last executing test programs: 2m55.441856367s ago: executing program 1 (id=590): socket(0x2, 0x80805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0x1, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x90f8, 0x4f75, 0x828ab1af306a077d}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf86}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x74}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r5, &(0x7f00000059c0)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) 2m55.353932454s ago: executing program 1 (id=591): move_pages(0x0, 0x9, &(0x7f0000000140)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r3], 0x3c}}, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="0300000000800000313788addfa51c1b6353875c16e0b800e8ffffffffffffff000000f3224591bec82db4b9aa97523192264fc4e9250eefcc1ad1192afba3bfd5d5db183358b359c63cae366d826dba7066215c96f2940c648295e9589e1d6262e20aa7207d8759bf06390fc8721ecbf01052209d6d1d5b34c3dc270949cfeb4ed1dba7680f1a8e733a2e", @ANYRES32=r2, @ANYBLOB="a57f94b1c51935d506b3c1864c4fba10594e6c2ad28c9e84cb11939f1b2bff1ac10317d64f99ac152ceaf4fbb3e66bc1dcbc814259f4c594d319e41d6de4fec83104a488a0850da102805898b0da7b47320c22a156624a95a7e77eb1957d5f9912e3b73853275d20f4cf6f361f62820e321047a6fb5d7a1d4e546c72ecc50d8dd3e7837e8e1a036764ab6796da851a334093ffee"], 0x1c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20000004) 2m55.253354376s ago: executing program 1 (id=593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0506617, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}, 0x21, 0x0, '\x00', @c}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\\\\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r6) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r7 = getpid() r8 = gettid() rt_tgsigqueueinfo(r7, r8, 0x1c, &(0x7f0000009680)={0x11, 0x5, 0x41}) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r10 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100000827bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="649300001224000008000500", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r11 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r11, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_emit_ethernet(0x46, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') pread64(r12, &(0x7f0000000180)=""/195, 0xc3, 0x100) 2m54.893927717s ago: executing program 1 (id=600): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x541803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'pim6reg1\x00', @broadcast}) (async) close(r1) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x401) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @local}}) (async) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r2, 0x309, &(0x7f0000000080)={0xa1, 0x3, 0xfe, 0x5}) socket$netlink(0x10, 0x3, 0x0) 2m54.892053728s ago: executing program 32 (id=600): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x541803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'pim6reg1\x00', @broadcast}) (async) close(r1) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x401) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @local}}) (async) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r2, 0x309, &(0x7f0000000080)={0xa1, 0x3, 0xfe, 0x5}) socket$netlink(0x10, 0x3, 0x0) 2m3.013580344s ago: executing program 2 (id=1310): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x5e, 0x10, {}, {0xee01}, 0x5, 0xffffffff}) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000574f45f1ac8a000000000000000000fe7cfd280210a48c9c61b4bf54c57ba21074f41af181c3415eb4f53b40c20602a2fc394950642dda2a8d2e2d24738ad87f4364c5e8f34f42744e419ea5fb0bc9dbdfcee0e13b1dd42c3f0f1d8e63616777340caaafa4d7d0ebf50f5514da74826a11468a8a4530106457268b1e1c1e4afedf81a9645cc9a605e3cf509846bd3b16aeb3d4c406", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa14000300626f6e643000"/28], 0x34}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 2m3.012567515s ago: executing program 2 (id=1313): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x20a}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) (fail_nth: 73) 2m2.864527616s ago: executing program 2 (id=1316): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x48, 0x66, "621520", 0x3, 0xfa, "e51422ec4e4f5c3a561015f14aff3903e926ab65b206bdb23dfe2d2dc084a826e52b6dea4656e758aa733bb7288ec73462080aeaf403dad94bf7e6b5d318e0a8ed96ca7daf59b6e3e3e40599636608d55af1d7f1ac0c302f6896ca681e6d0e687e9c41ebe5e034ee2ba11123b2324364781d67233a2150b5b9d1563baf516af2257f85d01711139656561867daf9c4366ea9495586a044e45b1d1ea24e30a55dbdee2e79d41ceee07ab2313e940aced9102c0f203098fe2d7f82a7b7c749e7da146a32d05841d4018436f02c90e31e13c215dafed86e0aab8246dfcf16e4e07b9d5b1479832d53f12e96822ad85b6354"}]}}}, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0xc7eb6000) (async) mlock(&(0x7f000059b000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 2m2.741508125s ago: executing program 2 (id=1317): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x52b12a599de069e8) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext4\x00', 0x200000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79616368652c76657273696f6e3d3970323030302e75"]) syz_clone(0x22008200, &(0x7f0000000140)="bbbbc8f420", 0x5, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)="3c2952cb72d0eded58aae6b28d5e8e8dbe14b1fe647d204ec1fbedd08e778d7aca850881cc24ec8be212fd484b6d27667c00025459b6ac00b57e12b63ddcc830f3808dacb83d570f964ab206cb28e1dcc6e8720d7bd1a0e7c4967ce87e735feb7e3763abdd7f384cf24863de9e563568cda445107c714b0486d460b0efc9920de23ebe4875170141099faa42efa001d1e2da87ae8ce5ab6c4df79e11ed5e8eff5cc693ef51429c28b688c9c78f66407ab3ad1da1afb2f1a07e33cc087bef37431f92588d108f63baf686b55d5cb4c47837dc1cf2f939f73cdc6f04bf73a375f8e345639b21e11109") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000f00)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd0}, "d5816d9d90418a48bef562f63ba266a674d0a7421f2ff91bc7ffb95e245fbc6121262ed9c538af3c0b169e2f575bf0e0bcc27e7fc0996701e45c11bf3087f5bf90baca6efb060f1ae464e563dd5bec76cd3b31d396cb97bd61ce2d255e9511574b088b8e0c81a86c6ba74a2bf97eb1ee275b056ee26d5c81a216d72369ad23e6cf7125735ea9be2c72f92b335f867b208a20af09e67faf362157d43b97724965922e42de8ff03287458b6335bfd3508ef22296bf7d54e3d1bc29dd75b0cbb4179df0366da8831975353c2ff294a43c1f"}, 0xd4) ioctl$FIBMAP(r4, 0x40140921, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x4, 0x970, [0x0, 0x200000000500, 0x2000000006be, 0x200000000abc], 0x0, &(0x7f0000000400), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x6b, 0x200, 'pim6reg1\x00', 'bond_slave_0\x00', '\x00', 'macvtap0\x00', @link_local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x15e, 0x18e, [], [@common=@nflog={'nflog\x00', 0x50, {{0x35, 0x40c1, 0x8, 0x0, 0x0, "b7603a9e504782ee6c1c28410552fef58506c26dc9dcd16feca774d3ef03e46558e2bc50963d09ebf2b67152f6a70255ddf6960fc462f780c4f86008cb85698c"}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8001, 0x5, 0x3, 0x0, 0x0, "7153294271600174c173e3ba830b02bbe532fe16fed909a838543c27114f7974f0e282ac648e136968d9978f7cd1d6ca5f199d9900e0defb3d1a269fa0ec4695"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x5, 0x0, 0x892f, 'gre0\x00', 'veth1_to_bond\x00', 'syz_tun\x00', 'geneve0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x2f6, 0x39e, 0x3ce, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@mcast1, [0xff000000, 0xff, 0xff, 0xff], 0x4e20, 0x3b, 0x0, 0x4e23, 0x8, 0x4}}}, @bpf0={{'bpf\x00', 0x0, 0x210}, {{0x9, [{0x4, 0x1, 0x4, 0x5}, {0xa5, 0x9f, 0xe, 0x9d}, {0x80, 0x81, 0x4, 0x40}, {0x400, 0x7, 0x3, 0x8}, {0x0, 0x9, 0x8, 0xccc5}, {0x0, 0x9a, 0x2, 0x6}, {0x7f, 0xf5, 0x66, 0x5}, {0x2, 0x7, 0xda, 0x6}, {0x40, 0x9, 0x6, 0x7fff}, {0xfffe, 0x99, 0x6, 0x5}, {0xfffd, 0x6e, 0x1, 0x3}, {0x3ff, 0xa, 0x9, 0xffffff86}, {0x100, 0x63, 0x5}, {0x2, 0xfc, 0x8, 0xad}, {0x7ff, 0x4, 0x11, 0x1}, {0x1d, 0x2, 0x5, 0x400000}, {0x2, 0x8, 0x10, 0x1ff}, {0xd, 0x0, 0x1b, 0x8000}, {0x0, 0x6, 0x7}, {0x7, 0x6, 0x1, 0x4}, {0x2, 0x2, 0x5, 0x26}, {0x4, 0x3, 0x9, 0x3}, {0xf6c7, 0x4b, 0x6a, 0x8}, {0x9, 0x32, 0x7f}, {0x7, 0xe, 0xff, 0x8}, {0x0, 0x3, 0x2, 0x400}, {0xe8a, 0x36, 0xa, 0x7ff}, {0xc, 0x4, 0xf, 0x401}, {0x180, 0x1, 0x81, 0x8}, {0x6, 0x64, 0x7f, 0x1}, {0xf255, 0x0, 0x3, 0x9}, {0x63d, 0x8, 0x2, 0x40}, {0x2, 0x2, 0xff, 0x1}, {0x3, 0x8, 0x2, 0x401}, {0x6, 0x3f, 0x3, 0x3ff}, {0x49f5, 0x3, 0x0, 0x5}, {0x2, 0xf7, 0x2, 0x254}, {0x5, 0xee, 0x7, 0x8}, {0x8f3f, 0x10, 0x0, 0xff}, {0x0, 0x35, 0x4, 0x8}, {0xf905, 0xc0, 0x0, 0xfff}, {0x1258, 0x3, 0x40, 0x1}, {0xfffb, 0x7, 0xc, 0x6}, {0x6f5, 0xe8, 0x5, 0x4}, {0xff40, 0x4, 0xff, 0x3b76}, {0x8, 0x1, 0x5, 0x101}, {0x2f, 0x8, 0x4, 0x8001}, {0x2, 0x2, 0x16}, {0x100, 0xd5, 0x1, 0x7}, {0x5, 0x0, 0x70, 0x7}, {0x3, 0x0, 0x6, 0xffffffff}, {0x100, 0x1, 0x3, 0x8}, {0xefa9, 0x5, 0x7, 0xa73a}, {0x6, 0x0, 0x3, 0x31}, {0x120, 0x40, 0x0, 0x9}, {0xfffa, 0x1, 0x6, 0x7f}, {0xfff, 0x8, 0xf5, 0x2}, {0xedcf, 0x4, 0x2, 0x2}, {0x7, 0x0, 0x6, 0x5}, {0x7fff, 0x5d, 0x8, 0x7}, {0x3, 0x2, 0x6e, 0x3}, {0xf, 0x0, 0x87, 0x7ff}, {0x4, 0x5, 0x3, 0x7}, {0x6, 0x2, 0x8, 0x2}], {0x3}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x6, 0x401, 0x6, 0x0, 0x0, "5e84a02a0223fd8a7b2f4b72b42b671d28f4851be06bb0057f659c99f9bde543d931fa4847b6af12c7b730eda17ad8e8b997215146f25e738e89d37ce6ab2df7"}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x3, 0x7a, 0x200, 'netpci0\x00', 'ip6gre0\x00', 'pim6reg1\x00', 'gretap0\x00', @remote, [0xff, 0x0, 0x0, 0x0, 0xff], @empty, [0xff, 0x0, 0xff], 0x6e, 0x1ee, 0x23e, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:fuse_device_t:s0\x00'}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00', {0x400}}}}], @common=@log={'log\x00', 0x28, {{0x7, "726780a5d399345bc2d41e7163775b5e52a4e0a749ce0a556ada5ee83d3a", 0x8}}}}, {0x9, 0x2f, 0x88a7, 'bond_slave_1\x00', '\x00', 'vlan1\x00', 'veth0_to_bridge\x00', @multicast, [0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0xff], 0xe6, 0xe6, 0x116, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0xe, 0x43, 0x5, 0x3}}}, @ip={{'ip\x00', 0x0, 0x20}, {{@remote, @remote, 0x0, 0x0, 0x5, 0x1d, 0x13, 0x7, 0x4e24, 0x4e22, 0x4e20, 0x4e20}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x9e8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0x1, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6000, 0x122) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x52b12a599de069e8) (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext4\x00', 0x200000, 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79616368652c76657273696f6e3d3970323030302e75"]) (async) syz_clone(0x22008200, &(0x7f0000000140)="bbbbc8f420", 0x5, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)="3c2952cb72d0eded58aae6b28d5e8e8dbe14b1fe647d204ec1fbedd08e778d7aca850881cc24ec8be212fd484b6d27667c00025459b6ac00b57e12b63ddcc830f3808dacb83d570f964ab206cb28e1dcc6e8720d7bd1a0e7c4967ce87e735feb7e3763abdd7f384cf24863de9e563568cda445107c714b0486d460b0efc9920de23ebe4875170141099faa42efa001d1e2da87ae8ce5ab6c4df79e11ed5e8eff5cc693ef51429c28b688c9c78f66407ab3ad1da1afb2f1a07e33cc087bef37431f92588d108f63baf686b55d5cb4c47837dc1cf2f939f73cdc6f04bf73a375f8e345639b21e11109") (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000f00)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd0}, "d5816d9d90418a48bef562f63ba266a674d0a7421f2ff91bc7ffb95e245fbc6121262ed9c538af3c0b169e2f575bf0e0bcc27e7fc0996701e45c11bf3087f5bf90baca6efb060f1ae464e563dd5bec76cd3b31d396cb97bd61ce2d255e9511574b088b8e0c81a86c6ba74a2bf97eb1ee275b056ee26d5c81a216d72369ad23e6cf7125735ea9be2c72f92b335f867b208a20af09e67faf362157d43b97724965922e42de8ff03287458b6335bfd3508ef22296bf7d54e3d1bc29dd75b0cbb4179df0366da8831975353c2ff294a43c1f"}, 0xd4) (async) ioctl$FIBMAP(r4, 0x40140921, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x4, 0x970, [0x0, 0x200000000500, 0x2000000006be, 0x200000000abc], 0x0, &(0x7f0000000400), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x6b, 0x200, 'pim6reg1\x00', 'bond_slave_0\x00', '\x00', 'macvtap0\x00', @link_local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x15e, 0x18e, [], [@common=@nflog={'nflog\x00', 0x50, {{0x35, 0x40c1, 0x8, 0x0, 0x0, "b7603a9e504782ee6c1c28410552fef58506c26dc9dcd16feca774d3ef03e46558e2bc50963d09ebf2b67152f6a70255ddf6960fc462f780c4f86008cb85698c"}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8001, 0x5, 0x3, 0x0, 0x0, "7153294271600174c173e3ba830b02bbe532fe16fed909a838543c27114f7974f0e282ac648e136968d9978f7cd1d6ca5f199d9900e0defb3d1a269fa0ec4695"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x5, 0x0, 0x892f, 'gre0\x00', 'veth1_to_bond\x00', 'syz_tun\x00', 'geneve0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x2f6, 0x39e, 0x3ce, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@mcast1, [0xff000000, 0xff, 0xff, 0xff], 0x4e20, 0x3b, 0x0, 0x4e23, 0x8, 0x4}}}, @bpf0={{'bpf\x00', 0x0, 0x210}, {{0x9, [{0x4, 0x1, 0x4, 0x5}, {0xa5, 0x9f, 0xe, 0x9d}, {0x80, 0x81, 0x4, 0x40}, {0x400, 0x7, 0x3, 0x8}, {0x0, 0x9, 0x8, 0xccc5}, {0x0, 0x9a, 0x2, 0x6}, {0x7f, 0xf5, 0x66, 0x5}, {0x2, 0x7, 0xda, 0x6}, {0x40, 0x9, 0x6, 0x7fff}, {0xfffe, 0x99, 0x6, 0x5}, {0xfffd, 0x6e, 0x1, 0x3}, {0x3ff, 0xa, 0x9, 0xffffff86}, {0x100, 0x63, 0x5}, {0x2, 0xfc, 0x8, 0xad}, {0x7ff, 0x4, 0x11, 0x1}, {0x1d, 0x2, 0x5, 0x400000}, {0x2, 0x8, 0x10, 0x1ff}, {0xd, 0x0, 0x1b, 0x8000}, {0x0, 0x6, 0x7}, {0x7, 0x6, 0x1, 0x4}, {0x2, 0x2, 0x5, 0x26}, {0x4, 0x3, 0x9, 0x3}, {0xf6c7, 0x4b, 0x6a, 0x8}, {0x9, 0x32, 0x7f}, {0x7, 0xe, 0xff, 0x8}, {0x0, 0x3, 0x2, 0x400}, {0xe8a, 0x36, 0xa, 0x7ff}, {0xc, 0x4, 0xf, 0x401}, {0x180, 0x1, 0x81, 0x8}, {0x6, 0x64, 0x7f, 0x1}, {0xf255, 0x0, 0x3, 0x9}, {0x63d, 0x8, 0x2, 0x40}, {0x2, 0x2, 0xff, 0x1}, {0x3, 0x8, 0x2, 0x401}, {0x6, 0x3f, 0x3, 0x3ff}, {0x49f5, 0x3, 0x0, 0x5}, {0x2, 0xf7, 0x2, 0x254}, {0x5, 0xee, 0x7, 0x8}, {0x8f3f, 0x10, 0x0, 0xff}, {0x0, 0x35, 0x4, 0x8}, {0xf905, 0xc0, 0x0, 0xfff}, {0x1258, 0x3, 0x40, 0x1}, {0xfffb, 0x7, 0xc, 0x6}, {0x6f5, 0xe8, 0x5, 0x4}, {0xff40, 0x4, 0xff, 0x3b76}, {0x8, 0x1, 0x5, 0x101}, {0x2f, 0x8, 0x4, 0x8001}, {0x2, 0x2, 0x16}, {0x100, 0xd5, 0x1, 0x7}, {0x5, 0x0, 0x70, 0x7}, {0x3, 0x0, 0x6, 0xffffffff}, {0x100, 0x1, 0x3, 0x8}, {0xefa9, 0x5, 0x7, 0xa73a}, {0x6, 0x0, 0x3, 0x31}, {0x120, 0x40, 0x0, 0x9}, {0xfffa, 0x1, 0x6, 0x7f}, {0xfff, 0x8, 0xf5, 0x2}, {0xedcf, 0x4, 0x2, 0x2}, {0x7, 0x0, 0x6, 0x5}, {0x7fff, 0x5d, 0x8, 0x7}, {0x3, 0x2, 0x6e, 0x3}, {0xf, 0x0, 0x87, 0x7ff}, {0x4, 0x5, 0x3, 0x7}, {0x6, 0x2, 0x8, 0x2}], {0x3}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x6, 0x401, 0x6, 0x0, 0x0, "5e84a02a0223fd8a7b2f4b72b42b671d28f4851be06bb0057f659c99f9bde543d931fa4847b6af12c7b730eda17ad8e8b997215146f25e738e89d37ce6ab2df7"}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x3, 0x7a, 0x200, 'netpci0\x00', 'ip6gre0\x00', 'pim6reg1\x00', 'gretap0\x00', @remote, [0xff, 0x0, 0x0, 0x0, 0xff], @empty, [0xff, 0x0, 0xff], 0x6e, 0x1ee, 0x23e, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:fuse_device_t:s0\x00'}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00', {0x400}}}}], @common=@log={'log\x00', 0x28, {{0x7, "726780a5d399345bc2d41e7163775b5e52a4e0a749ce0a556ada5ee83d3a", 0x8}}}}, {0x9, 0x2f, 0x88a7, 'bond_slave_1\x00', '\x00', 'vlan1\x00', 'veth0_to_bridge\x00', @multicast, [0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0xff], 0xe6, 0xe6, 0x116, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0xe, 0x43, 0x5, 0x3}}}, @ip={{'ip\x00', 0x0, 0x20}, {{@remote, @remote, 0x0, 0x0, 0x5, 0x1d, 0x13, 0x7, 0x4e24, 0x4e22, 0x4e20, 0x4e20}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x9e8) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0x1, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6000, 0x122) (async) 2m2.673517559s ago: executing program 2 (id=1318): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0xd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)='#', 0x1}], 0x1}, 0x4000040) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x43) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) shutdown(r0, 0x0) 2m1.623535982s ago: executing program 2 (id=1322): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) 2m1.582704113s ago: executing program 33 (id=1322): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) 14.091190338s ago: executing program 5 (id=2726): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r0 = socket$nl_crypto(0x10, 0x3, 0x15) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', &(0x7f0000000100)='^*\'\x00', 0x4, 0x3) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000008d"], 0x0, 0x26}, 0x20) (async) io_uring_setup(0x37cc, &(0x7f0000000040)={0x0, 0x2a11, 0x1c080, 0xa, 0x20002f7}) 14.088960678s ago: executing program 5 (id=2728): r0 = creat(&(0x7f0000000580)='./file0\x00', 0x0) file_getattr(r0, 0x0, &(0x7f0000000040), 0x18, 0x1000) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='adfs\x00', 0x221000d, 0x0) 13.931528824s ago: executing program 5 (id=2732): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x6, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x1a3a00, 0x181) read$FUSE(r4, &(0x7f000000b1c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) (async) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x6, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) (async) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x1a3a00, 0x181) (async) read$FUSE(r4, &(0x7f000000b1c0)={0x2020}, 0x2020) (async) 13.661587741s ago: executing program 5 (id=2733): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x103780, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1204040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x10000000000000f6, 0x0, [{0x40000002, 0x0, 0x43}]}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7, 0x4, 0x1, 0x2, 0x7]}, &(0x7f0000000200)=0x2) 13.514683894s ago: executing program 5 (id=2736): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540100001000010000000008000000000a01010100000000000000b5162fe303c67c0e0094f80000000000000000000000000000000000000000000000401bf26cbf6b1ac50322dccbc22b1b000000001bbd070000000000000086c1c1c2652b19c1f8545a9f71e98ef0180689c3524f6cd179345b8b30830f1ee35c914c6afeccfc02f9fb4fe3f18d644e5f29e3fdbe3e194117da00"/164, @ANYRES32=0x0, @ANYRES8=r2, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000290d00000000000000000000000000000a00010000000000000000001c00170000000000000000000000000000000010000000000000000048000100736861323536000000000000000000000000000000000000000000000300"/268], 0x154}, 0x1, 0x0, 0x0, 0x400c0}, 0x40000c1) 8.733615919s ago: executing program 5 (id=2740): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x0, @private2, 0xc5}], 0x1c) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000200)={0xc, r3}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f00000000c0)={0xc}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x1, 0x7, 0x7fff, 0x8001, 0x4, 0x11d}) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x9, 0x28011, r0, 0x0) 8.694272748s ago: executing program 34 (id=2740): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x0, @private2, 0xc5}], 0x1c) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000200)={0xc, r3}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f00000000c0)={0xc}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x1, 0x7, 0x7fff, 0x8001, 0x4, 0x11d}) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x9, 0x28011, r0, 0x0) 2.82968611s ago: executing program 0 (id=2809): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000003700)={'wlan1\x00', &(0x7f00000036c0)=@ethtool_ringparam={0x10, 0xfffff74c, 0x1ff, 0x800, 0xffffffff, 0xffffff81, 0xa0, 0xcae, 0x9}}) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) (async) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) (async) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) (async) ptrace(0x10, r2) (async) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) (async, rerun: 64) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x1, 0x5001) (async, rerun: 64) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x1, 0x5004) (async) ptrace$getregset(0x4204, r2, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) (async, rerun: 64) ptrace$setregset(0x4205, r2, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) (async, rerun: 64) ptrace(0x11, r2) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) (async, rerun: 32) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) (async, rerun: 32) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'ip6_vti0\x00', {0x2}, 0xff1e}) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000db000400"/19], 0x18}}, 0x0) (async, rerun: 32) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') statx(r5, 0x0, 0x1000, 0x10, 0x0) (async, rerun: 32) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000140)) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000fe9000/0x14000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000fe8000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fed000/0xd000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00000001c0)="3afd839fcc7fc82e92ee22e17417e71d7f34a515259e5df1738d44e9a8a90f800179eec121ebef2e3dbbd4781cb609605b4295253c42388a18cb864d7c75536ae9e7ee9497286236db0999b96bee6408dd953690eadf2bcdd809a456fa0c54b035a55cef09984ae6a2c383b8660594b68a8b56cc4eae8d6add58615fb30eed6d73f93c03b08339f4db44034dd6aac772a493480b14e6e09bb5d42ce55a7ca16f86ecfc4d22765100b3f0a0a065a3e91601f42f52afbeabe88e098c5ad648cdf9f9fb8e4ee7d8108b54495836888634d60f88c7dff91c42df282c31fc54744130bae4f7b4c2a891abaeca4e984d55974f79b1edad6637", 0xf6, r4}, 0x68) (async) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f00000002c0)="100c0608262324ba8b282111ad09", 0xe, 0xfffffffffffffffc) 2.782437595s ago: executing program 0 (id=2811): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f00000006c0)="38000000010006", 0x7) (async, rerun: 64) r2 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) fsopen(&(0x7f0000000280)='jffs2\x00', 0x0) (async) getsockopt$packet_int(r4, 0x107, 0x8, 0x0, &(0x7f00000000c0)) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000340), 0x4) (async) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{}, 0x7, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x24042850}, 0x4) (async, rerun: 64) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0xf2) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="e0010000", @ANYRES16=r6, @ANYBLOB="000125bd7000fbdbdf25070000001c00048009009c23eb087a31000000000900010073797a3000000000c00125800c000280080003000900000008000100756470000c000280080004000800000054000280080001000c0000000800010008000000080004000800000008000200ffff0000080003009a000000080002000200000008000200440e00000800030001000000080003006500000008000300256a0000080001007564700014000280080003000100008008000200000000002c00028008000300040000000800010003000000080001001b00000008000200090000000800020008000000f000058044000280080001001f000000080003000100000008000100190000000800040007000000080004000200000008000400000001000800020003000000080002000a0000003c000280080003000100000008000400000800000800030005000000080002000e000000080001000800000008000100070000000800030005000000070001006962000024000280080003000500000008000300080000000800011627457a0008000300f7ffffff07000100696200002c000280080003000f000000080001001b000000080001001f000000080004000000000008000200000000000c0002800800020001800000c481029c019115454a78a7fcfb94edb6d73ac84178ae3e211be0f7ece034b50275f2667367313272ef242bac9f4c5956f8de054de60f975d7e16ecc41ba16346946d8810746f4739eb818795e71e870cc202ab316ded"], 0x1e0}, 0x1, 0x0, 0x0, 0x4040081}, 0x40) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb, 0x3}, {0x10000002, 0x20, 0x400084, 0x5}]}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0xf25, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async, rerun: 32) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ptrace(0x10, r7) (async) ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000100)={0x0}) (async) r8 = socket$kcm(0x2, 0x1, 0x84) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) (async) recvmsg$unix(r9, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f00000009c0)={{'\x00', 0x1}, {0x9}, 0xc0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000480)="bf6a90b9adaae8e240eb91302dfbe322536b1c35f3c1d7bef0e73e3f7c3893e20cd4fa730c0984528f1ba4531f80411fcfc502a352c19a5e2a966d4ace5bb32ed819700db57fa38bca6cd063f58c5cc609e36c9b6a7b227b254d34eae4683b8f5d553cf9a5845efbd273c6855d15d43c18792ed4fad637df", 0x78, 0x0, &(0x7f0000000880)={0x2, 0xc4, {0x1, 0xc, 0xa6, "e20ba66a7b18630619565109102707a40b4936c62e7efb6c076e2b92489be8e36d42574788e85166e4243d92ccaf933bb1602fb4b888076d510d5c10e5e96be70c164035abb6bab51278e55c115e83f1dbd8204bae9ce638e16e3ede1c633f4337b3ac67a7e4083d1d1c7da85c77c0d7e4f69f4e5eae97df8252dc8afeda8fdc14ac0555bfa1861fa23ba2fb753e54e4aaa2b754b376bb2b7a58bf2de2adb8b8df749d017147", 0x11, "92cbf549e6d056d427756850c9bf106b54"}, 0x3d, "6dd5cc0d429cbe11c4dffe342141c1a862bc801c8aeac65c6f9c9901060823cc1d05d332d8d0a0b068aaa3ad5b0eb63ec253b93a2bfd94a30ba27eff76"}, 0x10d}) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) (async) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 2.699333745s ago: executing program 0 (id=2812): r0 = socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x3, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x104, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x466}, {0x6, 0x16, 0x1}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x37}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xb4e}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x1}, {0x5}}]}, 0x104}, 0x1, 0x0, 0x0, 0x44084}, 0x44) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r1, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) 2.677444284s ago: executing program 0 (id=2814): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x46eb, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000680)="ce", 0x1}], 0x1}}], 0x1, 0x40810) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 2.559721546s ago: executing program 0 (id=2815): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) recvmmsg$unix(r0, &(0x7f00000047c0)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000140)=""/93, 0x5d}, {&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f00000002c0)=""/185, 0xb9}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f00000003c0)=""/82, 0x52}, {&(0x7f0000000440)=""/239, 0xef}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/32, 0x20}], 0x9, &(0x7f0000001640)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001680)=""/57, 0x39}, {&(0x7f00000016c0)=""/106, 0x6a}, {&(0x7f0000001740)=""/215, 0xd7}, {&(0x7f0000001840)=""/38, 0x26}, {&(0x7f0000001880)=""/241, 0xf1}], 0x5, &(0x7f0000001a00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000004000)=[{&(0x7f0000001bc0)=""/134, 0x86}, {&(0x7f0000001c80)=""/197, 0xc5}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/27, 0x1b}, {&(0x7f0000002dc0)=""/79, 0x4f}, {&(0x7f0000002e40)=""/85, 0x55}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/2, 0x2}, {&(0x7f0000003f00)=""/195, 0xc3}], 0x9, &(0x7f00000040c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000004200), 0x6e, &(0x7f0000004640)=[{&(0x7f0000004280)=""/109, 0x6d}, {&(0x7f0000004300)=""/119, 0x77}, {&(0x7f0000004380)=""/102, 0x66}, {&(0x7f0000004400)=""/118, 0x76}, {&(0x7f0000004480)=""/24, 0x18}, {&(0x7f00000044c0)=""/143, 0x8f}, {&(0x7f0000004580)=""/173, 0xad}], 0x7, &(0x7f00000046c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}], 0x4, 0x12120, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01864c2, &(0x7f00000048c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000004980)={&(0x7f0000004900)=[r21], &(0x7f0000004940)=[0x4, 0x0, 0x4, 0xfffffffffffffff1, 0x8, 0x8, 0x9, 0xffffffffffffffff], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r7, 0xc01864c2, &(0x7f00000049c0)={0x0, 0x1, r15}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r19, 0xc01864c2, &(0x7f0000004a00)={0x0, 0x1, r8}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r17, 0xc01864cb, &(0x7f0000004ac0)={&(0x7f0000004a40)=[r22, r21, r22, r23], &(0x7f0000004a80)=[0x5], 0x4, 0x1}) recvmsg$can_j1939(r18, &(0x7f0000004d40)={&(0x7f0000004b00), 0x80, &(0x7f0000004c80)=[{&(0x7f0000004b80)=""/44, 0x2c}, {&(0x7f0000004bc0)=""/59, 0x3b}, {&(0x7f0000004c00)=""/120, 0x78}], 0x3, &(0x7f0000004cc0)=""/68, 0x44}, 0x400100e1) mkdirat(r16, &(0x7f0000004d80)='./file0\x00', 0x30) ioctl$DRM_IOCTL_RES_CTX(r11, 0xc0106426, &(0x7f0000004e00)={0x7, &(0x7f0000004dc0)=[{0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r12, 0x40086424, &(0x7f0000004e40)={r24}) r25 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000004e80), 0x305003, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r10, 0xc01064bd, &(0x7f0000004f80)={&(0x7f0000004ec0)="d4967954ebad0bba05a6cae61ca811ac3612b981dd8602ba591f8a77582166cd2344a528f40779e7245a9f07fc695fb1fc07cbc4e84ce8cd85a997222d9c7e3426a7346b9e759961420b2bf20c628c73674b4872befe6b92cdc2224f3942284c0f48b24fb2e0239a3f74f98d1c0267f6093806312bdfbbf4c0a78c1a361fca193d484f4ca4e381b0f0a7d90a9d560a62e78662ba816bb9d5d87b", 0x9a, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r25, 0xc01064ac, &(0x7f0000005080)={r26, 0x91, &(0x7f0000004fc0)=""/145}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r13, 0xc0106440, &(0x7f0000005100)={0x2, 0x1, &(0x7f00000050c0)}) r27 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000005140), 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r27, 0xc00864c0, &(0x7f0000005180)={r23}) r28 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000051c0), 0x2, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r28, 0x3ba0, &(0x7f0000005300)={0x48, 0x8, r20, 0x0, 0xa, 0x3e9988, 0xca, &(0x7f0000005200)="26c6a55f6109617e37bc94d116ae3f7556dc930752b0c140868b3e415e8578a18e58e17eaef8207e794a5d907f8aef0d2c13536fc785fa4d276411ecf596b82ca741f69b20d1c73cea4a7fc125abb0adb4e63474217ec1c2d1840ba0c5bb37cdd31bfe9809182eb43782984721dfcc31bcb072eedd36c29eb610de5fd282d0d0991fc9d652b058ecbcf3abc0f77244e111c032279da9d85d4cd7e680e3ac69d3545f54afa13e19068372621f582da83df03cef0d2272af7106344ec0343d29142c8bc70b3adfb1979a6a", 0x4}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) umount2(&(0x7f0000005380)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f00000053c0), &(0x7f0000005400)=0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000005440)={{0x0, 0x1, 0x9, 0x2, 0x3, 0x6, 0x6, 0xa, 0xf61c, 0x8000, 0x0, 0x8, 0x100, 0x0, 0xc}}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000006440)={0xbe, 0x0, 0x1}) ioctl$XFS_IOC_FSGROWFSDATA(r14, 0x4010586e, &(0x7f00000064c0)={0x7, 0xf}) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000006500)) clock_gettime(0x1, &(0x7f0000006540)) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000006580)={0x79, 0x0, 0x344}) sendto$packet(r6, &(0x7f0000006600)="846f9270d18a0084a25dd452d30b46a8474d503f910b36c3cd3c65bf6d8b5b115a8030bf3ed8750152534ea519f58bdbb6c55c39d0", 0x35, 0x8000, &(0x7f0000006640)={0x11, 0x9, 0x0, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) vmsplice(r5, &(0x7f0000006980)=[{&(0x7f0000006680)="2614884b6c75ac1e2da24179d606593aeb92ed229a01f070e65554e6d964c9ea8aa7c3d26da0294dafc912", 0x2b}, {&(0x7f00000066c0)="73b5cb3a3b49e15c38566641495b8e833ae84f88017f2f15b0dc91cf5e8a4db257bb188a5b0082f2a25b88ddb03a64177bcb2121adaf872e46524fbc9d121e65a096c660141ffb9370783047666278e78b3a03c3ee93d2c3a949ac89e554fef0f6ca2fa8cdaabce2124554b4b650147507319756643bc32c81fcee61d81f7209e3e9a57aca1d21d9b1d50d157d95527b61371b09cdc511d0ff0a9d9ffc2cacf2f1db", 0xa2}, {&(0x7f0000006780)="2f308e30573012908d938aca9248835fd7271261f04b107aa38c839c202dda7f4213c517089213c35abe969e17626d4c01d4f6f3a78e0a546039833f88e6e6f74eec065f9cd7393edfd427b5ac356522926f4eedad6ac3f7034ac0154b50ccb85a91", 0x62}, {&(0x7f0000006800)="ec1f49411f28a2d760963c9a8fb1e07138a090a1137cc3861f3fde98c9ab9bb90c95285e1f5705821654d792856e6558f363e887ab5fffc0e8679a9e176d91f8fc69f07a1d47c6a6997a774b91ab9b50b82b", 0x52}, {&(0x7f0000006880)="cc64fd8d437cad671a4d26f7759611207bc722a0b78931f337ec40fd6e9a54818306a95456cf656fc10c76150533175bf8e34e670b48b64da46ed86ba8517ad60cbdfe7afe2ddc872708667130db1b9e6a81d3ed7dae7025774adbf55272ce122bdaff17b715cfa8b112e693a8e4cd7697c945687a2bbfd31efbdad6cf7882c74af1b072e29e0b40ad6bf4fae259fa792f0f1b3fac43311fef87cfee4bc54537044fe0de644e43b8708cdbb55dde746c1d2cbc8e68cb51e6d25c22369545447668241783eeacfbd43539400301957aacbfa7ea9aa88a4a0e75c9c95c4e0fff65", 0xe0}], 0x5, 0x5) 2.55704067s ago: executing program 0 (id=2817): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x20, 0x11, 0xea, {0xea, 0x3, "54c0718539da774c18b72de3b39fe013652c7eec33506ea30177d4ec4e81a43ba204c26f729aff1df397a4c436d95c7f344c9321ab6c8157bf86ece36b914e4e20b665364cde2a6472c22022d5341eff2962f2c2011180c39d95c48783379e2884be616f245c5d9b0abf0a9f253797026d2de93378488144f386931d8071dbbc6f0ad6fe9d9cb92a839a8517a0d8d737c5661a17328ecbe4e5b09051a3c8854c3b84395da9be33dc8260644739cfb0f5ed48ebb84e29571de15d0970a34e898ef101decf38e5c1ca490f2706014c0035d646ffc8b640be73f39c2dc3e68f28509990608f02a97103"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}}, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x20, 0xe923f80853ea6c9d, 0x43, "281039c0f8509c1f097a8bf9e6093eea746ce58d8373830735ce7c227fca88901745487735303bccda8bf4672a409461e6ee41db6ef861d446256d42a52820185225df"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xeb}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0xb}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x3c5d}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "7cb27ae008b2a51d9b6b5d7114d5737b0c4462265d909d3dcb2db810aee229aa52513c4f2da01b4b0014900b9c49f4"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x3, 0x3, {0x3, 0x30, "ee"}}, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1.340060641s ago: executing program 3 (id=2826): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010825bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2000e7ff26000000000400007ac4ee6997d6c51654d1819795e3fb5d5a1ce93cc3861941cfe1fce41f6fd33e8aa9ad1fcf5ca1d17976a8ea297d62c65650229d93cc57d440e6b4328894a2845063479e92d0472531762a744c76dfbe306d70b89f57ea71cb23437d865865bcbb5b944dca739a51e8af5bc1f692140840a8e5", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x2001}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x20000002}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x28000006}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x15, 0x2, @tid=r3}, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010825bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2000e7ff26000000000400007ac4ee6997d6c51654d1819795e3fb5d5a1ce93cc3861941cfe1fce41f6fd33e8aa9ad1fcf5ca1d17976a8ea297d62c65650229d93cc57d440e6b4328894a2845063479e92d0472531762a744c76dfbe306d70b89f57ea71cb23437d865865bcbb5b944dca739a51e8af5bc1f692140840a8e5", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x2001}) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3}, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x20000002}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x28000006}) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x15, 0x2, @tid=r3}, &(0x7f0000000040)) (async) 1.211159627s ago: executing program 3 (id=2827): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xd, &(0x7f0000000ec0)={0x40, 0x400400}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) (async) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000000)) (async) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x1443, 0x0, 0x3, 0x13}) 1.210301385s ago: executing program 3 (id=2828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x4000010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'hsr0\x00', 0x800}) signalfd(r2, &(0x7f0000000000)={[0x9f]}, 0x8) (async) signalfd(r2, &(0x7f0000000000)={[0x9f]}, 0x8) 1.14146617s ago: executing program 3 (id=2830): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) read(r0, &(0x7f0000000040)=""/192, 0xc0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000140)={"5d4ba1047a4ccf33c1b8d9815eaa77a849b245d840f2a15b3167f7c56110459e", r1, 0xffffffffffffffff}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) close(r3) bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r4, &(0x7f00000001c0)=""/28, 0x1c, 0x0, &(0x7f0000000200)={0xa, 0x4e21, 0x3, @remote, 0x6}, 0x1c) ioctl$VT_WAITACTIVE(r0, 0x5607) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x8, 0x4, 0xe) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x320}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004005}, 0x20000803) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r5) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x130, r7, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xda55}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd1a3}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000009c0)={0x13f, 0x13, &(0x7f00000005c0)="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"}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x20000000) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000b40)={'icmp6\x00'}, &(0x7f0000000b80)=0x1e) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000bc0)) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000e40)={&(0x7f0000000cc0), 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xf0, 0x0, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7ff}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xff}]}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x1b]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x822}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa}, @CTA_FILTER_REPLY_FLAGS={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000ec0), r1) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x68, r9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40801}, 0x4000100) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg(r10, &(0x7f0000001340)=[{{&(0x7f0000001000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @loopback}, 0x3, 0x4, 0x1, 0x4}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001080)="af2c4496450f19b321943b8d59719d53284fc4b0a966c08145925f648b10efc54584053050c6e20dec54adb1712d3ee0346741428a2ac32899e103d1a03398a10c75105316b682e9a7bef01f59728cb8d18b69c380a4bad67d27b077ef4181e2361aff5b8bd9698a8e0e11f56a827ebad01943a50c2da192ec0dd58dd9dc8d4220789ab46b429b9e778ac9b786225b88ade13efc314e5ef7916ce4a27dfdb84b44ff6b04018c66927ce6924c583afba0c9e74989ad0783ba20b1a16829087fa45fbac3e0941669fe4f3db3751add612125832e86", 0xd4}, {&(0x7f0000001180)="8b1a8d3e39137058ab33a414fbb5787aea39d7e5e30c59938b9bbdef1a8eb8beeffc2c25f414c18671a4e11708d56f1fa4004564705af84d33566bb526f485b6f16540cef6a5dfd27359cbc9e585fdd77b98332f917fe02fd376db4b4b957201013e6aa96aba1e68d2fd876b4356dcbc3ea4c1bd8141f52b84fba4304c161602734e62ef898502b723b482de20ad4db299abce670017f6423ce735b4a7e16cd8bbbf05083ad83a6dd6d6ffb787769bdbb1fe0206f27e31fd90c83244bd3ecfd83812ef3655ba9d3df3fed5e82a18e3cd4d01ecb79147a76e7bb26f52e81c8d1ff787b0c3d0c6df6c40e4f2ef71ed6296efd87cc6d9", 0xf5}], 0x2, &(0x7f00000012c0)=[{0x78, 0x114, 0x3, "357bcc3c3c295ec9cdc2726e4d21090d874b1f5432f178c8aa7f4f95c2e89965b0182e9fb4a6a86a5509e8153525a9bbfa4f7521cb87feb9e873c7a8f279fc70b77dfa925371b480de9c83c24a6767aac70b0b5f0579a3af74c72ef451458e4e541a41adab84cd"}], 0x78}}], 0x1, 0x800) fallocate(r5, 0x41, 0x4, 0x5) close_range(r4, r2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040885) 819.879405ms ago: executing program 6 (id=2836): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) r2 = dup(r1) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000980)=0x1, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r4 = socket(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x52, 0x0, &(0x7f00000002c0)) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x251}], 0x1}}], 0x30bceda63b4ab5aa, 0x4000001) 739.97374ms ago: executing program 6 (id=2837): mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0xe, &(0x7f0000fff000/0x1000)=nil) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000480)={0x0, 0xff5b, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200070000000500040001000000050003"], 0x44}}, 0x0) getdents64(r1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$PTP_PIN_SETFUNC(r5, 0x40603d07, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) getdents64(r1, &(0x7f0000000440)=""/138, 0x8a) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40000d1}, 0x40040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001ab"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ufs\x00', 0x204009, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x903b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0xa, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f00000000c0), 0x492492492492627, 0x0) 630.461564ms ago: executing program 6 (id=2838): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a0001"], 0x88}}, 0x0) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x106, 0x1, 0x20, 0x7fff7ffc}]}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x100000100000, 0x14d101) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 571.931488ms ago: executing program 6 (id=2840): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000001c0)={0xe285, 0x1, 0xffff, 0x56f, 0x7b, "203cfffffffff200", 0x6, 0x5}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xff) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0xe67117c, 0x4) 570.215708ms ago: executing program 6 (id=2841): ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000780)={{'\x00', 0x1}, {0x3ff}, 0x13, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)="10088158e205cb2bdf2c8e1d2883a966dffbd426aed354ca9261bdff0c3f94decb26550901aafd9bcbe683f231e8aee60d3a4bff52a99393ee7f61169bd2d9cb720ebf440f7df957547f5f871f58", 0x4e, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x210}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@typed={0xa, 0x15, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x29, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x40895}, 0xc000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=@can_delroute={0x158, 0x19, 0x400, 0x70bd25, 0x25dfdbfb, {0x1d, 0x1, 0x1}, [@CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "a5c333a70bd62e19"}, 0x3}}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}, @CGW_CS_CRC8={0x11e, 0x6, {0x6d, 0x7b, 0x7d, 0xc0, 0x0, "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", 0x3, "801018bd7db2b16eb8470cd1fff385261aee774b"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e24, 0x2, @loopback, 0x7}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x1c}, 0x0, 0xd0, 0x110, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@cgroup0={{0x28}, {0xfffffe01}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0x1, 0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f40000000000000ff0200000000000000000000000000010001c204dc"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000980), 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYRES16=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r9, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r7, &(0x7f0000000340)="29000000010003", 0x7) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0xfffffffffffffcf0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x0, 0xffffff01}, 0x48) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$getflags(r10, 0x401) (async) r11 = semget$private(0x0, 0x4000000009, 0x541) socket$netlink(0x10, 0x3, 0x8) (async) semctl$SETVAL(r11, 0x2, 0x10, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 510.960812ms ago: executing program 6 (id=2844): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = inotify_init() r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) close_range(r2, 0xffffffffffffffff, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r9, 0x3b82, &(0x7f0000000280)={0x18, r10, 0xffffffffffffcde, 0x0, &(0x7f0000000240)=[{0x0, 0x403}, {0x5, 0x100000000}]}) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x48942, 0x0) ioctl$TIOCGLCKTRMIOS(r11, 0x5456, &(0x7f0000000140)={0x9, 0xfffffffc, 0x0, 0xb, 0xe, "a037f56a03623cb235e2e401a93c6e9b3918a0"}) splice(r1, 0x0, r1, 0x0, 0x40010003, 0xa) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 302.447448ms ago: executing program 3 (id=2848): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000280)="c1", 0x1}], 0x1, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fanotify_init(0x4, 0x800) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) fanotify_mark(r2, 0x1, 0x2, r1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r1, @ANYBLOB="01002cbdf000fddbdf254400000008000300", @ANYRES32=r7, @ANYRES8=r6], 0x1c}}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xa1006, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r8 = io_uring_setup(0x734e, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0xffffffffffffff46, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xaa}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@deltclass={0x2c, 0x29, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x9, 0xffff}, {0xfff2}}, [@tclass_kind_options=@c_sfb={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) 289.247779ms ago: executing program 4 (id=2849): ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000040)) 239.883699ms ago: executing program 4 (id=2850): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) close(0x3) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 169.551306ms ago: executing program 3 (id=2851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r4 = dup(r2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x1}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x2e, 0xffffffb9, 0x1a}, 0x9c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf253500000008000300", @ANYRES32=0x0, @ANYBLOB="14005500ea6d127722644a0a78598d8b1e0000f6"], 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000040) 165.866326ms ago: executing program 4 (id=2852): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000200)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r3, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 70.637357ms ago: executing program 4 (id=2853): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) (async) creat(&(0x7f0000000ac0)='./file0\x00', 0x63) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8040) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000e57e890509064f93d00e2faddc259900000401455f93fe0000000141000000140036b15312219d9bb90169623a7767310000"], 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) (async) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@deltclass={0x3c, 0x29, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0x8}, {0xa, 0x6}, {0x10, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x55}}, @TCA_RATE={0x6, 0x5, {0xb, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x12, 0x30}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x4040010) 68.37482ms ago: executing program 4 (id=2854): move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) syz_emit_ethernet(0x12d, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e20f0000f71101fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e22"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000140)={r3, 0x1}) 0s ago: executing program 4 (id=2855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$inet(r2, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="1281e18c9a945e8eba3b8cdd03aa5619db86696e47cbcc1f521a7e8e989028dcabae20f14d506ea9aaccf42e46316cad9f9c29428f7ffcd81372eec8f6e763eaba319ed46844f560a90219e20128db1ebd99293fc442c17b8c0f884217ea52e3d6e0279fc877342cbcedeb6fb16ffe74ed108c22d682d53352ef1da564a9095dc16e89fc89dfc0822e8372a4ffeeb2aaaebf5e3cb1fd6000ce841d7032454fb95e97d63693d1830fcd2245f55eb5d70b11c9be3cfcc8b3de0cbabf64788059f929e9c41ffcaadd7d27aab04eb69f8d9dff16dc988d29db780e6ef40fe28f44c6c63d85bbf4a6e0", 0xe7}, {&(0x7f0000001540)="1d2280", 0x3}], 0x3}}], 0x1, 0x48045) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5], 0xa0}, 0x1, 0x0, 0x0, 0x4008490}, 0x44084) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00', 0x2}) readv(r0, &(0x7f00000003c0), 0x0) syz_open_procfs(0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r6], 0x75}, 0x1, 0x0, 0x0, 0x40801}, 0x4000021) r8 = socket$alg(0x26, 0x5, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(r9, 0x0, 0x0) ioctl$UFFDIO_MOVE(r9, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000b67000/0x5000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5000, 0x3}) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)="bbd0", 0x2}], 0x2) socket$alg(0x26, 0x5, 0x0) 0s ago: executing program 4 (id=2856): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xfffffffd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000000)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000040)=[r6], &(0x7f0000000080), 0x1, 0x1}) syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r8, r8, 0x0) pwritev2(r7, &(0x7f00000005c0)=[{&(0x7f0000000180)="c897", 0x2}], 0x1, 0x2e, 0x4, 0x0) ioctl$FS_IOC_RESVSP(r7, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x62, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000080)=[r6], 0x0, 0x400000a8}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000200)={&(0x7f00000000c0)=[r4], &(0x7f0000000100), 0x1, 0x1}) kernel console output (not intermixed with test programs): nslave team device to itself [ 217.497165][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.498723][T12780] team0: Cannot enslave team device to itself [ 217.499730][T12781] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 217.500096][T12756] Dev nbd0: unable to read RDB block 0 [ 217.500914][T12756] nbd0: unable to read partition table [ 217.501011][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.503931][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.504205][T12782] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 217.507265][T12756] Dev nbd0: unable to read RDB block 0 [ 217.517575][T12756] nbd0: unable to read partition table [ 217.519481][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.523839][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.526694][T12756] Dev nbd0: unable to read RDB block 0 [ 217.529323][T12756] nbd0: unable to read partition table [ 217.531136][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.536208][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.540243][T12756] Dev nbd0: unable to read RDB block 0 [ 217.545580][T12756] nbd0: unable to read partition table [ 217.547501][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.552810][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.556463][T12756] Dev nbd0: unable to read RDB block 0 [ 217.559524][T12756] nbd0: unable to read partition table [ 217.561676][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.567647][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.570572][T12756] Dev nbd0: unable to read RDB block 0 [ 217.573232][T12756] nbd0: unable to read partition table [ 217.575263][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.579524][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.583236][T12756] Dev nbd0: unable to read RDB block 0 [ 217.586051][T12756] nbd0: unable to read partition table [ 217.588092][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.592599][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.595544][T12756] Dev nbd0: unable to read RDB block 0 [ 217.598292][T12756] nbd0: unable to read partition table [ 217.600114][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.604671][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.607428][T12756] Dev nbd0: unable to read RDB block 0 [ 217.610020][T12756] nbd0: unable to read partition table [ 217.611835][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.616490][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.619368][T12756] Dev nbd0: unable to read RDB block 0 [ 217.621892][T12756] nbd0: unable to read partition table [ 217.623955][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.628349][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.631086][T12756] Dev nbd0: unable to read RDB block 0 [ 217.633546][T12756] nbd0: unable to read partition table [ 217.635230][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.639252][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.641909][T12756] Dev nbd0: unable to read RDB block 0 [ 217.644422][T12756] nbd0: unable to read partition table [ 217.646102][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.650216][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.653572][T12756] Dev nbd0: unable to read RDB block 0 [ 217.656013][T12756] nbd0: unable to read partition table [ 217.657747][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.661896][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.664698][T12756] Dev nbd0: unable to read RDB block 0 [ 217.667117][T12756] nbd0: unable to read partition table [ 217.668811][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.673039][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.675664][T12756] Dev nbd0: unable to read RDB block 0 [ 217.678045][T12756] nbd0: unable to read partition table [ 217.679799][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.685594][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.688349][T12756] Dev nbd0: unable to read RDB block 0 [ 217.690946][T12756] nbd0: unable to read partition table [ 217.696456][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.700632][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.703301][T12756] Dev nbd0: unable to read RDB block 0 [ 217.705655][T12756] nbd0: unable to read partition table [ 217.707304][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.711384][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.714900][T12756] Dev nbd0: unable to read RDB block 0 [ 217.718015][T12756] nbd0: unable to read partition table [ 217.719777][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.724016][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.726619][T12756] Dev nbd0: unable to read RDB block 0 [ 217.729024][T12756] nbd0: unable to read partition table [ 217.730733][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.735757][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.738498][T12756] Dev nbd0: unable to read RDB block 0 [ 217.740966][T12756] nbd0: unable to read partition table [ 217.742778][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.746864][T12756] ldm_validate_partition_table(): Disk read failed. [ 217.749640][T12756] Dev nbd0: unable to read RDB block 0 [ 217.752102][T12756] nbd0: unable to read partition table [ 217.754756][T12756] XFS (nbd0): no-recovery mounts must be read-only. [ 217.768795][T12789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=12789 comm=syz.5.2056 [ 217.785980][T12789] netlink: 'syz.5.2056': attribute type 1 has an invalid length. [ 217.789181][T12789] macvtap0: entered allmulticast mode [ 217.791568][T12789] veth0_macvtap: entered allmulticast mode [ 217.810113][T12793] netlink: 'syz.0.2058': attribute type 1 has an invalid length. [ 217.824579][T12793] bond2: entered promiscuous mode [ 217.826452][T12793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.834077][ T40] audit: type=1400 audit(2000000009.609:1313): avc: denied { setattr } for pid=12795 comm="syz.4.2060" name="NETLINK" dev="sockfs" ino=48944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 217.847653][T12793] macvtap1: entered allmulticast mode [ 217.865636][T12793] bond2: (slave bridge1): making interface the new active one [ 217.868371][T12793] bridge1: entered promiscuous mode [ 217.872957][T12793] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 217.889727][ T40] audit: type=1400 audit(2000000009.659:1314): avc: denied { mount } for pid=12799 comm="syz.5.2061" name="/" dev="autofs" ino=50232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 217.899809][ T40] audit: type=1400 audit(2000000009.679:1315): avc: denied { unmount } for pid=10236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 218.253974][T12825] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 218.296198][T12829] syz_tun: entered allmulticast mode [ 218.299797][ T40] audit: type=1400 audit(2000000010.069:1316): avc: denied { append } for pid=12828 comm="syz.3.2064" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 218.388261][T12829] ubi: mtd0 is already attached to ubi31 [ 218.393859][ T40] audit: type=1400 audit(2000000010.169:1317): avc: denied { getopt } for pid=12828 comm="syz.3.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 218.732087][T12860] fuse: Bad value for 'fd' [ 218.810644][T12872] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2071'. [ 218.855584][T12876] hugetlbfs: Bad value for 'uid' [ 218.857239][T12876] hugetlbfs: Bad value for 'uid' [ 218.860500][T12878] loop5: detected capacity change from 0 to 7 [ 219.002775][T12878] Dev loop5: unable to read RDB block 7 [ 219.005510][T12878] loop5: unable to read partition table [ 219.008140][T12878] loop5: partition table beyond EOD, truncated [ 219.009357][T12893] fuse: Bad value for 'fd' [ 219.012134][T12878] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 219.102835][T12898] ip6_vti0 speed is unknown, defaulting to 1000 [ 219.469782][T12905] atomic_op ffff888042d07998 conn xmit_atomic 0000000000000000 [ 219.501514][T12905] ip6_vti0 speed is unknown, defaulting to 1000 [ 219.678954][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.690610][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.694628][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.699129][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.702311][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.017538][ T40] audit: type=1400 audit(2000000011.789:1318): avc: denied { map } for pid=12927 comm="syz.4.2086" path="/395/file0/file1" dev="9p" ino=72876177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 220.024190][T12909] ip6_vti0 speed is unknown, defaulting to 1000 [ 220.025479][ T40] audit: type=1400 audit(2000000011.789:1319): avc: denied { execute } for pid=12927 comm="syz.4.2086" path="/395/file0/file1" dev="9p" ino=72876177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 220.122560][T10185] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 220.249807][ T6239] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.267132][T12943] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2088'. [ 220.270106][T12943] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2088'. [ 220.283886][T10185] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.287923][T10185] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 220.291887][T10185] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 220.295602][T10185] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 220.301230][T10185] usb 8-1: Manufacturer: syz [ 220.307451][T10185] usb 8-1: config 0 descriptor?? [ 220.350498][ T6239] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.408325][T12954] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2093'. [ 220.411294][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2093'. [ 220.425217][T12959] tipc: Failed to obtain node identity [ 220.427314][T12959] tipc: Enabling of bearer rejected, failed to enable media [ 220.433875][T12959] hugetlbfs: syz.0.2094 (12959): Using mlock ulimits for SHM_HUGETLB is obsolete [ 220.464565][ T6239] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.533609][T12972] xt_socket: unknown flags 0x48 [ 220.550832][ T6239] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.621867][T12972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2096'. [ 220.638813][T12909] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.641217][T12909] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.644246][T12909] bridge_slave_0: entered allmulticast mode [ 220.647681][T12909] bridge_slave_0: entered promiscuous mode [ 220.653082][T12909] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.656238][T12909] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.658778][T12909] bridge_slave_1: entered allmulticast mode [ 220.662263][T12909] bridge_slave_1: entered promiscuous mode [ 220.681767][T12982] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 220.687027][T12909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.694980][T12909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.738124][T12909] team0: Port device team_slave_0 added [ 220.743383][T12909] team0: Port device team_slave_1 added [ 220.781862][T12909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.784428][T12909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.793020][T12909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.805870][T12909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.808191][T12909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.819684][T12909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.840175][T12987] binder: binder_mmap: 12986 200000ffa000-200000ffd000 bad vm_flags failed -1 [ 220.840394][ T6239] bridge_slave_1: left allmulticast mode [ 220.846513][ T6239] bridge_slave_1: left promiscuous mode [ 220.850299][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.857936][ T6239] bridge_slave_0: left allmulticast mode [ 220.859912][ T6239] bridge_slave_0: left promiscuous mode [ 220.864484][ T6239] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.217939][ T6239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.223033][ T6239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.227079][ T6239] bond0 (unregistering): Released all slaves [ 221.232255][ T6239] bond1 (unregistering): Released all slaves [ 221.264077][T12909] hsr_slave_0: entered promiscuous mode [ 221.266693][T12909] hsr_slave_1: entered promiscuous mode [ 221.269260][T12909] debugfs: 'hsr0' already exists in 'hsr' [ 221.271798][T12909] Cannot create hsr debugfs directory [ 221.544602][ T6239] tipc: Left network mode [ 221.557622][ T6239] IPVS: stopping master sync thread 12687 ... [ 221.814341][ T5737] Bluetooth: hci3: command tx timeout [ 222.128923][ T6239] hsr_slave_0: left promiscuous mode [ 222.132110][ T6239] hsr_slave_1: left promiscuous mode [ 222.137796][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.141038][ T6239] batadv0: mtu less than device minimum [ 222.149968][ T6239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.158555][ T6239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.164023][ T6239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.169204][ T6239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.174316][ T6239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.179271][ T6239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.200902][ T6239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.204176][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.217636][ T6239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.220512][ T6239] batman_adv: batadv0: Interface deactivated: dummy0 [ 222.222788][ T6239] batman_adv: batadv0: Removing interface: dummy0 [ 222.230393][ T6239] veth1_macvtap: left promiscuous mode [ 222.233607][ T6239] veth0_macvtap: left allmulticast mode [ 222.235376][ T6239] veth0_macvtap: left promiscuous mode [ 222.237193][ T6239] veth1_vlan: left promiscuous mode [ 222.238957][ T6239] veth0_vlan: left promiscuous mode [ 222.388590][ T6239] team0 (unregistering): Port device team_slave_1 removed [ 222.399484][ T6239] team0 (unregistering): Port device team_slave_0 removed [ 222.782844][ T6239] IPVS: stop unused estimator thread 0... [ 222.851525][ T5805] usb 8-1: USB disconnect, device number 27 [ 222.930127][T13000] lo speed is unknown, defaulting to 1000 [ 222.933875][T13000] lo speed is unknown, defaulting to 1000 [ 222.939456][T13000] lo speed is unknown, defaulting to 1000 [ 222.942842][T13000] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 222.948607][T13000] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 222.959142][T13000] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 222.967679][T13000] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 222.974558][T13000] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 222.990545][T13000] lo speed is unknown, defaulting to 1000 [ 222.993840][T13000] lo speed is unknown, defaulting to 1000 [ 222.996444][T13000] lo speed is unknown, defaulting to 1000 [ 223.000702][T13000] lo speed is unknown, defaulting to 1000 [ 223.003960][T13000] lo speed is unknown, defaulting to 1000 [ 223.008460][T13000] lo speed is unknown, defaulting to 1000 [ 223.012305][T13000] lo speed is unknown, defaulting to 1000 [ 223.531827][T12972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.549517][T12909] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 223.579196][T12909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.582141][T12909] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.592130][T12909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 223.595427][T12909] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 223.599665][T12909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.602793][T12909] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 223.608799][T12909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.650609][T12909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.660478][T12909] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.666741][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.669107][ T7024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.675854][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.678189][ T7024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.892542][ T5737] Bluetooth: hci3: command tx timeout [ 223.962682][T12909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.127472][T12909] veth0_vlan: entered promiscuous mode [ 224.133611][T12909] veth1_vlan: entered promiscuous mode [ 224.155228][T12909] veth0_macvtap: entered promiscuous mode [ 224.160672][T12909] veth1_macvtap: entered promiscuous mode [ 224.170894][T12909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.180016][T12909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.188363][ T7027] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.191593][ T7027] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.197936][ T7027] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.201051][ T7027] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.316935][ T7024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.323267][ T7024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.345083][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.348045][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.394873][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2083'. [ 224.496549][T13071] : entered promiscuous mode [ 224.530954][T13077] FAULT_INJECTION: forcing a failure. [ 224.530954][T13077] name failslab, interval 1, probability 0, space 0, times 0 [ 224.538550][T13077] CPU: 2 UID: 0 PID: 13077 Comm: syz.0.2108 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.538569][T13077] Tainted: [L]=SOFTLOCKUP [ 224.538572][T13077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.538579][T13077] Call Trace: [ 224.538583][T13077] [ 224.538587][T13077] dump_stack_lvl+0x100/0x190 [ 224.538614][T13077] should_fail_ex.cold+0x5/0xa [ 224.538630][T13077] ? tomoyo_realpath_from_path+0xb6/0x690 [ 224.538651][T13077] should_failslab+0xc2/0x120 [ 224.538663][T13077] __kmalloc_noprof+0xe0/0x850 [ 224.538678][T13077] ? kfree+0x1dd/0x6c0 [ 224.538693][T13077] tomoyo_realpath_from_path+0xb6/0x690 [ 224.538711][T13077] tomoyo_path_number_perm+0x23c/0x580 [ 224.538722][T13077] ? tomoyo_path_number_perm+0x22e/0x580 [ 224.538735][T13077] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.538760][T13077] ? find_held_lock+0x2b/0x80 [ 224.538771][T13077] ? __fget_files+0x215/0x3d0 [ 224.538783][T13077] ? hook_file_ioctl_common+0x149/0x410 [ 224.538798][T13077] ? __fget_files+0x215/0x3d0 [ 224.538813][T13077] ? __fget_files+0x21f/0x3d0 [ 224.538828][T13077] security_file_ioctl+0xd3/0x230 [ 224.538842][T13077] __x64_sys_ioctl+0xb7/0x210 [ 224.538854][T13077] do_syscall_64+0x10b/0xf80 [ 224.538879][T13077] ? clear_bhb_loop+0x40/0x90 [ 224.538893][T13077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.538904][T13077] RIP: 0033:0x7efeaef9cdd9 [ 224.538913][T13077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.538924][T13077] RSP: 002b:00007efead1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.538934][T13077] RAX: ffffffffffffffda RBX: 00007efeaf215fa0 RCX: 00007efeaef9cdd9 [ 224.538941][T13077] RDX: 0000000000000000 RSI: 000000000000aea2 RDI: 0000000000000005 [ 224.538947][T13077] RBP: 00007efead1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 224.538954][T13077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.538960][T13077] R13: 00007efeaf216038 R14: 00007efeaf215fa0 R15: 00007ffd459207a8 [ 224.538973][T13077] [ 224.538978][T13077] ERROR: Out of memory at tomoyo_realpath_from_path. [ 224.577160][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2110'. [ 224.706266][T13092] netlink: 'syz.5.2111': attribute type 1 has an invalid length. [ 224.794336][ T40] audit: type=1400 audit(2000000016.569:1320): avc: denied { lock } for pid=13097 comm="syz.0.2112" path="/75/file0/cpuset.effective_cpus" dev="9p" ino=72876261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 224.851393][ T40] audit: type=1400 audit(2000000016.619:1321): avc: denied { getattr } for pid=13107 comm="syz.3.2114" lport=47029 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 224.922251][T13116] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2116'. [ 224.937237][T13116] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2116'. [ 225.266845][T13131] net_ratelimit: 33 callbacks suppressed [ 225.266857][T13131] IPVS: sh: FWM 3 0x00000003 - no destination available [ 225.270925][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 225.576019][T13136] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 225.972854][ T5737] Bluetooth: hci3: command tx timeout [ 226.144982][T13142] fuse: Bad value for 'fd' [ 226.213660][T13155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.429627][T13157] FAULT_INJECTION: forcing a failure. [ 226.429627][T13157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.433837][T13157] CPU: 0 UID: 0 PID: 13157 Comm: syz.4.2129 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.433854][T13157] Tainted: [L]=SOFTLOCKUP [ 226.433858][T13157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.433864][T13157] Call Trace: [ 226.433880][T13157] [ 226.433885][T13157] dump_stack_lvl+0x100/0x190 [ 226.433907][T13157] should_fail_ex.cold+0x5/0xa [ 226.433943][T13157] _copy_to_user+0x32/0xd0 [ 226.433968][T13157] simple_read_from_buffer+0xcb/0x170 [ 226.433983][T13157] proc_fail_nth_read+0x1af/0x230 [ 226.433994][T13157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.434006][T13157] ? rw_verify_area+0xce/0x6d0 [ 226.434023][T13157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.434034][T13157] vfs_read+0x1e4/0xb30 [ 226.434047][T13157] ? __pfx_vfs_read+0x10/0x10 [ 226.434057][T13157] ? __fget_files+0x215/0x3d0 [ 226.434074][T13157] ? __fget_files+0x21f/0x3d0 [ 226.434090][T13157] ksys_read+0x12a/0x250 [ 226.434102][T13157] ? __pfx_ksys_read+0x10/0x10 [ 226.434114][T13157] ? rcu_is_watching+0x12/0xc0 [ 226.434132][T13157] do_syscall_64+0x10b/0xf80 [ 226.434155][T13157] ? clear_bhb_loop+0x40/0x90 [ 226.434170][T13157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.434181][T13157] RIP: 0033:0x7ff0f815d60e [ 226.434191][T13157] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 226.434201][T13157] RSP: 002b:00007ff0f8fe9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.434211][T13157] RAX: ffffffffffffffda RBX: 00007ff0f8fea6c0 RCX: 00007ff0f815d60e [ 226.434218][T13157] RDX: 000000000000000f RSI: 00007ff0f8fea0a0 RDI: 0000000000000006 [ 226.434224][T13157] RBP: 00007ff0f8fea090 R08: 0000000000000000 R09: 0000000000000000 [ 226.434230][T13157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.434236][T13157] R13: 00007ff0f8416038 R14: 00007ff0f8415fa0 R15: 00007ffef2f9a108 [ 226.434250][T13157] [ 226.722712][T13166] binder: 13165:13166 ioctl 89f8 200000000b80 returned -22 [ 226.797825][T13171] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 226.807488][T13171] CIFS mount error: No usable UNC path provided in device string! [ 226.807488][T13171] [ 226.810973][T13171] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 227.008724][T13182] netlink: 'syz.5.2138': attribute type 3 has an invalid length. [ 227.011325][T13182] netlink: 'syz.5.2138': attribute type 1 has an invalid length. [ 227.015727][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2138'. [ 227.072540][ T5737] Bluetooth: hci3: Malformed Event: 0x13 [ 227.076275][T13191] openvswitch: netlink: Flow key attr not present in new flow. [ 227.130738][ T40] audit: type=1400 audit(2000000018.899:1322): avc: denied { write } for pid=13187 comm="syz.5.2139" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 227.209917][T13195] overlayfs: failed to resolve './file1': -2 [ 227.277001][T13202] netlink: 'syz.5.2144': attribute type 1 has an invalid length. [ 227.282983][T13203] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2144'. [ 227.300398][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2145'. [ 227.431922][T13220] comedi comedi3: comedi_config --init_data is deprecated [ 227.555792][ T40] audit: type=1400 audit(2000000019.329:1323): avc: denied { shutdown } for pid=13225 comm="syz.0.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.617574][T13230] netlink: 'syz.0.2153': attribute type 1 has an invalid length. [ 227.675177][T13233] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 228.033619][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'. [ 228.044829][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'. [ 228.052571][ T5737] Bluetooth: hci3: command tx timeout [ 228.133107][T13260] loop6: detected capacity change from 0 to 2640 [ 228.136887][T13260] buffer_io_error: 2103 callbacks suppressed [ 228.136896][T13260] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.140679][T13268] qnx6: unable to read the first superblock [ 228.141487][T13260] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.147282][T13260] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.150138][T13260] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.150180][T13268] qnx6: unable to read the first superblock [ 228.154718][T13260] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.156566][T13268] qnx6: unable to read the first superblock [ 228.159589][T13260] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.165766][T13260] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.169190][T13260] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.177802][T13260] ldm_validate_partition_table(): Disk read failed. [ 228.187007][T13260] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.196365][T13260] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.200403][T13260] Dev loop6: unable to read RDB block 0 [ 228.204001][T13260] loop6: unable to read partition table [ 228.207010][T13260] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 228.245350][T13282] IPVS: sh: FWM 3 0x00000003 - no destination available [ 228.248795][ C3] IPVS: sh: FWM 3 0x00000003 - no destination available [ 228.253795][T13286] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2166'. [ 228.270049][ T5137] ldm_validate_partition_table(): Disk read failed. [ 228.273527][ T5137] Dev loop6: unable to read RDB block 0 [ 228.276747][ T5137] loop6: unable to read partition table [ 228.317478][T13289] netlink: 'syz.0.2167': attribute type 8 has an invalid length. [ 228.320079][T13289] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 228.431993][T13298] macsec1: entered promiscuous mode [ 228.581405][T13314] binder: 13313:13314 ioctl c0306201 200000000080 returned -22 [ 229.375186][T13344] netlink: 'syz.3.2187': attribute type 1 has an invalid length. [ 229.414186][T13346] __nla_validate_parse: 2 callbacks suppressed [ 229.414198][T13346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2188'. [ 229.607536][ T40] audit: type=1804 audit(2000000021.379:1324): pid=13364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2186" name="/newroot/22/file0" dev="tmpfs" ino=141 res=1 errno=0 [ 229.643363][T13366] xt_l2tp: missing protocol rule (udp|l2tpip) [ 229.689019][T13368] binder: 13367:13368 ioctl c018620c 200000000240 returned -22 [ 229.740691][T13373] macsec1: entered promiscuous mode [ 229.742621][T13381] xt_hashlimit: size too large, truncated to 1048576 [ 229.756977][T13379] set match dimension is over the limit! [ 229.810184][T13386] 9pnet_virtio: no channels available for device syz [ 229.969597][T13397] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 230.056855][T13399] loop2: detected capacity change from 0 to 7 [ 230.067928][T13399] Dev loop2: unable to read RDB block 7 [ 230.071810][T13399] loop2: unable to read partition table [ 230.074190][T13399] loop2: partition table beyond EOD, truncated [ 230.080456][T13399] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 230.461328][T13405] 9p: Unknown Cache mode or invalid value fscach [ 230.599276][T13411] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2207'. [ 230.633882][T13415] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2208'. [ 230.892530][ T5805] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 230.901853][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2213'. [ 231.042650][ T5805] usb 10-1: Using ep0 maxpacket: 8 [ 231.048442][ T5805] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 231.051529][ T5805] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.055302][ T5805] usb 10-1: Product: syz [ 231.056828][ T5805] usb 10-1: Manufacturer: syz [ 231.058531][ T5805] usb 10-1: SerialNumber: syz [ 231.062351][ T5805] usb 10-1: config 0 descriptor?? [ 231.069934][ T5805] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 231.073170][ T5805] dvb-usb: bulk message failed: -22 (2/0) [ 231.085248][ T5805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 231.091604][ T5805] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 231.095799][ T5805] usb 10-1: media controller created [ 231.116137][ T5805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.269873][ T5805] dvb-usb: bulk message failed: -22 (1/0) [ 231.295514][ T5805] DVB: Unable to find symbol mt352_attach() [ 231.297559][ T5805] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 231.352525][ T5805] rc_core: IR keymap rc-dvico-portable not found [ 231.354758][ T5805] Registered IR keymap rc-empty [ 231.357250][ T5805] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 231.367604][ T5805] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input24 [ 231.377110][ T5805] dvb-usb: schedule remote query interval to 100 msecs. [ 231.379431][ T5805] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 231.482608][ T5805] dvb-usb: bulk message failed: -22 (1/0) [ 231.592579][ T5805] dvb-usb: bulk message failed: -22 (1/0) [ 231.676100][T10185] usb 10-1: USB disconnect, device number 13 [ 231.751725][T10185] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 232.091795][ T40] audit: type=1400 audit(2000000023.859:1325): avc: denied { link } for pid=13478 comm="syz.0.2224" name="#6f" dev="tmpfs" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 232.099514][ T40] audit: type=1400 audit(2000000023.859:1326): avc: denied { rename } for pid=13478 comm="syz.0.2224" name="#70" dev="tmpfs" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 232.129839][T13481] blk_print_req_error: 2103 callbacks suppressed [ 232.129853][T13481] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.136325][T13481] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.140651][T13481] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.144122][T13481] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.147214][T13481] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.150787][T13481] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.158777][T13481] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.162771][T13481] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.166643][T13481] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.170559][T13481] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.176239][T13481] ldm_validate_partition_table(): Disk read failed. [ 232.181330][T13481] Dev nbd0: unable to read RDB block 0 [ 232.184940][T13481] nbd0: unable to read partition table [ 232.189291][T13481] gfs2: error -5 reading superblock [ 232.225746][T13486] netlink: 'syz.0.2227': attribute type 28 has an invalid length. [ 232.228348][T13486] netlink: 'syz.0.2227': attribute type 3 has an invalid length. [ 232.231671][T13486] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2227'. [ 232.273337][T13484] binder_alloc: 13483: binder_alloc_buf, no vma [ 232.433731][T13497] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 232.474764][T13499] netlink: 'syz.0.2233': attribute type 8 has an invalid length. [ 232.477517][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2233'. [ 232.579406][ T40] audit: type=1326 audit(2000000024.349:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.3.2234" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa114d9cdd9 code=0x0 [ 232.635807][T13512] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2236'. [ 232.652029][T13510] (syz.3.2234,13510,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 232.656513][T13510] (syz.3.2234,13510,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 232.662626][T13510] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2234'. [ 232.678255][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2237'. [ 232.984661][T13525] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 233.046187][T13525] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.150762][T13525] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.289824][T13525] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.363008][T13533] bond1: invalid ARP target 0.0.0.0 specified for addition [ 233.365493][T13533] bond1: option arp_ip_target: invalid value (0) [ 233.369351][T13533] bond1 (unregistering): Released all slaves [ 233.402288][T13525] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.520886][ T40] audit: type=1400 audit(2000000025.289:1328): avc: denied { setopt } for pid=13544 comm="syz.3.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 233.537139][ T7024] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.551451][ T7024] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.568254][ T7024] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.576724][ T7024] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.637398][T13550] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 233.909800][T13590] random: crng reseeded on system resumption [ 233.918409][T13590] ipt_rpfilter: unknown options [ 233.920407][T13590] netlink: 'syz.4.2262': attribute type 1 has an invalid length. [ 233.950746][T13592] bond3: Unable to set up delay as MII monitoring is disabled [ 233.972491][T13592] bond3 (unregistering): Released all slaves [ 233.977126][T13596] gfs2: error -5 reading superblock [ 234.062526][T10185] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 234.183967][T13627] xt_recent: Unsupported userspace flags (000000b2) [ 234.186589][T13627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.213522][T10185] usb 10-1: not running at top speed; connect to a high speed hub [ 234.217343][T10185] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 234.224087][T10185] usb 10-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 234.232843][T10185] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.240431][T10185] usb 10-1: Product: syz [ 234.242245][T10185] usb 10-1: Manufacturer: syz [ 234.244561][T10185] usb 10-1: SerialNumber: syz [ 234.291429][ T40] audit: type=1400 audit(2000000026.059:1329): avc: denied { associate } for pid=13635 comm="syz.0.2275" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 234.306592][T13638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2275'. [ 234.376529][T13643] xt_bpf: check failed: parse error [ 234.454383][T13646] overlay: Bad value for 'uuid' [ 234.564928][T13661] fuse: Bad value for 'fd' [ 234.578035][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2281'. [ 234.583493][T13664] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 234.586558][T13664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.601403][T10185] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.604003][T10185] usb 10-1: MIDIStreaming interface descriptor not found [ 234.632122][T10185] usb 10-1: USB disconnect, device number 14 [ 234.651859][T13677] overlayfs: failed to clone lowerpath [ 234.729468][T13680] netlink: 201772 bytes leftover after parsing attributes in process `syz.4.2288'. [ 234.762822][T13682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.768625][T13682] netlink: 'syz.0.2289': attribute type 12 has an invalid length. [ 234.819594][T13684] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2290'. [ 234.827358][T13690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2292'. [ 234.835206][ T160] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.835253][T13690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2292'. [ 234.838036][ T160] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.846155][ T160] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.847064][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2292'. [ 234.848816][ T160] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.859207][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2292'. [ 234.952022][T13703] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 235.066092][T13711] netlink: 'syz.0.2298': attribute type 1 has an invalid length. [ 235.068810][T13711] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2298'. [ 235.071820][T13711] NCSI netlink: No device for ifindex 0 [ 235.221285][T13723] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 235.225013][T13722] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2301'. [ 235.306787][ T40] audit: type=1400 audit(2000000027.079:1330): avc: denied { create } for pid=13730 comm="syz.4.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 235.318676][ T40] audit: type=1400 audit(2000000027.079:1331): avc: denied { ioctl } for pid=13730 comm="syz.4.2306" path="socket:[55557]" dev="sockfs" ino=55557 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 235.452751][T13747] netlink: 'syz.3.2303': attribute type 32 has an invalid length. [ 235.514978][T13756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13756 comm=syz.5.2312 [ 235.582558][ T56] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 235.736193][ T56] usb 5-1: config 4 has an invalid interface number: 209 but max is 2 [ 235.739486][ T56] usb 5-1: config 4 has an invalid interface number: 147 but max is 2 [ 235.742377][ T56] usb 5-1: config 4 has an invalid interface number: 250 but max is 2 [ 235.745173][ T56] usb 5-1: config 4 has no interface number 0 [ 235.747530][ T56] usb 5-1: config 4 has no interface number 1 [ 235.750093][ T56] usb 5-1: config 4 has no interface number 2 [ 235.752601][ T56] usb 5-1: config 4 interface 209 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 235.756141][ T56] usb 5-1: config 4 interface 209 altsetting 3 bulk endpoint 0x9 has invalid maxpacket 64 [ 235.760264][ T56] usb 5-1: config 4 interface 209 altsetting 3 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 235.764330][ T56] usb 5-1: config 4 interface 209 altsetting 3 endpoint 0x2 has an invalid bInterval 130, changing to 11 [ 235.768332][ T56] usb 5-1: config 4 interface 209 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 235.772336][ T56] usb 5-1: config 4 interface 209 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 235.776146][ T56] usb 5-1: config 4 interface 209 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 235.780023][ T56] usb 5-1: config 4 interface 209 altsetting 3 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 235.784456][ T56] usb 5-1: config 4 interface 147 altsetting 120 has a duplicate endpoint with address 0x4, skipping [ 235.788021][ T56] usb 5-1: config 4 interface 147 altsetting 120 endpoint 0xB has invalid maxpacket 2047, setting to 64 [ 235.792476][ T56] usb 5-1: config 4 interface 147 altsetting 120 has an invalid descriptor for endpoint zero, skipping [ 235.800997][ T56] usb 5-1: config 4 interface 250 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 235.804756][ T56] usb 5-1: config 4 interface 250 altsetting 15 has a duplicate endpoint with address 0x7, skipping [ 235.809082][ T56] usb 5-1: config 4 interface 250 altsetting 15 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 235.813094][ T56] usb 5-1: config 4 interface 250 altsetting 15 has a duplicate endpoint with address 0xB, skipping [ 235.817334][ T56] usb 5-1: config 4 interface 250 altsetting 15 has a duplicate endpoint with address 0xA, skipping [ 235.821819][ T56] usb 5-1: config 4 interface 250 altsetting 15 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 235.826809][ T56] usb 5-1: config 4 interface 250 altsetting 15 has a duplicate endpoint with address 0x3, skipping [ 235.831358][ T56] usb 5-1: config 4 interface 250 altsetting 15 has a duplicate endpoint with address 0x8, skipping [ 235.836003][ T56] usb 5-1: config 4 interface 250 altsetting 15 has a duplicate endpoint with address 0xA, skipping [ 235.840777][ T56] usb 5-1: config 4 interface 250 altsetting 15 has a duplicate endpoint with address 0xA, skipping [ 235.845146][ T56] usb 5-1: config 4 interface 209 has no altsetting 0 [ 235.847702][ T56] usb 5-1: config 4 interface 147 has no altsetting 0 [ 235.850565][ T56] usb 5-1: config 4 interface 250 has no altsetting 0 [ 235.855147][ T56] usb 5-1: New USB device found, idVendor=1b3d, idProduct=931b, bcdDevice=3d.e9 [ 235.858835][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.862092][ T56] usb 5-1: Product: а [ 235.864724][ T56] usb 5-1: Manufacturer: 䠊 [ 235.866805][ T56] usb 5-1: SerialNumber: 殎剁䏽䟪餙蚌䅭蟌襠ᑺャ葋恲薗䘽懞荪饄蠢㲘䜿吖鄖벀쏉껇龗ΐ䖥袶썻᭤ಓ奚耎㍮췠㌨㠴욼䋦뷸烹쌓ᰡ썺쾻Δࡥ瀎抵⣮騾㫼 [ 235.878356][T13736] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 235.882761][ T5877] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 235.978495][T13775] CIFS mount error: No usable UNC path provided in device string! [ 235.978495][T13775] [ 235.981893][T13775] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 235.991557][T13775] SELinux: Context system_u:object_r:auditd_log_t:s0 is not valid (left unmapped). [ 235.996806][ T40] audit: type=1400 audit(2000000027.769:1332): avc: denied { relabelto } for pid=13774 comm="syz.3.2318" name="file0" dev="tmpfs" ino=3280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auditd_log_t:s0" [ 236.006685][ T40] audit: type=1400 audit(2000000027.769:1333): avc: denied { associate } for pid=13774 comm="syz.3.2318" name="file0" dev="tmpfs" ino=3280 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:auditd_log_t:s0" [ 236.020957][ T40] audit: type=1400 audit(2000000027.769:1334): avc: denied { getopt } for pid=13774 comm="syz.3.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 236.033706][ T5877] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 236.037214][ T5877] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.040741][ T5877] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.044382][ T5877] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.049098][ T5877] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.052085][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.056889][ T5877] usb 10-1: config 0 descriptor?? [ 236.098912][ T56] ftdi_sio 5-1:4.209: FTDI USB Serial Device converter detected [ 236.104637][ T56] ftdi_sio ttyUSB0: unknown device type: 0x3de9 [ 236.109695][T13783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.118394][T13783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.123345][ T56] ftdi_sio 5-1:4.147: FTDI USB Serial Device converter detected [ 236.126855][ T56] ftdi_sio ttyUSB1: unknown device type: 0x3de9 [ 236.133169][ T56] ftdi_sio 5-1:4.250: FTDI USB Serial Device converter detected [ 236.137867][ T56] ftdi_sio ttyUSB2: unknown device type: 0x3de9 [ 236.143394][ T56] usb 5-1: USB disconnect, device number 28 [ 236.170226][ T56] ftdi_sio 5-1:4.209: device disconnected [ 236.175679][ T56] ftdi_sio 5-1:4.147: device disconnected [ 236.182258][ T56] ftdi_sio 5-1:4.250: device disconnected [ 236.288882][T13799] PKCS8: Unsupported PKCS#8 version [ 236.353646][T13803] (syz.4.2326,13803,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 236.398285][T13808] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2327'. [ 236.464302][ T5877] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 236.479694][ T5877] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 236.507386][T13815] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 236.592663][ T40] audit: type=1400 audit(2000000028.369:1335): avc: denied { getopt } for pid=13816 comm="syz.4.2330" lport=48670 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 236.726064][ T5805] usb 10-1: USB disconnect, device number 15 [ 236.861329][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.871407][ T5089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.876451][ T5089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.881567][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.885499][ T5089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.061609][T13832] ip6_vti0 speed is unknown, defaulting to 1000 [ 237.197585][ T6959] syz_tun (unregistering): left allmulticast mode [ 237.254055][ T5742] Bluetooth: hci1: command 0x0405 tx timeout [ 237.281124][T13832] lo speed is unknown, defaulting to 1000 [ 237.306464][T13843] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 237.311400][ T40] audit: type=1400 audit(2000000029.079:1336): avc: denied { mounton } for pid=13842 comm="syz.5.2335" path="/file0" dev="bpf" ino=57409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 237.312544][T13843] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 237.323446][T13843] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 237.481267][T13868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.489980][T13868] batadv0: mtu less than device minimum [ 237.492218][T13868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.498365][T13868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.503464][T13868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.507375][T13868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.519165][T13868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.523928][T13868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.536332][T13868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.539935][T13868] batman_adv: batadv0: Interface deactivated: dummy0 [ 237.542726][T13868] batman_adv: batadv0: Removing interface: dummy0 [ 237.553980][T13832] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.556413][T13832] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.558974][T13832] bridge_slave_0: entered allmulticast mode [ 237.561793][T13832] bridge_slave_0: entered promiscuous mode [ 237.568870][T13832] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.572083][T13832] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.575597][T13832] bridge_slave_1: entered allmulticast mode [ 237.579820][T13832] bridge_slave_1: entered promiscuous mode [ 237.621237][T13832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.627973][T13832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.653250][T13832] team0: Port device team_slave_0 added [ 237.656853][T13832] team0: Port device team_slave_1 added [ 237.672172][T13832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.674558][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.683130][T13832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.687852][T13832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.690731][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.698885][T13832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.724961][T13832] hsr_slave_0: entered promiscuous mode [ 237.727315][T13832] hsr_slave_1: entered promiscuous mode [ 237.729447][T13832] debugfs: 'hsr0' already exists in 'hsr' [ 237.731276][T13832] Cannot create hsr debugfs directory [ 237.846932][T13832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.851194][T13832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.944435][T13832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.948767][T13832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.080284][T13832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.084759][T13832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.196141][T13832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.200558][T13832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.411960][T13832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.420690][T13832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 238.424504][T13832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.431255][T13832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 238.435693][T13832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.441827][T13832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 238.445778][T13832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.467094][T13832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 238.565225][T13832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.577012][T13832] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.583585][ T6239] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.586451][ T6239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.601977][T13936] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 238.626493][ T6239] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.629282][ T6239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.932575][ T5089] Bluetooth: hci4: command tx timeout [ 238.933548][T13832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.947585][T13997] netlink: 'syz.0.2374': attribute type 22 has an invalid length. [ 239.003433][T13832] veth0_vlan: entered promiscuous mode [ 239.011873][T13832] veth1_vlan: entered promiscuous mode [ 239.030347][T14010] ipvlan1: Caught tx_queue_len zero misconfig [ 239.035775][T13832] veth0_macvtap: entered promiscuous mode [ 239.040171][T13832] veth1_macvtap: entered promiscuous mode [ 239.051194][T13832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.057942][T13832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.066653][ T6239] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.069681][ T6239] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.073649][ T6239] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.076708][ T6239] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.153476][ T6239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.160393][ T6239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.187684][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.190168][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.227190][T14027] overlayfs: overlapping lowerdir path [ 239.296591][T14027] pim6reg: entered allmulticast mode [ 239.326235][T14039] Cannot find del_set index 0 as target [ 239.329000][T14039] use of bytesused == 0 is deprecated and will be removed in the future, [ 239.335267][T14039] use the actual size instead. [ 239.342068][T14039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14039 comm=syz.3.2388 [ 239.343840][ T5089] Bluetooth: hci1: command 0x0405 tx timeout [ 239.347571][T14039] netlink: 'syz.3.2388': attribute type 1 has an invalid length. [ 239.404002][T14043] f2fs: Unknown parameter 'norecovery' [ 239.419030][T14044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.437822][T14044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.506401][T14051] syz.3.2390 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 239.590231][T14063] kAFS: No cell specified [ 239.645929][T14070] __nla_validate_parse: 7 callbacks suppressed [ 239.645941][T14070] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2394'. [ 239.653225][ T5737] Bluetooth: hci3: command 0x2016 tx timeout [ 239.735636][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'. [ 239.746782][T14074] macvlan0: entered promiscuous mode [ 239.751968][T14074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2396'. [ 239.812370][T14079] 9p: Invalid uid '0x00000000ffffffff' [ 239.864247][T14081] xt_nfacct: accounting object `syz0' does not exist [ 239.952858][T14089] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2401'. [ 239.961722][T14091] fuse: Bad value for 'fd' [ 239.965155][T14091] tmpfs: Unknown parameter 'fsname' [ 240.009471][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2405'. [ 240.109912][T14108] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2407'. [ 240.120258][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 240.141451][T14109] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 240.141511][T10185] IPVS: starting estimator thread 0... [ 240.163367][T14109] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2406'. [ 240.180678][ T40] audit: type=1800 audit(2000000031.949:1337): pid=14111 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2407" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 240.263065][T14110] IPVS: using max 30 ests per chain, 72000 per kthread [ 240.364158][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2410'. [ 240.399428][T14124] netlink: 4376 bytes leftover after parsing attributes in process `syz.4.2411'. [ 240.535096][ T40] audit: type=1400 audit(2000000032.309:1338): avc: denied { listen } for pid=14129 comm="syz.4.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 240.543596][ T40] audit: type=1400 audit(2000000032.309:1339): avc: denied { accept } for pid=14129 comm="syz.4.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 240.623161][T14134] fuse: fd is not a fuse device [ 240.691396][T14139] program syz.0.2418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.715851][T14143] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 240.722383][T14143] overlayfs: failed to set xattr on upper [ 240.724993][T14143] overlayfs: ...falling back to redirect_dir=nofollow. [ 240.727945][T14143] overlayfs: ...falling back to index=off. [ 240.730536][T14143] overlayfs: ...falling back to uuid=null. [ 240.733248][T14143] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 240.737264][T14143] overlayfs: maximum fs stacking depth exceeded [ 240.833848][ T40] audit: type=1800 audit(2000000032.609:1340): pid=14151 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2422" name="nullb0" dev="tmpfs" ino=2816 res=0 errno=0 [ 240.921339][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880569c4800: rx timeout, send abort [ 240.929449][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880569c4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 240.938424][ T40] audit: type=1400 audit(2000000032.709:1341): avc: denied { read } for pid=5119 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 240.952554][ T40] audit: type=1400 audit(2000000032.709:1342): avc: denied { search } for pid=5119 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.961797][ T40] audit: type=1400 audit(2000000032.709:1343): avc: denied { search } for pid=5119 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.971116][ T40] audit: type=1400 audit(2000000032.709:1344): avc: denied { add_name } for pid=5119 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.983451][ T40] audit: type=1400 audit(2000000032.709:1345): avc: denied { create } for pid=5119 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 240.990558][ T40] audit: type=1400 audit(2000000032.709:1346): avc: denied { append open } for pid=5119 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 241.013072][ T5737] Bluetooth: hci4: command tx timeout [ 241.498214][T14175] nbd: socks must be embedded in a SOCK_ITEM attr [ 241.501074][T14173] gretap0: entered promiscuous mode [ 241.506191][T14174] 0{X: renamed from gretap0 [ 241.510339][T14174] 0{X: left promiscuous mode [ 241.512335][T14174] 0{X: entered allmulticast mode [ 241.515895][T14174] net_ratelimit: 55 callbacks suppressed [ 241.515905][T14174] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 241.575603][ T24] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 241.637093][T14182] tmpfs: Bad value for 'mpol' [ 241.692648][T14189] 9pnet_fd: p9_fd_create_tcp (14189): problem binding to privport [ 241.722650][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 241.726299][ T24] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 241.729829][ T24] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 241.732594][ T5737] Bluetooth: hci3: command 0x2016 tx timeout [ 241.736885][ T24] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.742305][ T24] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 241.745592][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.754866][ T24] usbtmc 10-1:16.0: bulk endpoints not found [ 241.832893][T14192] netlink: 'syz.0.2436': attribute type 1 has an invalid length. [ 242.496392][T14208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=14208 comm=syz.4.2440 [ 242.799212][T14238] netlink: 'syz.3.2448': attribute type 1 has an invalid length. [ 243.092600][ T5742] Bluetooth: hci4: command tx timeout [ 244.122081][T14256] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 244.161551][T14258] netlink: 'syz.4.2455': attribute type 1 has an invalid length. [ 244.161570][T14259] netlink: 'syz.4.2455': attribute type 1 has an invalid length. [ 244.179620][T14258] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.215340][T14258] bond7: (slave veth7): Enslaving as an active interface with a down link [ 244.228151][T14259] bond7: (slave dummy0): making interface the new active one [ 244.231240][T14259] dummy0: entered promiscuous mode [ 244.233910][T14259] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 244.241236][T14259] bond7: (slave dummy0): Releasing active interface [ 244.243917][T14259] dummy0 (unregistering): left promiscuous mode [ 244.307779][T14267] openvswitch: netlink: Actions may not be safe on all matching packets [ 244.310892][T14267] openvswitch: netlink: Actions may not be safe on all matching packets [ 244.400462][T14272] pim6reg1: entered promiscuous mode [ 244.402838][T14272] pim6reg1: entered allmulticast mode [ 244.421867][T14273] syz.3.2459: attempt to access beyond end of device [ 244.421867][T14273] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 244.430470][T14273] gfs2: error -5 reading superblock [ 244.503997][T10185] usb 10-1: USB disconnect, device number 16 [ 244.655052][T14280] netlink: 'syz.3.2461': attribute type 21 has an invalid length. [ 244.657822][T14280] __nla_validate_parse: 15 callbacks suppressed [ 244.657831][T14280] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2461'. [ 244.668571][T14280] input: syz0 as /devices/virtual/input/input26 [ 244.757226][T14288] SELinux: syz.3.2464 (14288) set checkreqprot to 1. This is no longer supported. [ 244.868241][T14304] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2468'. [ 245.063186][ T24] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 245.176483][ T5742] Bluetooth: hci4: command tx timeout [ 245.222861][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 245.227151][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 245.231506][ T24] usb 8-1: config 7 has an invalid interface number: 187 but max is 0 [ 245.235143][ T24] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 245.239453][ T24] usb 8-1: config 7 has no interface number 0 [ 245.242068][ T24] usb 8-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.247513][ T24] usb 8-1: config 7 interface 187 has no altsetting 0 [ 245.252324][ T24] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 245.255740][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.258327][ T24] usb 8-1: Product: syz [ 245.259849][ T24] usb 8-1: Manufacturer: syz [ 245.261343][ T24] usb 8-1: SerialNumber: syz [ 245.472832][ T24] usb 8-1: Unknown endpoint type found, address 0x07 [ 245.477432][ T24] usb 8-1: Not enough endpoints found in device, aborting! [ 245.498432][T14334] batman_adv: batadv0: Interface deactivated: dummy0 [ 245.500697][T14334] batman_adv: batadv0: Removing interface: dummy0 [ 245.509187][T14334] bridge_slave_0: left allmulticast mode [ 245.511190][T14334] bridge_slave_0: left promiscuous mode [ 245.513408][T14334] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.520533][T14334] bridge_slave_1: left allmulticast mode [ 245.523075][T14334] bridge_slave_1: left promiscuous mode [ 245.525658][T14334] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.535840][T14334] bond0: (slave bond_slave_0): Releasing backup interface [ 245.542363][T14334] bond0: (slave bond_slave_1): Releasing backup interface [ 245.557952][T14334] team0: Port device team_slave_0 removed [ 245.567499][T14334] team0: Port device team_slave_1 removed [ 245.570187][T14334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.573786][T14334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.578374][T14334] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 245.593626][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2480'. [ 245.626080][T14339] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2481'. [ 245.679603][T14297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2466'. [ 245.693379][T14297] openvswitch: netlink: IP tunnel dst address not specified [ 245.704265][ T10] usb 8-1: USB disconnect, device number 29 [ 245.722385][T14350] loop2: detected capacity change from 0 to 7 [ 245.725319][T14350] loop2: [ 245.726622][T14350] loop2: partition table partially beyond EOD, truncated [ 245.795691][T14355] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 246.062146][T14370] netlink: 'syz.0.2490': attribute type 29 has an invalid length. [ 246.067472][T14370] netlink: 'syz.0.2490': attribute type 29 has an invalid length. [ 246.072505][T14370] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14370 comm=syz.0.2490 [ 246.205335][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2495'. [ 246.232777][T14387] veth0_to_bond: entered allmulticast mode [ 246.362664][T14401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2501'. [ 246.406962][T14400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2502'. [ 246.420981][T14400] ip6_vti0 speed is unknown, defaulting to 1000 [ 246.502536][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 246.662753][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 246.667653][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.673585][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 246.674220][T14400] lo speed is unknown, defaulting to 1000 [ 246.677569][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 246.682973][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 246.687424][ T10] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 246.690414][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.703466][ T10] hub 5-1:1.0: bad descriptor, ignoring hub [ 246.707786][ T10] hub 5-1:1.0: probe with driver hub failed with error -5 [ 246.716481][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 246.722532][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 246.727303][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 246.730042][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 246.783916][T14404] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2503'. [ 246.789150][T14404] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2503'. [ 247.282996][ T10] usb 5-1: USB disconnect, device number 29 [ 247.754737][T14425] ip6_vti0 speed is unknown, defaulting to 1000 [ 247.792887][T14428] xt_hashlimit: size too large, truncated to 1048576 [ 247.842389][T14430] alle: renamed from bridge_slave_0 (while UP) [ 247.882390][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 247.885304][ T40] audit: type=1400 audit(2000000039.649:1351): avc: denied { node_bind } for pid=14431 comm="syz.0.2511" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 247.946302][T14425] lo speed is unknown, defaulting to 1000 [ 247.996765][T14434] vlan2: entered allmulticast mode [ 247.999058][T14434] bond0: entered allmulticast mode [ 248.129540][ T40] audit: type=1400 audit(2000000039.909:1352): avc: denied { accept } for pid=14440 comm="syz.3.2514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 248.137695][T14441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14441 comm=syz.3.2514 [ 248.154890][T14441] netlink: 'syz.3.2514': attribute type 7 has an invalid length. [ 248.158001][T14441] netlink: 'syz.3.2514': attribute type 8 has an invalid length. [ 248.160673][T14441] netlink: 'syz.3.2514': attribute type 7 has an invalid length. [ 249.133861][ T40] audit: type=1400 audit(2000000040.909:1353): avc: denied { append } for pid=14489 comm="syz.0.2530" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 249.319044][ T40] audit: type=1400 audit(2000000041.089:1354): avc: denied { ioctl } for pid=14505 comm="syz.0.2534" path="socket:[57210]" dev="sockfs" ino=57210 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 249.533590][T14522] GUP no longer grows the stack in syz.0.2540 (14522): 200000007000-20000000a000 (200000004000) [ 249.538506][T14522] CPU: 2 UID: 0 PID: 14522 Comm: syz.0.2540 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.538534][T14522] Tainted: [L]=SOFTLOCKUP [ 249.538541][T14522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.538565][T14522] Call Trace: [ 249.538573][T14522] [ 249.538582][T14522] dump_stack_lvl+0x100/0x190 [ 249.538604][T14522] gup_vma_lookup.cold+0x83/0x96 [ 249.538621][T14522] __get_user_pages+0x241/0x32a0 [ 249.538639][T14522] ? xdp_umem_create+0x65e/0x11f0 [ 249.538668][T14522] ? xsk_setsockopt+0x7d8/0xab0 [ 249.538682][T14522] ? do_sock_setsockopt+0xf3/0x1d0 [ 249.538692][T14522] ? __pfx___get_user_pages+0x10/0x10 [ 249.538703][T14522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.538718][T14522] __gup_longterm_locked+0x279/0x16f0 [ 249.538731][T14522] ? __lock_acquire+0x440/0x2630 [ 249.538748][T14522] ? __pfx___gup_longterm_locked+0x10/0x10 [ 249.538767][T14522] pin_user_pages+0x13c/0x160 [ 249.538780][T14522] ? __pfx_pin_user_pages+0x10/0x10 [ 249.538793][T14522] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 249.538810][T14522] ? security_capable+0x70/0x260 [ 249.538823][T14522] xdp_umem_create+0x739/0x11f0 [ 249.538844][T14522] xsk_setsockopt+0x7d8/0xab0 [ 249.538859][T14522] ? __pfx_xsk_setsockopt+0x10/0x10 [ 249.538875][T14522] ? find_held_lock+0x2b/0x80 [ 249.538884][T14522] ? __fget_files+0x215/0x3d0 [ 249.538899][T14522] ? selinux_socket_setsockopt+0x6a/0x80 [ 249.538912][T14522] ? __pfx_xsk_setsockopt+0x10/0x10 [ 249.538928][T14522] do_sock_setsockopt+0xf3/0x1d0 [ 249.538940][T14522] __sys_setsockopt+0x195/0x220 [ 249.538957][T14522] __x64_sys_setsockopt+0xbd/0x160 [ 249.538971][T14522] ? do_syscall_64+0x90/0xf80 [ 249.538982][T14522] ? lockdep_hardirqs_on+0x78/0x100 [ 249.538994][T14522] do_syscall_64+0x10b/0xf80 [ 249.539004][T14522] ? clear_bhb_loop+0x40/0x90 [ 249.539017][T14522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.539028][T14522] RIP: 0033:0x7efeaef9cdd9 [ 249.539038][T14522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.539048][T14522] RSP: 002b:00007efead1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 249.539059][T14522] RAX: ffffffffffffffda RBX: 00007efeaf215fa0 RCX: 00007efeaef9cdd9 [ 249.539065][T14522] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000008 [ 249.539070][T14522] RBP: 00007efeaf032d69 R08: 0000000000000020 R09: 0000000000000000 [ 249.539076][T14522] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 249.539082][T14522] R13: 00007efeaf216038 R14: 00007efeaf215fa0 R15: 00007ffd459207a8 [ 249.539097][T14522] [ 249.709585][ T40] audit: type=1400 audit(2000000041.479:1355): avc: denied { listen } for pid=14533 comm="syz.0.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.725959][ T40] audit: type=1400 audit(2000000041.479:1356): avc: denied { accept } for pid=14533 comm="syz.0.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.726550][T14538] __nla_validate_parse: 9 callbacks suppressed [ 249.726563][T14538] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2544'. [ 249.877311][T14561] netlink: 'syz.0.2549': attribute type 1 has an invalid length. [ 249.892584][T14555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2550'. [ 249.914439][T14551] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2548'. [ 249.924055][T14551] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 249.945993][T14567] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2551'. [ 249.949550][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 249.953582][T14568] fuse: fd is not a fuse device [ 250.075095][T14579] fuse: fd is not a fuse device [ 250.387403][T14592] xt_CT: No such helper "pptp" [ 250.397891][T14592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2559'. [ 250.402523][T14592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2559'. [ 250.512041][T14595] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.519962][T14595] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.606749][T14595] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.611172][T14595] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.667447][T14595] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.670874][T14595] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.728622][T14595] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.732632][T14595] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.739195][T14603] xt_connbytes: Forcing CT accounting to be enabled [ 250.741435][T14603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.784151][ T40] audit: type=1400 audit(2000000042.559:1357): avc: denied { create } for pid=14606 comm="syz.3.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 250.790727][ T40] audit: type=1400 audit(2000000042.559:1358): avc: denied { setopt } for pid=14606 comm="syz.3.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 250.797843][T14611] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2564'. [ 250.846918][ T6239] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.849930][ T6239] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.869666][ T6239] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.872385][ T6239] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.885239][ T6239] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.890154][ T6239] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.898953][ T6239] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.901996][ T6239] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.934444][T14630] rdma_op ffff888043ad01f0 conn xmit_rdma 0000000000000000 [ 250.960342][ T40] audit: type=1400 audit(2000000042.729:1359): avc: denied { relabelfrom } for pid=14631 comm="syz.0.2571" name="" dev="pipefs" ino=60690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 250.960653][T14632] SELinux: Context system_u:object_r:devtty_t:s0 is not valid (left unmapped). [ 250.978175][ T40] audit: type=1400 audit(2000000042.749:1360): avc: denied { relabelto } for pid=14631 comm="syz.0.2571" name="" dev="pipefs" ino=60690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:devtty_t:s0" [ 251.120099][T14637] netlink: 'syz.3.2569': attribute type 21 has an invalid length. [ 251.155495][T14640] netlink: 'syz.0.2572': attribute type 7 has an invalid length. [ 251.638549][T14672] Bluetooth: hci0: load_link_keys: too big key_count value 37305 [ 251.727048][T14680] fuse: Unknown parameter 'nroup_Ɠ' [ 251.804594][T14685] macvtap1: entered promiscuous mode [ 251.806515][T14685] macvtap1: entered allmulticast mode [ 251.808544][T14685] batadv_slave_0: entered promiscuous mode [ 251.810801][T14685] batadv_slave_0: entered allmulticast mode [ 251.814475][T14685] team0: Device macvtap1 failed to register rx_handler [ 251.821140][T14685] batadv_slave_0: left allmulticast mode [ 251.823591][T14685] batadv_slave_0: left promiscuous mode [ 251.872936][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2585'. [ 251.876882][T14689] openvswitch: netlink: Flow actions attr not present in new flow. [ 251.979519][T14700] netlink: 'syz.4.2589': attribute type 1 has an invalid length. [ 251.999707][T14700] 8021q: adding VLAN 0 to HW filter on device bond8 [ 252.010140][T14700] bond8: (slave geneve2): making interface the new active one [ 252.014072][T14700] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 252.201018][T14711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2592'. [ 252.420053][T14719] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 252.484356][T14731] fuse: fd is not a fuse device [ 252.486395][T14733] fuse: fd is not a fuse device [ 252.509118][T14735] 0: renamed from veth1_virt_wifi (while UP) [ 252.513660][T14735] 0: entered allmulticast mode [ 252.515805][T14735] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 252.553186][T14737] tipc: Enabling of bearer rejected, media not registered [ 252.556672][T14737] netlink: 'syz.0.2600': attribute type 19 has an invalid length. [ 252.560077][T14737] netlink: 'syz.0.2600': attribute type 19 has an invalid length. [ 252.875190][T14765] ip6_vti0 speed is unknown, defaulting to 1000 [ 253.076945][T14765] lo speed is unknown, defaulting to 1000 [ 253.163869][T14786] fuse: fd is not a fuse device [ 253.166995][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 253.167005][ T40] audit: type=1400 audit(2000000044.939:1371): avc: denied { mount } for pid=14785 comm="syz.4.2612" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 253.231928][T14792] netlink: 'syz.4.2615': attribute type 1 has an invalid length. [ 253.257676][T14792] 8021q: adding VLAN 0 to HW filter on device bond9 [ 253.281370][T14792] bond9: entered allmulticast mode [ 253.302210][T14792] bond9: (slave ip6gretap0): making interface the new active one [ 253.305587][T14792] ip6gretap0: entered allmulticast mode [ 253.308473][T14792] bond9: (slave ip6gretap0): Enslaving as an active interface with an up link [ 253.319954][ T40] audit: type=1400 audit(2000000045.089:1372): avc: denied { map } for pid=14797 comm="syz.3.2617" path="/dev/usbmon4" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 253.515979][T14819] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65534 sclass=netlink_tcpdiag_socket pid=14819 comm=syz.4.2624 [ 253.561247][T14824] netlink: 'syz.4.2625': attribute type 21 has an invalid length. [ 253.567297][T14824] netlink: 'syz.4.2625': attribute type 21 has an invalid length. [ 253.574374][T14826] netlink: 'syz.4.2625': attribute type 21 has an invalid length. [ 253.763130][T14858] bond10: Invalid ad_actor_system MAC address. [ 253.765264][T14858] bond10: option ad_actor_system: invalid value (27571) [ 253.768557][T14858] bond10 (unregistering): Released all slaves [ 253.836453][T14847] kvm: kvm [14846]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100000000 [ 253.840718][T14847] kvm: kvm [14846]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 254.155073][T14868] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 254.155089][T14867] nfs: Unknown parameter './file0' [ 254.296977][ T40] audit: type=1400 audit(2000000046.069:1373): avc: denied { setopt } for pid=14878 comm="syz.4.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 254.417300][T10185] libceph: connect (1)[c::]:6789 error -101 [ 254.422346][T10185] libceph: mon0 (1)[c::]:6789 connect error [ 254.487987][ T40] audit: type=1326 audit(2000000046.259:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14891 comm="syz.3.2641" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff624f9cdd9 code=0x40000 [ 254.503969][T14884] ceph: No mds server is up or the cluster is laggy [ 254.635859][T14901] FAULT_INJECTION: forcing a failure. [ 254.635859][T14901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.641656][T14901] CPU: 2 UID: 0 PID: 14901 Comm: syz.0.2645 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.641689][T14901] Tainted: [L]=SOFTLOCKUP [ 254.641694][T14901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 254.641703][T14901] Call Trace: [ 254.641709][T14901] [ 254.641716][T14901] dump_stack_lvl+0x100/0x190 [ 254.641742][T14901] should_fail_ex.cold+0x5/0xa [ 254.641765][T14901] _copy_from_user+0x2e/0xd0 [ 254.641791][T14901] copy_msghdr_from_user+0x9f/0x4f0 [ 254.641814][T14901] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 254.641845][T14901] ___sys_sendmsg+0x106/0x1e0 [ 254.641868][T14901] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.641914][T14901] __sys_sendmsg+0x170/0x220 [ 254.641941][T14901] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.641975][T14901] ? rcu_is_watching+0x12/0xc0 [ 254.642005][T14901] do_syscall_64+0x10b/0xf80 [ 254.642023][T14901] ? clear_bhb_loop+0x40/0x90 [ 254.642046][T14901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.642063][T14901] RIP: 0033:0x7efeaef9cdd9 [ 254.642077][T14901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.642092][T14901] RSP: 002b:00007efead1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.642109][T14901] RAX: ffffffffffffffda RBX: 00007efeaf215fa0 RCX: 00007efeaef9cdd9 [ 254.642119][T14901] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 254.642130][T14901] RBP: 00007efead1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.642140][T14901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.642150][T14901] R13: 00007efeaf216038 R14: 00007efeaf215fa0 R15: 00007ffd459207a8 [ 254.642173][T14901] [ 254.847096][ T40] audit: type=1400 audit(2000000046.619:1375): avc: denied { map } for pid=14906 comm="syz.5.2648" path="socket:[59953]" dev="sockfs" ino=59953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 254.896675][T14916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=14916 comm=syz.0.2650 [ 255.078730][T14916] trusted_key: encrypted_key: insufficient parameters specified [ 255.257247][T14933] devpts: Bad value for 'max' [ 255.300421][T14938] FAULT_INJECTION: forcing a failure. [ 255.300421][T14938] name failslab, interval 1, probability 0, space 0, times 0 [ 255.309389][T14938] CPU: 3 UID: 0 PID: 14938 Comm: syz.3.2655 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.309407][T14938] Tainted: [L]=SOFTLOCKUP [ 255.309411][T14938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.309417][T14938] Call Trace: [ 255.309421][T14938] [ 255.309426][T14938] dump_stack_lvl+0x100/0x190 [ 255.309443][T14938] should_fail_ex.cold+0x5/0xa [ 255.309459][T14938] should_failslab+0xc2/0x120 [ 255.309471][T14938] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 255.309488][T14938] ? __alloc_skb+0x140/0x710 [ 255.309515][T14938] ? __alloc_skb+0x5b7/0x710 [ 255.309531][T14938] __alloc_skb+0x140/0x710 [ 255.309544][T14938] ? __alloc_skb+0x5b7/0x710 [ 255.309558][T14938] ? __pfx___alloc_skb+0x10/0x10 [ 255.309576][T14938] netlink_alloc_large_skb+0x69/0x150 [ 255.309591][T14938] netlink_sendmsg+0x680/0xda0 [ 255.309605][T14938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.309616][T14938] ? pti_set_user_pgtbl+0x50/0x50 [ 255.309636][T14938] ____sys_sendmsg+0x9e1/0xb70 [ 255.309647][T14938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.309660][T14938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.309677][T14938] ___sys_sendmsg+0x190/0x1e0 [ 255.309690][T14938] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.309718][T14938] __sys_sendmsg+0x170/0x220 [ 255.309734][T14938] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.309755][T14938] ? rcu_is_watching+0x12/0xc0 [ 255.309773][T14938] do_syscall_64+0x10b/0xf80 [ 255.309784][T14938] ? clear_bhb_loop+0x40/0x90 [ 255.309797][T14938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.309808][T14938] RIP: 0033:0x7ff624f9cdd9 [ 255.309817][T14938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.309827][T14938] RSP: 002b:00007ff625db4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.309838][T14938] RAX: ffffffffffffffda RBX: 00007ff625215fa0 RCX: 00007ff624f9cdd9 [ 255.309844][T14938] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 255.309850][T14938] RBP: 00007ff625db4090 R08: 0000000000000000 R09: 0000000000000000 [ 255.309856][T14938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.309862][T14938] R13: 00007ff625216038 R14: 00007ff625215fa0 R15: 00007ffd0d48e658 [ 255.309875][T14938] [ 255.447318][T14946] Device name not specified. [ 255.447318][T14946] [ 255.509314][ T40] audit: type=1400 audit(2000000047.279:1376): avc: denied { read } for pid=14956 comm="syz.3.2666" path="socket:[59980]" dev="sockfs" ino=59980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 255.620823][T14967] overlayfs: failed to resolve './file0:/': -2 [ 255.626743][ T40] audit: type=1400 audit(2000000047.399:1377): avc: denied { search } for pid=14966 comm="syz.0.2668" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 255.756438][T14978] xt_cgroup: xt_cgroup: no path or classid specified [ 256.440943][T15014] __nla_validate_parse: 15 callbacks suppressed [ 256.440961][T15014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2682'. [ 256.489666][T15020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2683'. [ 256.506406][T15014] bond1: entered promiscuous mode [ 256.508220][T15014] bond1: entered allmulticast mode [ 256.681610][T15033] fuse: fd is not a fuse device [ 256.688458][T15027] bond10: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 256.695333][T15027] bond10 (unregistering): Released all slaves [ 256.737060][T15032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15032 comm=syz.3.2687 [ 256.998849][T15048] overlayfs: failed to clone upperpath [ 257.001981][T15052] omfs: Invalid superblock (0) [ 257.258242][T15072] fuse: Bad value for 'fd' [ 257.885471][T15089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15089 comm=syz.5.2706 [ 258.118446][T15105] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2710'. [ 258.153251][T15108] binder: 15107:15108 ioctl 4018620d 0 returned -22 [ 258.232768][T15120] FAULT_INJECTION: forcing a failure. [ 258.232768][T15120] name failslab, interval 1, probability 0, space 0, times 0 [ 258.236883][T15120] CPU: 0 UID: 0 PID: 15120 Comm: syz.3.2715 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.236901][T15120] Tainted: [L]=SOFTLOCKUP [ 258.236904][T15120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.236910][T15120] Call Trace: [ 258.236914][T15120] [ 258.236919][T15120] dump_stack_lvl+0x100/0x190 [ 258.236936][T15120] should_fail_ex.cold+0x5/0xa [ 258.236952][T15120] should_failslab+0xc2/0x120 [ 258.236964][T15120] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 258.236981][T15120] ? __alloc_skb+0x140/0x710 [ 258.236995][T15120] ? __alloc_skb+0x5b7/0x710 [ 258.237011][T15120] __alloc_skb+0x140/0x710 [ 258.237024][T15120] ? __alloc_skb+0x5b7/0x710 [ 258.237038][T15120] ? __pfx___alloc_skb+0x10/0x10 [ 258.237056][T15120] netlink_ack+0x117/0xb80 [ 258.237072][T15120] netlink_rcv_skb+0x333/0x420 [ 258.237084][T15120] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.237101][T15120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.237118][T15120] ? netlink_deliver_tap+0x1ae/0xcc0 [ 258.237139][T15120] netlink_unicast+0x585/0x850 [ 258.237160][T15120] ? __pfx_netlink_unicast+0x10/0x10 [ 258.237176][T15120] netlink_sendmsg+0x8b0/0xda0 [ 258.237190][T15120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.237202][T15120] ? pti_set_user_pgtbl+0x50/0x50 [ 258.237221][T15120] ____sys_sendmsg+0x9e1/0xb70 [ 258.237232][T15120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.237245][T15120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.237263][T15120] ___sys_sendmsg+0x190/0x1e0 [ 258.237276][T15120] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.237303][T15120] __sys_sendmsg+0x170/0x220 [ 258.237323][T15120] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.237343][T15120] ? rcu_is_watching+0x12/0xc0 [ 258.237361][T15120] do_syscall_64+0x10b/0xf80 [ 258.237374][T15120] ? clear_bhb_loop+0x40/0x90 [ 258.237387][T15120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.237397][T15120] RIP: 0033:0x7ff624f9cdd9 [ 258.237407][T15120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.237417][T15120] RSP: 002b:00007ff625db4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.237433][T15120] RAX: ffffffffffffffda RBX: 00007ff625215fa0 RCX: 00007ff624f9cdd9 [ 258.237443][T15120] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 258.237453][T15120] RBP: 00007ff625db4090 R08: 0000000000000000 R09: 0000000000000000 [ 258.237460][T15120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.237466][T15120] R13: 00007ff625216038 R14: 00007ff625215fa0 R15: 00007ffd0d48e658 [ 258.237494][T15120] [ 258.274984][ T40] audit: type=1400 audit(2000000050.049:1378): avc: denied { listen } for pid=15123 comm="syz.0.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 258.456727][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.475096][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.479506][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.483534][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.486123][ T5737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.650065][ T7023] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.706942][T15160] QAT: failed to copy from user. [ 258.768654][ T7023] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.812826][ T40] audit: type=1400 audit(2000000050.589:1379): avc: denied { append } for pid=15173 comm="syz.0.2730" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 258.828954][T15134] ip6_vti0 speed is unknown, defaulting to 1000 [ 258.866030][ T7023] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.885516][T15183] fuse: Bad value for 'fd' [ 258.889542][T15183] fuse: Bad value for 'fd' [ 258.962039][T15174] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.965520][T15174] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 258.978414][T15174] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 259.004726][ T7023] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.016709][T15174] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.022381][T15174] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 259.046323][T15174] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 259.051507][T15174] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 259.055445][T15174] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 259.060419][T15134] lo speed is unknown, defaulting to 1000 [ 259.060805][T15174] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 259.065790][T15174] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.068903][T15174] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 259.075358][T15174] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 259.269034][ T7023] bridge_slave_1: left promiscuous mode [ 259.271733][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.278634][ T7023] bridge_slave_0: left allmulticast mode [ 259.280923][ T7023] bridge_slave_0: left promiscuous mode [ 259.286623][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.295243][ T7023] bond2: left allmulticast mode [ 259.296904][ T7023] bond2: left promiscuous mode [ 259.298548][ T7023] bridge1: port 2(bond2) entered disabled state [ 259.307586][ T7023] erspan0: left allmulticast mode [ 259.309295][ T7023] erspan0: left promiscuous mode [ 259.311134][ T7023] bridge1: port 1(erspan0) entered disabled state [ 259.591554][ T7023] bond9 (unregistering): (slave ip6gretap0): Releasing active interface [ 259.595195][ T7023] ip6gretap0 (unregistering): left allmulticast mode [ 259.708217][ T7023] bond8 (unregistering): (slave geneve2): Releasing active interface [ 259.732853][ T5833] SELinux: failure in sel_netif_sid_slow(), invalid network interface (79) [ 260.544694][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.547403][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.932571][ T5737] Bluetooth: hci1: command 0x0405 tx timeout [ 261.092614][ T5742] Bluetooth: hci4: command 0x0c1a tx timeout [ 261.097402][ T5737] Bluetooth: hci2: command 0x041b tx timeout [ 263.022583][ T5737] Bluetooth: hci1: command 0x0405 tx timeout [ 263.172697][ T5737] Bluetooth: hci2: command 0x041b tx timeout [ 263.172722][ T5742] Bluetooth: hci4: command 0x0c1a tx timeout [ 263.611070][ T59] smc: removing ib device sy1 [ 263.614684][ T7023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.619432][ T7023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.624336][ T7023] bond0 (unregistering): Released all slaves [ 263.629321][ T7023] bond1 (unregistering): Released all slaves [ 263.636790][ T7023] bond2 (unregistering): Released all slaves [ 263.644114][ T7023] bond3 (unregistering): Released all slaves [ 263.651513][ T7023] bond4 (unregistering): Released all slaves [ 263.661025][ T7023] bond5 (unregistering): Released all slaves [ 263.678506][ T7023] bond6 (unregistering): Released all slaves [ 263.688357][ T7023] bond7 (unregistering): (slave veth7): Releasing active interface [ 263.692160][ T7023] bond7 (unregistering): Released all slaves [ 263.703140][ T7023] bond8 (unregistering): Released all slaves [ 263.710378][ T7023] bond9 (unregistering): Released all slaves [ 263.916847][ T59] smbdirect: ib_dev[sy1] removed [ 263.949556][T15134] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.952753][T15134] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.955850][T15134] bridge_slave_0: entered allmulticast mode [ 263.960569][T15134] bridge_slave_0: entered promiscuous mode [ 263.965962][T15134] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.968982][T15134] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.972008][T15134] bridge_slave_1: entered allmulticast mode [ 263.985802][T15134] bridge_slave_1: entered promiscuous mode [ 264.056554][T15134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.064517][T15134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.097789][T15134] team0: Port device team_slave_0 added [ 264.108812][T15134] team0: Port device team_slave_1 added [ 264.142542][ T56] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 264.163600][T15134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.166016][T15134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.176335][T15134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.183529][T15134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.185810][T15134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.199551][T15134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.219529][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.243300][ T5737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.246458][ T5737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.250864][ T5737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.257519][ T5440] 8021q: adding VLAN 0 to HW filter on device eth2 [ 264.257613][ T5737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.305220][ T56] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 264.310789][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.326377][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.332195][ T56] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 264.339745][ T56] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 264.345169][ T56] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 264.348820][ T56] usb 8-1: Manufacturer: syz [ 264.376692][T15134] hsr_slave_0: entered promiscuous mode [ 264.379166][ T56] usb 8-1: config 0 descriptor?? [ 264.383809][T15134] hsr_slave_1: entered promiscuous mode [ 264.387105][T15134] debugfs: 'hsr0' already exists in 'hsr' [ 264.389415][T15134] Cannot create hsr debugfs directory [ 264.610547][T15236] tipc: Enabling of bearer rejected, failed to enable media [ 264.724780][ T5440] 8021q: adding VLAN 0 to HW filter on device eth3 [ 264.814526][ T56] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 264.822748][T15223] ip6_vti0 speed is unknown, defaulting to 1000 [ 264.846974][ T56] appleir 0003:05AC:8243.000B: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 265.092561][ T5742] Bluetooth: hci1: command 0x0405 tx timeout [ 265.227702][T15223] lo speed is unknown, defaulting to 1000 [ 265.252649][ T5742] Bluetooth: hci2: command 0x041b tx timeout [ 265.262942][ T5742] Bluetooth: hci4: command 0x0c1a tx timeout [ 265.289166][ T5722] usb 8-1: USB disconnect, device number 30 [ 265.598356][ T40] audit: type=1400 audit(2000000057.369:1380): avc: denied { link } for pid=15275 comm="syz.0.2747" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 265.697752][ T7023] : left promiscuous mode [ 265.828091][T15134] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.853151][T15134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.895938][T15134] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.909384][T15134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.962722][T15134] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.967005][T15134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.988392][T15134] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.994326][T15134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 266.185089][T15223] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.188683][T15223] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.191895][T15223] bridge_slave_0: entered allmulticast mode [ 266.197593][T15223] bridge_slave_0: entered promiscuous mode [ 266.201640][T15317] syzkaller0: entered promiscuous mode [ 266.204581][T15317] syzkaller0: entered allmulticast mode [ 266.211623][T15223] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.216149][T15223] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.219197][T15223] bridge_slave_1: entered allmulticast mode [ 266.223102][T15223] bridge_slave_1: entered promiscuous mode [ 266.258662][T15327] FAULT_INJECTION: forcing a failure. [ 266.258662][T15327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.263693][T15327] CPU: 1 UID: 0 PID: 15327 Comm: syz.3.2755 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.263713][T15327] Tainted: [L]=SOFTLOCKUP [ 266.263717][T15327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.263723][T15327] Call Trace: [ 266.263727][T15327] [ 266.263732][T15327] dump_stack_lvl+0x100/0x190 [ 266.263750][T15327] should_fail_ex.cold+0x5/0xa [ 266.263766][T15327] _copy_to_user+0x32/0xd0 [ 266.263783][T15327] simple_read_from_buffer+0xcb/0x170 [ 266.263797][T15327] proc_fail_nth_read+0x1af/0x230 [ 266.263810][T15327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.263822][T15327] ? rw_verify_area+0xce/0x6d0 [ 266.263839][T15327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.263850][T15327] vfs_read+0x1e4/0xb30 [ 266.263863][T15327] ? __pfx_vfs_read+0x10/0x10 [ 266.263874][T15327] ? __fget_files+0x215/0x3d0 [ 266.263890][T15327] ? __fget_files+0x21f/0x3d0 [ 266.263907][T15327] ksys_read+0x12a/0x250 [ 266.263918][T15327] ? __pfx_ksys_read+0x10/0x10 [ 266.263930][T15327] ? rcu_is_watching+0x12/0xc0 [ 266.263949][T15327] do_syscall_64+0x10b/0xf80 [ 266.263961][T15327] ? clear_bhb_loop+0x40/0x90 [ 266.263974][T15327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.263985][T15327] RIP: 0033:0x7ff624f5d60e [ 266.263994][T15327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 266.264004][T15327] RSP: 002b:00007ff625db3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.264016][T15327] RAX: ffffffffffffffda RBX: 00007ff625db46c0 RCX: 00007ff624f5d60e [ 266.264023][T15327] RDX: 000000000000000f RSI: 00007ff625db40a0 RDI: 0000000000000004 [ 266.264029][T15327] RBP: 00007ff625db4090 R08: 0000000000000000 R09: 0000000000000000 [ 266.264036][T15327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.264042][T15327] R13: 00007ff625216038 R14: 00007ff625215fa0 R15: 00007ffd0d48e658 [ 266.264056][T15327] [ 266.358407][T15223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.382552][ T5742] Bluetooth: hci0: command tx timeout [ 266.401313][T15223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.426400][T15223] team0: Port device team_slave_0 added [ 266.430048][T15223] team0: Port device team_slave_1 added [ 266.468594][T15223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.470756][T15223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.479125][T15223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.510724][T15223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.513375][T15223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.521459][T15223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.536403][T15134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.561062][T15223] hsr_slave_0: entered promiscuous mode [ 266.563656][T15223] hsr_slave_1: entered promiscuous mode [ 266.566057][T15223] debugfs: 'hsr0' already exists in 'hsr' [ 266.568076][T15223] Cannot create hsr debugfs directory [ 266.590340][T15134] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.605602][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.607942][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.658322][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.661813][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.785108][ T5843] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 266.886589][ T7023] veth1_macvtap: left promiscuous mode [ 266.888969][ T7023] veth0_macvtap: left promiscuous mode [ 266.891925][ T7023] veth1_vlan: left promiscuous mode [ 266.894532][ T7023] veth0_vlan: left promiscuous mode [ 266.933188][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 266.940597][ T5843] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 266.944422][ T5843] usb 5-1: config 0 has no interface number 0 [ 266.949188][ T5843] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 266.953243][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.956692][ T5843] usb 5-1: Product: syz [ 266.958634][ T5843] usb 5-1: Manufacturer: syz [ 266.960694][ T5843] usb 5-1: SerialNumber: syz [ 266.966644][ T5843] usb 5-1: config 0 descriptor?? [ 266.975920][ T5843] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 266.978922][ T5843] dvb-usb: bulk message failed: -22 (4/0) [ 266.983457][ T5843] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 266.987045][ T5843] dvb-usb: bulk message failed: -22 (5/0) [ 266.990082][ T5843] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 266.997279][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.000662][ T5843] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 267.003940][ T5843] usb 5-1: media controller created [ 267.016873][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.031672][ T5843] ttusb2: set interface to alts=3 failed [ 267.054051][ T5843] DVB: Unable to find symbol tda10086_attach() [ 267.056955][ T5843] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 267.061160][ T5843] dvb-usb: bulk message failed: -22 (4/0) [ 267.063919][ T5843] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 267.067914][ T5843] dvb-usb: bulk message failed: -22 (5/0) [ 267.069828][ T5843] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 267.074375][ T5843] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 267.111101][ T7023] team0 (unregistering): Port device vlan0 removed [ 267.184285][T15338] ttusb2: i2c wr len=58 too high [ 267.194698][ T7023] team0 (unregistering): Port device team_slave_1 removed [ 267.202916][ T7023] team0 (unregistering): Port device team_slave_0 removed [ 267.332634][ T5742] Bluetooth: hci2: command 0x041b tx timeout [ 267.338228][T15223] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 267.342863][T15223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.345833][T15223] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 267.350717][T15223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.353337][T15223] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 267.358050][T15223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.360852][T15223] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 267.367538][T15223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.424341][T15223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.437627][T15223] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.443683][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.446039][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.454047][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.456471][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.530359][T15134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.704404][T15134] veth0_vlan: entered promiscuous mode [ 267.714224][T15134] veth1_vlan: entered promiscuous mode [ 267.747588][T15134] veth0_macvtap: entered promiscuous mode [ 267.753537][T15134] veth1_macvtap: entered promiscuous mode [ 267.763638][T15134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.771278][T15134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.782253][ T7023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.787183][T15223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.795567][ T7023] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.802946][ T7023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.807264][ T7023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.886681][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2766'. [ 267.917239][ T7023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.921233][ T7023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.942117][ T7023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.944712][ T7023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.010922][T15223] veth0_vlan: entered promiscuous mode [ 268.019513][T15223] veth1_vlan: entered promiscuous mode [ 268.042049][T15223] veth0_macvtap: entered promiscuous mode [ 268.050279][T15223] veth1_macvtap: entered promiscuous mode [ 268.062666][T15223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.070157][T15223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.077432][ T6239] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.085747][ T6239] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.089775][ T6239] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.094904][ T6239] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.147664][T15418] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 268.193584][ T6239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.202527][ T6239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.220624][ T6239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.230682][ T6239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.333960][T15423] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2774'. [ 268.360203][T15425] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 268.374488][T15427] openvswitch: netlink: IP tunnel dst address not specified [ 268.389083][T15427] openvswitch: netlink: IP tunnel dst address not specified [ 268.452625][ T5742] Bluetooth: hci0: command tx timeout [ 268.500963][T15443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.514012][T15443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.571168][T15449] hfsplus: unable to find HFS+ superblock [ 268.600452][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2782'. [ 268.686725][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2784'. [ 268.690302][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2784'. [ 268.694616][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2784'. [ 268.698346][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2784'. [ 268.701980][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2784'. [ 268.706094][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2784'. [ 268.710365][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2784'. [ 269.281689][T15498] Bluetooth: MGMT ver 1.23 [ 269.285172][T15498] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 269.413336][ T5742] Bluetooth: hci2: command 0x041b tx timeout [ 269.426222][T15500] binder: 15499:15500 ioctl 4018620d 0 returned -22 [ 269.468449][T15502] sit2: entered promiscuous mode [ 269.470686][T15502] sit2: entered allmulticast mode [ 269.570501][T15506] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20002 [ 269.579566][ T40] audit: type=1400 audit(2000000061.349:1381): avc: denied { compute_member } for pid=15505 comm="syz.3.2801" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 269.660891][T15510] validate_nla: 1 callbacks suppressed [ 269.660909][T15510] netlink: 'syz.3.2803': attribute type 1 has an invalid length. [ 269.681370][ T6099] usb 5-1: USB disconnect, device number 30 [ 269.711207][ T6099] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 269.804643][T15518] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 269.886504][T15523] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.890207][T15523] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.923112][T15523] bond1: left promiscuous mode [ 269.925880][T15523] sit2: left promiscuous mode [ 269.986403][T15532] Bluetooth: MGMT ver 1.23 [ 269.990751][T15532] netlink: 'syz.3.2808': attribute type 1 has an invalid length. [ 270.020289][T15532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.217858][ T40] audit: type=1400 audit(2000000061.989:1382): avc: denied { write } for pid=15555 comm="syz.0.2815" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 270.261695][T15560] binder: 15559:15560 ioctl 4018620d 0 returned -22 [ 270.390388][T15564] CIFS: VFS: UNC: path must begin with // or \\ [ 270.392622][T15564] Malformed UNC in devname [ 270.392622][T15564] [ 270.394946][T15564] CIFS: VFS: Malformed UNC in devname [ 270.492582][ T5877] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 270.542587][ T5742] Bluetooth: hci0: command tx timeout [ 270.542643][T10185] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 270.643136][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 270.647360][ T5877] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 270.651328][ T5877] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.655218][ T5877] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.658727][ T5877] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.663144][ T5877] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.668482][ T5877] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 270.672323][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.702790][T10185] usb 11-1: Using ep0 maxpacket: 8 [ 270.706748][T10185] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 270.710068][T10185] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.714593][T10185] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.719531][T10185] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.723459][T10185] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.728584][T10185] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 270.731493][T10185] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.884595][ T5877] usb 5-1: usb_control_msg returned -32 [ 270.886415][ T5877] usbtmc 5-1:16.0: can't read capabilities [ 270.938279][T10185] usb 11-1: GET_CAPABILITIES returned 0 [ 270.940232][T10185] usbtmc 11-1:16.0: can't read capabilities [ 271.152693][T10185] usb 11-1: USB disconnect, device number 2 [ 271.351561][ T40] audit: type=1400 audit(2000000063.119:1383): avc: denied { append } for pid=15577 comm="syz.3.2822" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 271.360322][T15578] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 271.361059][ T40] audit: type=1400 audit(2000000063.129:1384): avc: denied { mounton } for pid=15577 comm="syz.3.2822" path="/128/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 271.483642][T15592] mmap: syz.4.2825 (15592): VmData 37519360 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 271.492798][ T5742] Bluetooth: hci2: command 0x041b tx timeout [ 271.834740][T15622] loop7: detected capacity change from 0 to 7 [ 271.841642][T15619] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input28 [ 271.943170][T15625] usbtmc 5-1:16.0: INITIATE_CLEAR returned 28 [ 272.000544][T15622] Dev loop7: unable to read RDB block 7 [ 272.007442][T15622] loop7: unable to read partition table [ 272.012900][T15622] loop7: partition table beyond EOD, truncated [ 272.020157][T15622] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 272.041816][T15633] ufs: You didn't specify the type of your ufs filesystem [ 272.041816][T15633] [ 272.041816][T15633] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 272.041816][T15633] [ 272.041816][T15633] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 272.054855][T15633] ufs: failed to set blocksize [ 272.061184][T15633] netlink: 'syz.6.2837': attribute type 11 has an invalid length. [ 272.170544][ T40] audit: type=1400 audit(2000000063.939:1385): avc: denied { bind } for pid=15636 comm="syz.4.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 272.227933][T15643] ksmbd: Unknown IPC event: 1, ignore. [ 272.473263][T15668] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 272.473263][T15668] program syz.4.2847 not setting count and/or reply_len properly [ 272.612872][ T5742] Bluetooth: hci0: command tx timeout [ 272.780556][ T40] audit: type=1400 audit(2000000064.549:1386): avc: denied { setopt } for pid=15687 comm="syz.4.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 272.897442][T15694] ------------[ cut here ]------------ [ 272.899373][T15694] 1 [ 272.899390][T15694] WARNING: mm/page_alloc.c:5202 at __alloc_frozen_pages_noprof+0x23da/0x2bc0, CPU#3: syz.4.2856/15694 [ 272.904805][T15694] Modules linked in: [ 272.906173][T15694] CPU: 3 UID: 16384 PID: 15694 Comm: syz.4.2856 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.910086][T15694] Tainted: [L]=SOFTLOCKUP [ 272.911643][T15694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 272.915206][T15694] RIP: 0010:__alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 272.917632][T15694] Code: 00 45 31 c9 49 83 bc 24 78 05 00 00 00 4c 89 4c 24 50 0f 85 64 f8 ff ff c6 44 24 10 00 e9 f2 ea ff ff c6 05 a5 34 57 0e 01 90 <0f> 0b 90 e9 79 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 272.924094][T15694] RSP: 0018:ffffc900045bf760 EFLAGS: 00010246 [ 272.926076][T15694] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 272.928893][T15694] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 272.931636][T15694] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 272.935273][T15694] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 272.938699][T15694] R13: 1ffff920008b7f3b R14: 0000000000000015 R15: 1ffff920008b7f05 [ 272.941522][T15694] FS: 00007f7b9d47e6c0(0000) GS:ffff8880d6679000(0000) knlGS:0000000000000000 [ 272.944508][T15694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.946784][T15694] CR2: 00007f7b9d47cfa8 CR3: 000000005de6a000 CR4: 0000000000352ef0 [ 272.949408][T15694] Call Trace: [ 272.950720][T15694] [ 272.951827][T15694] ? find_held_lock+0x2b/0x80 [ 272.953701][T15694] ? is_bpf_text_address+0x8a/0x1a0 [ 272.955595][T15694] ? is_bpf_text_address+0x8a/0x1a0 [ 272.957526][T15694] ? bpf_ksym_find+0x128/0x1c0 [ 272.959087][T15694] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 272.961421][T15694] ? is_bpf_text_address+0x94/0x1a0 [ 272.963253][T15694] ? kernel_text_address+0x8d/0x100 [ 272.965014][T15694] ? __pfx_widen_string+0x10/0x10 [ 272.966695][T15694] ? __kernel_text_address+0xd/0x30 [ 272.968447][T15694] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 272.970542][T15694] ? arch_stack_walk+0xa6/0xf0 [ 272.972161][T15694] ? stack_trace_save+0x8e/0xc0 [ 272.973832][T15694] ? __pfx_stack_trace_save+0x10/0x10 [ 272.975586][T15694] ? stack_depot_save_flags+0x27/0x9d0 [ 272.977372][T15694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 272.979346][T15694] ? policy_nodemask+0xed/0x4f0 [ 272.980973][T15694] alloc_pages_mpol+0x1fb/0x540 [ 272.982629][T15694] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 272.984416][T15694] ? drm_syncobj_array_find+0x34/0x3b0 [ 272.986181][T15694] ___kmalloc_large_node+0xe5/0x120 [ 272.987989][T15694] __kmalloc_large_node_noprof+0x1c/0x70 [ 272.989793][T15694] __kmalloc_noprof+0x5be/0x850 [ 272.991830][T15694] drm_syncobj_array_find+0x34/0x3b0 [ 272.994178][T15694] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 272.996689][T15694] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 272.999579][T15694] ? drm_dev_exit+0x41/0x60 [ 273.001528][T15694] ? drm_dev_exit+0x41/0x60 [ 273.003583][T15694] drm_ioctl_kernel+0x1f3/0x3e0 [ 273.005636][T15694] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 273.008463][T15694] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 273.010652][T15694] drm_ioctl+0x5e6/0xc60 [ 273.013442][T15694] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 273.016356][T15694] ? __pfx_drm_ioctl+0x10/0x10 [ 273.018448][T15694] ? selinux_file_ioctl+0x13b/0x290 [ 273.020326][T15694] ? selinux_file_ioctl+0xb6/0x290 [ 273.022198][T15694] ? __pfx_drm_ioctl+0x10/0x10 [ 273.024784][T15694] __x64_sys_ioctl+0x18e/0x210 [ 273.026837][T15694] do_syscall_64+0x10b/0xf80 [ 273.028834][T15694] ? clear_bhb_loop+0x40/0x90 [ 273.030863][T15694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.033451][T15694] RIP: 0033:0x7f7b9c59cdd9 [ 273.035368][T15694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.043993][T15694] RSP: 002b:00007f7b9d47e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.046892][T15694] RAX: ffffffffffffffda RBX: 00007f7b9c815fa0 RCX: 00007f7b9c59cdd9 [ 273.049692][T15694] RDX: 00002000000001c0 RSI: 00000000c01864cd RDI: 0000000000000003 [ 273.053621][T15694] RBP: 00007f7b9c632d69 R08: 0000000000000000 R09: 0000000000000000 [ 273.056965][T15694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.060324][T15694] R13: 00007f7b9c816038 R14: 00007f7b9c815fa0 R15: 00007ffda5166d28 [ 273.063575][T15694] [ 273.064829][T15694] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 273.067696][T15694] CPU: 3 UID: 16384 PID: 15694 Comm: syz.4.2856 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.072366][T15694] Tainted: [L]=SOFTLOCKUP [ 273.074220][T15694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.078298][T15694] Call Trace: [ 273.079736][T15694] [ 273.081013][T15694] dump_stack_lvl+0x100/0x190 [ 273.082760][T15694] vpanic+0x552/0x970 [ 273.084136][T15694] ? __pfx_vpanic+0x10/0x10 [ 273.085849][T15694] panic+0xd1/0xe0 [ 273.087491][T15694] ? __pfx_panic+0x10/0x10 [ 273.089427][T15694] check_panic_on_warn.cold+0x19/0x34 [ 273.091699][T15694] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 273.094305][T15694] __warn.cold+0x191/0x328 [ 273.096173][T15694] __report_bug+0x296/0x3d0 [ 273.098102][T15694] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 273.100442][T15694] ? __pfx___report_bug+0x10/0x10 [ 273.102152][T15694] ? __lock_acquire+0x4a5/0x2630 [ 273.103778][T15694] ? shmem_get_folio_gfp+0x503/0x1900 [ 273.105913][T15694] ? __lock_acquire+0x4a5/0x2630 [ 273.108068][T15694] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 273.110677][T15694] report_bug+0xb2/0x220 [ 273.112497][T15694] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 273.115101][T15694] handle_bug+0x16a/0x2a0 [ 273.116775][T15694] exc_invalid_op+0x17/0x50 [ 273.118246][T15694] asm_exc_invalid_op+0x1a/0x20 [ 273.120263][T15694] RIP: 0010:__alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 273.122720][T15694] Code: 00 45 31 c9 49 83 bc 24 78 05 00 00 00 4c 89 4c 24 50 0f 85 64 f8 ff ff c6 44 24 10 00 e9 f2 ea ff ff c6 05 a5 34 57 0e 01 90 <0f> 0b 90 e9 79 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 273.129161][T15694] RSP: 0018:ffffc900045bf760 EFLAGS: 00010246 [ 273.131420][T15694] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 273.134560][T15694] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 273.137877][T15694] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 273.141223][T15694] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 273.144556][T15694] R13: 1ffff920008b7f3b R14: 0000000000000015 R15: 1ffff920008b7f05 [ 273.147262][T15694] ? find_held_lock+0x2b/0x80 [ 273.148859][T15694] ? is_bpf_text_address+0x8a/0x1a0 [ 273.150754][T15694] ? is_bpf_text_address+0x8a/0x1a0 [ 273.152968][T15694] ? bpf_ksym_find+0x128/0x1c0 [ 273.154995][T15694] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 273.156970][T15694] ? is_bpf_text_address+0x94/0x1a0 [ 273.158641][T15694] ? kernel_text_address+0x8d/0x100 [ 273.160306][T15694] ? __pfx_widen_string+0x10/0x10 [ 273.161910][T15694] ? __kernel_text_address+0xd/0x30 [ 273.163536][T15694] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 273.165537][T15694] ? arch_stack_walk+0xa6/0xf0 [ 273.167081][T15694] ? stack_trace_save+0x8e/0xc0 [ 273.168642][T15694] ? __pfx_stack_trace_save+0x10/0x10 [ 273.170346][T15694] ? stack_depot_save_flags+0x27/0x9d0 [ 273.172093][T15694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 273.173973][T15694] ? policy_nodemask+0xed/0x4f0 [ 273.175535][T15694] alloc_pages_mpol+0x1fb/0x540 [ 273.177097][T15694] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 273.178827][T15694] ? drm_syncobj_array_find+0x34/0x3b0 [ 273.180575][T15694] ___kmalloc_large_node+0xe5/0x120 [ 273.182221][T15694] __kmalloc_large_node_noprof+0x1c/0x70 [ 273.184004][T15694] __kmalloc_noprof+0x5be/0x850 [ 273.185564][T15694] drm_syncobj_array_find+0x34/0x3b0 [ 273.187249][T15694] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 273.189246][T15694] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 273.191396][T15694] ? drm_dev_exit+0x41/0x60 [ 273.192794][T15694] ? drm_dev_exit+0x41/0x60 [ 273.194246][T15694] drm_ioctl_kernel+0x1f3/0x3e0 [ 273.195833][T15694] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 273.198010][T15694] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 273.199716][T15694] drm_ioctl+0x5e6/0xc60 [ 273.201068][T15694] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 273.203214][T15694] ? __pfx_drm_ioctl+0x10/0x10 [ 273.204749][T15694] ? selinux_file_ioctl+0x13b/0x290 [ 273.206398][T15694] ? selinux_file_ioctl+0xb6/0x290 [ 273.208034][T15694] ? __pfx_drm_ioctl+0x10/0x10 [ 273.209570][T15694] __x64_sys_ioctl+0x18e/0x210 [ 273.211105][T15694] do_syscall_64+0x10b/0xf80 [ 273.212592][T15694] ? clear_bhb_loop+0x40/0x90 [ 273.214094][T15694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.215975][T15694] RIP: 0033:0x7f7b9c59cdd9 [ 273.217405][T15694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.223485][T15694] RSP: 002b:00007f7b9d47e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.226088][T15694] RAX: ffffffffffffffda RBX: 00007f7b9c815fa0 RCX: 00007f7b9c59cdd9 [ 273.228576][T15694] RDX: 00002000000001c0 RSI: 00000000c01864cd RDI: 0000000000000003 [ 273.231073][T15694] RBP: 00007f7b9c632d69 R08: 0000000000000000 R09: 0000000000000000 [ 273.233568][T15694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.236074][T15694] R13: 00007f7b9c816038 R14: 00007f7b9c815fa0 R15: 00007ffda5166d28 [ 273.238623][T15694] [ 273.240323][T15694] Kernel Offset: disabled [ 273.241701][T15694] Rebooting in 86400 seconds..