last executing test programs: 54.29886722s ago: executing program 3 (id=246): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdb) r4 = accept4(r1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000040)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) (async) recvmmsg(r2, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) recvfrom(r2, &(0x7f0000000480)=""/69, 0x45, 0x100, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x170}}, 0x0) 53.910632382s ago: executing program 3 (id=252): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x208) semop(r1, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r2, 0x3b8a, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0}) semop(r1, &(0x7f0000000000)=[{0x0, 0xfffb}, {0x1, 0x0, 0x800}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000140)=[0x1ff]) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x40, 0x20, 0x1000, 0x4, {{0x8, 0x4, 0x0, 0x22, 0x20, 0x65, 0x0, 0x5d, 0x0, 0x0, @loopback, @rand_addr=0x64010100, {[@rr={0x7, 0xb, 0xf1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005500000429bd7000fbdbdf2506000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01020400fc01000000000000000000000000000008000000"], 0x38}}, 0x0) 53.032347684s ago: executing program 3 (id=267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x80) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00 ', @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000600040003000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) (async) inotify_init1(0x800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x3, 0xa) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000001c0)=0x28) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e51fc050000000001000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x4c815}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000134000480300001800b0001006f626a726566000020000280080003400000000c0900040073797a310000000008000140000000010900010073797a30000000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) utimensat(r8, 0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './cgroup\x00'}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r9, 0xc02464bb, &(0x7f0000000440)={0x1, r10, 0x8000, 0x2, 0x8, 0xb, 0x1, 0x4, 0x5}) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffa, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x87}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0xfe, 0x1000000000000195, 0xf, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x70bd26, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x844) listxattr(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) 53.031667509s ago: executing program 3 (id=268): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000040)={0x0, 0x0, 0x4}) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) (async) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000100)={0xffff, 0x1, r1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) syz_clone(0x5010c00, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000001400)="95", 0x1}]) 52.973173424s ago: executing program 3 (id=270): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x200c2, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x2, 0x0, &(0x7f0000000140)=[{0x3ff, 0x4}, {0x971, 0x4}]}) r2 = creat(&(0x7f0000000580)='./file0\x00', 0x0) r3 = fanotify_init(0xf00, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040812) sendmsg$nl_route_sched(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x4004080) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) fanotify_mark(r3, 0x2, 0x8000000, r2, 0x0) 52.60465546s ago: executing program 3 (id=277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xffffffffffffffd2, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x840}, 0x40) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x7fffffffffffffff, 0x0, 0x2, 0x0, 0x4, 0x2], 0x1000, 0x1144}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31fff50000200003801c0000800c000180060001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 52.531089035s ago: executing program 32 (id=277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xffffffffffffffd2, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x840}, 0x40) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x7fffffffffffffff, 0x0, 0x2, 0x0, 0x4, 0x2], 0x1000, 0x1144}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31fff50000200003801c0000800c000180060001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.093224251s ago: executing program 1 (id=1007): r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000580)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1e3900, 0x0) sendfile(r2, r3, 0x0, 0x100000001) landlock_restrict_self(r1, 0x9) syz_emit_ethernet(0xa6, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x4, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffd}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) fsopen(&(0x7f0000000040)='cifs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000580)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/', 0x0) (async) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1e3900, 0x0) (async) sendfile(r2, r3, 0x0, 0x100000001) (async) landlock_restrict_self(r1, 0x9) (async) syz_emit_ethernet(0xa6, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x4, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffd}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) (async) 2.952904851s ago: executing program 1 (id=1009): creat(0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x4010, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0022ff"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000400)={0x0, 0x6, 0x7, &(0x7f0000000240)={0xe, "c955edab8ad7634adeee6be7d707c8e7c7b0031ae7890000000000000000000007"}}) 1.828512816s ago: executing program 4 (id=1029): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7ff, 0x301200) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x8, 0x5, 0x3400, 0x3}) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(r0, 0xc010644d, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)='/dev/dri/card#\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r1, &(0x7f0000000100)=""/128, 0x80, 0x2, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010101}, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x400140, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0x4004510f, &(0x7f0000000200)=0x7) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r3, &(0x7f0000000240)="aa3cb39874d92f359f18b1b7716d9eec084b10717fc11e1a417f2abfe04d01d7f7e4116e3d6f238b3679c43ebd8995863923bb7adb3da50059fce03182fbd90df26eb647d2f306d719fabf23397a752d21775887f1072244bd7b06cac448ec1b2aacb2d05cffc3f1d133c6fb8e7a3c04f0e9298fc6f5485cfa3b5ca390569e9d98bbc0c95c8fcad780e9f1b76170f064b2352512f0f624c541824fe39d7e81e30f0d9004cf487af7278f6e74aa8fad5cc0be07bc6a0ffe3a71c58c0eb9ab4a6db41f8ccc3e6f60957f81ff9f0a1f57720621b083456bfacdbab08517b7601a41cfde96e37f970c963d370c3aa6b1a620a9e187673316329f3a2a3bdc6bbc86d9e54d27b4a161a0eed126c372832fdef4ae22fec64bf5d1a7a9d287bdadb444dc5fed79e77035a11c2aff1943fcb5bf54b2b1e84493a35bc9cadc32c13c7df90e7df802d9838f3ba18a28c351f85dfcf5972a8291ac1532d63be985923f01b9e5b1daa58f46dd0adc32b76ed41686ebe5d6a72c959e68c79ab82b87de0a6b5d5d6ebdd10990ad9a5696b75159485782a5fd21ad363f51af0a6b098291be3718381ba3ed00f08efc53bd9a2f5d6a0654327c3839b30fb6b6967c0f2a5bfe59d453c958d8720d59f2aa089ae28199d32d0b844f0c35a86448b4fd592dcf0c823b4bf1dd284c1de6433f2912df504f7b090a5c1be95abf458e059fc1fc990612f262638eeea9eea99ff47a650fdea3a9ad192f45cdc1cc1f94470bfb9a65ad9db80b2924c505b7ba76645b3dd5e047533eeca165b316242111c8e723d18b39dd8b8eca8c9b5ec49d0bda41c92a6f715f495dc025d30969cf75628d5c9cb10bccbda6314bc3f76bdc4ad1eeeda0f700deeec130c24b245164f84b5b5d774e22185de3cae7156905c1f4fe147c6a45679ff197802938ac4635adf45377e8d35522657413b36980294528c9052a2cbb0b34643ab0742bde0712d2bacec464f3a657227fdf2e0995b3d2a887c9430ab9d63a5ec53cf3e89e6855b5ece6653e73d73870c6c6451869c5733bc89def118f3ffce6ed8016f0184242ac84c178f67dcfd05e1918ed20b8a33a3cb5940d35a629b36fb3206b4b58b9ede410ba0773c88aee166238bb110c302db514c80a9aa4840510be2cd9a70b70b1873014e0548d4161940dcb374833ad30b84efff35d783ce0fd356f52f3cf74f63d45047da6962cf8382fabe8d9746b0abe468850ce20e1e9c06cc92f110eec3c83f4a375ab4eac44ba4dafa9aabb59f281234a75a07403e16c0f94b22ca90d618abedb463da6c360ae6e8f8302bc3b82d7381d16c9e0315118fc9f964516955c1c64b28bbd6bbdc5191615550371bc12ef05713c997b7a913cf8260bc4a7fe7b6d60b3512115243397cc820efc784c03ac4ca438bf87cb59dd6ee7747b57ba747ea7d21f80cfc7583502916e17e0a73f956a1ff0d660832303db5251a12f6f5ad0b9c5bf693300fd07380cf9de58b1ab97edab9d880c9bb8f99bb144f1ba7079e1b36ef6d9a726c050019c5426c5f1b4f1b143f431a3084a6cf128b49207793b355710fb8d648a2e4261c45dfce17913ebb7aa145b4940da11687479a9a5940052c94122b57cbd99f5ea908f35c8c862a1df317956f2a2eb315cb263bfcedd6bba68461c00da518f6f379c2f11f147183ccc8805b6af060dbd6f94638d6c8bb0e46494bac7d4aceff84947628db0f2e02d0b525383bd49ab8749d8607a54d5b45d4a62e98bbb93d77507e03c75ca69f27981dc1d9688b415ca18f6bbba43aef9f8ffc38d0b14a930cef12251f4a59de33e83d2fedb8c042b92e676bc4c1ff37af9642e83e47cb7a6a3e20a5be7540117e19afdcf783f6e5ec2442cf49746ae67987e52ea105f440c7ec0e1c9aeb72eac427fa27f8619a40dadd1188c6d69089e38b32a39710074676384df496d3642b6f1c96545a2b618fae263cd0fb5b5cf5d24a6be1edde637563c49248685dad249151bd4dcc63a82cd5822c4389aa67a5092b6bf8607975337f8fc93fa966cfe95baba5ca4943cba4fc5de898fff86e8845e40492e9ce3a73f3c68586dd7f87749f76cb463daa8bd6d5bc179597079ed76d4d181fda22f0204f936f3831cd34756d8a8c0035d8f9dffe709b90ce6822cf4b154c81ac459e963845a9bf977f6c6853215168c6e3d65c12d6d8767678901b948f00e8f6a99521d42a73b7a2d0931e27f6ba0c7fe5e0ef49ec9edce03e5d06e7795eb1fe59c73062b4552296de3495ab33db61171dbb9217a66345c21682cac53149e234f4d72da0f3e3f2f6d15a89d0857a30099f5247742b6d68078dc901270b689ce79a2b31f33ee5cab676761664acf43462a789e30f2ee8e1640f653b4fc8312ad84edfad2cff477ebfe8c5a6b02d5aaf12a0fe2c02921b026020fa734edcab6e9091f6bfdb1893c8571789ad33b0955a577dcbeb8a7b1e102126bf9c913388e6ae09842b358ec51af2139dc8e55054bd7f0441a3360ac9ab251fa3f01bf1ec4c0ddaf1e0d378339cbfd2d9b68c0395a7fc9ca67a6d318bd286603a6abeac7d0de601b2c5e0b75cf15185a6a2fc49a44914db445d9671b08b6cf02be8f2de2542b83923683fb7f0562996cd849f054b282a89ab13d1e22000c6c1cdd415a76cac1251a0c88139cb82802bf4c6a3025127ab0537904c085fb8c4f618fa20237db887c519bc75a4d11bdd579f472ac6d85010de70175635fe3f4f116cef9e49cb954a66f851df0d3b83ccd6ea295339f0398c728faa8a4e781e454072a931e2c0e1bf29e774645086a1e5c44c698fe520f589f21194d617e99f23b40d5be7afa27328baf33fb02cc3767dce5b50ee4e71555a562669ad51c25eb559b8a6e45158c526e437b132ff4a6301f4f90f9bc1bc359fd98ffe4ecc0133851e5b1f9a90a67f7637009a30f2b859521dd4c9e189f2baa871e89881f85ce408f05d03e014598e6c14fb83e105a9e258a16599637eee5b2bb21911d8cb58bece5c5608a9eb96e77dc91fd3698ba1c780233a11057700338ff8bdc39f59a0420b20378945b3fb47c130271bcacfbff289581440f0da2ffd9e78b453991471b14a3a5e86b07988d6a9d81ed2dbbb58851d83b7082379aae2b2f609100832530d9a5fa1bf5aad2c352e6390209e7e317effafda533eac22da8101616bafc1b89e3fbec57364f872088fb53404c3cbe2901599ca7208ebd4151ab2adf26e990e2785d3099b292f69599439f35358f4c072478af078c44ef06b6625104a435e01aa840c7847dc37204cc786895b16e284684b1ebb9ed02feafdfd32129b154f02d98011ba660d6a6090b42c9d1e1747034ef7a6b9426444c1d882adc8219eaaa0def20c91818b5fcafc262d92ec8a1c6818919802d21c3f83938414337d04e55e3827ba9de8cd7274e63542be9e7aec5af1d7a1c333d2f9fd0023058dcd9d7b5b2ce2b541071f162ce826b1d0e41b997aab5807cefd9c0ba1a35044fbe0c4fbbc2f56db57dcaf9015cd3463ce8a49d3b4e3298f1644b1abc4c73a6603ec38fe2706750899fa76bc64baafaacde71070dd85f5cef5e03a4d4882e70fdc9a4ac1fb21b1728958cbd4812e7c13047d0f9a1cdb0e6ffc6cd52958f5cc23e47d91d11315c2ba34225b9530bf855d99749ad9ffe76ed066082cfd3caa4ed92b6f730071a81c587aa33e729303b8e071c2b7d8c580a7eb62a8b47ecfcaf6da864a7fe995c898b04dad93bd09f8ccca6f0b20e91db2d3fb0c2d4347855ac5a62be1a89b4ffd26fca79d62b2bf09ca94be747fcd4eb0560c847f62b02d2d582ddb3096c7d063f224a5b3483c7859251e997ec3475db3ce584ea485fd61589a4fd3b9bf744838f7ae1068d922e31f7c6028557c66b34c5280fc6d43bfc3a5c5f2275de3ea15b00361186bf8acf386075181cebbe8f0a06e89499ad496aa032353fe570b823227c05455a659c313f26af5d2a845934708a5687abcc276b7342475230caf6297a73aa02f5709f15e87696c5482fbd34002b59d0d62de8e6fc1c0f6c9493643782f963443caf09f05cc6f82edff2b55a08741d6da738f1287bdb656e2d05bc5f04b53b1869bc82dc85404ea3def3f305bdd43892901ec9428601ddd04b2592283a1bf4c32e86463845ce15f0132c43cf39b0be29b77cd4db0bc4bed2fd3b38296dec2006281e9d350e149e54be287aa16c80aab7719f81a150b06fd40281974265fb05fd9d9f440f997763d2c6dd6278ce9c10a802ca86cc67733afed3d4ada9eeaf6e079b9dfc89608e87480a24a4eebfd61d694fb55f5bd169b952f2f4a0715e355af8068a0f18ed0b5043819f0863d8a3f8f41e1b20b76644756e6979401c29de40d352a4ce833fb97e2ff6ce06445c13650f4d102cec888fd7d588d7112e9b51b5f97741f33391f6c8eedd9ba13d96dfe8c248e084911eccc3c1d28b1268751f9db3f9648104103c0cad3f27a68a10eab501e5bb521139487e967cfb052562e9777bb84a72d53bdbdb7419f9c5909f27225445fe5a11dd3361cce743335e51ff38685d9fa605179acbdafe7ac79034eba34a926f0a9ae47bbd03fbbcc2d62af7848491ac6f202d1d575f861013726fa4acc8d2d11899bbf4d921ec5091614b3e67897f2ef6766810bf2145cfa998ae4e78b6fdc6a0ce5ee26b3b5277a1aa2ee121789ed37de5ee2352503e26697bad43ba4440666125a191098cdf78e38bf25385ff82b14a51ae2d47fbc530e574e152ed06a88ea008df9edcf30e357062459224ebced8df654dfea8f3c047671b3484e64ea6c1ac9366c736ae5e96bec4b99c254327e412c3b8ce2aed462cbf83f3cca7488020d0f446578e3d78365021fdbaecaa7285d03b88cf0ec6c53a2f0651bbb94ea9a0316ef24a476f077e30478a036b5e034feeb6d7d66240bf9d9d3bd26e6cdfa14fc821e17d09f9e0badacb466f040c07144c90da331e9bf7efc280ab638915a35beff5220aeda28519394d8d6368da4f190a5d68d1e4ed4d301fcb1209671f06540a013a26e2bc5d7df91684ce55a1d59bfcaee3fd372a64cc180e2ad89992171f74cd965df855d2d669ce77b24158e48575fb9c0563d06941f1b22802fb87c9097db1c5e92c1ad072d9d424505989a4a417009767e7e618b2242f3963fc74a12e33b1ce06509ae761b8c5518e7cecd9b6d9999fb60bb74d66f99767b291435e479c79082e3d94678748e96134a0faed4ea40faec487850b7f7aad3562c93aba9f7159cb5fa4969ed668cb5706b530909cd4c264ba38250ba9bbc72773c5b33f88e10d839b9834cbd106135b702165442253d85eed2a48208744eab6fb70e9c75a2685d958c99b96fc15246923df415f16302ad1fd7e079b4aa9d974afb8aed8a92be891c99dcc30818e71ca4a72c4bfac59219b0601e037250e2d022719e810e035e02aa00033e726a24306af5d2a3f873fa2eaedbd7e65e548d873237b1429fd1f31ef76265020fba33cf0908c7ab6bf80e6c1840b72e9790a87229d065750457376e303a3395eba5c52105adc9a471e1321d521578fc151dc65090bd3bd533adb7b2aa942ea3031f2eceaecb113f5a8994aa74f2a02c44dfc2a3b4e3b48888e5784ad8ab896ba7be1c03f5a4e98129a04be57745265de05f29c4f3e545cf13c303a899a6997bbca6d75634cb6ed98524c99dcae88de618b55f9df02b9a18614179930ed2aa27f71a942a5a3a6e36f9796ae54e71f8fd6c60366e0237188e290842274196d8685cc9134dce00ebcfdc76003bef3095c6acebd61", 0x1000, 0x80, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r4, 0xc0385650, &(0x7f0000001280)={{0x4, @addr=0x17}, 0x8, 0x6, 0x401}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000012c0), 0x200200, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r5, 0x40043311, &(0x7f0000001300)) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001340), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f0000001380)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x20, 0x3ff, 0x1, 0x0, 0x2, 0x401, "53184b63b843c83678808e79ab2b21e41befe6747a1d73595e34d36afa759e21"}}, 0x138) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000014c0), 0x200002, 0x0) ioctl$CDROM_MEDIA_CHANGED(r7, 0x5325, 0x7fffffffffffffff) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f0000001500)={0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r0, 0xc0106446, &(0x7f0000001540)={r8}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000001580)={0x1, 'bond_slave_1\x00', 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r6, {0x732e}}, './file0\x00'}) r10 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$BLKGETSIZE(r10, 0x1260, &(0x7f0000001640)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001680), 0x4c0040) ioctl$int_in(r2, 0x5452, &(0x7f00000016c0)=0x1) io_setup(0x2, &(0x7f0000001700)=0x0) r12 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001980), 0x2, 0x0) io_submit(r11, 0x5, &(0x7f0000001bc0)=[&(0x7f0000001780)={0x0, 0x0, 0x0, 0x7, 0x8, r2, &(0x7f0000001740)="efa7df9aa7ce5ed4ab7c602a3a9e591be23f455474802644be80ec2825601672f28fcecf8a", 0x25, 0x5, 0x0, 0x2, r9}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x8, 0x8, r9, &(0x7f00000017c0)="69c8843448", 0x5, 0x8001}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x8, 0x7c7, r1, &(0x7f0000001840)="453e54f0dd844745f9439cb6f6055d8e2ca09078b19226358a61836ac11a8ba323834d00911a526b6c911222a24bf6f05f9313d03731886cba99f79ead33e30db4b59cd9cd68cdb166f71e76558794b1869ed35cdadf5afd0b63b36f91c92acc30f70e638002c1f0208a7f52ac99ea925cac2d394067326d70bed6f6605ffc8a5b5af85c0bb0267ee47b42843f6f755e8dc210eafcfa541c5fda6d84a32c5c0f2febfb5967bf23a73537040f7dbcfc5ddf7418b68a8d2097d447532c5b6562f491d2fa84e6ef6b469dfcacf6151fb3b7ce469e67c78ef2dfaaa4cd0d9032355325f9172db3460eec91a65e844e46dd49b5", 0xf1, 0x3, 0x0, 0x1, r9}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x7, 0x60b, r12, &(0x7f00000019c0)="3a99401732944ea7125d498d898d66aff0c7112a5772408475de31ae45d3f92c520a4387e5326a0986b67aa647e1a78bd71df71be3f56573b7fa3007302c7c45cb419266990297573b8b48efe259008727a2b98ae60e7f8e77a21d4b0562a88be668e63121a112b247bc3690520b25f4e90a34f84cd1e7defd3b9d9be9126e8cff845c49cb5058cc581c75449b35344797c6ed1d4b1908a136ad00db35c67d012263e43b8e6f8b31d11b233b47554bff3f6da97f416d3040c4576e6e8d867902a1b80d93608ec4533310f28b626012cca242cf33056e", 0xd6, 0x7, 0x0, 0x3, r9}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x8, 0x9, r4, &(0x7f0000001b00)="f032b6f21c3192dfdf8931e6dd53fe09873f02099b67dcfd79627398bb3a91210d29bb181b53f9e0cd4c3e8f0b082bd40eeccb35cd23875be60afdc0a08a7d5e81dc7b86478486dd254a21659191af", 0x4f, 0x7f, 0x0, 0x1}]) r13 = openat$cgroup(r9, &(0x7f0000001c00)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r13, &(0x7f0000001c40)='freezer.self_freezing\x00', 0x0, 0x0) 1.340746017s ago: executing program 1 (id=1037): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x6) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x6bf4d9a9c92dbd55}}, '\x00'}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r2, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x5}) (async) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r2, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x5}) 1.340481289s ago: executing program 1 (id=1038): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0xd1d, 0x5, 0x1, 0xfffffffffffffffb, 0x7ff, 0x6]}, &(0x7f0000000080)=0x22) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x3d, 0x6, 0xffffffffffffffff, 0x8, 0x21800000000000]}, &(0x7f0000000340)=0x78) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001000000000000000000ac524fd9effee843180100000a140000001105d740039d0e388b5bc8c4a82c00010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="ed6f8dbb", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf2574000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x24000000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf257200000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x28}}, 0x4000840) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000640)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0xf, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x73, 0x0, @multicast2, @multicast1, {[@generic={0x86, 0xf, "0f5ab1bd822fb8e8f6ff47189c"}, @lsrr={0x83, 0x3, 0xe7}, @ssrr={0x89, 0x13, 0xf8, [@rand_addr=0x64010102, @broadcast, @multicast2, @rand_addr=0x64010101]}]}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x20, 0x0, @val=0x80}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=0x0, @ANYBLOB="df310600000100002400128009000100626f6e6400000000140002800500010004000000060020"], 0x44}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xd}, &(0x7f0000000140)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) 1.01591489s ago: executing program 1 (id=1043): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) socket$inet6(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x71bd27, 0x25dfdbfd, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0x6}, {0xf, 0x6}}}, 0x24}}, 0x2000000) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/cpu_byteorder', 0x480, 0x5d) socket(0x28, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r5]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r6, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff9046dce8, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002403000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000018e808116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BLKPG(r7, 0xc0104d03, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) write$binfmt_script(r9, &(0x7f0000000400)={'#! ', '', [], 0xa, "201100000000b073dbc2e1e649efc1d73828a06efe233dc8013ff03212750dda49e8d9eed99dedf65d632853f4dfe6d11ac5eb9dc22d5ec2b368dd84d61c"}, 0xffffff9b) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0x1000, &(0x7f0000001d80)=""/4096}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x30, 0x0, 0x0}) 833.563154ms ago: executing program 4 (id=1045): creat(0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x4010, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0022ff"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000400)={0x0, 0x6, 0x7, &(0x7f0000000240)={0xe, "c955edab8ad7634adeee6be7d707c8e7c7b0031ae78900000000000300"}}) 658.746619ms ago: executing program 0 (id=1049): fanotify_init(0x60, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000008000000000000000800000018110000e662b0a0f2e11bfcb84e28bb5459c8ea0b3943d9adc48dda3d161bca2d77db766394e38eb46f18311322c7e81099e067339e13abe544a591aaa644f52ccd902398b52a48d7d104a75dc7f2de1a30a6b4dbc409334d1f6441471ccf2a637db4cbe9edecc7b3f00a9703062e922b2fb7c161d1fe4549e2c3bf31097d200e5e448718489b9717a6daefcfb4709250c7ba017a1c0723875fdacf6d42733edda7f2ab5a5f5f4dda5e", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000005509010000000000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x298800, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@const={0xb, 0x0, 0x0, 0xa, 0x3}, @volatile={0x9}]}, {0x0, [0x30, 0x2e, 0x30, 0x5f, 0x30, 0x0]}}, &(0x7f0000000380)=""/120, 0x38, 0x78, 0x1, 0x8, 0x10000, @value=r1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', r4, r5, 0x4, 0x5, 0x2}, 0x50) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) 574.378378ms ago: executing program 0 (id=1050): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e240000000000004504040001ffffff9404000001000a00b7040000000100006a0af2fe000000008500000078000000b70000000000000095000000000000009e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9171e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62dd7c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18568136207304e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100d33128954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e117e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3feec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f864b0ba45efbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90104c48e41d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b81da301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3040000002e334319c8979c322e92fbc2c400009f2404b941553843de114fdb03c19d606bd760c40f7f28360820b82d548198041562bcbd9edce223b54cf3c35823f3c446f0a20160ac181c96606dbc967673aca98d6f5637b20fd2809a29ea5e40139a19415f7fc5d852209bdfed74008651752b5e052412d3e00a44417b7caf91a173925a66ee6e30723e73f3b7d66d2a5d09ff40c0bc6e7a5cfef7f327018578892a23014c3629f2e41af619f0d9f0ec8d551415051ff94391c03f3501c928ed7818af61729278f84d4730ef28af4c202e0f175e2a5cbddc8b973e2701b33f1b963025220c04817010b6fb70"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, 0x0, 0x29, 0x0, @val=@iter={0x0}}, 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 4000\t'], 0x2a, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, &(0x7f0000002000)={0x9, 0x9}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x102, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002600)=ANY=[@ANYBLOB="380000001800ef012bbd7000000000000a0000000000fd0000000000140005000000000000000000000000000000000208000400", @ANYRES32=r4, @ANYBLOB="03b4de1e4380ca546d257eb83150c575f0d72229a15f8c5d5f0112baa149950995cf8c13aaad8d2f1f64c42a5200e12a0e7925f22a7869747afa5d707aaf"], 0x38}, 0x1, 0x11}, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={r4, @empty, @loopback}, 0xc) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) process_vm_readv(r7, &(0x7f0000000280)=[{&(0x7f0000000000)=""/255, 0xff}], 0x1, &(0x7f0000001380)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/174, 0xae}], 0x3, 0x0) 483.72395ms ago: executing program 0 (id=1051): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) (async) poll(&(0x7f00000000c0)=[{r2, 0x1009}], 0x1, 0x8000007) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) (async) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x3002a8d, 0x1) ioctl$BLKPG(r8, 0x400c4d19, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 483.436455ms ago: executing program 0 (id=1052): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0xd1d, 0x5, 0x1, 0xfffffffffffffffb, 0x7ff, 0x6]}, &(0x7f0000000080)=0x22) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x3d, 0x6, 0xffffffffffffffff, 0x8, 0x21800000000000]}, &(0x7f0000000340)=0x78) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001000000000000000000ac524fd9effee843180100000a140000001105d740039d0e388b5bc8c4a82c00010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="ed6f8dbb", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf2574000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x24000000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf257200000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x28}}, 0x4000840) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000640)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0xf, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x73, 0x0, @multicast2, @multicast1, {[@generic={0x86, 0xf, "0f5ab1bd822fb8e8f6ff47189c"}, @lsrr={0x83, 0x3, 0xe7}, @ssrr={0x89, 0x13, 0xf8, [@rand_addr=0x64010102, @broadcast, @multicast2, @rand_addr=0x64010101]}]}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x20, 0x0, @val=0x80}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=0x0, @ANYBLOB="df310600000100002400128009000100626f6e6400000000140002800500010004000000060020"], 0x44}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xd}, &(0x7f0000000140)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) 284.098892ms ago: executing program 2 (id=1054): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x439, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x40}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd42a92c807655f251000008000300", @ANYRES32=r4, @ANYBLOB="06006600100000000a00060008021100000000002200330088940100080211000000ffffffffffff1f5ebc28d903c40008050e0080c00000"], 0x54}, 0x1, 0x0, 0x0, 0x20000085}, 0x80) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="14220100000003002400128009000100643fd400000000001400028008004b00", @ANYRES32=0x0, @ANYBLOB="0500010003000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r8, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x224000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44}, 0x800) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'bond0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x8, [{0x63dc, 0xbc8}, {0xffffffff, 0x8000}, {0x4, 0xffffffff}, {0x5, 0xfff}, {0x2, 0x6}, {0x7, 0x3434}, {0x3d8, 0x86}, {0x7, 0x7}]}}) 283.362078ms ago: executing program 4 (id=1055): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x503000, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000000c0)={0x10000000}) (async) socket(0x2a, 0x2, 0x400002) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$sndseq(r0, &(0x7f0000000500)=[{0xff, 0x2, 0xb3, 0x2, @tick=0x200, {0x6f, 0x6}, {0xa, 0x7f}, @control={0xd, 0x633e}}, {0x2, 0x3, 0x4, 0xe, @time={0xa, 0x5}, {0x4, 0x1}, {0xff, 0x3}, @connect={{0x4, 0x1}, {0x8, 0x9}}}, {0x2, 0x40, 0xe, 0x3, @tick=0x9, {0x6}, {0x2, 0x9}, @time=@time={0x0, 0x1}}, {0x7, 0x5, 0x2, 0xf7, @tick=0x6, {0x5, 0x3}, {0x5, 0x63}, @ext={0x1f, &(0x7f0000000100)="4ead757497f20300737adee290c40f16355649e9fc8d23aa551945c83b459e"}}, {0x4, 0x0, 0xff, 0xfc, @tick=0x5, {0x3, 0x2}, {0xca, 0x8}, @raw8={"f21248d2cf5682a18653744f"}}, {0x9, 0x2, 0x1, 0xf7, @tick=0x2, {0x7, 0x9}, {0x4, 0x1}, @quote={{0x10, 0x8}, 0x9, &(0x7f00000001c0)={0x81, 0x2, 0x10, 0xff, @time={0x8, 0xe97}, {0x6, 0x80}, {0xff, 0x7f}, @control={0x14, 0x8}}}}, {0x1, 0x5, 0x7, 0x5, @tick=0x9, {0x2}, {0x9, 0x4}, @quote={{0x80, 0x7}, 0x3, &(0x7f0000000300)={0x3b, 0x5, 0x4, 0xd, @tick=0x8, {0x1, 0x1}, {0x5, 0x5}, @note={0x6, 0xb8, 0x4, 0x1, 0x2}}}}, {0x6, 0x57, 0x1, 0x6, @tick=0x7, {0x2d, 0x6}, {0x2, 0x2}, @result={0x7, 0xfffffffd}}, {0xc0, 0x1, 0xe, 0x9, @time={0x4, 0xfffffffd}, {0x7, 0x89}, {0x75}, @connect={{0x9, 0x5}, {0x5, 0x3}}}, {0x5, 0x41, 0x2, 0x9, @time={0x9, 0x1c00000}, {0x0, 0x2}, {0x81, 0x7}, @addr={0xb3, 0x40}}], 0x118) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001600010324bdfcffffff2e0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) userfaultfd(0x80000) (async) recvmmsg(r7, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) (async) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 214.002639ms ago: executing program 2 (id=1056): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xb05e48ef, 0x5, 0x0, 0x0, 0xf407}, 0xfffffff7, 0x1, 0x0, 0x7, 0x7, 0x2, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) (async, rerun: 32) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) (async, rerun: 32) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 213.664552ms ago: executing program 4 (id=1057): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0xfffffffc, 0x4}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x300, 0x0, 0x40000}, 0x4080) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) process_mrelease(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x2, 0x1, 0x400, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40080) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010140, 0x0, 0x5d0c}]}) write(r0, &(0x7f0000000040)="a400001d1e005f07000000fffffffff8070002001d00000000000000050009000d190000a6f6f491dd", 0x29) 158.603969ms ago: executing program 2 (id=1058): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x39, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 147.09577ms ago: executing program 0 (id=1059): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r1, 0xff, 0x7, 0x40000a, 0x1ff}) 143.809108ms ago: executing program 1 (id=1060): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) r3 = open(&(0x7f0000000400)='./file0\x00', 0x80002, 0x1ae) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x16) write$binfmt_misc(r3, &(0x7f0000000040)="dd5c24662b", 0x5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x2204000, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e6e873d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000,msize=0x00000000076f2b80,\x00']) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x538c4cbc}, 0x48) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000140)={0x7, 0x0, {0x0}, {0xee00}, 0x100000001, 0x8001}) syz_open_procfs(r5, &(0x7f0000000180)='projid_map\x00') bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff00e0544606b329ba5cdbd964afb3a8b1ec03006b6ab3cf5f5a408708a8142c337d7eecf16bbc28af3c744e0bf72a5c01d2dd57b8fb116c994602fdf0cf4db7615b4afabb4705a74bbf71ae052c401b00b7001d5878271b2afc93ffe3b2a5c51899536021952485bcf9142732e5228c368dcf5a2024533ecb4ac8f1a57f6122df3ce699ad8f913f353d7e1fa6aa6e42dce7bd40344b8f66afab3514c7c4c2ccefd481b2610b3c7ca73bd1dca2f95f55f8cae09ab286b3c5def8cdc1a722312df8d137d6ddb5fd367b8a569bfb0f784142980b4f00f9cb438bfe72b368b5020000006ad5f033a011991f319e15d586eca946fa6694d60f", @ANYRES32=r1, @ANYBLOB="0200"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000005000000040000000d00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}]}, 0x3c}}, 0x8000) 141.570572ms ago: executing program 2 (id=1061): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r0 = io_uring_setup(0x185a, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000be}) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="410c7501df7d", 'veth1_to_bridge\x00'}}, 0x1e) (async, rerun: 32) connect$pppoe(r1, &(0x7f0000000200)={0x18, 0x0, {0x4008, @multicast, 'vcan0\x00'}}, 0x1e) (async, rerun: 32) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'wg0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d0007"], 0x2c}}, 0x20008000) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x2004c800) (async) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000400)={0x0, @ax25={0x3, @null, 0x6}, @sco={0x1f, @none}, @isdn={0x22, 0x4, 0x6, 0x6b, 0xfd}, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)='pim6reg1\x00', 0x7, 0xa, 0xfe01}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='+'], 0x50) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x10d080, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1e}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e24, 0x7fff, @private2, 0x5}]}, &(0x7f00000002c0)=0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000501000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) 84.525422ms ago: executing program 4 (id=1062): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = fanotify_init(0xf00, 0x0) mount$nfs(&(0x7f0000000040)='^-%\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0x20002, &(0x7f0000000140)={[{'\x00'}, {'\x81/'}], [{@smackfsroot={'smackfsroot', 0x3d, '[/*:'}}, {@smackfsroot={'smackfsroot', 0x3d, '(:'}}, {@appraise}, {@measure}, {@seclabel}]}) fanotify_mark(r1, 0x1, 0x1020, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) write$P9_RSTATu(r2, &(0x7f0000000040)=ANY=[], 0x54) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x1, 0x1, 0x9fc4, 0x7284, 0x152, 0x12000}) creat(&(0x7f0000000100)='./file0\x00', 0x0) 84.279814ms ago: executing program 0 (id=1063): creat(0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x4010, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0022ff"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000400)={0x0, 0x6, 0x7, &(0x7f0000000240)={0xe, "c955edab8ad7634adeee6be7d707c8e7c7b0031ae78900000000000700"}}) 83.904637ms ago: executing program 4 (id=1064): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009c00aecb0000000095"], &(0x7f0000000300)='GPL\x00', 0xa}, 0x94) 82.319198ms ago: executing program 2 (id=1065): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2) ioctl$CEC_ADAP_G_CAPS(r1, 0xc04c6100, &(0x7f0000000080)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd700000dcdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="1e003300c0100d00ffffffffffff08"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x2c048010) r6 = dup3(r2, r0, 0x0) getpid() prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x50, 0x0, &(0x7f0000002500)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002440)={@fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/4096, 0x1000, 0x1, 0x25}, @ptr={0x70742a85, 0x7, &(0x7f0000001440)=""/4096, 0x1000, 0x1, 0x28}}, &(0x7f00000024c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=1066): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x29, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x40895}, 0xc000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x29, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x40895}, 0xc000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e657665000010000280040010"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x13e) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x13e) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='nv', 0x2) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000300)=""/157, &(0x7f00000003c0)=0x9d) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0x58) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg$unix(r4, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) (async) recvmmsg$unix(r4, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) (async) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000400)="656b09acdb740023a9b2716424091d958014714e788a56380000deffffffcf5114f161429e8ce7cdbf4890a8fd506691e8fd8bcbdf22651912b69034e3c032641429695e25756276578abc38c9ea1be582561ea0a501aa03124529d95e5a71a51d288bf19d6f0a06e0b5ae971fa18779f4b202ceba8e1fed9ce41d5c65687af9751a559ce2f5", 0x86, 0x40045, &(0x7f0000000140)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, '\x00', 0x15}, 0xfffffffd}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x29}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfe8e, 0x12) getsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x4) kernel console output (not intermixed with test programs): [ T6656] Call Trace: [ 69.667588][ T6656] [ 69.667594][ T6656] dump_stack_lvl+0x100/0x190 [ 69.668194][ T6656] sysfs_warn_dup.cold+0x1c/0x28 [ 69.668292][ T6656] sysfs_create_dir_ns+0x24b/0x2b0 [ 69.668631][ T6656] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 69.668647][ T6656] ? find_held_lock+0x2b/0x80 [ 69.668874][ T6656] ? kobject_add_internal+0x25f/0x930 [ 69.669533][ T6656] ? kobject_add_internal+0x25f/0x930 [ 69.669547][ T6656] ? class_dir_child_ns_type+0xd/0x60 [ 69.670023][ T6656] kobject_add_internal+0x2c8/0x930 [ 69.670038][ T6656] kobject_add+0x16a/0x1e0 [ 69.670051][ T6656] ? __pfx_kobject_add+0x10/0x10 [ 69.670066][ T6656] ? kobject_put+0xb9/0x640 [ 69.670077][ T6656] ? device_add+0xc48/0x1950 [ 69.670091][ T6656] device_add+0x294/0x1950 [ 69.670105][ T6656] ? lockdep_init_map_type+0x5c/0x250 [ 69.670116][ T6656] ? __pfx_device_add+0x10/0x10 [ 69.670127][ T6656] ? lockdep_init_map_type+0x5c/0x250 [ 69.670138][ T6656] ? __init_waitqueue_head+0xca/0x150 [ 69.670155][ T6656] tty_register_device_attr+0x388/0x7f0 [ 69.670262][ T6656] ? lockdep_init_map_type+0x5c/0x250 [ 69.670273][ T6656] ? __pfx_tty_register_device_attr+0x10/0x10 [ 69.670292][ T6656] ? tty_port_init+0x156/0x1c0 [ 69.670310][ T6656] gsm_activate_mux+0x155/0x2a0 [ 69.670327][ T6656] gsmld_ioctl+0xbbc/0x15c0 [ 69.670341][ T6656] ? __pfx_gsmld_ioctl+0x10/0x10 [ 69.670353][ T6656] ? __ldsem_down_read_nested+0xf3/0x890 [ 69.670365][ T6656] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 69.670380][ T6656] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.670397][ T6656] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 69.670411][ T6656] ? __pfx_gsmld_ioctl+0x10/0x10 [ 69.670420][ T6656] tty_ioctl+0x1204/0x1690 [ 69.670436][ T6656] ? __pfx_tty_ioctl+0x10/0x10 [ 69.670450][ T6656] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 69.670666][ T6656] ? __fget_files+0x215/0x3d0 [ 69.670735][ T6656] ? hook_file_ioctl_common+0x146/0x410 [ 69.670750][ T6656] ? selinux_file_ioctl+0x139/0x290 [ 69.670766][ T6656] ? selinux_file_ioctl+0xb4/0x290 [ 69.670782][ T6656] ? __pfx_tty_ioctl+0x10/0x10 [ 69.670797][ T6656] __x64_sys_ioctl+0x18e/0x210 [ 69.670815][ T6656] do_syscall_64+0x106/0xf80 [ 69.670824][ T6656] ? clear_bhb_loop+0x40/0x90 [ 69.670838][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.670849][ T6656] RIP: 0033:0x7f77d059c819 [ 69.670860][ T6656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.670870][ T6656] RSP: 002b:00007f77d14ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.670909][ T6656] RAX: ffffffffffffffda RBX: 00007f77d0815fa0 RCX: 00007f77d059c819 [ 69.670916][ T6656] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 69.670922][ T6656] RBP: 00007f77d0632c91 R08: 0000000000000000 R09: 0000000000000000 [ 69.670927][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.670933][ T6656] R13: 00007f77d0816038 R14: 00007f77d0815fa0 R15: 00007fff8c1a4568 [ 69.670946][ T6656] [ 69.670963][ T6656] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 69.793440][ T6018] usb 5-1: USB disconnect, device number 5 [ 69.830785][ T6661] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 70.174122][ T6683] netlink: 'syz.3.208': attribute type 10 has an invalid length. [ 70.305732][ T6690] veth0: entered promiscuous mode [ 70.309885][ T6688] veth0: left promiscuous mode [ 70.312781][ T6693] ======================================================= [ 70.312781][ T6693] WARNING: The mand mount option has been deprecated and [ 70.312781][ T6693] and is ignored by this kernel. Remove the mand [ 70.312781][ T6693] option from the mount to silence this warning. [ 70.312781][ T6693] ======================================================= [ 70.327814][ T6693] tmpfs: Too small a size for current use [ 70.663812][ T6738] __nla_validate_parse: 17 callbacks suppressed [ 70.663826][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.224'. [ 70.677438][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'. [ 70.680237][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'. [ 70.687406][ T6740] ntfs3(sr0): Primary boot signature is not NTFS. [ 70.689999][ T6740] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 70.741761][ T6749] qrtr: Invalid version 0 [ 70.785233][ T6756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.226'. [ 70.798889][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 70.802131][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 70.847828][ T6770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.226'. [ 70.870166][ T6776] ipt_ECN: cannot use operation on non-tcp rule [ 70.951725][ T6790] netlink: 80 bytes leftover after parsing attributes in process `syz.2.233'. [ 71.195990][ T6798] IPVS: length: 24 != 12312 [ 71.199070][ T6798] netlink: 'syz.3.234': attribute type 32 has an invalid length. [ 71.219988][ T6798] bond0: Setting coupled_control to off (0) [ 71.222953][ T6798] bond0: entered promiscuous mode [ 71.354413][ T6828] netlink: 44 bytes leftover after parsing attributes in process `syz.0.239'. [ 71.417827][ T6832] netlink: 'syz.0.241': attribute type 10 has an invalid length. [ 71.420750][ T6832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.241'. [ 71.434487][ T6832] team0: Port device geneve0 added [ 71.487627][ T46] bond0 (unregistering): Released all slaves [ 71.510270][ T6837] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 71.522778][ T6837] pim6reg1: entered promiscuous mode [ 71.525228][ T6837] pim6reg1: entered allmulticast mode [ 71.641583][ T6842] misc userio: Can't change port type on an already running userio instance [ 71.664272][ T6845] mkiss: ax0: crc mode is auto. [ 71.671891][ T6845] netlink: 'syz.3.246': attribute type 32 has an invalid length. [ 71.894074][ T40] kauditd_printk_skb: 235 callbacks suppressed [ 71.894087][ T40] audit: type=1400 audit(1775709605.267:529): avc: denied { read } for pid=6860 comm="syz.1.249" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.905267][ T40] audit: type=1400 audit(1775709605.267:530): avc: denied { open } for pid=6860 comm="syz.1.249" path="net:[4026532886]" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.908211][ T6861] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 71.913382][ T40] audit: type=1400 audit(1775709605.267:531): avc: denied { create } for pid=6860 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.925402][ T40] audit: type=1400 audit(1775709605.277:532): avc: denied { read write } for pid=6860 comm="syz.1.249" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.934736][ T40] audit: type=1400 audit(1775709605.277:533): avc: denied { open } for pid=6860 comm="syz.1.249" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.942634][ T40] audit: type=1400 audit(1775709605.277:534): avc: denied { write } for pid=6860 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.956627][ T40] audit: type=1400 audit(1775709605.277:535): avc: denied { read } for pid=6860 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.963150][ T40] audit: type=1400 audit(1775709605.337:536): avc: denied { read } for pid=6868 comm="syz.1.250" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.971382][ T40] audit: type=1400 audit(1775709605.337:537): avc: denied { open } for pid=6868 comm="syz.1.250" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.983395][ T40] audit: type=1400 audit(1775709605.337:538): avc: denied { ioctl } for pid=6868 comm="syz.1.250" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 72.012702][ T6875] gfs2: gfs2 mount does not exist [ 72.206138][ T6869] kvm: kvm [6868]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 72.217011][ T6869] kvm: kvm [6868]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 72.395831][ T6877] IPVS: length: 24 != 12312 [ 72.397757][ T6877] netlink: 'syz.0.251': attribute type 32 has an invalid length. [ 72.422231][ T6877] bond0: Setting coupled_control to off (0) [ 72.424199][ T6877] bond0: entered promiscuous mode [ 72.669049][ T6908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6908 comm=syz.1.260 [ 72.709475][ T86] bond0 (unregistering): Released all slaves [ 72.910071][ T6934] openvswitch: netlink: Actions may not be safe on all matching packets [ 73.046663][ T6018] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.206683][ T6018] usb 7-1: Using ep0 maxpacket: 32 [ 73.210575][ T6018] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 73.216930][ T6018] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 73.220827][ T6018] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 73.224279][ T6018] usb 7-1: Product: syz [ 73.226003][ T6018] usb 7-1: Manufacturer: syz [ 73.228252][ T6018] usb 7-1: SerialNumber: syz [ 73.239134][ T6018] usb 7-1: config 0 descriptor?? [ 73.242989][ T6920] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.398588][ T6954] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 73.411096][ T6954] bond1: entered promiscuous mode [ 73.413358][ T6954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.423866][ T6954] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 73.478062][ T5934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.482866][ T6958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6958 comm=syz.0.278 [ 73.485868][ T5934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.491224][ T5934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.491971][ T6958] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 73.495790][ T5934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.499111][ T6958] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 73.502347][ T5934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.503732][ T6958] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 73.508730][ T24] usb 7-1: USB disconnect, device number 5 [ 73.552794][ T6920] tipc: Started in network mode [ 73.554721][ T6920] tipc: Node identity 4, cluster identity 4711 [ 73.557165][ T6920] tipc: Node number set to 4 [ 73.631851][ T6956] chnl_net:caif_netlink_parms(): no params data found [ 73.718461][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.720907][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.723297][ T6956] bridge_slave_0: entered allmulticast mode [ 73.726204][ T6956] bridge_slave_0: entered promiscuous mode [ 73.730302][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.732959][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.735510][ T6956] bridge_slave_1: entered allmulticast mode [ 73.739203][ T6956] bridge_slave_1: entered promiscuous mode [ 73.771692][ T6956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.776305][ T6956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.794699][ T6956] team0: Port device team_slave_0 added [ 73.800299][ T6956] team0: Port device team_slave_1 added [ 73.814358][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.816999][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.826667][ T6956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.832994][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.835263][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.843721][ T6956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.867013][ T6979] nbd0: detected capacity change from 0 to 64 [ 73.871057][ T5942] block nbd0: Receive control failed (result -32) [ 73.877018][ T5940] block nbd0: Dead connection, failed to find a fallback [ 73.879462][ T5940] block nbd0: shutting down sockets [ 73.881418][ T5940] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.885491][ T5940] buffer_io_error: 23 callbacks suppressed [ 73.885501][ T5940] Buffer I/O error on dev nbd0, logical block 0, async page read [ 73.891361][ T5940] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.894395][ T5940] Buffer I/O error on dev nbd0, logical block 0, async page read [ 73.897535][ T5940] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.900602][ T5940] Buffer I/O error on dev nbd0, logical block 0, async page read [ 73.900690][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.903430][ T5940] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.908007][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.911381][ T5940] Buffer I/O error on dev nbd0, logical block 0, async page read [ 73.917010][ T5940] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.921028][ T5940] Buffer I/O error on dev nbd0, logical block 0, async page read [ 73.924526][ T5940] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.930513][ T5940] Buffer I/O error on dev nbd0, logical block 0, async page read [ 73.936697][ T5940] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.940438][ T5940] Buffer I/O error on dev nbd0, logical block 0, async page read [ 73.942350][ T6986] vivid-003: ================= START STATUS ================= [ 73.944064][ T5940] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.948517][ T6986] vivid-003: Radio HW Seek Mode: Bounded [ 73.952557][ T6986] vivid-003: Radio Programmable HW Seek: false [ 73.954257][ T5940] Buffer I/O error on dev nbd0, logical block 0, async page read [ 73.954583][ T6986] vivid-003: RDS Rx I/O Mode: Block I/O [ 73.957283][ T5940] ldm_validate_partition_table(): Disk read failed. [ 73.957354][ T5940] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.961472][ T6986] [ 73.961914][ T5940] Buffer I/O error on dev nbd0, logical block 0, async page read [ 73.966112][ T6956] hsr_slave_0: entered promiscuous mode [ 73.966424][ T6986] vivid-003: Generate RBDS Instead of RDS: [ 73.966455][ T5940] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.966478][ T5940] Buffer I/O error on dev nbd0, logical block 0, async page read [ 73.966538][ T5940] Dev nbd0: unable to read RDB block 0 [ 73.967522][ T5940] nbd0: unable to read partition table [ 73.971067][ T6956] hsr_slave_1: entered promiscuous mode [ 73.973156][ T6986] false [ 73.973840][ T6956] debugfs: 'hsr0' already exists in 'hsr' [ 73.974052][ T5940] ldm_validate_partition_table(): Disk read failed. [ 73.974157][ T5940] Dev nbd0: unable to read RDB block 0 [ 73.974306][ T5940] nbd0: unable to read partition table [ 73.977908][ T6986] [ 73.979868][ T6956] Cannot create hsr debugfs directory [ 73.982194][ T6986] vivid-003: RDS Reception: true [ 74.008020][ T6986] vivid-003: RDS Program Type: 0 inactive [ 74.014596][ T6986] vivid-003: RDS PS Name: inactive [ 74.017535][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.020840][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.027550][ T6986] vivid-003: RDS Radio Text: inactive [ 74.029847][ T6986] vivid-003: RDS Traffic Announcement: false inactive [ 74.032577][ T6986] vivid-003: RDS Traffic Program: false inactive [ 74.035135][ T6986] vivid-003: RDS Music: false inactive [ 74.038281][ T6986] vivid-003: ================== END STATUS ================== [ 74.097370][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.100729][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.172726][ T6956] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.185256][ T6956] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.198780][ T6956] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.204663][ T6956] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.248087][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.251394][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.322034][ T6956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.338459][ T6956] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.344834][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.347181][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.364896][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.367272][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.373961][ T7020] capability: warning: `syz.1.294' uses deprecated v2 capabilities in a way that may be insecure [ 74.458266][ T13] bridge_slave_1: left allmulticast mode [ 74.460660][ T13] bridge_slave_1: left promiscuous mode [ 74.464410][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.475083][ T13] bridge_slave_0: left allmulticast mode [ 74.486672][ T13] bridge_slave_0: left promiscuous mode [ 74.492638][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.753659][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.768763][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.772774][ T13] bond0 (unregistering): Released all slaves [ 74.778790][ T13] bond1 (unregistering): Released all slaves [ 74.786198][ T13] bond2 (unregistering): Released all slaves [ 74.811345][ T7024] IPVS: length: 24 != 12312 [ 74.814590][ T6956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.814861][ T7024] netlink: 'syz.1.295': attribute type 32 has an invalid length. [ 74.826773][ T6956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.876084][ T7024] bond2: Setting coupled_control to off (0) [ 74.878587][ T7024] bond2: entered promiscuous mode [ 75.138590][ T6956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.286830][ T13] hsr_slave_0: left promiscuous mode [ 75.289792][ T13] hsr_slave_1: left promiscuous mode [ 75.292345][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.294910][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.301544][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.303941][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.314096][ T13] veth1_macvtap: left promiscuous mode [ 75.316050][ T13] veth0_macvtap: left promiscuous mode [ 75.433325][ T13] team0 (unregistering): Port device team_slave_1 removed [ 75.443054][ T13] team0 (unregistering): Port device team_slave_0 removed [ 75.520226][ T7050] bridge2: entered promiscuous mode [ 75.521934][ T7050] bridge2: entered allmulticast mode [ 75.526790][ T7050] team0: Port device bridge2 added [ 75.557905][ T5942] Bluetooth: hci3: command tx timeout [ 75.575166][ T6956] veth0_vlan: entered promiscuous mode [ 75.593228][ T6956] veth1_vlan: entered promiscuous mode [ 75.614634][ T6956] veth0_macvtap: entered promiscuous mode [ 75.620699][ T7061] netlink: 'syz.2.299': attribute type 1 has an invalid length. [ 75.622541][ T6956] veth1_macvtap: entered promiscuous mode [ 75.634532][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.641869][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.651473][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.658687][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.685957][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.692768][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.757371][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.759883][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.778586][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.781086][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.956756][ T5998] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 76.108727][ T5998] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 76.112220][ T5998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.115616][ T5998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.119139][ T5998] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 76.124097][ T5998] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 76.127568][ T5998] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 76.129959][ T5998] usb 7-1: Manufacturer: syz [ 76.141645][ T5998] usb 7-1: config 0 descriptor?? [ 76.223196][ T7088] __nla_validate_parse: 9 callbacks suppressed [ 76.223210][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 76.230479][ T7088] fuse: Bad value for 'user_id' [ 76.232066][ T7088] fuse: Bad value for 'user_id' [ 76.280244][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 76.414755][ T7100] evm: overlay not supported [ 76.421161][ T7100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.307'. [ 76.427653][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 76.428093][ T24] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 76.430596][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 76.433363][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.442812][ T24] usb 9-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.447343][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 76.451122][ T24] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 76.454121][ T24] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 76.457104][ T24] usb 9-1: Product: syz [ 76.458590][ T24] usb 9-1: Manufacturer: syz [ 76.460220][ T24] usb 9-1: SerialNumber: syz [ 76.473165][ T24] usb 9-1: config 0 descriptor?? [ 76.477378][ T24] hub 9-1:0.0: bad descriptor, ignoring hub [ 76.479386][ T24] hub 9-1:0.0: probe with driver hub failed with error -5 [ 76.497326][ T7102] delete_channel: no stack [ 76.540191][ T24] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 76.549018][ T5998] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 76.564660][ T5998] appleir 0003:05AC:8243.000A: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 76.567395][ T6019] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.602091][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.680739][ T7085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.683680][ T7085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.717885][ T6019] usb 5-1: Using ep0 maxpacket: 8 [ 76.720340][ T7111] ceph: Path missing in source [ 76.720905][ T6019] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.723674][ T7111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.311'. [ 76.725549][ T6019] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.732168][ T6019] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.734412][ T6019] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 76.737623][ T6019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.742480][ T6019] usb 5-1: config 0 descriptor?? [ 76.761191][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 76.796974][ T5998] usb 9-1: USB disconnect, device number 2 [ 76.841483][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.844527][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.858100][ T7114] tmpfs: Cannot change global quota limit on remount [ 76.923676][ T40] kauditd_printk_skb: 414 callbacks suppressed [ 76.923690][ T40] audit: type=1400 audit(1775709610.297:953): avc: denied { unmount } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.933857][ T40] audit: type=1400 audit(1775709610.297:954): avc: denied { read write } for pid=5927 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.941812][ T40] audit: type=1400 audit(1775709610.297:955): avc: denied { open } for pid=5927 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.951697][ T40] audit: type=1400 audit(1775709610.307:956): avc: denied { ioctl } for pid=5927 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.965998][ T40] audit: type=1400 audit(1775709610.337:957): avc: denied { read } for pid=7119 comm="syz.1.313" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.974459][ T40] audit: type=1400 audit(1775709610.337:958): avc: denied { open } for pid=7119 comm="syz.1.313" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.982696][ T40] audit: type=1400 audit(1775709610.337:959): avc: denied { ioctl } for pid=7119 comm="syz.1.313" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.027512][ T40] audit: type=1400 audit(1775709610.407:960): avc: denied { write } for pid=7119 comm="syz.1.313" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.079778][ T6054] usb 7-1: USB disconnect, device number 6 [ 77.126741][ T5998] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 77.154022][ C2] raw-gadget.2 gadget.0: ignoring, device is not running [ 77.157476][ T6019] usbhid 5-1:0.0: can't add hid device: -71 [ 77.160080][ T6019] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 77.176798][ T6019] usb 5-1: USB disconnect, device number 6 [ 77.243652][ T40] audit: type=1400 audit(1775709610.617:961): avc: denied { read write } for pid=7123 comm="syz.1.314" name="video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.256869][ T40] audit: type=1400 audit(1775709610.617:962): avc: denied { open } for pid=7123 comm="syz.1.314" path="/dev/video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.289753][ T5998] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 77.292664][ T5998] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.295992][ T5998] usb 9-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.300854][ T5998] usb 9-1: config 0 interface 0 has no altsetting 0 [ 77.304837][ T5998] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.308073][ T5998] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 77.311509][ T5998] usb 9-1: Product: syz [ 77.313320][ T5998] usb 9-1: Manufacturer: syz [ 77.315473][ T5998] usb 9-1: SerialNumber: syz [ 77.320172][ T5998] usb 9-1: config 0 descriptor?? [ 77.324096][ T5998] hub 9-1:0.0: bad descriptor, ignoring hub [ 77.328516][ T5998] hub 9-1:0.0: probe with driver hub failed with error -5 [ 77.362117][ T5998] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 77.381182][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.638929][ T5942] Bluetooth: hci3: command tx timeout [ 77.687149][ T5929] usb 9-1: USB disconnect, device number 3 [ 77.823628][ T7147] IPVS: length: 24 != 12312 [ 77.825704][ T7147] netlink: 'syz.2.319': attribute type 32 has an invalid length. [ 77.849019][ T7147] bond0: Setting coupled_control to off (0) [ 77.851465][ T7147] bond0: entered promiscuous mode [ 77.896339][ T7165] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 78.022411][ T7171] netlink: 'syz.2.328': attribute type 5 has an invalid length. [ 78.032182][ T86] bond0 (unregistering): Released all slaves [ 78.066085][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 78.069134][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 78.072420][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.075659][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.135895][ T7171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.142279][ T7171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.210967][ T7171] bridge2: left promiscuous mode [ 78.257498][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 78.260895][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 78.280480][ T225] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.284821][ T225] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.290543][ T225] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.294365][ T225] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.378585][ T7190] netlink: 'syz.1.334': attribute type 10 has an invalid length. [ 78.388145][ T7190] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 78.391695][ T7190] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 78.395583][ T7190] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 78.535097][ T7200] SELinux: policydb string length 327688 does not match expected length 8 [ 78.539021][ T7200] SELinux: failed to load policy [ 78.746936][ T7206] IPVS: length: 24 != 12312 [ 78.748629][ T7206] netlink: 'syz.1.337': attribute type 32 has an invalid length. [ 78.770803][ T7206] bond0: Setting coupled_control to off (0) [ 78.773037][ T7206] bond0: entered promiscuous mode [ 78.863989][ T7218] netlink: zone id is out of range [ 78.871425][ T7218] netlink: set zone limit has 4 unknown bytes [ 78.943274][ T46] bond0 (unregistering): Released all slaves [ 79.195819][ T7225] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 79.317286][ T7234] : renamed from vxcan1 [ 79.360873][ T7242] openvswitch: netlink: Flow actions attr not present in new flow. [ 79.637143][ T6007] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 79.727002][ T5942] Bluetooth: hci3: command tx timeout [ 79.810790][ T6007] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.814835][ T6007] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.822849][ T6007] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 79.826875][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.842827][ T6007] usb 5-1: config 0 descriptor?? [ 79.845886][ T6007] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 79.989927][ T7251] netlink: 'syz.2.351': attribute type 30 has an invalid length. [ 80.038824][ T7252] random: crng reseeded on system resumption [ 80.141477][ T7261] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 80.325163][ T7268] IPVS: length: 24 != 12312 [ 80.332752][ T7268] netlink: 'syz.4.357': attribute type 32 has an invalid length. [ 80.344352][ T7268] bond0: Setting coupled_control to off (0) [ 80.346351][ T7268] bond0: entered promiscuous mode [ 80.565354][ T60] bond0 (unregistering): Released all slaves [ 81.408275][ T7311] netlink: 'syz.4.366': attribute type 1 has an invalid length. [ 81.411647][ T7311] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 81.592451][ T7335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.599957][ T7335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.779054][ T7340] geneve2: entered promiscuous mode [ 81.781090][ T7340] geneve2: entered allmulticast mode [ 81.796798][ T5942] Bluetooth: hci3: command tx timeout [ 81.974387][ T7345] __nla_validate_parse: 6 callbacks suppressed [ 81.974401][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.375'. [ 81.982597][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.375'. [ 82.058798][ T40] kauditd_printk_skb: 248 callbacks suppressed [ 82.058811][ T40] audit: type=1400 audit(1775709615.437:1211): avc: denied { ioctl } for pid=7347 comm="syz.1.376" path="socket:[18910]" dev="sockfs" ino=18910 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.083765][ T40] audit: type=1400 audit(1775709615.447:1212): avc: denied { bpf } for pid=7347 comm="syz.1.376" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.097108][ T40] audit: type=1400 audit(1775709615.447:1213): avc: denied { perfmon } for pid=7347 comm="syz.1.376" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.103748][ T40] audit: type=1400 audit(1775709615.447:1214): avc: denied { prog_run } for pid=7347 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 82.389598][ T6007] usb 5-1: USB disconnect, device number 7 [ 82.399749][ T40] audit: type=1400 audit(1775709615.777:1215): avc: denied { create } for pid=7355 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.406805][ T40] audit: type=1400 audit(1775709615.777:1216): avc: denied { bind } for pid=7355 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.412933][ T40] audit: type=1400 audit(1775709615.787:1217): avc: denied { node_bind } for pid=7355 comm="syz.1.380" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 82.420530][ T7356] IPVS: length: 24 != 12312 [ 82.422213][ T7356] netlink: 'syz.1.380': attribute type 32 has an invalid length. [ 82.425191][ T40] audit: type=1400 audit(1775709615.797:1218): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.438308][ T40] audit: type=1400 audit(1775709615.797:1219): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.445040][ T40] audit: type=1400 audit(1775709615.797:1220): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.453608][ T7356] bond0: Setting coupled_control to off (0) [ 82.455591][ T7356] bond0: entered promiscuous mode [ 82.619251][ T60] bond0 (unregistering): Released all slaves [ 82.926982][ T6016] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 82.994005][ T7389] sctp: [Deprecated]: syz.4.390 (pid 7389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.994005][ T7389] Use struct sctp_sack_info instead [ 83.076821][ T6016] usb 5-1: Using ep0 maxpacket: 32 [ 83.080321][ T6016] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 83.085502][ T6016] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 83.089035][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 83.091515][ T6016] usb 5-1: Product: syz [ 83.092978][ T6016] usb 5-1: Manufacturer: syz [ 83.094634][ T6016] usb 5-1: SerialNumber: syz [ 83.099069][ T6016] usb 5-1: config 0 descriptor?? [ 83.101410][ T7376] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.358197][ T6019] usb 5-1: USB disconnect, device number 8 [ 83.388862][ T7392] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.391'. [ 83.661550][ T7399] IPVS: length: 24 != 12312 [ 83.663222][ T7399] netlink: 'syz.2.393': attribute type 32 has an invalid length. [ 83.675835][ T7399] bond0: Setting coupled_control to off (0) [ 83.677978][ T7399] bond0: entered promiscuous mode [ 83.796645][ T7413] mmap: syz.4.397 (7413) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.902176][ T46] bond0 (unregistering): Released all slaves [ 84.002719][ T7433] netlink: 'syz.0.402': attribute type 12 has an invalid length. [ 84.005821][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 84.015120][ T7433] netlink: 'syz.0.402': attribute type 12 has an invalid length. [ 84.015120][ T225] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.018592][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 84.020942][ T225] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.026436][ T225] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.029390][ T225] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.065038][ T7433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10646 sclass=netlink_route_socket pid=7433 comm=syz.0.402 [ 84.116673][ T5998] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 84.276730][ T5998] usb 7-1: Using ep0 maxpacket: 8 [ 84.282387][ T5998] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.287239][ T5998] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.290920][ T5998] usb 7-1: config 0 interface 0 has no altsetting 0 [ 84.293779][ T5998] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 84.297716][ T5998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.303476][ T5998] usb 7-1: config 0 descriptor?? [ 84.553362][ T7439] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.671521][ T7443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.405'. [ 84.692682][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.406'. [ 84.698607][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'. [ 84.701515][ T7443] netlink: 35 bytes leftover after parsing attributes in process `syz.0.405'. [ 84.714021][ T5998] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 84.716318][ T5998] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 84.718967][ T5998] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 84.726674][ T5998] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 84.729430][ T5998] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 84.732109][ T5998] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 84.780255][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'. [ 84.887415][ T7449] IPVS: length: 24 != 12312 [ 84.927409][ T10] usb 7-1: USB disconnect, device number 7 [ 84.963293][ T7470] binder: 7469:7470 ioctl 4018620d 0 returned -22 [ 85.207638][ T1470] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 85.359165][ T1470] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.362301][ T1470] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.366779][ T1470] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.369734][ T1470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.577184][ T1470] usb 5-1: usb_control_msg returned -32 [ 85.579136][ T1470] usbtmc 5-1:16.0: can't read capabilities [ 85.756708][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 85.761035][ T7530] 9pnet_virtio: no channels available for device /dev/sg0 [ 85.866861][ T7536] netlink: 'syz.4.435': attribute type 14 has an invalid length. [ 85.906821][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 85.909842][ T10] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.913749][ T10] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.917544][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.919706][ T10] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 85.922576][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.934047][ T10] usb 7-1: config 0 descriptor?? [ 85.997226][ T7548] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.015156][ T7556] netlink: 'syz.0.414': attribute type 30 has an invalid length. [ 86.076082][ T7548] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.145698][ T7548] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.203397][ T7548] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.272545][ T225] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.283137][ T225] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.292790][ T225] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.300636][ T225] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.330966][ T7558] overlayfs: failed to clone upperpath [ 86.350253][ T10] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 86.352593][ T10] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 86.354993][ T10] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 86.357959][ T10] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 86.360486][ T10] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 86.362941][ T10] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 86.542001][ T7571] bridge_slave_1: left allmulticast mode [ 86.545391][ T7571] bridge_slave_1: left promiscuous mode [ 86.549320][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.555667][ T7571] bridge_slave_0: left allmulticast mode [ 86.558445][ T7571] bridge_slave_0: left promiscuous mode [ 86.560481][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.561439][ T50] usb 7-1: USB disconnect, device number 8 [ 87.050375][ T7588] netlink: 'syz.1.450': attribute type 32 has an invalid length. [ 87.061348][ T7588] bond0: Setting coupled_control to off (0) [ 87.063396][ T7588] bond0: entered promiscuous mode [ 87.067915][ T40] kauditd_printk_skb: 245 callbacks suppressed [ 87.067926][ T40] audit: type=1400 audit(1775709620.447:1466): avc: denied { create } for pid=7587 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.085096][ T40] audit: type=1400 audit(1775709620.447:1467): avc: denied { getopt } for pid=7587 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.086202][ T831] cfg80211: failed to load regulatory.db [ 87.091779][ T40] audit: type=1400 audit(1775709620.447:1468): avc: denied { read } for pid=7587 comm="syz.1.450" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.100761][ T40] audit: type=1400 audit(1775709620.447:1469): avc: denied { open } for pid=7587 comm="syz.1.450" path="net:[4026532886]" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.108317][ T40] audit: type=1400 audit(1775709620.447:1470): avc: denied { create } for pid=7587 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.114777][ T40] audit: type=1400 audit(1775709620.447:1471): avc: denied { read } for pid=7587 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.121765][ T40] audit: type=1400 audit(1775709620.477:1472): avc: denied { read } for pid=7592 comm="syz.2.451" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.129209][ T40] audit: type=1400 audit(1775709620.477:1473): avc: denied { open } for pid=7592 comm="syz.2.451" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.136828][ T40] audit: type=1400 audit(1775709620.477:1474): avc: denied { ioctl } for pid=7592 comm="syz.2.451" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.148848][ T40] audit: type=1400 audit(1775709620.527:1475): avc: denied { mount } for pid=7592 comm="syz.2.451" name="/" dev="9p" ino=79691929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 87.271101][ T13] bond0 (unregistering): Released all slaves [ 87.403371][ T7601] __nla_validate_parse: 6 callbacks suppressed [ 87.403384][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 87.485291][ T7606] use of bytesused == 0 is deprecated and will be removed in the future, [ 87.490535][ T7606] use the actual size instead. [ 87.704866][ T7617] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 87.710737][ T7617] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 87.723953][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.459'. [ 87.727219][ T7617] SELinux: syz.2.457 (7617) set checkreqprot to 1. This is no longer supported. [ 87.727501][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.459'. [ 87.787205][ T7628] input: syz0 as /devices/virtual/input/input7 [ 87.983822][ T6016] usb 5-1: USB disconnect, device number 9 [ 88.036736][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 88.041776][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 88.089035][ T6007] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 88.186714][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 88.198345][ T24] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.206759][ T24] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.211354][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 88.216941][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 88.220675][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.233543][ T24] usb 6-1: config 0 descriptor?? [ 88.248369][ T6007] usb 7-1: Using ep0 maxpacket: 8 [ 88.254313][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'. [ 88.258233][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'. [ 88.265297][ T6007] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.270504][ T6007] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.274654][ T6007] usb 7-1: config 0 interface 0 has no altsetting 0 [ 88.278472][ T6007] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 88.283431][ T6007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.293307][ T6007] usb 7-1: config 0 descriptor?? [ 88.643997][ T24] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 88.701593][ T6007] mcp2221 0003:04D8:00DD.000E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 88.842990][ T6007] usb 6-1: USB disconnect, device number 6 [ 88.900466][ T10] usb 7-1: USB disconnect, device number 9 [ 89.593340][ T7670] usb usb7: usbfs: process 7670 (syz.2.474) did not claim interface 0 before use [ 89.707102][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 89.754067][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.475'. [ 89.796384][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 89.799741][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 89.849425][ T7683] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.870451][ T7683] netlink: 'syz.1.478': attribute type 4 has an invalid length. [ 90.137080][ T6016] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 90.296686][ T6016] usb 7-1: Using ep0 maxpacket: 8 [ 90.310858][ T6016] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.314562][ T6016] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.318610][ T6016] usb 7-1: config 0 interface 0 has no altsetting 0 [ 90.320845][ T6016] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 90.323962][ T6016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.333683][ T6016] usb 7-1: config 0 descriptor?? [ 90.473342][ T7698] loop7: detected capacity change from 0 to 7 [ 90.490942][ T5940] loop7: [CUMANA/ADFS] p1 [ADFS] p1 [ 90.492742][ T5940] loop7: partition table partially beyond EOD, truncated [ 90.497626][ T5940] loop7: p1 size 2989602745 extends beyond EOD, truncated [ 90.519980][ T7698] loop7: [CUMANA/ADFS] p1 [ADFS] p1 [ 90.521767][ T7698] loop7: partition table partially beyond EOD, truncated [ 90.524145][ T7698] loop7: p1 size 2989602745 extends beyond EOD, truncated [ 90.555091][ T5940] udevd[5940]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 90.571620][ T5940] udevd[5940]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 90.755953][ T6016] hid_parser_main: 10 callbacks suppressed [ 90.756013][ T6016] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 90.761146][ T6016] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 90.763385][ T6016] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 90.765717][ T6016] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 90.768067][ T6016] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 90.770724][ T6016] mcp2221 0003:04D8:00DD.000F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 90.794139][ T7721] sctp: [Deprecated]: syz.4.493 (pid 7721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.794139][ T7721] Use struct sctp_sack_info instead [ 90.945972][ T6007] usb 7-1: USB disconnect, device number 10 [ 91.033657][ T7729] IPVS: length: 24 != 12312 [ 91.035290][ T7729] netlink: 'syz.4.496': attribute type 32 has an invalid length. [ 91.047668][ T7729] bond0: option coupled_control: invalid value (128) [ 91.051445][ T7729] bond0 (unregistering): Released all slaves [ 91.516732][ T1027] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 91.666780][ T1027] usb 6-1: Using ep0 maxpacket: 8 [ 91.670014][ T1027] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.673587][ T1027] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.678293][ T1027] usb 6-1: config 0 interface 0 has no altsetting 0 [ 91.680609][ T1027] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 91.683465][ T1027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.688930][ T1027] usb 6-1: config 0 descriptor?? [ 92.095273][ T7738] netlink: 'syz.1.499': attribute type 16 has an invalid length. [ 92.101064][ T1027] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 92.103797][ T1027] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 92.106470][ T1027] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 92.109002][ T1027] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 92.111135][ T1027] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 92.114041][ T1027] mcp2221 0003:04D8:00DD.0010: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 92.120263][ T40] kauditd_printk_skb: 249 callbacks suppressed [ 92.120276][ T40] audit: type=1400 audit(1775709625.507:1725): avc: denied { create } for pid=7761 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.133925][ T40] audit: type=1400 audit(1775709625.507:1726): avc: denied { write } for pid=7761 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.157670][ T40] audit: type=1400 audit(1775709625.537:1727): avc: denied { node_bind } for pid=7761 comm="syz.2.507" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 92.168074][ T7762] IPVS: length: 24 != 12312 [ 92.170644][ T7762] netlink: 'syz.2.507': attribute type 32 has an invalid length. [ 92.190564][ T7762] bond0: Setting coupled_control to off (0) [ 92.192800][ T7762] bond0: entered promiscuous mode [ 92.201489][ T40] audit: type=1400 audit(1775709625.577:1728): avc: denied { getopt } for pid=7761 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.204603][ T7769] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 92.210243][ T40] audit: type=1400 audit(1775709625.577:1729): avc: denied { read } for pid=7761 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.239264][ T40] audit: type=1400 audit(1775709625.617:1730): avc: denied { name_bind } for pid=7768 comm="syz.4.509" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 92.248705][ T40] audit: type=1400 audit(1775709625.617:1731): avc: denied { node_bind } for pid=7768 comm="syz.4.509" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 92.287812][ T40] audit: type=1400 audit(1775709625.667:1732): avc: denied { allowed } for pid=7770 comm="syz.4.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 92.298499][ T40] audit: type=1400 audit(1775709625.677:1733): avc: denied { map } for pid=7770 comm="syz.4.510" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.305010][ T1027] usb 6-1: USB disconnect, device number 7 [ 92.316326][ T40] audit: type=1400 audit(1775709625.677:1734): avc: denied { read write } for pid=7770 comm="syz.4.510" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.382216][ T7774] gtp0: entered promiscuous mode [ 92.457202][ T208] bond0 (unregistering): Released all slaves [ 92.564977][ T7790] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 92.569038][ T7790] ip6gretap1: entered promiscuous mode [ 92.822011][ T7804] IPVS: length: 24 != 12312 [ 92.823708][ T7804] netlink: 'syz.2.521': attribute type 32 has an invalid length. [ 92.845230][ T7804] bond0: Setting coupled_control to off (0) [ 92.851589][ T7804] bond0: entered promiscuous mode [ 92.942736][ T7828] syz.4.530 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.092012][ T7846] __nla_validate_parse: 10 callbacks suppressed [ 93.092027][ T7846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.536'. [ 93.101249][ T46] bond0 (unregistering): Released all slaves [ 93.139488][ T7853] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 93.151043][ T7846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=7846 comm=syz.0.536 [ 93.276927][ T7874] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 93.401193][ T7888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7888 comm=syz.0.546 [ 93.476349][ T7897] netlink: 60 bytes leftover after parsing attributes in process `syz.1.548'. [ 93.514492][ T7900] overlayfs: failed to resolve './file0': -2 [ 93.573000][ T7904] bond2: entered allmulticast mode [ 93.580076][ T7907] /dev/nullb0: Can't open blockdev [ 93.595723][ T7903] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 93.632791][ T7903] ip6gretap1: entered promiscuous mode [ 93.657177][ T7914] syz_tun: entered allmulticast mode [ 93.752979][ T7933] No source specified [ 93.753218][ T7934] No source specified [ 93.761558][ T7928] syz_tun: left allmulticast mode [ 93.809778][ T7938] netlink: 132 bytes leftover after parsing attributes in process `syz.4.559'. [ 93.849792][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 94.153648][ T7953] kvm: pic: non byte write [ 94.168135][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 94.294200][ T7964] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7964 comm=syz.4.568 [ 94.309460][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.569'. [ 94.351782][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 94.355291][ T9] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.362449][ T9] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.378494][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 94.383374][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.385948][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 94.386919][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 94.391001][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.400740][ T9] usb 5-1: config 0 descriptor?? [ 94.462401][ T7980] nbd: socks must be embedded in a SOCK_ITEM attr [ 94.640024][ T8003] geneve1: entered allmulticast mode [ 94.711029][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'. [ 94.714185][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'. [ 94.727990][ T7998] IPVS: length: 24 != 12312 [ 94.730206][ T7998] netlink: 'syz.2.578': attribute type 32 has an invalid length. [ 94.752614][ T7998] bond0: Setting coupled_control to off (0) [ 94.754686][ T7998] bond0: entered promiscuous mode [ 94.813547][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 94.815662][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 94.834970][ T9] usb 5-1: USB disconnect, device number 10 [ 95.052028][ T8031] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 95.061903][ T208] bond0 (unregistering): Released all slaves [ 95.250257][ T8037] delete_channel: no stack [ 95.285045][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 95.368112][ T8045] netlink: 'syz.0.596': attribute type 16 has an invalid length. [ 95.371842][ T8045] netlink: 'syz.0.596': attribute type 17 has an invalid length. [ 95.384548][ T8045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.472148][ T8054] netlink: 'syz.1.598': attribute type 1 has an invalid length. [ 95.476319][ T8055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.488401][ T8054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.500562][ T8057] bond3: (slave ip6erspan0): making interface the new active one [ 95.504321][ T8057] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 95.563017][ T8064] x_tables: duplicate underflow at hook 1 [ 95.568376][ T8064] xt_connbytes: Forcing CT accounting to be enabled [ 95.570948][ T8064] Cannot find set identified by id 0 to match [ 95.598178][ T8049] IPVS: length: 24 != 12312 [ 95.599894][ T8049] netlink: 'syz.0.597': attribute type 32 has an invalid length. [ 95.616209][ T8049] bond0: Setting coupled_control to off (0) [ 95.620922][ T8049] bond0: entered promiscuous mode [ 95.696028][ T8077] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 95.751534][ T8080] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 95.815535][ T13] bond0 (unregistering): Released all slaves [ 95.860258][ T8086] Cache volume key already in use (9p,syz,) [ 95.966679][ T8093] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 96.211319][ T8106] syzkaller0: entered promiscuous mode [ 96.213270][ T8106] syzkaller0: entered allmulticast mode [ 96.331414][ T8108] efs: cannot read volume header [ 96.823220][ T8112] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 97.281089][ T40] kauditd_printk_skb: 411 callbacks suppressed [ 97.281103][ T40] audit: type=1400 audit(1775709630.657:2146): avc: denied { watch } for pid=8119 comm="syz.0.619" path="/130" dev="tmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 97.337649][ T40] audit: type=1400 audit(1775709630.717:2147): avc: denied { watch_reads } for pid=8119 comm="syz.0.619" path="/130/file0" dev="tmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 97.345147][ T40] audit: type=1400 audit(1775709630.717:2148): avc: denied { map } for pid=8119 comm="syz.0.619" path="/proc/375/fdinfo/3" dev="proc" ino=23684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 97.359946][ T40] audit: type=1400 audit(1775709630.737:2149): avc: denied { create } for pid=8116 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.360285][ T8117] IPVS: length: 24 != 12312 [ 97.360350][ T8124] overlayfs: failed to clone upperpath [ 97.372314][ T8117] netlink: 'syz.1.618': attribute type 32 has an invalid length. [ 97.383413][ T8117] bond0: Setting coupled_control to off (0) [ 97.385445][ T8117] bond0: entered promiscuous mode [ 97.389563][ T40] audit: type=1400 audit(1775709630.777:2150): avc: denied { getopt } for pid=8116 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.396398][ T40] audit: type=1400 audit(1775709630.777:2151): avc: denied { create } for pid=8116 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.404847][ T40] audit: type=1400 audit(1775709630.777:2152): avc: denied { write } for pid=8116 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.413071][ T40] audit: type=1400 audit(1775709630.777:2153): avc: denied { read } for pid=8116 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.570077][ T86] bond0 (unregistering): Released all slaves [ 97.653888][ T40] audit: type=1400 audit(1775709631.027:2154): avc: denied { create } for pid=8138 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 97.654538][ T40] audit: type=1400 audit(1775709631.027:2155): avc: denied { ioctl } for pid=8138 comm="syz.1.624" path="socket:[22266]" dev="sockfs" ino=22266 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 97.864750][ T8150] sit1: entered promiscuous mode [ 98.105394][ T8160] netlink: 'syz.4.630': attribute type 5 has an invalid length. [ 98.392062][ T8166] IPVS: length: 24 != 12312 [ 98.393727][ T8166] netlink: 'syz.1.631': attribute type 32 has an invalid length. [ 98.405502][ T8166] bond0: option coupled_control: invalid value (128) [ 98.408530][ T8166] bond0 (unregistering): Released all slaves [ 98.679005][ T8177] __nla_validate_parse: 13 callbacks suppressed [ 98.679018][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.635'. [ 98.683950][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.635'. [ 99.079147][ T8194] netlink: 64 bytes leftover after parsing attributes in process `syz.1.640'. [ 99.177920][ T8204] netlink: 64 bytes leftover after parsing attributes in process `syz.1.640'. [ 99.209999][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 99.215245][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 99.410361][ T8219] autofs: Bad value for 'fd' [ 99.580519][ T8236] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 99.582862][ T8236] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.590954][ T8236] vhci_hcd vhci_hcd.0: Device attached [ 99.606383][ T8239] vhci_hcd: connection closed [ 99.612840][ T208] vhci_hcd vhci_hcd.1: stop threads [ 99.617919][ T208] vhci_hcd vhci_hcd.1: release socket [ 99.619781][ T208] vhci_hcd vhci_hcd.1: disconnect device [ 99.737872][ T8249] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.862642][ T8249] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.938200][ T831] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 99.992028][ T8249] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.063333][ T8249] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.173951][ T86] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.181276][ T8263] netlink: 'syz.2.657': attribute type 2 has an invalid length. [ 100.184319][ T8263] netlink: 'syz.2.657': attribute type 2 has an invalid length. [ 100.190960][ T86] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.204989][ T86] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.216454][ T86] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.270553][ T8265] program syz.1.658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.304042][ T8267] sch_fq: defrate 0 ignored. [ 100.307799][ T8267] xt_l2tp: missing protocol rule (udp|l2tpip) [ 100.365445][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 100.463009][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 100.494825][ T8273] netlink: 'syz.1.661': attribute type 1 has an invalid length. [ 100.523628][ T8273] bond4: entered promiscuous mode [ 100.525511][ T8273] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.699978][ T8283] XFS (nbd1): no-recovery mounts must be read-only. [ 100.725524][ T8278] IPVS: length: 24 != 12312 [ 100.727500][ T8278] netlink: 'syz.0.662': attribute type 32 has an invalid length. [ 100.740640][ T8278] bond0: option coupled_control: invalid value (128) [ 100.744208][ T8278] bond0 (unregistering): Released all slaves [ 100.884974][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 100.987614][ T8304] netlink: 80 bytes leftover after parsing attributes in process `syz.2.670'. [ 101.238962][ T8313] input: syz0 as /devices/virtual/input/input10 [ 101.333938][ T8319] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 101.336916][ T8319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.340904][ T8319] vhci_hcd vhci_hcd.0: Device attached [ 101.557459][ T8329] IPVS: length: 24 != 12312 [ 101.559093][ T8329] netlink: 'syz.0.678': attribute type 32 has an invalid length. [ 101.573277][ T8329] bond0: Setting coupled_control to off (0) [ 101.575278][ T8329] bond0: entered promiscuous mode [ 101.586715][ T1470] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 101.596771][ T34] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 101.740139][ T34] usb 7-1: device descriptor read/64, error -71 [ 101.759133][ T8336] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 101.761252][ T8336] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 101.764301][ T8336] vhci_hcd vhci_hcd.0: Device attached [ 101.767552][ T8337] usbip_core: unknown command [ 101.770385][ T8337] vhci_hcd: unknown pdu 0 [ 101.771706][ T8336] fuse: Unknown parameter '' [ 101.771889][ T8337] usbip_core: unknown command [ 101.778052][ T60] vhci_hcd vhci_hcd.0: stop threads [ 101.779781][ T60] vhci_hcd vhci_hcd.0: release socket [ 101.781512][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 101.804687][ T86] bond0 (unregistering): Released all slaves [ 101.987312][ T34] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 102.126766][ T34] usb 7-1: device descriptor read/64, error -71 [ 102.247056][ T34] usb usb7-port1: attempt power cycle [ 102.319302][ T40] kauditd_printk_skb: 225 callbacks suppressed [ 102.319316][ T40] audit: type=1400 audit(1775709635.697:2381): avc: denied { create } for pid=8346 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.328887][ T40] audit: type=1400 audit(1775709635.697:2382): avc: denied { bind } for pid=8346 comm=A0DAF4D9E4AC50BF24FA3D2D1B3B66 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.340913][ T40] audit: type=1400 audit(1775709635.697:2383): avc: denied { module_request } for pid=8346 comm=A0DAF4D9E4AC50BF24FA3D2D1B3B66 kmod="crypto-cts(cbc(twofish))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 102.351660][ T40] audit: type=1400 audit(1775709635.717:2384): avc: denied { ioctl } for pid=8312 comm="syz.2.674" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.371836][ T40] audit: type=1400 audit(1775709635.747:2385): avc: denied { setopt } for pid=8346 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.380180][ T40] audit: type=1400 audit(1775709635.747:2386): avc: denied { accept } for pid=8346 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.386706][ T8347] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 102.388743][ T40] audit: type=1400 audit(1775709635.757:2387): avc: denied { read write } for pid=8346 comm="syz.0.682" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 102.401158][ T40] audit: type=1400 audit(1775709635.757:2388): avc: denied { open } for pid=8346 comm="syz.0.682" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 102.411687][ T40] audit: type=1400 audit(1775709635.757:2389): avc: denied { read write } for pid=8346 comm=A0DAF4D9E4AC50BF24FA3D2D1B3B66 name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.422512][ T40] audit: type=1400 audit(1775709635.757:2390): avc: denied { open } for pid=8346 comm=A0DAF4D9E4AC50BF24FA3D2D1B3B66 path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.596787][ T34] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 102.617434][ T34] usb 7-1: device descriptor read/8, error -71 [ 102.857022][ T34] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 102.877517][ T34] usb 7-1: device descriptor read/8, error -71 [ 102.996856][ T34] usb usb7-port1: unable to enumerate USB device [ 103.215225][ T8367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.056154][ T8374] sctp: [Deprecated]: syz.0.691 (pid 8374) Use of int in maxseg socket option. [ 104.056154][ T8374] Use struct sctp_assoc_value instead [ 104.118249][ T8376] bond5 (unregistering): Released all slaves [ 104.268698][ T8322] vhci_hcd: connection reset by peer [ 104.271186][ T60] vhci_hcd vhci_hcd.2: stop threads [ 104.272911][ T60] vhci_hcd vhci_hcd.2: release socket [ 104.277294][ T60] vhci_hcd vhci_hcd.2: disconnect device [ 104.336110][ T8401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.341323][ T8401] batadv_slave_0: entered promiscuous mode [ 104.610828][ T8430] ubi31: attaching mtd0 [ 104.615591][ T8430] ubi31: scanning is finished [ 104.618752][ T8430] ubi31: empty MTD device detected [ 104.712852][ T8435] netlink: 'syz.0.710': attribute type 11 has an invalid length. [ 104.727022][ T6019] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 104.815851][ T8430] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 104.882011][ T6019] usb 7-1: Using ep0 maxpacket: 8 [ 104.884998][ T6019] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.896658][ T6019] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.899803][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 104.902798][ T6019] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 104.916657][ T6019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.922546][ T6019] usb 7-1: config 0 descriptor?? [ 105.049513][ T8455] __nla_validate_parse: 1 callbacks suppressed [ 105.049526][ T8455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.717'. [ 105.143910][ T8463] netlink: 'syz.1.718': attribute type 1 has an invalid length. [ 105.223107][ T8469] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 105.316917][ T8476] netlink: 228 bytes leftover after parsing attributes in process `syz.0.722'. [ 105.319914][ T8476] netlink: 228 bytes leftover after parsing attributes in process `syz.0.722'. [ 105.350676][ T6019] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 105.353056][ T6019] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 105.358678][ T6019] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 105.366158][ T6019] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 105.368801][ T6019] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 105.371541][ T6019] mcp2221 0003:04D8:00DD.0011: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 105.373672][ T8469] syz.1.720 (8469): drop_caches: 2 [ 105.447402][ T8481] tmpfs: Unknown parameter 'usrquota' [ 105.477838][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 105.549862][ T5998] usb 7-1: USB disconnect, device number 15 [ 105.652481][ T8494] netlink: 76 bytes leftover after parsing attributes in process `syz.4.728'. [ 105.759137][ T8498] pimreg: entered allmulticast mode [ 105.763506][ T8498] pimreg: left allmulticast mode [ 106.259739][ T8525] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.736'. [ 106.263225][ T8525] netlink: Conntrack attr has 4 unknown bytes [ 106.301389][ T8514] netlink: 'syz.4.733': attribute type 32 has an invalid length. [ 106.314363][ T8514] bond0: Setting coupled_control to off (0) [ 106.316411][ T8514] bond0: entered promiscuous mode [ 106.316826][ T8523] openvswitch: netlink: Unknown key attributes 2 [ 106.333853][ T8530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=8530 comm=syz.0.738 [ 106.483409][ T8545] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.742'. [ 106.532383][ T8551] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 106.533191][ T208] bond0 (unregistering): Released all slaves [ 106.577877][ T8556] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 106.595413][ T8556] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 106.696709][ T1470] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 106.839602][ T8577] /dev/nullb0: Can't lookup blockdev [ 106.886866][ T831] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 107.067169][ T831] usb 5-1: Using ep0 maxpacket: 8 [ 107.071097][ T831] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.074852][ T831] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.078785][ T831] usb 5-1: config 0 interface 0 has no altsetting 0 [ 107.081492][ T831] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 107.084592][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.089622][ T831] usb 5-1: config 0 descriptor?? [ 107.146877][ T8596] overlayfs: failed to clone upperpath [ 107.222506][ T8600] overlayfs: failed to clone upperpath [ 107.271249][ T8602] Cannot find set identified by id 0 to match [ 107.273976][ T8603] autofs: Bad value for 'fd' [ 107.300900][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'. [ 107.388777][ T40] kauditd_printk_skb: 239 callbacks suppressed [ 107.388833][ T40] audit: type=1400 audit(1775709640.767:2630): avc: denied { create } for pid=8607 comm="syz.4.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 107.398269][ T40] audit: type=1400 audit(1775709640.777:2631): avc: denied { setopt } for pid=8607 comm="syz.4.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 107.433697][ T40] audit: type=1400 audit(1775709640.807:2632): avc: denied { watch } for pid=8609 comm="syz.4.766" path="/158/control" dev="tmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 107.499307][ T831] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 107.506815][ T831] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 107.509102][ T831] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 107.511261][ T831] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 107.513680][ T831] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 107.518689][ T40] audit: type=1400 audit(1775709640.897:2633): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.518721][ T40] audit: type=1400 audit(1775709640.897:2634): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.518749][ T40] audit: type=1400 audit(1775709640.897:2635): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.546612][ T40] audit: type=1400 audit(1775709640.917:2636): avc: denied { read write } for pid=8614 comm="syz.2.768" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.551864][ T831] mcp2221 0003:04D8:00DD.0012: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 107.572076][ T40] audit: type=1400 audit(1775709640.917:2637): avc: denied { open } for pid=8614 comm="syz.2.768" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.580101][ T40] audit: type=1400 audit(1775709640.927:2638): avc: denied { map } for pid=8614 comm="syz.2.768" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.588378][ T40] audit: type=1400 audit(1775709640.927:2639): avc: denied { execute } for pid=8614 comm="syz.2.768" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.666927][ T8612] netlink: 'syz.4.767': attribute type 32 has an invalid length. [ 107.679447][ T8612] bond0: Setting coupled_control to off (0) [ 107.681416][ T8612] bond0: entered promiscuous mode [ 107.695593][ T6007] usb 5-1: USB disconnect, device number 11 [ 107.844094][ T225] bond0 (unregistering): Released all slaves [ 107.964493][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.773'. [ 108.385615][ T8649] kAFS: unable to lookup cell 'syz1' [ 108.445922][ T8656] tmpfs: Bad value for 'mpol' [ 108.544882][ T8662] PM: Enabling pm_trace changes system date and time during resume. [ 108.544882][ T8662] PM: Correct system time has to be restored manually after resume. [ 108.563139][ T8665] nbd: socks must be embedded in a SOCK_ITEM attr [ 108.592348][ T8662] netlink: 64 bytes leftover after parsing attributes in process `syz.1.782'. [ 108.678859][ T8658] IPVS: length: 24 != 12312 [ 108.680769][ T8658] netlink: 'syz.0.780': attribute type 32 has an invalid length. [ 108.701913][ T8658] bond0: Setting coupled_control to off (0) [ 108.704755][ T8658] bond0: entered promiscuous mode [ 108.870961][ T60] bond0 (unregistering): Released all slaves [ 108.880487][ T5942] Bluetooth: hci1: Unknown advertising packet type: 0x1e [ 108.880571][ T5942] Bluetooth: hci1: Malformed LE Event: 0x0d [ 108.886696][ T5942] Bluetooth: hci1: Unknown advertising packet type: 0x1e [ 108.886715][ T5942] Bluetooth: hci1: Malformed LE Event: 0x0d [ 108.905678][ T8720] syzkaller0: entered promiscuous mode [ 108.908160][ T8720] syzkaller0: entered allmulticast mode [ 109.197950][ T8744] IPVS: length: 24 != 12312 [ 109.200465][ T8744] netlink: 'syz.4.805': attribute type 32 has an invalid length. [ 109.901771][ T8744] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 110.060711][ T8758] bridge1: entered promiscuous mode [ 110.168859][ T8771] __nla_validate_parse: 2 callbacks suppressed [ 110.168873][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 110.174692][ T8771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.812'. [ 110.215171][ T5942] Bluetooth: hci2: hardware error 0x45 [ 110.246224][ T8777] netlink: 36 bytes leftover after parsing attributes in process `syz.0.815'. [ 110.367921][ T9] IPVS: starting estimator thread 0... [ 110.412368][ T8793] netlink: 68 bytes leftover after parsing attributes in process `syz.0.818'. [ 110.424216][ T8793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8793 comm=syz.0.818 [ 110.428445][ T8793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8793 comm=syz.0.818 [ 110.432441][ T8793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8793 comm=syz.0.818 [ 110.436380][ T8793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=8793 comm=syz.0.818 [ 110.440556][ T8793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=8793 comm=syz.0.818 [ 110.443292][ T8795] netlink: 'syz.1.820': attribute type 39 has an invalid length. [ 110.444940][ T8793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8793 comm=syz.0.818 [ 110.452764][ T8793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8793 comm=syz.0.818 [ 110.457552][ T8787] IPVS: using max 44 ests per chain, 105600 per kthread [ 110.650213][ T8819] Cannot find del_set index 4 as target [ 110.790532][ T8830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8830 comm=syz.0.833 [ 110.810651][ T8821] IPVS: length: 24 != 12312 [ 110.812341][ T8821] netlink: 'syz.1.830': attribute type 32 has an invalid length. [ 110.827500][ T8821] bond0: Setting coupled_control to off (0) [ 110.829478][ T8821] bond0: entered promiscuous mode [ 110.922728][ T5934] Bluetooth: hci1: unknown advertising packet type: 0x65 [ 110.922768][ T5934] Bluetooth: hci1: unknown advertising packet type: 0x68 [ 110.957557][ T8839] trusted_key: encrypted_key: insufficient parameters specified [ 110.963813][ T8839] netlink: 68 bytes leftover after parsing attributes in process `syz.0.836'. [ 110.984928][ T208] bond0 (unregistering): Released all slaves [ 111.021087][ T8847] netlink: 'syz.2.840': attribute type 1 has an invalid length. [ 111.370830][ T8869] hub 8-0:1.0: USB hub found [ 111.372660][ T8869] hub 8-0:1.0: 1 port detected [ 111.754469][ T8874] binder: 8873:8874 ioctl c0306201 2000000001c0 returned -14 [ 111.758168][ T8874] random: crng reseeded on system resumption [ 111.875386][ T8871] IPVS: length: 24 != 12312 [ 111.878005][ T8871] netlink: 'syz.0.848': attribute type 32 has an invalid length. [ 111.893727][ T8871] bond0: Setting coupled_control to off (0) [ 111.895724][ T8871] bond0: entered promiscuous mode [ 112.039387][ T8902] overlayfs: upper fs does not support tmpfile. [ 112.080082][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.860'. [ 112.090304][ T225] bond0 (unregistering): Released all slaves [ 112.136237][ T8907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=8907 comm=syz.0.860 [ 112.149890][ T8907] syz.0.860 (8907) used greatest stack depth: 19104 bytes left [ 112.183932][ T8916] syzkaller0: entered promiscuous mode [ 112.185849][ T8916] syzkaller0: entered allmulticast mode [ 112.189555][ T8918] veth1_macvtap: left promiscuous mode [ 112.191315][ T8918] macsec0: entered promiscuous mode [ 112.203586][ T8918] veth1_macvtap: entered promiscuous mode [ 112.205730][ T8918] macsec0: left promiscuous mode [ 112.206689][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 112.277265][ T5942] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 112.279647][ T8926] overlayfs: failed to clone upperpath [ 112.350389][ T8932] tmpfs: Bad value for 'mpol' [ 112.356694][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 112.361146][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.365966][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.370852][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.373750][ T34] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 112.377738][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.384272][ T34] usb 6-1: config 0 descriptor?? [ 112.417880][ T40] kauditd_printk_skb: 429 callbacks suppressed [ 112.417893][ T40] audit: type=1400 audit(1775709645.797:3069): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 112.565297][ T40] audit: type=1400 audit(1775709645.937:3070): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.572837][ T40] audit: type=1400 audit(1775709645.937:3071): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.579990][ T40] audit: type=1400 audit(1775709645.937:3072): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.587940][ T40] audit: type=1400 audit(1775709645.947:3073): avc: denied { read } for pid=8937 comm="syz.2.871" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 112.594308][ T40] audit: type=1400 audit(1775709645.947:3074): avc: denied { open } for pid=8937 comm="syz.2.871" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 112.602428][ T40] audit: type=1400 audit(1775709645.947:3075): avc: denied { ioctl } for pid=8937 comm="syz.2.871" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 112.609996][ T40] audit: type=1400 audit(1775709645.977:3076): avc: denied { ioctl } for pid=8875 comm="syz.1.851" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.617404][ T40] audit: type=1400 audit(1775709645.987:3077): avc: denied { create } for pid=8937 comm="syz.2.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.623556][ T40] audit: type=1400 audit(1775709645.987:3078): avc: denied { write } for pid=8937 comm="syz.2.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.676463][ T8935] IPVS: length: 24 != 12312 [ 112.679466][ T8935] netlink: 'syz.4.869': attribute type 32 has an invalid length. [ 112.691207][ T8935] bond0: Setting coupled_control to off (0) [ 112.693024][ T8935] bond0: entered promiscuous mode [ 112.809690][ T34] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 112.812169][ T34] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 112.815052][ T34] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 112.828128][ T34] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 112.830425][ T34] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 112.833248][ T34] mcp2221 0003:04D8:00DD.0013: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 112.891869][ T208] bond0 (unregistering): Released all slaves [ 112.936479][ T8956] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8956 comm=syz.4.874 [ 112.977603][ T8960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.875'. [ 113.014738][ T34] usb 6-1: USB disconnect, device number 9 [ 113.087231][ T8972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.878'. [ 113.092895][ T8973] kernel profiling enabled (shift: 63) [ 113.095990][ T8973] profiling shift: 63 too large [ 113.466670][ T39] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 113.554859][ T8991] ip6gretap0: entered promiscuous mode [ 113.610027][ T8993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.627033][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 113.635857][ T39] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 113.639980][ T39] usb 5-1: config 94 has too many interfaces: 148, using maximum allowed: 32 [ 113.642753][ T39] usb 5-1: config 94 has an invalid descriptor of length 103, skipping remainder of the config [ 113.646049][ T39] usb 5-1: config 94 has 0 interfaces, different from the descriptor's value: 148 [ 113.649285][ T39] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.652137][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.657591][ T8996] netlink: 'syz.2.886': attribute type 30 has an invalid length. [ 113.806445][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'. [ 113.874812][ T39] usb 5-1: string descriptor 0 read error: -71 [ 113.881915][ T39] usb 5-1: USB disconnect, device number 12 [ 113.887714][ T9014] xt_CONNSECMARK: invalid mode: 0 [ 113.889782][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 113.929285][ T9017] Bluetooth: hci4: Frame reassembly failed (-84) [ 113.935245][ T208] Bluetooth: hci4: Frame reassembly failed (-84) [ 114.167078][ T831] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 114.215821][ T9027] IPVS: length: 24 != 12312 [ 114.218570][ T9027] netlink: 'syz.4.895': attribute type 32 has an invalid length. [ 114.232312][ T9027] bond0: Setting coupled_control to off (0) [ 114.234277][ T9027] bond0: entered promiscuous mode [ 114.318750][ T225] bond0 (unregistering): Released all slaves [ 114.326673][ T831] usb 6-1: Using ep0 maxpacket: 8 [ 114.329795][ T831] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.333282][ T831] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.336538][ T831] usb 6-1: config 0 interface 0 has no altsetting 0 [ 114.339543][ T831] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 114.342388][ T831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.346746][ T831] usb 6-1: config 0 descriptor?? [ 114.555201][ T9052] fuse: Unknown parameter 'rotmode' [ 114.560823][ T9052] fuse: Unknown parameter 'rotmode' [ 114.754168][ T831] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 114.756486][ T831] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 114.761044][ T831] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 114.763547][ T831] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 114.765757][ T831] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 114.771318][ T831] mcp2221 0003:04D8:00DD.0014: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 114.961332][ T6018] usb 6-1: USB disconnect, device number 10 [ 115.102520][ T9079] netlink: 'syz.4.909': attribute type 7 has an invalid length. [ 115.104991][ T9079] netlink: 'syz.4.909': attribute type 8 has an invalid length. [ 115.305543][ T9084] ip6t_REJECT: ECHOREPLY is not supported [ 115.567877][ T9093] __nla_validate_parse: 2 callbacks suppressed [ 115.567891][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 115.680104][ T9102] netlink: 36 bytes leftover after parsing attributes in process `syz.0.917'. [ 115.691801][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 115.695631][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 115.956727][ T5934] Bluetooth: hci4: command 0x1003 tx timeout [ 115.958022][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 116.009532][ T9109] openvswitch: netlink: IP tunnel dst address not specified [ 116.071090][ T9115] overlayfs: failed to clone upperpath [ 116.107090][ T9105] nbd1: detected capacity change from 0 to 127 [ 116.122695][ T5934] block nbd1: Receive control failed (result -104) [ 116.122782][ T5942] block nbd1: Receive control failed (result -32) [ 116.258409][ T9127] bond3 (unregistering): Released all slaves [ 116.286853][ T6018] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 116.436867][ T6018] usb 7-1: Using ep0 maxpacket: 8 [ 116.440857][ T6018] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.445518][ T6018] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.450005][ T6018] usb 7-1: config 0 interface 0 has no altsetting 0 [ 116.452948][ T6018] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 116.457103][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.463780][ T6018] usb 7-1: config 0 descriptor?? [ 116.871900][ T6018] mcp2221 0003:04D8:00DD.0015: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 117.018637][ T9130] overlayfs: failed to clone upperpath [ 117.030337][ T9130] netlink: 36 bytes leftover after parsing attributes in process `syz.4.927'. [ 117.039013][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'. [ 117.042135][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'. [ 117.070811][ T34] usb 7-1: USB disconnect, device number 16 [ 117.072357][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 117.076685][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 117.177120][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'. [ 117.219518][ T9142] IPVS: length: 24 != 12312 [ 117.221178][ T9142] netlink: 'syz.4.930': attribute type 32 has an invalid length. [ 117.231801][ T9142] bond0: Setting coupled_control to off (0) [ 117.233750][ T9142] bond0: entered promiscuous mode [ 117.241086][ T9161] sp0: Synchronizing with TNC [ 117.272153][ T9161] bridge3: port 1(veth5) entered blocking state [ 117.274316][ T9161] bridge3: port 1(veth5) entered disabled state [ 117.276715][ T9161] veth5: entered allmulticast mode [ 117.279199][ T9161] veth5: entered promiscuous mode [ 117.304953][ T9161] bridge3: port 2(veth0_to_bond) entered blocking state [ 117.309106][ T9161] bridge3: port 2(veth0_to_bond) entered disabled state [ 117.311719][ T9161] veth0_to_bond: entered allmulticast mode [ 117.314561][ T9161] veth0_to_bond: entered promiscuous mode [ 117.318295][ T9161] sp0: Found TNC [ 117.321935][ T9159] [U] ` [ 117.351329][ T12] bond0 (unregistering): Released all slaves [ 117.585672][ T40] kauditd_printk_skb: 249 callbacks suppressed [ 117.585690][ T40] audit: type=1400 audit(1775709650.957:3328): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.596754][ T40] audit: type=1400 audit(1775709650.957:3329): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.604692][ T40] audit: type=1400 audit(1775709650.957:3330): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.615801][ T40] audit: type=1400 audit(1775709650.977:3331): avc: denied { name_bind } for pid=9176 comm="syz.2.940" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 117.623794][ T40] audit: type=1400 audit(1775709650.977:3332): avc: denied { node_bind } for pid=9176 comm="syz.2.940" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 117.626024][ T9180] ip6tnl1: entered promiscuous mode [ 117.631168][ T40] audit: type=1400 audit(1775709650.977:3333): avc: denied { create } for pid=9176 comm="syz.2.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.639662][ T40] audit: type=1400 audit(1775709650.977:3334): avc: denied { read } for pid=9175 comm="syz.0.948" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 117.647781][ T40] audit: type=1400 audit(1775709650.977:3335): avc: denied { open } for pid=9175 comm="syz.0.948" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 117.656393][ T40] audit: type=1400 audit(1775709650.977:3336): avc: denied { write } for pid=9176 comm="syz.2.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.664893][ T40] audit: type=1400 audit(1775709650.977:3337): avc: denied { prog_load } for pid=9176 comm="syz.2.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 117.831924][ T9194] IPVS: length: 24 != 12312 [ 117.833626][ T9194] netlink: 'syz.4.945': attribute type 32 has an invalid length. [ 117.847877][ T9194] bond0: Setting coupled_control to off (0) [ 117.849880][ T9194] bond0: entered promiscuous mode [ 117.927075][ T225] bond0 (unregistering): Released all slaves [ 117.927552][ T9211] overlayfs: failed to clone upperpath [ 117.932705][ T9211] overlayfs: failed to clone upperpath [ 117.938036][ T9211] overlayfs: missing 'lowerdir' [ 118.039590][ T9221] [U] [ 118.041334][ T9221] [U] [ 118.042545][ T9221] [U] [ 118.043814][ T9221] [U] [ 118.045160][ T9221] [U] [ 118.046386][ T9221] [U] [ 118.047598][ T9221] [U] [ 118.048811][ T9221] [U] [ 118.050658][ T9221] [U] [ 118.051928][ T9221] [U] [ 118.053135][ T9221] [U] [ 118.054348][ T9221] [U] [ 118.055711][ T9221] [U] [ 118.056921][ T9221] [U] [ 118.058105][ T9221] [U] [ 118.059275][ T9221] [U] [ 118.086872][ T29] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 118.183422][ T9222] [U] [ 118.244235][ T9229] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 118.257213][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 118.261438][ T29] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.266349][ T29] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.269650][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 118.272233][ T9229] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 118.272688][ T9229] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 118.275669][ T29] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 118.275684][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.277564][ T29] usb 7-1: config 0 descriptor?? [ 118.326232][ T9232] bond3: (slave gretap1): making interface the new active one [ 118.329856][ T9232] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 118.338573][ T9232] macvlan2: entered promiscuous mode [ 118.340339][ T9232] macvlan2: entered allmulticast mode [ 118.342426][ T9232] bond3: entered promiscuous mode [ 118.344114][ T9232] gretap1: entered promiscuous mode [ 118.346299][ T9232] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 118.350815][ T9232] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 118.356454][ T9232] bond3: left promiscuous mode [ 118.359035][ T9232] gretap1: left promiscuous mode [ 118.700329][ T29] hid_parser_main: 5 callbacks suppressed [ 118.700350][ T29] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 118.705472][ T29] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 118.709801][ T29] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 118.717463][ T29] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 118.720543][ T29] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 118.723616][ T29] mcp2221 0003:04D8:00DD.0016: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 118.895718][ T6019] usb 7-1: USB disconnect, device number 17 [ 119.583083][ T9257] sctp: [Deprecated]: syz.2.963 (pid 9257) Use of int in maxseg socket option. [ 119.583083][ T9257] Use struct sctp_assoc_value instead [ 119.595101][ T9257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9257 comm=syz.2.963 [ 119.635221][ T9252] IPVS: length: 24 != 12312 [ 119.637106][ T9252] netlink: 'syz.4.960': attribute type 32 has an invalid length. [ 119.648026][ T9252] bond0: Setting coupled_control to off (0) [ 119.650166][ T9252] bond0: entered promiscuous mode [ 119.746671][ T86] bond0 (unregistering): Released all slaves [ 119.911096][ T9274] overlayfs: failed to resolve './bus/file0': -2 [ 120.004288][ T9281] netlink: 'syz.2.972': attribute type 8 has an invalid length. [ 120.027462][ T9282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.035680][ T9282] No such timeout policy "syz1" [ 120.171587][ T9284] IPVS: length: 24 != 12312 [ 120.173229][ T9284] netlink: 'syz.2.973': attribute type 32 has an invalid length. [ 120.185278][ T9284] bond0: Setting coupled_control to off (0) [ 120.187469][ T9284] bond0: entered promiscuous mode [ 120.265515][ T9289] input: syz0 as /devices/virtual/input/input11 [ 120.277867][ T86] bond0 (unregistering): Released all slaves [ 120.330761][ T9291] bond3: entered promiscuous mode [ 120.407304][ T9301] netlink: 'syz.4.977': attribute type 1 has an invalid length. [ 120.422069][ T9301] bond2: entered promiscuous mode [ 120.423994][ T9301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.428755][ T9301] netlink: 'syz.4.977': attribute type 1 has an invalid length. [ 120.431329][ T9301] netlink: 'syz.4.977': attribute type 1 has an invalid length. [ 120.434037][ T9301] netlink: 'syz.4.977': attribute type 1 has an invalid length. [ 120.437222][ T9302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9302 comm=syz.4.977 [ 120.606774][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 120.757169][ T5934] Bluetooth: hci4: command 0x1003 tx timeout [ 120.760900][ T9] usb 7-1: config 1 interface 1 has no altsetting 1 [ 120.761443][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 120.769508][ T9] usb 7-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40 [ 120.773733][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.776394][ T9] usb 7-1: Product: syz [ 120.778455][ T9] usb 7-1: Manufacturer: syz [ 120.780199][ T9] usb 7-1: SerialNumber: syz [ 120.809728][ T9315] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 120.843259][ T9320] syzkaller1: entered promiscuous mode [ 120.845227][ T9320] syzkaller1: entered allmulticast mode [ 121.000560][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.003630][ T9] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 121.010458][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.012994][ T9] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 121.019792][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.044766][ T9] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 121.056788][ T9] usb 7-1: USB disconnect, device number 18 [ 121.132692][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.185272][ T9323] IPVS: length: 24 != 12312 [ 121.198093][ T9323] bond0: Setting coupled_control to off (0) [ 121.200265][ T9323] bond0: entered promiscuous mode [ 121.256271][ T5942] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 121.264533][ T5942] CPU: 2 UID: 0 PID: 5942 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 121.264568][ T5942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.264583][ T5942] Workqueue: hci3 hci_rx_work [ 121.264619][ T5942] Call Trace: [ 121.264676][ T5942] [ 121.264686][ T5942] dump_stack_lvl+0x100/0x190 [ 121.264811][ T5942] sysfs_warn_dup.cold+0x1c/0x28 [ 121.264883][ T5942] sysfs_create_dir_ns+0x24b/0x2b0 [ 121.265040][ T5942] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 121.265073][ T5942] ? find_held_lock+0x2b/0x80 [ 121.265099][ T5942] ? kobject_add_internal+0x25f/0x930 [ 121.265203][ T5942] ? kobject_add_internal+0x25f/0x930 [ 121.265231][ T5942] ? do_raw_spin_unlock+0x145/0x1e0 [ 121.265261][ T5942] kobject_add_internal+0x2c8/0x930 [ 121.265292][ T5942] kobject_add+0x16a/0x1e0 [ 121.265315][ T5942] ? __pfx_kobject_add+0x10/0x10 [ 121.265335][ T5942] ? class_to_subsys+0x10f/0x150 [ 121.265365][ T5942] ? kobject_put+0xb9/0x640 [ 121.265385][ T5942] ? _raw_spin_unlock+0x28/0x50 [ 121.265419][ T5942] device_add+0x294/0x1950 [ 121.265443][ T5942] ? __pfx_dev_set_name+0x10/0x10 [ 121.265469][ T5942] ? __pfx_device_add+0x10/0x10 [ 121.265493][ T5942] ? mgmt_send_event_skb+0x2fb/0x460 [ 121.265528][ T5942] hci_conn_add_sysfs+0x1a3/0x260 [ 121.265560][ T5942] le_conn_complete_evt+0x11eb/0x1f60 [ 121.265593][ T5942] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 121.265627][ T5942] hci_le_conn_complete_evt+0x23c/0x3a0 [ 121.265656][ T5942] ? skb_pull_data+0x15f/0x1e0 [ 121.265682][ T5942] hci_le_meta_evt+0x34a/0x5f0 [ 121.265709][ T5942] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 121.265740][ T5942] hci_event_packet+0x51c/0xcd0 [ 121.265766][ T5942] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 121.265795][ T5942] ? __pfx_hci_event_packet+0x10/0x10 [ 121.265824][ T5942] ? kcov_remote_start+0x374/0x660 [ 121.265851][ T5942] ? lockdep_hardirqs_on+0x78/0x100 [ 121.265888][ T5942] hci_rx_work+0x451/0xfc0 [ 121.265919][ T5942] process_one_work+0xa23/0x19a0 [ 121.265961][ T5942] ? __pfx_process_one_work+0x10/0x10 [ 121.265996][ T5942] ? __pfx_hci_rx_work+0x10/0x10 [ 121.266027][ T5942] worker_thread+0x5ef/0xe50 [ 121.266061][ T5942] ? kthread+0x13a/0x450 [ 121.266079][ T5942] ? __pfx_worker_thread+0x10/0x10 [ 121.266098][ T5942] kthread+0x370/0x450 [ 121.266115][ T5942] ? __pfx_kthread+0x10/0x10 [ 121.266134][ T5942] ret_from_fork+0x754/0xd80 [ 121.266158][ T5942] ? __pfx_ret_from_fork+0x10/0x10 [ 121.266181][ T5942] ? __switch_to+0x7b4/0x1120 [ 121.266206][ T5942] ? __pfx_kthread+0x10/0x10 [ 121.266226][ T5942] ret_from_fork_asm+0x1a/0x30 [ 121.266262][ T5942] [ 121.266295][ T5942] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 121.286707][ T1470] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 121.288055][ T5942] Bluetooth: hci3: failed to register connection device [ 121.425815][ T9342] __nla_validate_parse: 17 callbacks suppressed [ 121.425829][ T9342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.988'. [ 121.446754][ T1470] usb 6-1: Using ep0 maxpacket: 8 [ 121.452166][ T1470] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.455473][ T1470] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.458769][ T1470] usb 6-1: config 0 interface 0 has no altsetting 0 [ 121.461247][ T1470] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 121.464425][ T1470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.470460][ T1470] usb 6-1: config 0 descriptor?? [ 121.498552][ T9347] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 121.501536][ T9347] overlayfs: missing 'lowerdir' [ 121.553935][ T225] bond0 (unregistering): Released all slaves [ 121.736645][ T9353] dlm: Unknown command passed to DLM device : 33 [ 121.736645][ T9353] [ 121.881460][ T1470] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 121.884194][ T1470] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 121.886807][ T1470] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 121.889148][ T1470] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 121.891343][ T1470] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 121.893899][ T1470] mcp2221 0003:04D8:00DD.0017: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 122.019113][ T9365] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 122.046690][ T9369] usb usb7: usbfs: process 9369 (syz.2.995) did not claim interface 0 before use [ 122.079320][ T1470] usb 6-1: USB disconnect, device number 11 [ 122.200831][ T9373] IPVS: length: 24 != 12312 [ 122.217773][ T9373] bond0: Setting coupled_control to off (0) [ 122.220158][ T9373] bond0: entered promiscuous mode [ 122.401553][ T60] bond0 (unregistering): Released all slaves [ 122.615453][ T40] kauditd_printk_skb: 260 callbacks suppressed [ 122.615466][ T40] audit: type=1400 audit(1775709655.987:3598): avc: denied { prog_load } for pid=9385 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.623333][ T40] audit: type=1400 audit(1775709655.987:3599): avc: denied { bpf } for pid=9385 comm="syz.1.1001" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.630534][ T40] audit: type=1400 audit(1775709655.987:3600): avc: denied { perfmon } for pid=9385 comm="syz.1.1001" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.637370][ T40] audit: type=1400 audit(1775709655.987:3601): avc: denied { prog_run } for pid=9385 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.646924][ T40] audit: type=1400 audit(1775709656.007:3602): avc: denied { ioctl } for pid=9385 comm="syz.1.1001" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 122.663967][ T40] audit: type=1400 audit(1775709656.037:3603): avc: denied { read } for pid=9387 comm="syz.1.1002" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 122.671420][ T40] audit: type=1400 audit(1775709656.037:3604): avc: denied { open } for pid=9387 comm="syz.1.1002" path="net:[4026532886]" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 122.681550][ T40] audit: type=1400 audit(1775709656.037:3605): avc: denied { create } for pid=9387 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.705235][ T40] audit: type=1400 audit(1775709656.077:3606): avc: denied { map_create } for pid=9348 comm="syz.0.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.711562][ T40] audit: type=1400 audit(1775709656.077:3607): avc: denied { map_read map_write } for pid=9348 comm="syz.0.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.784909][ T9403] CIFS: iocharset name too long [ 122.936141][ T9412] binder: BINDER_SET_CONTEXT_MGR already set [ 122.947520][ T9412] binder: 9411:9412 ioctl 4018620d 200000000480 returned -16 [ 122.953987][ T9412] binder_alloc: 9411: binder_alloc_buf size 12520 failed, no address space [ 122.966937][ T9412] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 123.016842][ T9406] IPVS: length: 24 != 12312 [ 123.018477][ T9406] validate_nla: 31 callbacks suppressed [ 123.018486][ T9406] netlink: 'syz.2.1008': attribute type 32 has an invalid length. [ 123.067870][ T9406] bond0: Setting coupled_control to off (0) [ 123.072511][ T9406] bond0: entered promiscuous mode [ 123.186692][ T6019] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 123.300103][ T208] bond0 (unregistering): Released all slaves [ 123.345981][ T9428] netlink: 'syz.2.1014': attribute type 1 has an invalid length. [ 123.346642][ T6019] usb 6-1: Using ep0 maxpacket: 8 [ 123.351715][ T9428] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1014'. [ 123.356959][ T6019] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.361167][ T6019] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.364245][ T6019] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.367979][ T6019] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 123.371475][ T6019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.390111][ T6019] usb 6-1: config 0 descriptor?? [ 123.581082][ T9436] syzkaller0: entered promiscuous mode [ 123.582897][ T9436] syzkaller0: entered allmulticast mode [ 123.590072][ T9436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9436 comm=syz.2.1018 [ 123.594336][ T9436] tc action pedit offset must be on 32 bit boundaries [ 123.751128][ T9446] rtc_cmos 00:05: Alarms can be up to one day in the future [ 123.809140][ T6019] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 123.815161][ T6019] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 123.824158][ T9453] netlink: 'syz.2.1025': attribute type 2 has an invalid length. [ 123.826768][ T6019] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 123.829293][ T6019] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 123.833786][ T6019] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 123.844095][ T6019] mcp2221 0003:04D8:00DD.0018: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 123.940602][ T9448] IPVS: length: 24 != 12312 [ 124.008899][ T6019] usb 6-1: USB disconnect, device number 12 [ 124.117121][ T9467] overlay: ./file0 is not a directory [ 124.136654][ T29] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 124.289510][ T29] usb 7-1: config 1 has an invalid interface number: 34 but max is 0 [ 124.297119][ T29] usb 7-1: config 1 has an invalid interface number: 178 but max is 0 [ 124.301599][ T29] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 124.304519][ T29] usb 7-1: config 1 has no interface number 0 [ 124.307847][ T29] usb 7-1: config 1 has no interface number 1 [ 124.311765][ T29] usb 7-1: config 1 interface 34 altsetting 70 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 124.316823][ T29] usb 7-1: config 1 interface 34 altsetting 70 has an endpoint descriptor with address 0x74, changing to 0x4 [ 124.321378][ T29] usb 7-1: config 1 interface 34 altsetting 70 endpoint 0x4 has invalid maxpacket 40789, setting to 64 [ 124.324998][ T29] usb 7-1: config 1 interface 34 altsetting 70 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 124.329553][ T29] usb 7-1: config 1 interface 34 altsetting 70 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 124.334654][ T29] usb 7-1: too many endpoints for config 1 interface 178 altsetting 69: 84, using maximum allowed: 30 [ 124.339093][ T29] usb 7-1: config 1 interface 178 altsetting 69 has a duplicate endpoint with address 0x4, skipping [ 124.342561][ T29] usb 7-1: config 1 interface 178 altsetting 69 has a duplicate endpoint with address 0x6, skipping [ 124.345973][ T29] usb 7-1: config 1 interface 178 altsetting 69 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 124.354493][ T29] usb 7-1: config 1 interface 178 altsetting 69 has a duplicate endpoint with address 0x1, skipping [ 124.359389][ T29] usb 7-1: config 1 interface 178 altsetting 69 has an invalid descriptor for endpoint zero, skipping [ 124.363384][ T29] usb 7-1: config 1 interface 178 altsetting 69 has an endpoint descriptor with address 0x39, changing to 0x9 [ 124.367174][ T29] usb 7-1: config 1 interface 178 altsetting 69 has a duplicate endpoint with address 0x9, skipping [ 124.371725][ T29] usb 7-1: config 1 interface 178 altsetting 69 has a duplicate endpoint with address 0x3, skipping [ 124.375828][ T29] usb 7-1: config 1 interface 178 altsetting 69 has 7 endpoint descriptors, different from the interface descriptor's value: 84 [ 124.380173][ T29] usb 7-1: config 1 interface 34 has no altsetting 0 [ 124.382558][ T29] usb 7-1: config 1 interface 178 has no altsetting 0 [ 124.387572][ T29] usb 7-1: New USB device found, idVendor=12d1, idProduct=28b4, bcdDevice= 7.eb [ 124.390583][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.393229][ T29] usb 7-1: Product: 숱쥚㓥Ɛޒ餏좈 [ 124.394993][ T29] usb 7-1: Manufacturer: ꮣ볳ꁡᤏ䍭䨿뵁쪙(ಿᛍ깞Řᱶ諭ᨐʊ㎐㻶⏄⛌᠟䈘꬙堓婠ܮ锫膶ἧꄄ뫤ᮗ෶ⅽ섴᧠炫툴袸᳍嘼۔廧熋完奭犘⚵㱢乚ﴵἳဪ橝ᣭ㖃㯒뱣䒊곫橡ᦝꍸꚞﳃ쒅䧪틀、醶쏾뇭隬톙絠Ԍ뉖뢋⌶뷟췀썏揁䐥崌첱㡣枡弄烡뎝穢ꁕꊫ犦趸恻熺랗㲽ᙾ㪅鰼棨1 [ 124.412177][ T29] usb 7-1: SerialNumber: х [ 124.417775][ T9458] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 124.456408][ T9493] netlink: 384 bytes leftover after parsing attributes in process `syz.0.1036'. [ 124.680271][ T9503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1040'. [ 124.694781][ T29] option 7-1:1.34: GSM modem (1-port) converter detected [ 124.712982][ T29] usb 7-1: USB disconnect, device number 19 [ 124.719013][ T29] option 7-1:1.34: device disconnected [ 124.723816][ T9503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9503 comm=syz.0.1040 [ 124.761211][ T9498] IPVS: length: 24 != 12312 [ 124.783197][ T9506] bond4: Removing last ns target with arp_interval on [ 124.813792][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 124.862155][ T5942] block nbd2: Receive control failed (result -1) [ 124.983670][ T9513] xt_l2tp: invalid flags combination: 8 [ 125.229282][ T9525] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 125.295440][ T9534] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 125.465513][ T9544] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.615779][ T9542] IPVS: length: 24 != 12312 [ 125.670717][ T9557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9557 comm=syz.2.1056 [ 125.849725][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 125.877656][ T9584] ksmbd: Unknown IPC event: 1, ignore. [ 125.879462][ T9585] ksmbd: Unknown IPC event: 1, ignore. [ 125.881506][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 125.884247][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 126.042197][ T9584] [ 126.042999][ T9584] ====================================================== [ 126.045208][ T9584] WARNING: possible circular locking dependency detected [ 126.047444][ T9584] syzkaller #0 Not tainted [ 126.049017][ T9584] ------------------------------------------------------ [ 126.051275][ T9584] syz.2.1066/9584 is trying to acquire lock: [ 126.053261][ T9584] ffffffff8e9ab8a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 126.056582][ T9584] [ 126.056582][ T9584] but task is already holding lock: [ 126.058907][ T9584] ffffffff8e9794e8 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 126.061944][ T9584] [ 126.061944][ T9584] which lock already depends on the new lock. [ 126.061944][ T9584] [ 126.065350][ T9584] [ 126.065350][ T9584] the existing dependency chain (in reverse order) is: [ 126.068127][ T9584] [ 126.068127][ T9584] -> #8 (slab_mutex){+.+.}-{4:4}: [ 126.069053][ T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 126.070436][ T9584] __mutex_lock+0x1a2/0x1b90 [ 126.074496][ T9584] kmem_cache_destroy+0x59/0x180 [ 126.076234][ T9584] p9_client_destroy+0x20c/0x3a0 [ 126.077987][ T9584] v9fs_session_close+0x49/0x2d0 [ 126.079726][ T9584] v9fs_kill_super+0x4d/0xa0 [ 126.081337][ T9584] deactivate_locked_super+0xc1/0x1b0 [ 126.083217][ T9584] deactivate_super+0xe7/0x110 [ 126.084975][ T9584] cleanup_mnt+0x21f/0x450 [ 126.086572][ T9584] task_work_run+0x150/0x240 [ 126.088306][ T9584] exit_to_user_mode_loop+0x100/0x4a0 [ 126.090169][ T9584] do_syscall_64+0x67c/0xf80 [ 126.091813][ T9584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.093922][ T9584] [ 126.093922][ T9584] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 126.096557][ T9584] cpus_read_lock+0x42/0x170 [ 126.098239][ T9584] static_key_slow_inc+0x12/0x30 [ 126.100009][ T9584] setup_udp_tunnel_sock+0x542/0x680 [ 126.101874][ T9584] l2tp_tunnel_register+0xa01/0xc00 [ 126.103630][ T9584] pppol2tp_tunnel_get.constprop.0+0x3f0/0x540 [ 126.105719][ T9584] pppol2tp_connect+0xaf0/0x1c20 [ 126.107467][ T9584] __sys_connect_file+0x141/0x1a0 [ 126.109200][ T9584] __sys_connect+0x141/0x170 [ 126.110764][ T9584] __x64_sys_connect+0x72/0xb0 [ 126.112457][ T9584] do_syscall_64+0x106/0xf80 [ 126.114033][ T9584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.116001][ T9584] [ 126.116001][ T9584] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 126.118418][ T9584] lock_sock_nested+0x41/0xf0 [ 126.120018][ T9584] inet_shutdown+0x67/0x410 [ 126.121620][ T9584] nbd_mark_nsock_dead+0xae/0x5c0 [ 126.123358][ T9584] recv_work+0x5fb/0x8c0 [ 126.124835][ T9584] process_one_work+0xa23/0x19a0 [ 126.126516][ T9584] worker_thread+0x5ef/0xe50 [ 126.128148][ T9584] kthread+0x370/0x450 [ 126.129688][ T9584] ret_from_fork+0x754/0xd80 [ 126.131276][ T9584] ret_from_fork_asm+0x1a/0x30 [ 126.132935][ T9584] [ 126.132935][ T9584] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 126.135304][ T9584] __mutex_lock+0x1a2/0x1b90 [ 126.136919][ T9584] nbd_queue_rq+0x428/0x1080 [ 126.138593][ T9584] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 126.140703][ T9584] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 126.142807][ T9584] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 126.144808][ T9584] blk_mq_run_hw_queue+0x23c/0x670 [ 126.146549][ T9584] blk_mq_dispatch_list+0x51d/0x1360 [ 126.148495][ T9584] blk_mq_flush_plug_list+0x130/0x600 [ 126.150514][ T9584] __blk_flush_plug+0x2c4/0x4b0 [ 126.152270][ T9584] __submit_bio+0x584/0x6c0 [ 126.153911][ T9584] submit_bio_noacct_nocheck+0x562/0xc10 [ 126.155887][ T9584] submit_bio_noacct+0xd17/0x2010 [ 126.157639][ T9584] submit_bh_wbc+0x59c/0x770 [ 126.159221][ T9584] block_read_full_folio+0x4c8/0x8e0 [ 126.161102][ T9584] filemap_read_folio+0xfc/0x3b0 [ 126.162785][ T9584] do_read_cache_folio+0x2d7/0x6b0 [ 126.164549][ T9584] read_part_sector+0xd1/0x370 [ 126.166217][ T9584] adfspart_check_ICS+0x93/0x910 [ 126.168126][ T9584] bdev_disk_changed+0x7f8/0xc80 [ 126.169900][ T9584] blkdev_get_whole+0x187/0x290 [ 126.171623][ T9584] bdev_open+0x2c7/0xe40 [ 126.173134][ T9584] blkdev_open+0x34e/0x4f0 [ 126.174692][ T9584] do_dentry_open+0x6d8/0x1660 [ 126.176359][ T9584] vfs_open+0x82/0x3f0 [ 126.177807][ T9584] path_openat+0x208c/0x31a0 [ 126.179460][ T9584] do_file_open+0x20e/0x430 [ 126.181055][ T9584] do_sys_openat2+0x10d/0x1e0 [ 126.182710][ T9584] __x64_sys_openat+0x12d/0x210 [ 126.184482][ T9584] do_syscall_64+0x106/0xf80 [ 126.186128][ T9584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.188255][ T9584] [ 126.188255][ T9584] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 126.190573][ T9584] __mutex_lock+0x1a2/0x1b90 [ 126.192191][ T9584] nbd_queue_rq+0xba/0x1080 [ 126.193780][ T9584] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 126.195689][ T9584] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 126.197864][ T9584] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 126.199969][ T9584] blk_mq_run_hw_queue+0x23c/0x670 [ 126.201772][ T9584] blk_mq_dispatch_list+0x51d/0x1360 [ 126.203612][ T9584] blk_mq_flush_plug_list+0x130/0x600 [ 126.205464][ T9584] __blk_flush_plug+0x2c4/0x4b0 [ 126.207174][ T9584] __submit_bio+0x584/0x6c0 [ 126.208923][ T9584] submit_bio_noacct_nocheck+0x562/0xc10 [ 126.210870][ T9584] submit_bio_noacct+0xd17/0x2010 [ 126.212650][ T9584] submit_bh_wbc+0x59c/0x770 [ 126.214246][ T9584] block_read_full_folio+0x4c8/0x8e0 [ 126.216213][ T9584] filemap_read_folio+0xfc/0x3b0 [ 126.216616][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 126.217961][ T9584] do_read_cache_folio+0x2d7/0x6b0 [ 126.217981][ T9584] read_part_sector+0xd1/0x370 [ 126.217993][ T9584] adfspart_check_ICS+0x93/0x910 [ 126.218005][ T9584] bdev_disk_changed+0x7f8/0xc80 [ 126.221710][ T29] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.221797][ T9584] blkdev_get_whole+0x187/0x290 [ 126.224049][ T29] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.225661][ T9584] bdev_open+0x2c7/0xe40 [ 126.225680][ T9584] blkdev_open+0x34e/0x4f0 [ 126.225693][ T9584] do_dentry_open+0x6d8/0x1660 [ 126.225703][ T9584] vfs_open+0x82/0x3f0 [ 126.225715][ T9584] path_openat+0x208c/0x31a0 [ 126.228093][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.231435][ T9584] do_file_open+0x20e/0x430 [ 126.231457][ T9584] do_sys_openat2+0x10d/0x1e0 [ 126.231469][ T9584] __x64_sys_openat+0x12d/0x210 [ 126.231483][ T9584] do_syscall_64+0x106/0xf80 [ 126.231493][ T9584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.231505][ T9584] [ 126.231505][ T9584] -> #3 (set->srcu){.+.+}-{0:0} [ 126.233854][ T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 126.236613][ T9584] : [ 126.236623][ T9584] __synchronize_srcu+0xa2/0x300 [ 126.236640][ T9584] blk_mq_quiesce_queue+0x149/0x1c0 [ 126.236650][ T9584] elevator_switch+0x17b/0x7e0 [ 126.236661][ T9584] elevator_change+0x352/0x530 [ 126.236672][ T9584] elevator_set_default+0x29e/0x360 [ 126.236683][ T9584] blk_register_queue+0x412/0x590 [ 126.236694][ T9584] __add_disk+0x73f/0xe40 [ 126.238714][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.240220][ T9584] add_disk_fwnode+0x118/0x5c0 [ 126.240242][ T9584] nbd_dev_add+0x77a/0xb10 [ 126.240251][ T9584] nbd_init+0x291/0x2b0 [ 126.244747][ T29] usb 5-1: config 0 descriptor?? [ 126.245464][ T9584] do_one_initcall+0x11d/0x760 [ 126.245480][ T9584] kernel_init_freeable+0x6e5/0x7a0 [ 126.286491][ T9584] kernel_init+0x1f/0x1e0 [ 126.288085][ T9584] ret_from_fork+0x754/0xd80 [ 126.289692][ T9584] ret_from_fork_asm+0x1a/0x30 [ 126.291315][ T9584] [ 126.291315][ T9584] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 126.293798][ T9584] __mutex_lock+0x1a2/0x1b90 [ 126.295486][ T9584] elevator_change+0x1bc/0x530 [ 126.297157][ T9584] elevator_set_none+0x92/0xf0 [ 126.299052][ T9584] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 126.301126][ T9584] nbd_start_device+0x1a6/0xbd0 [ 126.302813][ T9584] nbd_genl_connect+0xff2/0x1a40 [ 126.304578][ T9584] genl_family_rcv_msg_doit+0x214/0x300 [ 126.306490][ T9584] genl_rcv_msg+0x560/0x800 [ 126.308216][ T9584] netlink_rcv_skb+0x159/0x420 [ 126.310000][ T9584] genl_rcv+0x28/0x40 [ 126.311484][ T9584] netlink_unicast+0x5aa/0x870 [ 126.313153][ T9584] netlink_sendmsg+0x8b0/0xda0 [ 126.314818][ T9584] ____sys_sendmsg+0x9e1/0xb70 [ 126.316601][ T9584] ___sys_sendmsg+0x190/0x1e0 [ 126.318298][ T9584] __sys_sendmsg+0x170/0x220 [ 126.320113][ T9584] do_syscall_64+0x106/0xf80 [ 126.321751][ T9584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.323785][ T9584] [ 126.323785][ T9584] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 126.326459][ T9584] blk_alloc_queue+0x610/0x790 [ 126.328170][ T9584] blk_mq_alloc_queue+0x174/0x290 [ 126.330112][ T9584] __blk_mq_alloc_disk+0x29/0x120 [ 126.331931][ T9584] nbd_dev_add+0x492/0xb10 [ 126.333496][ T9584] nbd_init+0x291/0x2b0 [ 126.334992][ T9584] do_one_initcall+0x11d/0x760 [ 126.336654][ T9584] kernel_init_freeable+0x6e5/0x7a0 [ 126.338504][ T9584] kernel_init+0x1f/0x1e0 [ 126.340214][ T9584] ret_from_fork+0x754/0xd80 [ 126.341858][ T9584] ret_from_fork_asm+0x1a/0x30 [ 126.343545][ T9584] [ 126.343545][ T9584] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 126.345807][ T9584] __lock_acquire+0x14b8/0x2630 [ 126.347496][ T9584] lock_acquire+0x1cf/0x380 [ 126.349069][ T9584] fs_reclaim_acquire+0xc4/0x100 [ 126.350777][ T9584] __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 126.352961][ T9584] kstrdup+0x51/0xe0 [ 126.354382][ T9584] kstrdup_const+0x63/0x80 [ 126.355963][ T9584] __kmem_cache_create_args+0x118/0x420 [ 126.357914][ T9584] bioset_init+0x5ee/0x8a0 [ 126.359487][ T9584] mddev_init+0x17c/0x820 [ 126.361141][ T9584] md_alloc+0xc7/0x10a0 [ 126.362635][ T9584] md_probe+0x73/0xf0 [ 126.364099][ T9584] blk_probe_dev+0x149/0x1e0 [ 126.365721][ T9584] blk_request_module+0x16/0xc0 [ 126.367490][ T9584] blkdev_get_no_open+0x9b/0xf0 [ 126.369523][ T9584] bdev_file_open_by_dev+0x70/0x210 [ 126.371514][ T9584] swsusp_check+0x72/0x470 [ 126.373478][ T9584] software_resume+0x6f/0x330 [ 126.375183][ T9584] resume_store+0x248/0x460 [ 126.376832][ T9584] kobj_attr_store+0x58/0x80 [ 126.378532][ T9584] sysfs_kf_write+0xf2/0x150 [ 126.380180][ T9584] kernfs_fop_write_iter+0x3e0/0x5f0 [ 126.382104][ T9584] vfs_write+0x6ac/0x1070 [ 126.383780][ T9584] ksys_write+0x12a/0x250 [ 126.385361][ T9584] do_syscall_64+0x106/0xf80 [ 126.386948][ T9584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.388950][ T9584] [ 126.388950][ T9584] other info that might help us debug this: [ 126.388950][ T9584] [ 126.392144][ T9584] Chain exists of: [ 126.392144][ T9584] fs_reclaim --> cpu_hotplug_lock --> slab_mutex [ 126.392144][ T9584] [ 126.395941][ T9584] Possible unsafe locking scenario: [ 126.395941][ T9584] [ 126.398574][ T9584] CPU0 CPU1 [ 126.400427][ T9584] ---- ---- [ 126.402146][ T9584] lock(slab_mutex); [ 126.403444][ T9584] lock(cpu_hotplug_lock); [ 126.405613][ T9584] lock(slab_mutex); [ 126.407707][ T9584] lock(fs_reclaim); [ 126.409273][ T9584] [ 126.409273][ T9584] *** DEADLOCK *** [ 126.409273][ T9584] [ 126.412488][ T9584] 9 locks held by syz.2.1066/9584: [ 126.414437][ T9584] #0: ffff88803b0d07f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 126.417901][ T9584] #1: ffff888026b90420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 126.421273][ T9584] #2: ffff88802cfd3488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 126.425075][ T9584] #3: ffff88801c772f08 (kn->active#86){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 126.428791][ T9584] #4: ffffffff8e6a43c8 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x330 [ 126.432025][ T9584] #5: ffffffff8f2ff1c8 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 126.434997][ T9584] #6: ffffffff90147928 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x3e/0x10a0 [ 126.437715][ T9584] #7: ffffffff8f2e43a8 (bio_slab_lock){+.+.}-{4:4}, at: bioset_init+0x2ad/0x8a0 [ 126.440936][ T9584] #8: ffffffff8e9794e8 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 126.444011][ T9584] [ 126.444011][ T9584] stack backtrace: [ 126.445955][ T9584] CPU: 2 UID: 0 PID: 9584 Comm: syz.2.1066 Not tainted syzkaller #0 PREEMPT(full) [ 126.445970][ T9584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.445977][ T9584] Call Trace: [ 126.445983][ T9584] [ 126.445992][ T9584] dump_stack_lvl+0x100/0x190 [ 126.446012][ T9584] print_circular_bug.cold+0x178/0x1c7 [ 126.446030][ T9584] check_noncircular+0x146/0x160 [ 126.446049][ T9584] __lock_acquire+0x14b8/0x2630 [ 126.446061][ T9584] lock_acquire+0x1cf/0x380 [ 126.446071][ T9584] ? __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 126.446089][ T9584] ? __pfx_vsnprintf+0x10/0x10 [ 126.446105][ T9584] ? __pfx___mutex_lock+0x10/0x10 [ 126.446117][ T9584] fs_reclaim_acquire+0xc4/0x100 [ 126.446129][ T9584] ? __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 126.446145][ T9584] __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 126.446162][ T9584] ? kstrdup_const+0x63/0x80 [ 126.446173][ T9584] kstrdup+0x51/0xe0 [ 126.446182][ T9584] kstrdup_const+0x63/0x80 [ 126.446191][ T9584] __kmem_cache_create_args+0x118/0x420 [ 126.446206][ T9584] bioset_init+0x5ee/0x8a0 [ 126.446218][ T9584] ? __pfx_bioset_init+0x10/0x10 [ 126.446228][ T9584] ? kasan_save_track+0x14/0x30 [ 126.446245][ T9584] ? __kasan_kmalloc+0xaa/0xb0 [ 126.446260][ T9584] ? percpu_ref_init+0x244/0x3f0 [ 126.446278][ T9584] mddev_init+0x17c/0x820 [ 126.446293][ T9584] md_alloc+0xc7/0x10a0 [ 126.446308][ T9584] md_probe+0x73/0xf0 [ 126.446322][ T9584] ? __pfx_md_probe+0x10/0x10 [ 126.446336][ T9584] blk_probe_dev+0x149/0x1e0 [ 126.446351][ T9584] blk_request_module+0x16/0xc0 [ 126.446361][ T9584] blkdev_get_no_open+0x9b/0xf0 [ 126.446376][ T9584] bdev_file_open_by_dev+0x70/0x210 [ 126.446390][ T9584] swsusp_check+0x72/0x470 [ 126.446406][ T9584] software_resume+0x6f/0x330 [ 126.446418][ T9584] resume_store+0x248/0x460 [ 126.446430][ T9584] ? __pfx_resume_store+0x10/0x10 [ 126.446444][ T9584] ? find_held_lock+0x2b/0x80 [ 126.446457][ T9584] ? sysfs_file_kobj+0xe4/0x290 [ 126.446472][ T9584] ? sysfs_file_kobj+0xe4/0x290 [ 126.446486][ T9584] ? __pfx_resume_store+0x10/0x10 [ 126.446498][ T9584] kobj_attr_store+0x58/0x80 [ 126.446509][ T9584] ? __pfx_kobj_attr_store+0x10/0x10 [ 126.446519][ T9584] sysfs_kf_write+0xf2/0x150 [ 126.446535][ T9584] kernfs_fop_write_iter+0x3e0/0x5f0 [ 126.446548][ T9584] ? __pfx_sysfs_kf_write+0x10/0x10 [ 126.446563][ T9584] vfs_write+0x6ac/0x1070 [ 126.446574][ T9584] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 126.446588][ T9584] ? __pfx_vfs_write+0x10/0x10 [ 126.446601][ T9584] ksys_write+0x12a/0x250 [ 126.446610][ T9584] ? __pfx_ksys_write+0x10/0x10 [ 126.446621][ T9584] do_syscall_64+0x106/0xf80 [ 126.446630][ T9584] ? clear_bhb_loop+0x40/0x90 [ 126.446642][ T9584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.446654][ T9584] RIP: 0033:0x7f77d059c819 [ 126.446665][ T9584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.446676][ T9584] RSP: 002b:00007f77d14ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.446745][ T9584] RAX: ffffffffffffffda RBX: 00007f77d0815fa0 RCX: 00007f77d059c819 [ 126.446752][ T9584] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000006 [ 126.446758][ T9584] RBP: 00007f77d0632c91 R08: 0000000000000000 R09: 0000000000000000 [ 126.446764][ T9584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.446770][ T9584] R13: 00007f77d0816038 R14: 00007f77d0815fa0 R15: 00007fff8c1a4568 [ 126.446780][ T9584] [ 126.564162][ T9584] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.567336][ T9584] PM: Image not found (code -6) [ 126.691414][ T29] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 126.695826][ T29] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 126.698244][ T29] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 126.700652][ T29] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 126.702981][ T29] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 126.705615][ T29] mcp2221 0003:04D8:00DD.0019: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 126.890921][ T9] usb 5-1: USB disconnect, device number 13