: Context system_u:object_r:devlog_t:s0 is not valid (left unmapped). [ 189.336376][T13155] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.406481][T13170] ptrace attach of "/syz-executor exec"[13173] was attempted by "/syz-executor exec"[13170] [ 189.485395][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 189.485406][ T40] audit: type=1400 audit(1768624862.912:1208): avc: denied { connect } for pid=13176 comm="syz.5.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 189.495391][ T40] audit: type=1400 audit(1768624862.922:1209): avc: denied { bind } for pid=13176 comm="syz.5.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 189.609075][ T5936] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 189.612908][ T5936] Bluetooth: hci1: Injecting HCI hardware error event [ 189.619480][ T5951] Bluetooth: hci1: hardware error 0x00 [ 189.639763][ T6006] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 189.812665][ T6006] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 189.816081][ T6006] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 189.820805][ T6006] usb 9-1: config 0 interface 0 has no altsetting 0 [ 189.825568][ T6006] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 189.829655][ T6006] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 189.832634][ T6006] usb 9-1: Product: syz [ 189.834166][ T6006] usb 9-1: Manufacturer: syz [ 189.836258][ T6006] usb 9-1: SerialNumber: syz [ 189.841349][ T6006] usb 9-1: config 0 descriptor?? [ 189.844580][ T6006] hub 9-1:0.0: bad descriptor, ignoring hub [ 189.846649][ T6006] hub 9-1:0.0: probe with driver hub failed with error -5 [ 189.852542][ T6006] usb 9-1: selecting invalid altsetting 0 [ 189.864343][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.927139][T13184] bridge_slave_0: default FDB implementation only supports local addresses [ 189.977581][T13186] openvswitch: netlink: Key 18 has unexpected len 380 expected 2 [ 190.012960][ T40] audit: type=1400 audit(1768624863.399:1210): avc: denied { watch_reads } for pid=13187 comm="syz.2.2409" path="/47/file1" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 190.092858][ T40] audit: type=1400 audit(1768624863.483:1211): avc: denied { getopt } for pid=13192 comm="syz.4.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 190.186146][ T10] usb 9-1: USB disconnect, device number 21 [ 190.247807][T13193] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 190.368201][ T40] audit: type=1400 audit(1768624863.735:1212): avc: denied { write } for pid=13205 comm="syz.5.2415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 190.376032][ T40] audit: type=1400 audit(1768624863.735:1213): avc: denied { remount } for pid=13205 comm="syz.5.2415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 190.566454][T13212] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 190.570726][T13212] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 190.575562][T13212] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.580789][ T6006] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 190.598743][ T40] audit: type=1400 audit(1768624863.950:1214): avc: denied { accept } for pid=13215 comm="syz.2.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.664334][T13225] program syz.4.2422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.713607][ T40] audit: type=1400 audit(1768624864.063:1215): avc: denied { accept } for pid=13217 comm="syz.5.2420" lport=60597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.752205][ T6006] usb 6-1: Using ep0 maxpacket: 16 [ 190.761094][ T6006] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 190.765103][ T6006] usb 6-1: config 0 has no interface number 0 [ 190.769203][ T6006] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 190.772761][ T6006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.776976][ T6006] usb 6-1: Product: syz [ 190.778440][ T6006] usb 6-1: Manufacturer: syz [ 190.780029][ T6006] usb 6-1: SerialNumber: syz [ 190.783047][ T6006] usb 6-1: config 0 descriptor?? [ 190.965654][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 191.060976][ T40] audit: type=1400 audit(1768624864.381:1216): avc: denied { mounton } for pid=13245 comm="syz.2.2429" path="/54/file0" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.095542][ T6006] hub 6-1:0.132: bad descriptor, ignoring hub [ 191.099747][ T6006] hub 6-1:0.132: probe with driver hub failed with error -5 [ 191.104810][ T6006] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.132/input/input48 [ 191.109450][ T40] audit: type=1400 audit(1768624864.427:1217): avc: denied { read } for pid=5331 comm="acpid" name="mouse2" dev="devtmpfs" ino=3365 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.349884][T13269] netlink: 'syz.1.2436': attribute type 1 has an invalid length. [ 191.533449][ T5331] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 191.541426][T13271] __nla_validate_parse: 79 callbacks suppressed [ 191.541444][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2437'. [ 191.684408][T13272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2437'. [ 191.694017][ T5331] usb 6-1: device firmware changed [ 191.699755][ T6006] usb 6-1: USB disconnect, device number 14 [ 191.800971][T13275] program syz.4.2438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.821431][ T5951] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 191.864003][ T6006] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 192.045589][ T6006] usb 6-1: Using ep0 maxpacket: 16 [ 192.049032][ T6006] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 192.053544][ T6006] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 192.057786][ T6006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.063287][ T6006] usb 6-1: config 0 descriptor?? [ 192.077641][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 192.443081][T13293] xt_hashlimit: size too large, truncated to 1048576 [ 192.443230][ T7781] Bluetooth: hci3: Frame reassembly failed (-84) [ 192.448872][T10359] Bluetooth: hci3: Frame reassembly failed (-84) [ 192.510232][ T6006] input: HID 0955:7214 Haptics as /devices/virtual/input/input49 [ 192.543139][ T6006] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 192.552530][ T6006] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 192.714229][T13269] random: crng reseeded on system resumption [ 192.727793][T13269] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2436'. [ 192.736206][T13269] gretap1: entered promiscuous mode [ 192.747737][ T1330] usb 6-1: USB disconnect, device number 15 [ 192.748036][ T34] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 192.755971][ T34] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 192.756284][ T1330] ------------[ cut here ]------------ [ 192.760886][ T34] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 192.762579][ T1330] workqueue: work disable count underflowed [ 192.762587][ T1330] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#2: kworker/2:2/1330 [ 192.762613][ T1330] Modules linked in: [ 192.762646][ T1330] CPU: 2 UID: 0 PID: 1330 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.762663][ T1330] Tainted: [L]=SOFTLOCKUP [ 192.762667][ T1330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.762675][ T1330] Workqueue: usb_hub_wq hub_event [ 192.762689][ T1330] RIP: 0010:enable_work+0x2ca/0x310 [ 192.762704][ T1330] Code: ff e8 2a 13 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 1c 13 3a 00 e8 87 a8 f3 09 e9 49 ff ff ff e8 0d 13 3a 00 48 8d 3d b6 d6 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 34 ef a3 00 e9 f7 fd ff [ 192.762717][ T1330] RSP: 0018:ffffc90006e4f348 EFLAGS: 00010087 [ 192.762725][ T1330] RAX: 000000000000a9d7 RBX: 0000000000000000 RCX: ffffc9002fe69000 [ 192.762733][ T1330] RDX: 0000000000100000 RSI: ffffffff8184e943 RDI: ffffffff908bc000 [ 192.762740][ T1330] RBP: ffff88805647b738 R08: 0000000000000005 R09: 0000000000000000 [ 192.762747][ T1330] R10: 0000000000000000 R11: ffff88802aed8b30 R12: 1ffff92000dc9e6a [ 192.762754][ T1330] R13: ffffffff8fc4f19f R14: ffff88805647b698 R15: ffff88805647b730 [ 192.762763][ T1330] FS: 0000000000000000(0000) GS:ffff8880d6af2000(0000) knlGS:0000000000000000 [ 192.762786][ T1330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.767380][ T34] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 192.769206][ T1330] CR2: 0000001b30621ff8 CR3: 000000002992a000 CR4: 0000000000352ef0 [ 192.818682][ T1330] Call Trace: [ 192.819736][ T1330] [ 192.820720][ T1330] ? __pfx_enable_work+0x10/0x10 [ 192.822401][ T1330] cancel_delayed_work_sync+0x96/0xf0 [ 192.824159][ T1330] thermal_zone_device_unregister+0x28e/0x4d0 [ 192.826259][ T1330] ? __pfx_shield_remove+0x10/0x10 [ 192.828443][ T1330] power_supply_unregister+0x10a/0x150 [ 192.830747][ T1330] shield_remove+0x75/0x130 [ 192.832712][ T1330] ? __pfx_shield_remove+0x10/0x10 [ 192.834946][ T1330] hid_device_remove+0xd1/0x260 [ 192.837106][ T1330] ? __pfx_hid_device_remove+0x10/0x10 [ 192.839464][ T1330] device_remove+0xcb/0x170 [ 192.841422][ T1330] device_release_driver_internal+0x44b/0x620 [ 192.844131][ T1330] bus_remove_device+0x22f/0x450 [ 192.846311][ T1330] device_del+0x396/0x9f0 [ 192.848061][ T1330] ? __pfx_device_del+0x10/0x10 [ 192.850149][ T1330] ? do_raw_spin_lock+0x12c/0x2b0 [ 192.852479][ T1330] hid_destroy_device+0x19c/0x240 [ 192.854763][ T1330] usbhid_disconnect+0xa0/0xe0 [ 192.856823][ T1330] usb_unbind_interface+0x1dd/0x9e0 [ 192.859069][ T1330] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 192.861599][ T1330] ? __pfx_usb_unbind_interface+0x10/0x10 [ 192.864041][ T1330] device_remove+0x125/0x170 [ 192.866050][ T1330] device_release_driver_internal+0x44b/0x620 [ 192.868833][ T1330] bus_remove_device+0x22f/0x450 [ 192.870982][ T1330] device_del+0x396/0x9f0 [ 192.872826][ T1330] ? __pfx_device_del+0x10/0x10 [ 192.874835][ T1330] ? kobject_put+0x218/0x6f0 [ 192.876845][ T1330] usb_disable_device+0x355/0x820 [ 192.879003][ T1330] usb_disconnect+0x2e1/0x9e0 [ 192.881070][ T1330] hub_event+0x1d84/0x52f0 [ 192.883089][ T1330] ? __lock_acquire+0x436/0x2890 [ 192.885263][ T1330] ? do_raw_spin_unlock+0x172/0x230 [ 192.887576][ T1330] ? __pfx_hub_event+0x10/0x10 [ 192.889660][ T1330] ? assoc_array_insert+0x2d50/0x3970 [ 192.892000][ T1330] ? finish_task_switch.isra.0+0x202/0xbd0 [ 192.894517][ T1330] ? rcu_is_watching+0x12/0xc0 [ 192.896620][ T1330] process_one_work+0x9ba/0x1b20 [ 192.898839][ T1330] ? __pfx_process_one_work+0x10/0x10 [ 192.901040][ T1330] ? assign_work+0x1a0/0x250 [ 192.902904][ T1330] worker_thread+0x6c8/0xf10 [ 192.904835][ T1330] ? __kthread_parkme+0x19e/0x250 [ 192.906958][ T1330] ? __pfx_worker_thread+0x10/0x10 [ 192.909204][ T1330] kthread+0x3c5/0x780 [ 192.910966][ T1330] ? __pfx_kthread+0x10/0x10 [ 192.912515][ T1330] ? rcu_is_watching+0x12/0xc0 [ 192.914083][ T1330] ? __pfx_kthread+0x10/0x10 [ 192.915880][ T1330] ret_from_fork+0x983/0xb10 [ 192.917391][ T1330] ? __pfx_ret_from_fork+0x10/0x10 [ 192.919070][ T1330] ? __switch_to+0x7af/0x10d0 [ 192.920602][ T1330] ? __pfx_kthread+0x10/0x10 [ 192.922195][ T1330] ret_from_fork_asm+0x1a/0x30 [ 192.923830][ T1330] [ 192.924863][ T1330] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.927190][ T1330] CPU: 2 UID: 0 PID: 1330 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.930692][ T1330] Tainted: [L]=SOFTLOCKUP [ 192.932154][ T1330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.935706][ T1330] Workqueue: usb_hub_wq hub_event [ 192.937370][ T1330] Call Trace: [ 192.938484][ T1330] [ 192.939519][ T1330] dump_stack_lvl+0x3d/0x1f0 [ 192.941046][ T1330] vpanic+0x640/0x6f0 [ 192.942450][ T1330] ? enable_work+0x2ca/0x310 [ 192.944012][ T1330] panic+0xca/0xd0 [ 192.945247][ T1330] ? __pfx_panic+0x10/0x10 [ 192.946745][ T1330] check_panic_on_warn+0xab/0xb0 [ 192.948358][ T1330] __warn+0x108/0x3c0 [ 192.949771][ T1330] __report_bug+0x2a0/0x520 [ 192.951238][ T1330] ? enable_work+0x2ca/0x310 [ 192.952797][ T1330] ? __pfx___report_bug+0x10/0x10 [ 192.954457][ T1330] ? __wait_for_common+0x1e0/0x4e0 [ 192.956193][ T1330] ? enable_work+0x2c3/0x310 [ 192.957903][ T1330] ? find_held_lock+0x2b/0x80 [ 192.959375][ T1330] report_bug_entry+0xe1/0x290 [ 192.960976][ T1330] ? enable_work+0x2ca/0x310 [ 192.962542][ T1330] handle_bug+0x18a/0x260 [ 192.964093][ T1330] exc_invalid_op+0x17/0x50 [ 192.965618][ T1330] asm_exc_invalid_op+0x1a/0x20 [ 192.967397][ T1330] RIP: 0010:enable_work+0x2ca/0x310 [ 192.969515][ T1330] Code: ff e8 2a 13 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 1c 13 3a 00 e8 87 a8 f3 09 e9 49 ff ff ff e8 0d 13 3a 00 48 8d 3d b6 d6 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 34 ef a3 00 e9 f7 fd ff [ 192.977561][ T1330] RSP: 0018:ffffc90006e4f348 EFLAGS: 00010087 [ 192.980105][ T1330] RAX: 000000000000a9d7 RBX: 0000000000000000 RCX: ffffc9002fe69000 [ 192.983312][ T1330] RDX: 0000000000100000 RSI: ffffffff8184e943 RDI: ffffffff908bc000 [ 192.986530][ T1330] RBP: ffff88805647b738 R08: 0000000000000005 R09: 0000000000000000 [ 192.989773][ T1330] R10: 0000000000000000 R11: ffff88802aed8b30 R12: 1ffff92000dc9e6a [ 192.993107][ T1330] R13: ffffffff8fc4f19f R14: ffff88805647b698 R15: ffff88805647b730 [ 192.996208][ T1330] ? enable_work+0x2c3/0x310 [ 192.998184][ T1330] ? enable_work+0x2c3/0x310 [ 193.000127][ T1330] ? __pfx_enable_work+0x10/0x10 [ 193.002159][ T1330] cancel_delayed_work_sync+0x96/0xf0 [ 193.004419][ T1330] thermal_zone_device_unregister+0x28e/0x4d0 [ 193.006880][ T1330] ? __pfx_shield_remove+0x10/0x10 [ 193.008947][ T1330] power_supply_unregister+0x10a/0x150 [ 193.011198][ T1330] shield_remove+0x75/0x130 [ 193.013040][ T1330] ? __pfx_shield_remove+0x10/0x10 [ 193.015198][ T1330] hid_device_remove+0xd1/0x260 [ 193.017329][ T1330] ? __pfx_hid_device_remove+0x10/0x10 [ 193.019649][ T1330] device_remove+0xcb/0x170 [ 193.021595][ T1330] device_release_driver_internal+0x44b/0x620 [ 193.024005][ T1330] bus_remove_device+0x22f/0x450 [ 193.026170][ T1330] device_del+0x396/0x9f0 [ 193.028069][ T1330] ? __pfx_device_del+0x10/0x10 [ 193.030207][ T1330] ? do_raw_spin_lock+0x12c/0x2b0 [ 193.032401][ T1330] hid_destroy_device+0x19c/0x240 [ 193.034471][ T1330] usbhid_disconnect+0xa0/0xe0 [ 193.036510][ T1330] usb_unbind_interface+0x1dd/0x9e0 [ 193.038715][ T1330] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 193.041053][ T1330] ? __pfx_usb_unbind_interface+0x10/0x10 [ 193.043436][ T1330] device_remove+0x125/0x170 [ 193.045451][ T1330] device_release_driver_internal+0x44b/0x620 [ 193.048060][ T1330] bus_remove_device+0x22f/0x450 [ 193.050210][ T1330] device_del+0x396/0x9f0 [ 193.052063][ T1330] ? __pfx_device_del+0x10/0x10 [ 193.054145][ T1330] ? kobject_put+0x218/0x6f0 [ 193.056144][ T1330] usb_disable_device+0x355/0x820 [ 193.058350][ T1330] usb_disconnect+0x2e1/0x9e0 [ 193.060384][ T1330] hub_event+0x1d84/0x52f0 [ 193.062344][ T1330] ? __lock_acquire+0x436/0x2890 [ 193.064397][ T1330] ? do_raw_spin_unlock+0x172/0x230 [ 193.066577][ T1330] ? __pfx_hub_event+0x10/0x10 [ 193.068644][ T1330] ? assoc_array_insert+0x2d50/0x3970 [ 193.070965][ T1330] ? finish_task_switch.isra.0+0x202/0xbd0 [ 193.073509][ T1330] ? rcu_is_watching+0x12/0xc0 [ 193.075267][ T1330] process_one_work+0x9ba/0x1b20 [ 193.076991][ T1330] ? __pfx_process_one_work+0x10/0x10 [ 193.078723][ T1330] ? assign_work+0x1a0/0x250 [ 193.080238][ T1330] worker_thread+0x6c8/0xf10 [ 193.081813][ T1330] ? __kthread_parkme+0x19e/0x250 [ 193.083502][ T1330] ? __pfx_worker_thread+0x10/0x10 [ 193.085220][ T1330] kthread+0x3c5/0x780 [ 193.086725][ T1330] ? __pfx_kthread+0x10/0x10 [ 193.088277][ T1330] ? rcu_is_watching+0x12/0xc0 [ 193.089999][ T1330] ? __pfx_kthread+0x10/0x10 [ 193.091549][ T1330] ret_from_fork+0x983/0xb10 [ 193.093141][ T1330] ? __pfx_ret_from_fork+0x10/0x10 [ 193.094843][ T1330] ? __switch_to+0x7af/0x10d0 [ 193.096555][ T1330] ? __pfx_kthread+0x10/0x10 [ 193.098121][ T1330] ret_from_fork_asm+0x1a/0x30 [ 193.099687][ T1330] [ 193.101334][ T1330] Kernel Offset: disabled [ 193.102751][ T1330] Rebooting in 86400 seconds..