last executing test programs: 2m18.773948523s ago: executing program 3 (id=4): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$radio(&(0x7f00000005c0), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @p_u8=0x0}}) syz_emit_ethernet(0x8a, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x4, 0x104, 0x0, 0x0, {[@md5sig={0x13, 0x12, "5a213255fc14f131de9a65cf2bec6042"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x13, 0xf989, "3cca39fd810b37fec0a178de23ac97"}, @fastopen={0x22, 0x12, "2864064811009748a452859b6abf7349"}]}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@link_local, @remote, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x1, 0x0, 0x3}}, {@canfd={0xd, {{0x4}, 0x2, 0x3, 0x0, 0x0, "8a0fe85fa210c238c391e613adbf6982772aae67e07735b555f2ee46b4ac4f55a4c42d3f95061bff9ed534e3f49aa443d97036a67420e7ee692c36aabb417912"}}}}, &(0x7f0000000100)={0x1, 0x2, [0x3a2, 0x9e7, 0x369, 0x436]}) 2m18.654129604s ago: executing program 3 (id=5): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040)=0x1, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') 2m18.567572771s ago: executing program 3 (id=6): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000001040101000000000000000001000003080005407fffffff08000340000001800a0000400002000005000100040000000600064000060000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040014}, 0x0) (async) capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000000380)={0x5, 0x6, 0xffffff7b, 0x87, 0xb250, 0x1105}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x102, 0x2}, 0x18) renameat(r0, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') eventfd(0x8f) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) (async, rerun: 64) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async, rerun: 64) r3 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) truncate(&(0x7f0000000280)='./file1\x00', 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000580)={0x0, 0x3, 0x461}) (async, rerun: 32) r7 = socket$caif_seqpacket(0x25, 0x5, 0x3) (rerun: 32) sendmmsg(r7, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2081) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x188, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xb4, 0xd03a, 0x3, 0x1, 0x7, 0xffffffff, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0x3, 0x9, 0xf, 0x2]}}, {{0x1c, 0x1, {0x7, 0x7, 0x9, 0x0, 0x2, 0x5, 0x7, 0x9}}, {0x16, 0x2, [0x7, 0x9, 0x3ff, 0x4, 0x6, 0x1, 0xfffc, 0xf89, 0x376]}}, {{0x1c, 0x1, {0xd, 0x4, 0x5, 0xdc, 0x1, 0xaa, 0x395b9400, 0x3}}, {0xa, 0x2, [0x8, 0xfffe, 0x6]}}, {{0x1c, 0x1, {0x8, 0x8, 0x1, 0x0, 0x2, 0x9, 0x9, 0x6}}, {0x10, 0x2, [0x7ff, 0x4, 0xd, 0x100, 0xd, 0x7]}}, {{0x1c, 0x1, {0xf, 0xd, 0x8, 0x0, 0x1, 0x2, 0x5, 0x7}}, {0x12, 0x2, [0x1, 0x8, 0x200, 0x1, 0x9, 0x6, 0x5]}}, {{0x1c, 0x1, {0xfd, 0xfe, 0x3, 0x1, 0x2, 0x6, 0x8, 0x4}}, {0xc, 0x2, [0x5, 0x8, 0xff, 0x8]}}, {{0x1c, 0x1, {0x1, 0x5, 0x1ff, 0x9, 0x2, 0x6, 0x1, 0x2}}, {0x8, 0x2, [0x5, 0xff01]}}, {{0x1c, 0x1, {0x1, 0x6, 0xffff, 0x5, 0x0, 0x3, 0x7fff, 0x7}}, {0x12, 0x2, [0x2, 0x1, 0x3, 0x4, 0x0, 0x5, 0x2ba2]}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newqdisc={0xc8, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0x9}}, [@TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x3, 0x9a, 0x1, 0x7ff, 0x8, 0x7}}, {0x12, 0x2, [0x7ff, 0xfffa, 0x17e, 0xf, 0x10, 0x1, 0x1]}}, {{0x1c, 0x1, {0x2, 0x7, 0x9, 0x609c2215, 0x0, 0x1, 0x3ba, 0x1}}, {0x6, 0x2, [0x9]}}]}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xd, 0x3, 0x1, 0x0, 0x2, 0x5, 0x3}}, {0xa, 0x2, [0xd, 0x1000, 0x7f]}}]}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x2, [@TCA_FQ_PIE_TARGET={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xffffd31f}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x5, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 2m17.370190273s ago: executing program 3 (id=10): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa96) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa96) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) (async) socket(0x10, 0x2, 0x0) (async) write(r1, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) (async) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) pipe(&(0x7f00000000c0)) (async) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) (async) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) (async) 2m17.351455123s ago: executing program 32 (id=10): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa96) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa96) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) (async) socket(0x10, 0x2, 0x0) (async) write(r1, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) (async) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) pipe(&(0x7f00000000c0)) (async) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) (async) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) (async) 2m5.429985351s ago: executing program 0 (id=164): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, 0x0, 0x0, 0x4040000, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002700)='net/icmp6\x00') read$FUSE(r3, &(0x7f0000027c40)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000002740)={0x2020}, 0x2020) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400880, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) 2m3.085118122s ago: executing program 0 (id=189): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x24, r1, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x4000}, 0x10}, 0x94) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="02030009160000000000000000000000040003000400000000000000000000000000000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000100000000000000040004004ac80000000000000000000000000000000000000000000000000000020001000000e33460650000000000030300006005000500002000000a0000000000000000000000000000000000ffffe000000200000000"], 0xb0}}, 0x84) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x44}}, 0x0) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x7f, 0x8, 0x2, 0x9, 0xdc, 0x7, 0x2, 0xf8, 0x7, 0x1, 0xc, 0xf, 0x0, 0x2}, 0xe) (async) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0x2fffffd, @empty, 0x4fe7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) write(r8, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000040)=[0x27, 0xdc]) 2m2.979551503s ago: executing program 0 (id=191): shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd000) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) (async) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1}) 2m2.590523846s ago: executing program 0 (id=196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r3, 0x4, 0x0) r4 = dup(r3) copy_file_range(r3, 0x0, r4, &(0x7f0000000640)=0x8800000, 0x3000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r5, &(0x7f00000002c0)=""/75, 0x4b, 0x0) close(0x3) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$cgroup(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x100003, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x17, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2m2.449130019s ago: executing program 0 (id=200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x900}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xa8d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4004014) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000440)={{r0, &(0x7f0000000180)='\x00', 0x0, &(0x7f00000001c0)={@_ha_fsid={[0x8, 0x9]}, {0x7ff, 0x0, 0x4, 0x6}}, 0x5, &(0x7f0000000240), &(0x7f0000000280)=0x5}, {[0x8, 0xfffffb6f, 0x4, 0x2]}, 0x6, 0x56, &(0x7f0000000300)=""/86}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01ffffff7f00000000006700080008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c40001"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x10c, r2, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xe0, 0xbe, "7f530ae38556e4b9e5affee99b0eb8362de1387c33d98a372941928b2471bfd77306988581bec7a05e46b92d4863517ba8d9c0f4d822a12b77f29463f72cea2e3d01ecbef021850863dcf55a013bd5e99207c2de27e9baafd2059b790fda51c642bed40936441106ba5114255011b5c4a5a53b0d3e19bdb0dc8f40a86fd72ddbd5e7730f3aff6539b84e677b9c1edaa4e8c1e1de1ffb4c6e080b9be606b30cde895c219acfe0ad6801da16c17fd7f2faeb56af0baac4cc6f4919888b600e424837702ae7a53260f6683d1292f7fa6d10f03cd792666131704d32df76"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf7db}]}, 0x10c}}, 0x20000800) 2m2.140004142s ago: executing program 0 (id=203): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8, 0x10, 0x7, 0x0, {{0xf, 0x4, 0x1, 0x3e, 0x3c, 0x67, 0x0, 0x9c, 0x4, 0x0, @empty, @multicast2, {[@lsrr={0x83, 0x27, 0xac, [@remote, @loopback, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, @remote, @loopback]}, @noop]}}}}}) r1 = socket(0x2d, 0x2, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) close(0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0xfffa, 0x2, 0x0, 0x7fff0000}]}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000380)) 2m2.07383352s ago: executing program 33 (id=203): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8, 0x10, 0x7, 0x0, {{0xf, 0x4, 0x1, 0x3e, 0x3c, 0x67, 0x0, 0x9c, 0x4, 0x0, @empty, @multicast2, {[@lsrr={0x83, 0x27, 0xac, [@remote, @loopback, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, @remote, @loopback]}, @noop]}}}}}) r1 = socket(0x2d, 0x2, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) close(0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0xfffa, 0x2, 0x0, 0x7fff0000}]}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000380)) 1m7.790154426s ago: executing program 4 (id=1003): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x20048880) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8113}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 1m7.789743541s ago: executing program 4 (id=1004): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x34}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, r4, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x67e8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52c", 0xe, 0x880, 0x0, 0x0) 1m7.690006311s ago: executing program 4 (id=1005): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000400)=0x82c1336) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x4c095}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(r3, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x904f) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c009083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x52}], 0x1, 0x17, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x1, 0x7}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) 1m6.792942313s ago: executing program 4 (id=1010): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r0, 0x89f2, &(0x7f0000000080)={0x0, 0x10, 0x4, 0x0, 0xc, "a500000500", 0xe7, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x900, 0x1d5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x8e) setns(r3, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x106, 0x0, 0x0, 0x0) 1m6.629162676s ago: executing program 4 (id=1011): unshare(0x52000080) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) 1m5.779820953s ago: executing program 4 (id=1019): syz_emit_ethernet(0x76, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, 'E\\C', 0x8000, 0x0, 0x0, @empty, @private2, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0047f90000180000000000000000000000000000000085426fc6d920bf1fc6e32939df9523fbf12ed60a138a417729a8fea3959b12bc704f282ad72fffea5c54d0a776706f80d876a91312f22d74ed24daec2ed6c5ab02337a76a270cd6e55fd6bfd95969bf3aae895844f8bc41f5535f2deeaedc0d11cacb450bc89653d395f0b7b3278fa99cb2e7b6ccd66f923e148b34a86cccf38e600ff9355", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0x3ea780c8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) 1m5.722141056s ago: executing program 34 (id=1019): syz_emit_ethernet(0x76, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, 'E\\C', 0x8000, 0x0, 0x0, @empty, @private2, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0047f90000180000000000000000000000000000000085426fc6d920bf1fc6e32939df9523fbf12ed60a138a417729a8fea3959b12bc704f282ad72fffea5c54d0a776706f80d876a91312f22d74ed24daec2ed6c5ab02337a76a270cd6e55fd6bfd95969bf3aae895844f8bc41f5535f2deeaedc0d11cacb450bc89653d395f0b7b3278fa99cb2e7b6ccd66f923e148b34a86cccf38e600ff9355", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0x3ea780c8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) 3.669592824s ago: executing program 1 (id=1982): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/133) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="92", 0x1}], 0x1}, 0x40288d4) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x80000ff, @loopback, 0xb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="fb", 0x1}], 0x1, &(0x7f0000000040)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010101}], 0x18, 0x4855}, 0x24000052) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x800, 0x2a}, 0x18) mmap$usbfs(&(0x7f0000b4e000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x1, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) mount(&(0x7f0000000080)=@md0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='smb3\x00', 0x208001, 0x0) 3.619982188s ago: executing program 1 (id=1983): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x2) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x50}, 0x80) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x800) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, r9, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x78}}, 0x4000000) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000600)="3d49681f21445d2067741507fbe3fc0efa3a1e569fe0ce9da04705d7e5e228be40bfc9a7786628ae75ed662c77a640afcd419abbbb25d7c9bd836e70d7a6cbb53c1bf1907692bfee2eb56efac0b7c144e0f39afdae15769096913d1f73638b7952088e332bfb2ea71594bdbcb40803edd43176", 0x73}, {&(0x7f0000000680)="4717c3ae6d42fe40094bbfc9a7d5d1566e7bdb760a4b3c17f68446c7b3230a3bf295a4189fffb3c6e1e99e1d5029fc8fbad36aa866f14b0aa4786b0f8a694fae351b7a6b4008fe44450deff4ebc49b5b70c7c1b4", 0x54}], 0x2) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000740)=0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, 0x0, 0x20, 0x70bd28, 0x8, {}, [@NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:syslogd_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x44890) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000901}, 0x10) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40840}, 0x1) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x80000c4}, 0x4044801) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x78, r10, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x45c4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000e00)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r11, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x80) (async) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x14c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "a19e097fd52eb4db51aad40bcdaa9ecb370eae11ab633c9556"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "cdf2919d9703fe0e5122364be4a186dc07878b85"}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x700}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) write$ppp(r0, &(0x7f0000001140)="c9780627dae24c7acde080965b4d50512f5578c317db6e2cd29ad4f14b08544203c49c44ee20bbe3f757cbbccbfff6b756086ca6acd883eb9c8d1ba0d808169ee9a90d25607f8f44f09eeb96584d4d138b32b5bd7993aeaccec3c7f5dac4ed9885809b333637946963bf4bbafa6f6a90bd947abac70b4aa4b175849f30d67ccda9b4f9487a691887e3567875468ae2cc0a161c6f539f49d0411767cbb9", 0x9d) (async) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000001240), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001280)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x2c, r13, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4044000) 3.618840725s ago: executing program 1 (id=1984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x40800) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x3c, r1, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) r12 = fcntl$dupfd(r9, 0x0, r9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(r12, 0x1, 0x20, &(0x7f0000000100)=0xeea, 0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r12, 0x7a4, &(0x7f0000000440)={{@my=0x0, 0x782}, 0x8b338f4, 0xb03, 0x1, 0xc}) write$FUSE_ATTR(r12, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, 0x0, 0x3001, 0x2}}}, 0xffffff03) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r3, @ANYRES16], 0x14) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000191407"], 0x10}}, 0x0) 3.537582942s ago: executing program 5 (id=1986): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0xff, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x20000000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x3, 0x0, @SEQ_CONTROLLER=0xfe, 0x0, 0x4}) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0x0, 0x1}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r4, 0x40086806, 0x21) read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) 2.659950915s ago: executing program 5 (id=1989): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), 0x0}, 0x20) r1 = fanotify_init(0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) write(0xffffffffffffffff, &(0x7f0000000280)="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", 0x21f) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000480)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}) (async) fanotify_mark(r1, 0x161, 0x40000867, r2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 2.594924095s ago: executing program 5 (id=1990): ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x98}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x12) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x80, 0x9, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x29, 0x0, @empty, @private=0xffffffff}}}}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.339915948s ago: executing program 6 (id=1994): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x2, 0xb, &(0x7f0000000000)="01c9033c7e1cd68bd7cf39"}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r2, 0xdfd2c0ff079d97f5}, 0x14}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x10bb41) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000140)=0xfffff801) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4) ioctl$USBDEVFS_RESET(r3, 0x5514) 2.339393258s ago: executing program 6 (id=1995): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = socket(0x23, 0x803, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x700, 0x7f40, 0x6, 0xa32, {{0x5, 0x4, 0x1, 0x2d, 0x14, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000780), r5, 0x1}}, 0x2) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x111080, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xb}, {0xa, 0x4e24, 0x1, @empty, 0x2}, 0x1, {[0x0, 0x0, 0x0, 0x7ff, 0x0, 0x80000000]}}, 0x5c) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000000)=0xa, 0x4) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000102c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000000380)={0x50, 0x0, r9, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x1ff, {0x0, 0x2, 0x5, 0x1, 0x40000, 0x0, {0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, 0xe000, 0x0, r10, r11, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000d00)=ANY=[]) read$FUSE(r13, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r13, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0x800000000000fffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r14, r15, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000200), 0x100000e, &(0x7f0000000b40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r11, @ANYBLOB="2c626c6b73697a653d3078303030303030070000003030306130302c626c6b73697a653d30783034f3522013eb2e0f4fa5b5c2affd2de43030303030303030301774d4d630302c626c6b73697a653d3078303030413f30303030303030313030302c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c66756e635d46494c455f434845434b2c6f626a5f747970653d2f6465762f696e81696e6962616e642f72646d615f636d002c6673636f6e746578743d73797361646d5f752c646f6e745f61707072616973652c617070726169655f747970653d696d617369672c646566636f6e746500002c85e4ea0ecab94cf579", @ANYRESDEC=r12, @ANYBLOB=',uid>', @ANYRESDEC=r2, @ANYBLOB=',smackfsdef=!.%@{\',obj_type=+,\x00']) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 2.229720711s ago: executing program 6 (id=1996): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40242) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x1, 0x1850c00, 0x0, 0x0, 0x40, 0xa}}, 0x50) read$FUSE(r1, &(0x7f0000003780)={0x2020}, 0x2020) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000002d0007f2ff000000ffdbdf25027c00000800018001"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2.229387184s ago: executing program 6 (id=1997): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xb}, {0xa, 0x4e24, 0x1, @empty, 0x2}, 0x1, {[0x0, 0x0, 0x0, 0x7ff, 0x0, 0x80000000]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0xa4ffffff, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 2.223154584s ago: executing program 6 (id=1999): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0xfffffffe) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x682201, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x682201, 0x0) close(r2) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa42080049"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0xb8d9, 0x1c080, 0xa, 0x20002f7}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x128, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8bf4281}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x128}}, 0x4051) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x128, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8bf4281}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x128}}, 0x4051) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000041c0)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x3, 0x3, 0x8, 0x0, 0x80, {0x5, 0x80000000000, 0x0, 0xfffffffffffffffa, 0x16f, 0xdbf, 0x10, 0x0, 0x0, 0x8000, 0x1, r7, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r6, &(0x7f0000008280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r9, {0x7, 0x27, 0x8, 0x1801005a, 0x5, 0xfffe, 0x80000000, 0x6, 0x0, 0x0, 0x41}}, 0x50) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000540)={0x1, 0x0, [{0x60000, 0xa1, &(0x7f0000000480)=""/161}]}) listxattr(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0, 0x0) (async) listxattr(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000280)={0x1002, 0x4, 0x20002, 0x10000, &(0x7f0000000180)=[{}, {}, {}, {}]}) 2.029560189s ago: executing program 2 (id=2002): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd6) fcntl$notify(r2, 0x402, 0x8000003d) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000000)={0x9000, 0x0, 0xd7ee, 0x1, 0x5}) (async) close_range(r2, 0xffffffffffffffff, 0x2) 1.959147365s ago: executing program 2 (id=2003): mknod(&(0x7f0000000080)='./bus\x00', 0xc020, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000004c0)='./bus\x00', &(0x7f00000000c0)='gfs2\x00', 0x4000c0, &(0x7f00000001c0)='discard') 1.957625139s ago: executing program 2 (id=2004): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)="273eebfef2f171d6b26b0e923301b61c42cb1dff56bac3c6a0b7b95c", 0x1c}], 0x1) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x145000, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x32315852, 0x8, 0x0, 0xfffffff0, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) 1.889537556s ago: executing program 2 (id=2005): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xb}, {0xa, 0x4e24, 0x1, @empty, 0x2}, 0x1, {[0x0, 0x0, 0x0, 0x7ff, 0x0, 0x80000000]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e24, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x80, 0x0, 0x0, 0xe3]}}, 0x5c) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000040)={&(0x7f0000000000)=""/9, 0x9, 0x0, 0x5}) 1.732288522s ago: executing program 5 (id=2006): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r2 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040)='B@', 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x38, r4, 0x3, 0x70bd2c, 0xb, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x60, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}]}, 0x60}, 0x1, 0x0, 0x0, 0x40800}, 0x20000004) mkdir(&(0x7f0000000100)='./file0\x00', 0x11c) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000240)='vxfs\x00', 0x11, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) 181.419837ms ago: executing program 2 (id=2009): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e869", 0x2}, {0x0, 0x11}], 0x2, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x20}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @empty, @val, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @echo}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x300}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x16, 0xef, 0x8, 0xa, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_ident={0x2, 0xa, 0x6, 0x0, 0x1000}, @sadb_x_filter={0x5, 0x1a, @in6=@local, @in=@rand_addr=0x64010102, 0x1e, 0x0, 0x4}]}, 0x50}}, 0x4000) 181.093867ms ago: executing program 6 (id=2010): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 180.584621ms ago: executing program 1 (id=2011): r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002080)=@newtfilter={0x38, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffffa}]}}]}, 0x38}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0x1ec, 0x15, 0x1, 0x0, 0x80000000, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0xfffc, 0x0, 0xa, 0x0, 0x0, 0x2b, r4}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}, [@offload={0xc, 0x1c, {r4, 0x1}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xb}, @mark={0xc, 0x15, {0x35075a, 0x15f}}, @etimer_thresh={0x8, 0xc, 0x7f}, @tmpl={0x104, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d2, 0x32}, 0xa, @in=@multicast1, 0x3500, 0x7, 0x2, 0x10, 0x5, 0xb, 0x81}, {{@in=@broadcast, 0x4d2, 0x3c}, 0x2, @in=@rand_addr=0x64010102, 0x3501, 0x2, 0x1, 0x9, 0x3c1, 0x163c, 0x3ff}, {{@in=@loopback, 0x4d5, 0xf}, 0x2, @in=@loopback, 0x3506, 0x2, 0x0, 0xb, 0x20882e, 0x26, 0x2}, {{@in=@remote, 0x4d5, 0x33}, 0x2, @in=@multicast2, 0x0, 0x3, 0x3, 0x8, 0x9, 0x5, 0x8}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfffffffe}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x810}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_procfs$namespace(r0, 0x0) 180.092082ms ago: executing program 2 (id=2012): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="0f20c035000001000f22c0b8331c39410f23d00f21f8352000000e0f23f8c74424005cec0000c744240209000000c7442406000000000f0114240f08f32ed9f6b8010000000f01d9c4c1fc525f220f01cb0fc7bcba004000009ad4000000ed00", 0x60}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f0000000240)=@target={'target ', {'PCI:', '5', ':', '5', ':', 'a', '.', '19'}}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@delnexthop={0x60, 0x69, 0x2, 0x70bd29, 0x25dfdbff, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="0f20c035000001000f22c0b8331c39410f23d00f21f8352000000e0f23f8c74424005cec0000c744240209000000c7442406000000000f0114240f08f32ed9f6b8010000000f01d9c4c1fc525f220f01cb0fc7bcba004000009ad4000000ed00", 0x60}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (async) write$vga_arbiter(r6, &(0x7f0000000240)=@target={'target ', {'PCI:', '5', ':', '5', ':', 'a', '.', '19'}}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@delnexthop={0x60, 0x69, 0x2, 0x70bd29, 0x25dfdbff, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 49.880899ms ago: executing program 5 (id=2013): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) (async) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000580)) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) (async, rerun: 64) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000000c0)='./bus\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x100) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async, rerun: 32) io_setup(0xffffffff, &(0x7f0000000240)=0x0) (async, rerun: 32) r6 = open$dir(&(0x7f0000000500)='./file0\x00', 0x131100, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, &(0x7f0000000540)) (async) io_submit(r5, 0x1, &(0x7f00000007c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r4, &(0x7f0000000180)='<', 0x1, 0x6, 0x0, 0x0, r4}]) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x2, &(0x7f0000000180)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@ipv6_getaddr={0xa8, 0x16, 0x20, 0x70bd2b, 0x25dfdbfd, {0xa, 0x8f, 0x80, 0xfd, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4, 0x5, 0x80000001}}, @IFA_TARGET_NETNSID={0x8}, @IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0xd2ef, 0x80000000, 0x7, 0x10001}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_CACHEINFO={0x14, 0x6, {0xa60, 0x9, 0x9, 0x7}}]}, 0xa8}}, 0xc0) (async) r8 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a00)={0xd0, 0x0, &(0x7f00000018c0)=[@acquire={0x40046305, 0x1}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x3, 0x1, 0xb}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}, @flat=@weak_handle={0x77682a85, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}, 0x40}, @increfs_done, @free_buffer={0x40086303, r8}, @increfs_done={0x40106308, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001800)={@ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/95, 0x5f, 0x2, 0x3c}, @ptr={0x70742a85, 0x0, &(0x7f0000000800)=""/4096, 0x1000, 0x2, 0x1a}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}}, &(0x7f0000001880)={0x0, 0x28, 0x50}}}], 0x22, 0x0, &(0x7f00000019c0)="92a66159e7040355c67d50a4bc0bb85b5fe0805bd1942a1003c1139f6adcf50b98a2"}) 0s ago: executing program 5 (id=2014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x0) (async) socket$kcm(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x47}, "06d428d5fcd4c0ab2c47363b0c2f111622385aaee07fe1cd5b0097743d0e880f3e2c455d49f6272cfb70f88b80fe5afd320fc5c0d9ac0a4678d14029bb259a9c9f50e4551d5ea1"}, 0x4b) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x47}, "06d428d5fcd4c0ab2c47363b0c2f111622385aaee07fe1cd5b0097743d0e880f3e2c455d49f6272cfb70f88b80fe5afd320fc5c0d9ac0a4678d14029bb259a9c9f50e4551d5ea1"}, 0x4b) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f6c2c00a42d2180fca9df1e35f448ff7f87007d15019145f6123e7b5be8adb2ff8d372431fc69ccd7a0886281eeee7ef171829c09ff6a410a7f3cb24e4860933077aa7227aaf61b61930267eeb335029e2e178eebde05c1b8b7c695598d7963fb57f5d4f3a50e77a650d0d0a8bab056bdbb8b323c72b133a756c2d5c2614dba9239c17aeaffffff000000000000000000000000000000000063b78ddd7ae99773f9a08d8e44575b5dee949b0d5e77143c2800"/208]) kernel console output (not intermixed with test programs): ectory [ 141.587526][T10075] tmpfs: Unknown parameter './file0' [ 141.672337][ T40] audit: type=1800 audit(1775490964.438:10557): pid=10082 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1144" name="bus" dev="overlay" ino=1112 res=0 errno=0 [ 141.692691][T10082] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1144'. [ 141.695596][T10082] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1144'. [ 141.730577][T10086] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 141.732831][T10086] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.735715][T10086] vhci_hcd vhci_hcd.0: Device attached [ 141.739401][T10086] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(7) [ 141.741595][T10086] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.744154][T10086] vhci_hcd vhci_hcd.0: Device attached [ 141.752157][T10086] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(9) [ 141.755024][T10086] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.761141][T10086] vhci_hcd vhci_hcd.0: Device attached [ 141.764340][T10086] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(11) [ 141.766472][T10086] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.769788][T10086] vhci_hcd vhci_hcd.0: Device attached [ 141.773021][T10086] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(13) [ 141.775191][T10086] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.781236][T10086] vhci_hcd vhci_hcd.0: Device attached [ 141.784477][T10086] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(15) [ 141.786805][T10086] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.796016][T10086] vhci_hcd vhci_hcd.0: Device attached [ 141.798956][T10086] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(17) [ 141.801095][T10086] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.804775][T10086] vhci_hcd vhci_hcd.0: Device attached [ 141.809558][T10086] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(19) [ 141.811723][T10086] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.814268][T10086] vhci_hcd vhci_hcd.0: Device attached [ 141.817625][T10086] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(21) [ 141.819777][T10086] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.823419][T10086] vhci_hcd vhci_hcd.0: Device attached [ 141.834549][T10117] vhci_hcd: connection closed [ 141.834627][T10115] vhci_hcd: connection closed [ 141.834927][T10111] vhci_hcd: connection closed [ 141.836049][T10108] vhci_hcd: connection closed [ 141.836413][T10088] vhci_hcd: connection closed [ 141.837144][T10100] vhci_hcd: connection closed [ 141.837192][T10102] vhci_hcd: connection closed [ 141.846139][ T1150] vhci_hcd vhci_hcd.7: stop threads [ 141.846220][T10104] vhci_hcd: connection closed [ 141.846721][T10094] vhci_hcd: connection closed [ 141.848084][ T1150] vhci_hcd vhci_hcd.7: release socket [ 141.855349][ T1150] vhci_hcd vhci_hcd.7: disconnect device [ 141.859139][ T1150] vhci_hcd vhci_hcd.6: stop threads [ 141.860837][ T1150] vhci_hcd vhci_hcd.6: release socket [ 141.862569][ T1150] vhci_hcd vhci_hcd.6: disconnect device [ 141.864510][ T1150] vhci_hcd vhci_hcd.6: stop threads [ 141.866662][ T1150] vhci_hcd vhci_hcd.6: release socket [ 141.869213][ T1150] vhci_hcd vhci_hcd.6: disconnect device [ 141.871149][ T1150] vhci_hcd vhci_hcd.6: stop threads [ 141.872800][ T1150] vhci_hcd vhci_hcd.6: release socket [ 141.874570][ T1150] vhci_hcd vhci_hcd.6: disconnect device [ 141.876608][ T1150] vhci_hcd vhci_hcd.6: stop threads [ 141.878258][ T1150] vhci_hcd vhci_hcd.6: release socket [ 141.880163][ T1150] vhci_hcd vhci_hcd.6: disconnect device [ 141.882121][ T1150] vhci_hcd vhci_hcd.6: stop threads [ 141.883929][ T1150] vhci_hcd vhci_hcd.6: release socket [ 141.888747][ T1150] vhci_hcd vhci_hcd.6: disconnect device [ 141.891376][ T1150] vhci_hcd vhci_hcd.6: stop threads [ 141.893039][ T1150] vhci_hcd vhci_hcd.6: release socket [ 141.894815][ T1150] vhci_hcd vhci_hcd.6: disconnect device [ 141.896868][ T1150] vhci_hcd vhci_hcd.6: stop threads [ 141.898551][ T1150] vhci_hcd vhci_hcd.6: release socket [ 141.900368][ T1150] vhci_hcd vhci_hcd.6: disconnect device [ 141.902373][ T1150] vhci_hcd vhci_hcd.6: stop threads [ 141.904281][ T1150] vhci_hcd vhci_hcd.6: release socket [ 141.906545][ T1150] vhci_hcd vhci_hcd.6: disconnect device [ 141.938078][T10122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10122 comm=syz.1.1151 [ 141.950330][T10122] netlink: 'syz.1.1151': attribute type 1 has an invalid length. [ 142.385609][ T40] audit: type=1400 audit(1775490965.148:10558): avc: denied { accept } for pid=10131 comm="syz.6.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.426702][ T50] usb usb50-port1: attempt power cycle [ 142.472833][T10140] xt_nat: multiple ranges no longer supported [ 142.474864][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 142.478214][ T40] audit: type=1400 audit(1775490965.238:10559): avc: denied { write } for pid=10138 comm="syz.6.1155" path="socket:[33762]" dev="sockfs" ino=33762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 142.581132][T10096] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 142.718339][T10151] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1158'. [ 142.819933][ T40] audit: type=1400 audit(1775490965.588:10560): avc: denied { ioctl } for pid=10163 comm="syz.2.1162" path="socket:[37211]" dev="sockfs" ino=37211 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.827558][T10166] nbd: couldn't find a device at index -2146435068 [ 142.836800][T10160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.866413][ T29] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 142.932668][T10173] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1165'. [ 142.996513][ T50] usb usb50-port1: unable to enumerate USB device [ 143.036486][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 143.040073][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 143.044124][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33863, setting to 1024 [ 143.049729][ T29] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 143.052740][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.055423][ T29] usb 6-1: Product: syz [ 143.057153][ T29] usb 6-1: Manufacturer: syz [ 143.058853][ T29] usb 6-1: SerialNumber: syz [ 143.064387][ T29] usb 6-1: config 0 descriptor?? [ 143.067884][ T29] hub 6-1:0.0: bad descriptor, ignoring hub [ 143.069852][ T29] hub 6-1:0.0: probe with driver hub failed with error -5 [ 143.074367][ T29] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input15 [ 143.767301][T10178] netlink: 'syz.6.1167': attribute type 12 has an invalid length. [ 143.853070][T10185] tipc: Started in network mode [ 143.857394][T10185] tipc: Node identity ac14140f, cluster identity 4711 [ 143.860546][T10185] tipc: New replicast peer: 255.255.255.255 [ 143.865766][T10185] tipc: Enabled bearer , priority 10 [ 143.949257][T10192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=10192 comm=syz.5.1173 [ 144.019630][T10193] macsec1: entered promiscuous mode [ 144.022238][T10193] macsec1: entered allmulticast mode [ 144.474256][T10199] kvm: pic: non byte write [ 144.504416][T10199] kernel read not supported for file /policy (pid: 10199 comm: syz.1.1175) [ 144.689912][ T40] audit: type=1400 audit(1775490967.458:10561): avc: denied { execheap } for pid=10210 comm="syz.1.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 144.721825][T10213] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.869325][ T29] tipc: Node number set to 2886997007 [ 145.090981][T10228] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 145.096102][ T40] audit: type=1400 audit(1775490967.868:10562): avc: denied { relabelto } for pid=10227 comm="syz.2.1185" name="289" dev="tmpfs" ino=1527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 145.109799][ T40] audit: type=1400 audit(1775490967.868:10563): avc: denied { associate } for pid=10227 comm="syz.2.1185" name="289" dev="tmpfs" ino=1527 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 145.122002][ T40] audit: type=1400 audit(1775490967.878:10564): avc: denied { add_name } for pid=10227 comm="syz.2.1185" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 145.132811][T10228] __nla_validate_parse: 5 callbacks suppressed [ 145.132823][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 145.138292][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1185'. [ 145.139488][ T40] audit: type=1400 audit(1775490967.878:10565): avc: denied { associate } for pid=10227 comm="syz.2.1185" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 145.141738][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 145.154421][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1185'. [ 145.155816][ T40] audit: type=1400 audit(1775490967.878:10566): avc: denied { execute } for pid=10227 comm="syz.2.1185" name="file0" dev="tmpfs" ino=1532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 145.167439][ T40] audit: type=1400 audit(1775490967.878:10567): avc: denied { read open } for pid=10227 comm="syz.2.1185" path="/289/file0" dev="tmpfs" ino=1532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 145.207661][T10230] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 145.214406][T10230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10230 comm=syz.1.1186 [ 145.413123][T10242] netlink: 'syz.1.1189': attribute type 1 has an invalid length. [ 145.430627][T10242] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.511195][T10242] bond3: (slave veth11): Enslaving as an active interface with a down link [ 145.517048][T10242] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1189'. [ 145.520510][T10242] batman_adv: batadv0: Interface deactivated: dummy0 [ 145.523251][T10242] batman_adv: batadv0: Removing interface: dummy0 [ 145.528652][T10242] bond3: (slave dummy0): making interface the new active one [ 145.531762][T10242] dummy0: entered promiscuous mode [ 145.533621][T10242] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 145.538146][T10242] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1189'. [ 145.547150][T10242] bond3: (slave dummy0): Releasing active interface [ 145.549416][T10242] dummy0 (unregistering): left promiscuous mode [ 146.527430][T10255] geneve2: entered promiscuous mode [ 146.529184][T10255] geneve2: entered allmulticast mode [ 146.538676][T10258] kAFS: unable to lookup cell '/,cL' [ 146.584735][T10260] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 146.657515][T10264] macsec2: entered promiscuous mode [ 146.659249][T10264] macsec2: entered allmulticast mode [ 146.672274][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 146.741255][T10272] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1199'. [ 146.746835][T10275] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1200'. [ 146.746864][T10274] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1200'. [ 147.066234][ T29] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 147.096550][T10295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.111697][T10295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.132954][ T6018] usb 6-1: USB disconnect, device number 23 [ 147.197836][T10303] tmpfs: Bad value for 'mpol' [ 147.205217][T10303] overlay: ./file0 is not a directory [ 147.215975][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 147.219011][ T29] usb 10-1: config 0 has no interfaces? [ 147.220974][ T29] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.223963][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.229494][ T29] usb 10-1: config 0 descriptor?? [ 147.325983][ T840] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 147.383190][T10312] netlink: 'syz.2.1209': attribute type 12 has an invalid length. [ 147.432000][T10315] input: syz0 as /devices/virtual/input/input16 [ 147.446014][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.455831][T10275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.458974][T10275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.465760][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.474603][ T6018] usb 10-1: USB disconnect, device number 10 [ 147.481947][ T840] usb 11-1: config 0 has no interfaces? [ 147.485597][ T840] usb 11-1: config 0 has no interfaces? [ 147.490421][ T840] usb 11-1: config 0 has no interfaces? [ 147.496281][ T840] usb 11-1: string descriptor 0 read error: -22 [ 147.498380][ T840] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 147.504208][ T840] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.511521][ T840] usb 11-1: config 0 descriptor?? [ 147.764197][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 147.764211][ T40] audit: type=1400 audit(1775490970.528:10584): avc: denied { getopt } for pid=10342 comm="syz.2.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 147.764505][T10343] bpf: Bad value for 'uid' [ 147.778185][T10343] netlink: 'syz.2.1218': attribute type 1 has an invalid length. [ 147.781265][T10343] netlink: 'syz.2.1218': attribute type 3 has an invalid length. [ 147.967924][T10295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.971728][T10295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.041602][T10369] binder: 10368:10369 ioctl c0306201 200000000640 returned -22 [ 148.191951][T10384] netlink: 'syz.1.1229': attribute type 30 has an invalid length. [ 148.239999][T10393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10004 sclass=netlink_route_socket pid=10393 comm=syz.5.1230 [ 148.240970][T10394] netlink: 'syz.2.1231': attribute type 32 has an invalid length. [ 148.302449][T10394] bond9: option coupled_control: invalid value (9) [ 148.305717][T10394] bond9 (unregistering): Released all slaves [ 148.316785][T10393] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.401065][ T40] audit: type=1400 audit(1775490971.168:10585): avc: denied { read } for pid=10405 comm="syz.1.1235" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 148.407914][ T40] audit: type=1400 audit(1775490971.168:10586): avc: denied { open } for pid=10405 comm="syz.1.1235" path="/385/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 148.413183][T10413] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 148.420423][T10413] block device autoloading is deprecated and will be removed. [ 148.423891][ T40] audit: type=1400 audit(1775490971.188:10587): avc: denied { ioctl } for pid=10405 comm="syz.1.1235" path="/385/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 148.424178][T10409] md: md130 stopped. [ 148.452848][T10417] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 148.459192][T10421] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 148.463618][T10421] Error validating options; rc = [-22] [ 148.468467][T10422] EXT4-fs (nbd5): unable to read superblock [ 148.490715][ T40] audit: type=1326 audit(1775490971.258:10588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.1.1240" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2d679c819 code=0x0 [ 148.504389][T10428] program syz.2.1241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.157707][ T40] audit: type=1400 audit(1775490971.928:10589): avc: denied { read } for pid=10437 comm="syz.2.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.223645][ T40] audit: type=1400 audit(1775490971.988:10590): avc: denied { setopt } for pid=10440 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 149.466035][ T50] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 149.639467][ T50] usb 6-1: not running at top speed; connect to a high speed hub [ 149.646930][ T50] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 544, setting to 64 [ 149.663387][ T50] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.667595][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.670215][ T50] usb 6-1: Product: syz [ 149.671838][ T50] usb 6-1: Manufacturer: syz [ 149.676132][ T50] usb 6-1: SerialNumber: syz [ 149.885759][ T50] cdc_ncm 6-1:1.0: bind() failure [ 149.890164][ T50] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 149.892772][ T50] cdc_ncm 6-1:1.1: bind() failure [ 149.899261][ T50] usb 6-1: USB disconnect, device number 24 [ 149.902336][T10467] "syz.5.1253" (10467) uses obsolete ecb(arc4) skcipher [ 149.960636][ T40] audit: type=1400 audit(1775490972.728:10591): avc: denied { write } for pid=10473 comm="syz.5.1255" name="file0" dev="tmpfs" ino=1252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.967557][ T40] audit: type=1400 audit(1775490972.728:10592): avc: denied { open } for pid=10473 comm="syz.5.1255" path="/219/file0" dev="tmpfs" ino=1252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.974805][ T40] audit: type=1400 audit(1775490972.728:10593): avc: denied { ioctl } for pid=10473 comm="syz.5.1255" path="/219/file0" dev="tmpfs" ino=1252 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 150.237233][T10493] ntfs3(sr0): try to read out of volume at offset 0x0 [ 150.261731][ T50] usb 11-1: USB disconnect, device number 5 [ 150.409025][T10502] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 150.444321][T10502] overlay: Unknown parameter 'permit_directio' [ 150.691856][T10513] geneve2: entered promiscuous mode [ 150.693539][T10513] geneve2: entered allmulticast mode [ 150.739187][T10514] binder: BC_ACQUIRE_RESULT not supported [ 150.741042][T10514] binder: 10512:10514 ioctl c0306201 200000000540 returned -22 [ 150.746761][T10514] binder: 10512:10514 ioctl c058671e 2000000007c0 returned -22 [ 150.917737][T10521] __nla_validate_parse: 42 callbacks suppressed [ 150.917755][T10521] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1272'. [ 150.952887][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1273'. [ 150.958292][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 151.150267][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1281'. [ 151.545996][ T840] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 151.589486][T10582] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 151.595366][T10582] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 151.598916][T10582] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 151.601373][T10582] UDF-fs: Scanning with blocksize 512 failed [ 151.603805][T10582] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 151.607341][T10582] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 151.610543][T10582] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 151.612950][T10582] UDF-fs: Scanning with blocksize 1024 failed [ 151.615323][T10582] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 151.618952][T10582] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 151.622170][T10582] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 151.624611][T10582] UDF-fs: Scanning with blocksize 2048 failed [ 151.626891][T10582] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 151.630108][T10582] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 151.633769][T10582] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 151.636334][T10582] UDF-fs: Scanning with blocksize 4096 failed [ 151.638383][T10582] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 151.670385][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'. [ 151.716292][ T840] usb 10-1: Using ep0 maxpacket: 8 [ 151.719732][ T840] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 151.722743][ T840] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 151.727646][ T840] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 151.731316][ T840] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 151.734974][ T840] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 151.738705][ T840] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.743122][ T840] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.749187][ T840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.754121][ T9] IPVS: starting estimator thread 0... [ 151.786117][ C3] hrtimer: interrupt took 19516 ns [ 151.866098][T10588] IPVS: using max 43 ests per chain, 103200 per kthread [ 151.957337][ T840] usb 10-1: usb_control_msg returned -32 [ 151.960014][ T840] usbtmc 10-1:16.0: can't read capabilities [ 152.028182][T10600] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.030421][T10600] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.032408][T10600] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.034963][T10600] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 152.052106][T10600] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 152.133278][T10605] Mount JFS Failure: -5 [ 152.135088][T10605] jfs_mount failed w/return code = -5 [ 152.313958][T10618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.328475][T10618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.388578][T10628] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1303'. [ 152.706386][ T840] usb 10-1: USB disconnect, device number 11 [ 152.900461][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 152.900472][ T40] audit: type=1400 audit(1775490975.668:10604): avc: denied { write } for pid=10648 comm="syz.5.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 153.125961][ T1337] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 153.135335][T10665] netlink: 'syz.5.1312': attribute type 21 has an invalid length. [ 153.140857][T10665] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1312'. [ 153.143890][T10665] netlink: 'syz.5.1312': attribute type 4 has an invalid length. [ 153.146702][T10665] netlink: 'syz.5.1312': attribute type 5 has an invalid length. [ 153.149154][T10665] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1312'. [ 153.250556][ T40] audit: type=1326 audit(1775490976.018:10605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.1.1313" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2d679c819 code=0x0 [ 153.276062][ T1337] usb 7-1: Using ep0 maxpacket: 32 [ 153.279414][ T1337] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 153.283018][ T1337] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 153.286793][ T1337] usb 7-1: config 0 interface 0 has no altsetting 0 [ 153.288904][ T1337] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 153.291873][ T1337] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.296085][ T1337] usb 7-1: config 0 descriptor?? [ 153.307474][T10679] FAT-fs (sr0): unable to read boot sector [ 153.469328][ T5936] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 153.472807][ T5936] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 153.535377][T10696] netlink: 'syz.6.1317': attribute type 2 has an invalid length. [ 153.538272][T10696] netlink: 'syz.6.1317': attribute type 1 has an invalid length. [ 153.540996][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1317'. [ 153.704698][ T1337] usbhid 7-1:0.0: can't add hid device: -71 [ 153.709702][ T1337] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 153.724169][ T1337] usb 7-1: USB disconnect, device number 23 [ 153.741483][ T40] audit: type=1400 audit(1775490976.508:10606): avc: denied { watch watch_reads } for pid=10703 comm="syz.6.1319" path="net:[4026533079]" dev="nsfs" ino=4026533079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 153.750395][T10704] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 153.874885][T10709] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1321'. [ 154.026131][ T5936] Bluetooth: hci3: command 0x0c1a tx timeout [ 154.061826][ T40] audit: type=1400 audit(1775490976.828:10607): avc: denied { mount } for pid=10717 comm="syz.5.1325" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 154.070578][ T40] audit: type=1400 audit(1775490976.838:10608): avc: denied { remount } for pid=10717 comm="syz.5.1325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 154.078527][ T40] audit: type=1400 audit(1775490976.838:10609): avc: denied { search } for pid=10717 comm="syz.5.1325" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 154.085767][ T40] audit: type=1400 audit(1775490976.838:10610): avc: denied { mounton } for pid=10717 comm="syz.5.1325" path="/238/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 154.116308][ T5936] Bluetooth: hci1: command 0x0c1a tx timeout [ 154.117581][ T5936] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.195536][ T40] audit: type=1400 audit(1775490976.958:10611): avc: denied { remove_name } for pid=10719 comm="syz.6.1326" name="file0" dev="9p" ino=79691929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.203458][ T40] audit: type=1400 audit(1775490976.958:10612): avc: denied { unlink } for pid=10719 comm="syz.6.1326" name="file0" dev="9p" ino=79691929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.210744][ T40] audit: type=1400 audit(1775490976.968:10613): avc: denied { create } for pid=10719 comm="syz.6.1326" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 154.351241][T10723] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.394504][ T54] IPVS: starting estimator thread 0... [ 154.397007][T10733] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:20000 [ 154.486060][T10734] IPVS: using max 41 ests per chain, 98400 per kthread [ 154.487204][T10747] kvm: kvm [10739]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 154.493239][T10747] kvm: kvm [10739]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 154.531408][T10756] ipt_REJECT: TCP_RESET invalid for non-tcp [ 154.593504][T10756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.770048][T10770] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 154.879529][T10779] kvm: kvm [10778]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000007) [ 154.888782][T10781] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 154.897047][T10779] netlink: 'syz.5.1344': attribute type 5 has an invalid length. [ 154.903292][T10779] ip6erspan0: entered promiscuous mode [ 154.910475][T10779] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 155.042508][T10797] fuse: Bad value for 'group_id' [ 155.044136][T10797] fuse: Bad value for 'group_id' [ 155.098752][T10806] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 155.507193][T10845] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 155.589524][T10863] befs: (nullb0): No write support. Marking filesystem read-only [ 155.608364][T10863] befs: (nullb0): invalid magic header [ 156.107417][T10880] netlink: 'syz.5.1378': attribute type 1 has an invalid length. [ 156.162665][T10881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10881 comm=syz.5.1378 [ 156.163135][T10881] __nla_validate_parse: 4 callbacks suppressed [ 156.163145][T10881] netlink: 7838 bytes leftover after parsing attributes in process `syz.5.1378'. [ 156.186935][ T5936] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.570036][T10893] xt_recent: Unsupported userspace flags (000000ff) [ 156.836086][ T9] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 156.999687][ T9] usb 10-1: not running at top speed; connect to a high speed hub [ 157.002970][ T9] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.008335][ T9] usb 10-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice= 0.40 [ 157.011204][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.013879][ T9] usb 10-1: Product: syz [ 157.015395][ T9] usb 10-1: Manufacturer: syz [ 157.017643][ T9] usb 10-1: SerialNumber: syz [ 157.029617][T10918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1390'. [ 157.037325][T10918] gtp0: entered promiscuous mode [ 157.206226][ T1461] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 157.233992][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.255145][ T9] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 157.259359][ T9] usb 10-1: USB disconnect, device number 12 [ 157.268524][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.336137][ T1461] usb 11-1: device descriptor read/64, error -71 [ 157.576007][ T1461] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 157.707418][ T1461] usb 11-1: device descriptor read/64, error -71 [ 157.773424][T10928] gfs2: not a GFS2 filesystem [ 157.808195][T10932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.826360][ T1461] usb usb11-port1: attempt power cycle [ 158.186067][ T1461] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 158.207110][ T1461] usb 11-1: device descriptor read/8, error -71 [ 158.267243][ T5936] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.340506][T10934] xt_hashlimit: max too large, truncated to 1048576 [ 158.432200][T10943] netlink: 'syz.5.1399': attribute type 1 has an invalid length. [ 158.434738][T10943] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1399'. [ 158.437821][T10943] netlink: 'syz.5.1399': attribute type 1 has an invalid length. [ 158.440506][T10943] netlink: 'syz.5.1399': attribute type 8 has an invalid length. [ 158.442969][T10943] netlink: 606 bytes leftover after parsing attributes in process `syz.5.1399'. [ 158.445802][T10943] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1399'. [ 158.457532][ T1461] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 158.476834][ T1461] usb 11-1: device descriptor read/8, error -71 [ 158.487289][T10945] tipc: Enabling of bearer rejected, failed to enable media [ 158.491713][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 158.491765][ T40] audit: type=1400 audit(1775490981.258:10628): avc: denied { connect } for pid=10944 comm="syz.5.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.586709][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 158.587428][T10949] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1401'. [ 158.590181][ T1461] usb usb11-port1: unable to enumerate USB device [ 158.622977][ T40] audit: type=1400 audit(1775490981.388:10629): avc: denied { bind } for pid=10950 comm="syz.5.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.682496][T10955] usb usb8: usbfs: process 10955 (syz.2.1404) did not claim interface 0 before use [ 158.696994][T10953] netlink: 'syz.1.1403': attribute type 2 has an invalid length. [ 158.703842][T10953] exFAT-fs (nullb0): invalid boot record signature [ 158.709601][T10953] exFAT-fs (nullb0): failed to read boot sector [ 158.712026][T10953] exFAT-fs (nullb0): failed to recognize exfat type [ 158.796464][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'. [ 158.888238][T10971] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1410'. [ 158.892950][T10972] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1410'. [ 158.928959][T10975] overlay: ./file0 is not a directory [ 158.971782][T10977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1412'. [ 159.018274][ T40] audit: type=1400 audit(1775490981.788:10630): avc: denied { setattr } for pid=10979 comm="syz.2.1413" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 159.328359][ T40] audit: type=1400 audit(1775490982.098:10631): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 159.519298][T11006] netlink: 'syz.1.1420': attribute type 29 has an invalid length. [ 159.521992][T11006] netlink: 'syz.1.1420': attribute type 3 has an invalid length. [ 159.607960][T11021] isofs_fill_super: bread failed, dev=sr0, iso_blknum=16, block=16 [ 159.614904][ T40] audit: type=1400 audit(1775490982.378:10632): avc: denied { ioctl } for pid=11020 comm="syz.5.1425" path="socket:[39898]" dev="sockfs" ino=39898 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 159.631856][T11021] bond9: (slave vlan0): Opening slave failed [ 159.671689][ T40] audit: type=1400 audit(1775490982.438:10633): avc: denied { mount } for pid=11025 comm="syz.5.1426" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 159.786617][ T63] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 260 [ 159.786641][ T63] Bluetooth: hci3: Malformed Event: 0x2f [ 159.963464][ T40] audit: type=1400 audit(1775490982.728:10634): avc: denied { listen } for pid=11036 comm="syz.2.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 159.986030][ T54] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 160.025753][ T40] audit: type=1400 audit(1775490982.788:10635): avc: denied { create } for pid=11047 comm="syz.2.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 160.074687][T11053] syzkaller0: entered promiscuous mode [ 160.078074][T11053] syzkaller0: entered allmulticast mode [ 160.082633][T11053] tipc: Started in network mode [ 160.084191][T11053] tipc: Node identity 12fca1097b6a, cluster identity 4711 [ 160.087159][T11053] tipc: Enabled bearer , priority 0 [ 160.117666][T11056] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 160.122179][ T40] audit: type=1400 audit(1775490982.888:10636): avc: denied { bind } for pid=11054 comm="syz.6.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 160.148272][ T54] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 160.151182][ T54] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.154534][ T54] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 160.157856][ T54] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.162461][ T54] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 160.165584][ T54] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 160.168919][ T54] usb 10-1: Product: syz [ 160.170647][ T54] usb 10-1: Manufacturer: syz [ 160.177870][ T54] cdc_wdm 10-1:1.0: skipping garbage [ 160.179616][ T54] cdc_wdm 10-1:1.0: skipping garbage [ 160.184117][ T54] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 160.186799][ T54] cdc_wdm 10-1:1.0: Unknown control protocol [ 160.200451][T11052] tipc: Resetting bearer [ 160.213604][T11052] tipc: Disabling bearer [ 160.429065][T11071] nfs: Unknown parameter 'no [ 160.429065][T11071] c' [ 160.677095][ T6000] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 160.719925][T11091] (syz.1.1442,11091,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 160.722385][T11091] (syz.1.1442,11091,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 160.724740][T11091] (syz.1.1442,11091,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 160.727606][T11091] (syz.1.1442,11091,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 160.806183][ T6000] usb 7-1: device descriptor read/64, error -71 [ 161.046904][ T6000] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 161.176009][ T6000] usb 7-1: device descriptor read/64, error -71 [ 161.252022][T11121] pim6reg: left allmulticast mode [ 161.286325][ T6000] usb usb7-port1: attempt power cycle [ 161.306131][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.366677][ T40] audit: type=1400 audit(1775490984.138:10637): avc: denied { write } for pid=11127 comm="syz.1.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 161.436482][T11135] __nla_validate_parse: 4 callbacks suppressed [ 161.436495][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1451'. [ 161.448144][T11135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11135 comm=syz.6.1451 [ 161.625977][ T6000] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 161.646682][ T6000] usb 7-1: device descriptor read/8, error -71 [ 161.711864][T11144] netlink: 'syz.1.1454': attribute type 4 has an invalid length. [ 161.724446][T11144] omfs: Invalid superblock (0) [ 161.863109][T11146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11146 comm=syz.1.1455 [ 161.885992][ T6000] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 161.907193][ T6000] usb 7-1: device descriptor read/8, error -71 [ 162.016191][ T6000] usb usb7-port1: unable to enumerate USB device [ 162.209596][T11149] overlayfs: missing 'workdir' [ 162.254809][T11153] qnx4: unable to read the superblock [ 162.330854][T11157] syzkaller0: entered promiscuous mode [ 162.733529][ T34] usb 10-1: USB disconnect, device number 13 [ 162.808449][T11170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11170 comm=syz.5.1463 [ 162.808604][T11171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11171 comm=syz.5.1463 [ 162.842801][T11170] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1463'. [ 162.909554][T11176] 9pnet_fd: p9_fd_create_unix (11176): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 162.913927][T11178] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1461'. [ 163.057685][T11180] openvswitch: netlink: Flow key attribute not present in set flow. [ 163.090951][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'. [ 163.098620][T11182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11182 comm=syz.1.1467 [ 163.250071][T11191] netlink: 'syz.1.1471': attribute type 21 has an invalid length. [ 163.256093][ T34] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 163.262195][T11187] binder: 11186:11187 ioctl c0306201 200000000540 returned -22 [ 163.316702][T11194] binder: 11186:11194 ioctl c0306201 200000000640 returned -22 [ 163.422985][ T34] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.428957][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.432809][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.436047][ T34] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.440084][ T34] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.442979][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.445752][T11208] No control pipe specified [ 163.448534][ T34] usb 10-1: config 0 descriptor?? [ 163.457651][T11208] fuse: Bad value for 'rootmode' [ 163.465365][T11205] XFS (nbd2): SB validate failed with error -5. [ 163.729742][T11225] ip6gre1: entered promiscuous mode [ 163.734411][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'. [ 163.748122][T11229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11229 comm=syz.2.1478 [ 163.789109][T11231] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 163.867941][ T34] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 163.893091][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 163.893109][ T40] audit: type=1400 audit(1775490986.658:10641): avc: denied { ioctl } for pid=11235 comm="syz.2.1480" path="socket:[44258]" dev="sockfs" ino=44258 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 163.896982][ T34] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 163.916168][ T40] audit: type=1400 audit(1775490986.678:10642): avc: denied { setopt } for pid=11235 comm="syz.2.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 163.922823][ T40] audit: type=1400 audit(1775490986.678:10643): avc: denied { read } for pid=11235 comm="syz.2.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 164.029960][T11242] netlink: 'syz.2.1482': attribute type 1 has an invalid length. [ 164.033123][T11242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1482'. [ 164.040580][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 164.068895][T11244] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 165.710879][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1490'. [ 165.726882][T11263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11263 comm=syz.5.1490 [ 165.871810][T11292] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 165.888232][T11300] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 165.894495][T11300] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 165.901032][T11300] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 165.933413][T11305] NILFS (nullb0): couldn't find nilfs on the device [ 165.975162][ T34] usb 10-1: USB disconnect, device number 14 [ 166.017204][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'. [ 166.032875][ T40] audit: type=1400 audit(1775490988.798:10644): avc: denied { nlmsg_write } for pid=11312 comm="syz.5.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 166.076292][ T40] audit: type=1107 audit(1775490988.798:10645): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 166.126843][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1509'. [ 166.180822][ T40] audit: type=1400 audit(1775490988.948:10646): avc: denied { link } for pid=11306 comm="syz.1.1505" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=79692229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.193054][T11307] overlay: ./bus is not a directory [ 166.199092][ T40] audit: type=1400 audit(1775490988.948:10647): avc: denied { mounton } for pid=11306 comm="syz.1.1505" path="/465/file0/file0" dev="9p" ino=79691929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 166.738231][ T29] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 166.887569][ T29] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 166.947346][T11354] __nla_validate_parse: 1 callbacks suppressed [ 166.947360][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1520'. [ 166.952986][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1520'. [ 166.958319][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1520'. [ 166.962009][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1520'. [ 166.966246][ T54] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 166.992771][ T40] audit: type=1400 audit(1775490989.758:10648): avc: denied { getopt } for pid=11353 comm="syz.5.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.108574][T11357] Mount JFS Failure: -22 [ 167.117941][ T54] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 167.120680][ T54] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 167.124354][ T54] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.129340][ T54] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 167.132174][ T54] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 167.134689][ T54] usb 7-1: Product: syz [ 167.138218][ T54] usb 7-1: Manufacturer: syz [ 167.142444][ T54] usb 7-1: SerialNumber: syz [ 167.150154][ T54] usb 7-1: config 0 descriptor?? [ 167.157440][ T54] hub 7-1:0.0: bad descriptor, ignoring hub [ 167.159493][ T54] hub 7-1:0.0: probe with driver hub failed with error -5 [ 167.164929][ T54] usb 7-1: selecting invalid altsetting 0 [ 167.243649][T11362] netlink: 'syz.5.1523': attribute type 1 has an invalid length. [ 167.267135][T11362] bond4: entered promiscuous mode [ 167.269250][T11362] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.283650][T11362] bond4: (slave bridge5): making interface the new active one [ 167.286123][T11362] bridge5: entered promiscuous mode [ 167.289326][T11362] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 167.353282][ T40] audit: type=1400 audit(1775490990.118:10649): avc: denied { unlink } for pid=11364 comm="syz.5.1524" name="file0" dev="9p" ino=79691929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 167.716714][ T1337] usb 7-1: USB disconnect, device number 28 [ 167.747289][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1526'. [ 167.801892][T11371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=11371 comm=syz.2.1526 [ 167.812538][T11372] isofs_fill_super: bread failed, dev=sr0, iso_blknum=16, block=16 [ 167.896078][ T40] audit: type=1400 audit(1775490990.658:10650): avc: denied { write } for pid=11377 comm="syz.2.1528" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 167.952615][T11381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11381 comm=syz.2.1529 [ 167.968225][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1531'. [ 167.971154][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1531'. [ 167.974071][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1531'. [ 167.977484][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1531'. [ 168.010583][T11392] vxfs: unable to read disk superblock at 1 [ 168.012705][T11392] vxfs: unable to read disk superblock at 8 [ 168.014643][T11392] vxfs: can't find superblock. [ 168.023265][ T5936] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 168.023285][ T5936] Bluetooth: hci2: Malformed Event: 0x2f [ 168.241121][T11408] netlink: 'syz.5.1537': attribute type 10 has an invalid length. [ 168.244450][T11408] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1537'. [ 168.438796][T11423] netlink: 'syz.5.1540': attribute type 40 has an invalid length. [ 168.941324][T11473] ntfs3(sr0): try to read out of volume at offset 0x0 [ 169.193848][T11503] netlink: 'syz.2.1562': attribute type 10 has an invalid length. [ 169.212427][T11505] program syz.5.1561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.392552][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 169.392563][ T40] audit: type=1400 audit(1775490992.158:10656): avc: denied { remount } for pid=11508 comm="syz.6.1564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 169.402641][T11509] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 169.410227][ T40] audit: type=1400 audit(1775490992.178:10657): avc: denied { create } for pid=11508 comm="syz.6.1564" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 169.483552][T11513] Unknown options in mask b7f2 [ 169.509733][ T29] usb 6-1: string descriptor 0 read error: -71 [ 169.512508][ T29] usb 6-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 169.518794][T11518] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 169.519797][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.529998][ T29] usb 6-1: can't set config #1, error -71 [ 169.535509][T11518] syzkaller0: entered promiscuous mode [ 169.537409][T11518] syzkaller0: entered allmulticast mode [ 169.540630][ T29] usb 6-1: USB disconnect, device number 25 [ 169.967710][T11555] netlink: 'syz.2.1575': attribute type 1 has an invalid length. [ 169.980364][T11555] bond11: entered promiscuous mode [ 169.982544][T11555] 8021q: adding VLAN 0 to HW filter on device bond11 [ 170.033000][T11565] netlink: 'syz.5.1576': attribute type 6 has an invalid length. [ 170.168455][ T40] audit: type=1400 audit(1775490992.938:10658): avc: denied { ioctl } for pid=11583 comm="syz.5.1579" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 170.178435][ T40] audit: type=1400 audit(1775490992.938:10659): avc: denied { ioctl } for pid=11583 comm="syz.5.1579" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 170.345088][T11599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=11599 comm=syz.5.1582 [ 170.473411][T11615] netlink: 'syz.1.1585': attribute type 4 has an invalid length. [ 170.526644][ T40] audit: type=1400 audit(1775490993.298:10660): avc: denied { execute } for pid=11621 comm="syz.1.1587" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.534212][ T40] audit: type=1400 audit(1775490993.298:10661): avc: denied { read } for pid=11623 comm="syz.6.1588" path="socket:[47400]" dev="sockfs" ino=47400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 170.616639][ T1337] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 170.657633][T11630] program syz.6.1590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.662794][T11631] program syz.6.1590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.762035][ T40] audit: type=1400 audit(1775490993.528:10662): avc: denied { read } for pid=11636 comm="syz.6.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 170.794684][ T1337] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.798716][ T1337] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 34517, setting to 1024 [ 170.802117][ T1337] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.806324][ T1337] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.809156][ T1337] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.814008][ T1337] usb 10-1: config 0 descriptor?? [ 170.816379][T11599] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 170.920151][ T40] audit: type=1400 audit(1775490993.688:10663): avc: denied { name_connect } for pid=11653 comm="syz.1.1597" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 171.054500][ T6000] hid_parser_main: 118 callbacks suppressed [ 171.054524][ T6000] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 171.065991][ T6000] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 171.069228][ T6000] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 171.075432][ T6000] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 171.079258][ T6000] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 171.081840][ T6000] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 171.084249][ T6000] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 171.087649][ T6000] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 171.090571][ T6000] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 171.093208][ T6000] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 171.106562][ T6000] hid-generic 0006:0004:0009.0008: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 171.123187][ T40] audit: type=1400 audit(1775490993.888:10664): avc: denied { getopt } for pid=11663 comm="syz.6.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 171.228331][ T1337] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max [ 171.237496][ T1337] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 171.392011][T11677] tmpfs: Unknown parameter 'XRf' [ 171.444579][T11683] Bluetooth: MGMT ver 1.23 [ 171.895613][T11708] netlink: 'syz.6.1618': attribute type 1 has an invalid length. [ 171.910444][T11708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.937664][T11708] bond1: (slave veth3): Enslaving as an active interface with a down link [ 171.973144][T11708] vlan2: entered allmulticast mode [ 171.975155][T11708] bond1: entered allmulticast mode [ 171.978193][T11708] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 172.011067][T11712] fuse: Unknown parameter './file0' [ 172.347523][T11727] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.350473][T11727] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.352640][T11727] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.622775][T11739] x_tables: ip_tables: osf match: only valid for protocol 6 [ 172.628406][T11740] x_tables: ip_tables: osf match: only valid for protocol 6 [ 172.824526][T11750] __nla_validate_parse: 13 callbacks suppressed [ 172.824539][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1630'. [ 172.829622][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1630'. [ 172.946162][ T1337] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 173.024552][T11765] fuse: Unknown parameter 'troup_i@' [ 173.029740][ T40] audit: type=1326 audit(1775490995.798:10665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11766 comm="syz.1.1634" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2d679c819 code=0x0 [ 173.076004][ T1337] usb 11-1: device descriptor read/64, error -71 [ 173.269345][T11782] sp0: Synchronizing with TNC [ 173.277440][T11782] sp0: Found TNC [ 173.337033][ T1337] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 173.426580][T11778] [U] ` [ 173.476137][ T1337] usb 11-1: device descriptor read/64, error -71 [ 173.496274][ T840] usb 10-1: USB disconnect, device number 15 [ 173.566735][T11800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.584688][T11800] hfs: can't find a HFS filesystem on dev sr0 [ 173.589959][ T1337] usb usb11-port1: attempt power cycle [ 173.623196][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 173.784283][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1651'. [ 173.956595][ T1337] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 173.976752][ T1337] usb 11-1: device descriptor read/8, error -71 [ 174.226406][ T1337] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 174.256624][ T1337] usb 11-1: device descriptor read/8, error -71 [ 174.276274][ T5936] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.376092][ T1337] usb usb11-port1: unable to enumerate USB device [ 174.436044][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.438509][ T5936] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.557421][T11875] overlayfs: conflicting lowerdir path [ 174.560685][T11877] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1661'. [ 174.658394][T11885] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1664'. [ 174.662191][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 174.664502][T11885] binder: 11884:11885 ioctl 4018620d 200000000100 returned -16 [ 174.681649][T11887] vcan0: entered allmulticast mode [ 174.698127][T11889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=11889 comm=syz.1.1666 [ 174.728159][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 174.728171][ T40] audit: type=1400 audit(1775490997.498:10671): avc: denied { write } for pid=11892 comm="syz.1.1668" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 174.787898][T11897] ip6gre1: entered promiscuous mode [ 174.956775][ T40] audit: type=1400 audit(1775490997.728:10672): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 174.991810][T11902] netlink: 868 bytes leftover after parsing attributes in process `syz.2.1670'. [ 175.033256][ T40] audit: type=1400 audit(1775490997.798:10673): avc: denied { create } for pid=11904 comm="syz.2.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 175.065451][T11909] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1672'. [ 175.141009][T11924] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 175.143885][T11924] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 175.302021][T11942] tmpfs: Bad value for 'mpol' [ 175.320399][T11944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1685'. [ 175.481175][ T40] audit: type=1400 audit(1775490998.248:10674): avc: denied { map } for pid=11966 comm="syz.2.1690" path="pipe:[48586]" dev="pipefs" ino=48586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 175.491488][ T40] audit: type=1400 audit(1775490998.248:10675): avc: denied { execute } for pid=11966 comm="syz.2.1690" path="pipe:[48586]" dev="pipefs" ino=48586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 175.711432][T11979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1695'. [ 175.716046][ T40] audit: type=1400 audit(1775490998.478:10676): avc: denied { execute_no_trans } for pid=11978 comm="syz.2.1695" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=48625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 176.011796][T11993] mkiss: ax0: crc mode is auto. [ 176.105498][ T40] audit: type=1400 audit(1775490998.868:10677): avc: denied { connect } for pid=11999 comm="syz.6.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 176.188523][T12005] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.309416][T12005] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.330299][ T40] audit: type=1400 audit(1775490999.098:10678): avc: denied { setattr } for pid=12010 comm="syz.5.1706" name="[io_uring]" dev="anon_inodefs" ino=49518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 176.337794][ T40] audit: type=1400 audit(1775490999.108:10679): avc: denied { accept } for pid=12010 comm="syz.5.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 176.387626][T12015] input: syz0 as /devices/virtual/input/input20 [ 176.431197][T12005] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.532366][T12005] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.538806][T12020] netlink: 'syz.5.1711': attribute type 4 has an invalid length. [ 176.569890][ T40] audit: type=1800 audit(1775490999.338:10680): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1712" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 176.571028][ T63] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 176.572750][T12025] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 176.624226][T11859] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.633552][T11852] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.644428][T11852] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.654884][T11852] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.806512][ T29] libceph: connect (1)[c::]:6789 error -101 [ 176.809270][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 176.815356][ T29] libceph: connect (1)[c::]:6789 error -101 [ 176.821619][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 176.973126][T12044] overlayfs: failed lookup in lower (newroot/335, name='file1', err=-40): overlapping layers [ 176.980840][T12044] overlayfs: failed lookup in lower (newroot/335, name='file1', err=-40): overlapping layers [ 177.059630][T12050] netlink: 'syz.2.1722': attribute type 1 has an invalid length. [ 177.080576][T12050] 8021q: adding VLAN 0 to HW filter on device bond12 [ 177.089647][T12050] bond0: (slave dummy0): Releasing backup interface [ 177.099044][ T29] libceph: connect (1)[c::]:6789 error -101 [ 177.101570][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 177.338445][ T5341] pmem0: [POWERTEC] p1 [ 177.339964][ T5341] pmem0: p1 start 791543808 is beyond EOD, truncated [ 177.343865][T12009] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 177.366937][T12077] [U] zͻi[27| [ 177.368591][T12077] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 177.373864][T12078] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 177.374315][T12077] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 177.384619][T12077] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 177.391894][T12077] [U] 8)X)YvxRĻbmbN@ox;JD, [ 177.404454][T12077] [U] *Cn3v7KEXgt_3 [ 177.411350][T12077] [U] D/QazҬEHgE1$_ks=R@ [ 177.413632][T12077] [U] ϼcEv @ [ 177.415162][T12077] [U] a% [ 177.417128][T12077] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 177.425067][T12077] [U] f1p3 [ 177.427193][T12077] [U] N0[L;a_l&kMC [ 177.429224][T12077] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 177.433047][T12076] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 1 [ 177.817275][T12100] ubi8: attaching mtd0 [ 177.817983][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.820008][T12100] ubi8: scanning is finished [ 177.821758][T11859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 177.822597][T12100] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 177.825996][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.837406][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.840162][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.867901][T12109] __nla_validate_parse: 8 callbacks suppressed [ 177.867913][T12109] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1740'. [ 177.964671][T12121] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 178.006952][T11859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.011186][T11859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.014534][T11859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.041967][T12100] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 178.044402][T12106] chnl_net:caif_netlink_parms(): no params data found [ 178.120987][T12131] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 178.149862][T12106] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.165052][T12136] SELinux: failed to load policy [ 178.169508][T12138] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 178.175099][T12106] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.177914][T12106] bridge_slave_0: entered allmulticast mode [ 178.180759][T12106] bridge_slave_0: entered promiscuous mode [ 178.186482][T12106] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.188953][T12106] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.191984][T12106] bridge_slave_1: entered allmulticast mode [ 178.194906][T12106] bridge_slave_1: entered promiscuous mode [ 178.211332][T11859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.215517][T11859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.219951][T11859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.238421][T12141] netlink: 'syz.6.1747': attribute type 1 has an invalid length. [ 178.241266][T12141] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1747'. [ 178.268148][T12106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.273758][T12106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.320608][T12106] team0: Port device team_slave_0 added [ 178.326423][T12106] team0: Port device team_slave_1 added [ 178.347211][T12106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.349705][T12106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.359386][T12106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.364315][T12106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.367544][T12106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.378735][T12106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.399840][T12158] netlink: 'syz.5.1753': attribute type 10 has an invalid length. [ 178.507923][T12106] hsr_slave_0: entered promiscuous mode [ 178.510459][T12106] hsr_slave_1: entered promiscuous mode [ 178.516283][T12106] debugfs: 'hsr0' already exists in 'hsr' [ 178.518743][T12106] Cannot create hsr debugfs directory [ 178.551988][T11859] bridge_slave_1: left allmulticast mode [ 178.553924][T11859] bridge_slave_1: left promiscuous mode [ 178.556239][T11859] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.565741][T11859] x9: left allmulticast mode [ 178.573589][T11859] x9: left promiscuous mode [ 178.575351][T11859] bridge0: port 1(1x9) entered disabled state [ 178.581578][T11859] veth0_to_bond: left allmulticast mode [ 178.583358][T11859] veth0_to_bond: left promiscuous mode [ 178.585309][T11859] bridge2: port 2(veth0_to_bond) entered disabled state [ 178.592977][T11859] veth9: left allmulticast mode [ 178.594708][T11859] veth9: left promiscuous mode [ 178.596083][ T9] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 178.597476][T11859] bridge2: port 1(veth9) entered disabled state [ 178.657355][T11859] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 178.660054][T11859] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 0e:49:eb:9c:5f:2e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 178.682047][T12179] tmpfs: Unknown parameter 'Did' [ 178.759198][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.762670][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 178.765726][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.773392][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 178.776492][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 178.779039][ T9] usb 7-1: Product: syz [ 178.780409][ T9] usb 7-1: Manufacturer: syz [ 178.781897][ T9] usb 7-1: SerialNumber: syz [ 178.863193][T12182] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1756'. [ 178.968172][T11859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.973931][T11859] bond0 (unregistering): Released all slaves [ 178.981337][T11859] bond1 (unregistering): Released all slaves [ 178.990356][T11859] bond2 (unregistering): (slave veth3): Releasing backup interface [ 178.990634][ T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 179.001282][T11859] bond2 (unregistering): Released all slaves [ 179.020252][T11859] bond3 (unregistering): (slave veth11): Releasing active interface [ 179.025041][T11859] bond3 (unregistering): Released all slaves [ 179.112236][T11859] : left promiscuous mode [ 179.357099][ T34] usb 7-1: USB disconnect, device number 30 [ 179.369654][ T34] usblp0: removed [ 179.582287][T12211] netlink: 360 bytes leftover after parsing attributes in process `syz.5.1762'. [ 179.629825][T12215] fuse: Unknown parameter '' [ 179.708137][T12225] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1766'. [ 179.712002][T12225] tmpfs: Bad value for 'mpol' [ 179.751505][T11859] hsr_slave_0: left promiscuous mode [ 179.753907][T11859] hsr_slave_1: left promiscuous mode [ 179.757978][T11859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.760657][T11859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.764198][T11859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.769318][T11859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.774246][T11859] veth1_macvtap: left promiscuous mode [ 179.776810][T11859] veth0_macvtap: left promiscuous mode [ 179.866126][ T5936] Bluetooth: hci0: command tx timeout [ 180.030603][T12106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.035424][T12106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.045547][T12106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.062745][T12106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.164894][T12106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.170768][T12249] sctp: [Deprecated]: syz.6.1774 (pid 12249) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.170768][T12249] Use struct sctp_sack_info instead [ 180.178603][T12106] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.184411][T11860] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.187604][T11860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.198412][T11850] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.200582][T11850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.352600][T12261] geneve2: entered promiscuous mode [ 180.354674][T12261] geneve2: entered allmulticast mode [ 180.361429][T11860] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.365433][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 180.365444][ T40] audit: type=1400 audit(1775491003.128:10689): avc: denied { read } for pid=12262 comm="syz.5.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 180.369045][T11860] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.391512][T11860] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.396067][T11850] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.411552][T12265] bond2 (unregistering): Released all slaves [ 180.425921][T12106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.451168][T12106] veth0_vlan: entered promiscuous mode [ 180.458852][T12106] veth1_vlan: entered promiscuous mode [ 180.472131][T12106] veth0_macvtap: entered promiscuous mode [ 180.483859][T12106] veth1_macvtap: entered promiscuous mode [ 180.492275][T12106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.498428][T12106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.506421][T11855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.509528][T11860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.513147][T11860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.516205][T11860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.558231][T11862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.561547][T11862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.575766][T11855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.579681][T11855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.676042][ T54] usb 11-1: new low-speed USB device number 14 using dummy_hcd [ 180.826026][ T54] usb 11-1: Invalid ep0 maxpacket: 32 [ 180.866274][T12279] openvswitch: netlink: ERSPAN option length err (len 4968, max 255). [ 180.956014][ T54] usb 11-1: new low-speed USB device number 15 using dummy_hcd [ 181.088749][ T40] audit: type=1400 audit(1775491003.858:10690): avc: denied { nlmsg_tty_audit } for pid=12289 comm="syz.2.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 181.100907][T12291] bond13 (unregistering): Released all slaves [ 181.106035][ T54] usb 11-1: Invalid ep0 maxpacket: 32 [ 181.108327][ T54] usb usb11-port1: attempt power cycle [ 181.122452][T12290] bond13 (unregistering): Released all slaves [ 181.263648][T12302] program syz.2.1786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.268827][ T40] audit: type=1400 audit(1775491004.038:10691): avc: denied { listen } for pid=12300 comm="syz.2.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 181.268974][T12302] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 181.276822][ T40] audit: type=1400 audit(1775491004.048:10692): avc: denied { accept } for pid=12300 comm="syz.2.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 181.446261][ T54] usb 11-1: new low-speed USB device number 16 using dummy_hcd [ 181.466557][ T54] usb 11-1: Invalid ep0 maxpacket: 32 [ 181.600729][ T54] usb 11-1: new low-speed USB device number 17 using dummy_hcd [ 181.616700][ T54] usb 11-1: Invalid ep0 maxpacket: 32 [ 181.618897][ T54] usb usb11-port1: unable to enumerate USB device [ 181.725859][T12322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12322 comm=syz.5.1790 [ 181.859568][T12328] CIFS mount error: No usable UNC path provided in device string! [ 181.859568][T12328] [ 181.863281][T12328] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 181.946027][ T5936] Bluetooth: hci0: command tx timeout [ 181.982787][T12332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.027577][T12334] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 182.033194][T12334] bond5 (unregistering): Released all slaves [ 182.125390][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'. [ 182.130097][T12340] veth1_to_bridge: entered allmulticast mode [ 182.183498][ T40] audit: type=1400 audit(1775491004.948:10693): avc: denied { connect } for pid=12344 comm="syz.2.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 182.242437][T12353] binder: 12351:12353 ioctl c0306201 200000000640 returned -22 [ 182.394471][T12363] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 182.789963][T12391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1812'. [ 182.839026][T12394] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 182.842472][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 182.845218][T12394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1813'. [ 182.849076][T12394] program syz.1.1813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.891661][T12398] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 182.976232][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'. [ 183.078207][T12414] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1821'. [ 183.082014][T12415] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1821'. [ 183.131217][T12423] SELinux: Context system_u:object_r:crond_initrc_exec_t:s0 is not valid (left unmapped). [ 183.136347][ T40] audit: type=1400 audit(1775491005.908:10694): avc: denied { relabelto } for pid=12422 comm="syz.5.1823" name="cgroup.procs" dev="cgroup" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 183.147790][ T40] audit: type=1400 audit(1775491005.908:10695): avc: denied { associate } for pid=12422 comm="syz.5.1823" name="cgroup.procs" dev="cgroup" ino=410 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 183.247140][T12437] netlink: 'syz.5.1827': attribute type 10 has an invalid length. [ 183.361744][ T5341] pmem0: [POWERTEC] p1 [ 183.363275][ T5341] pmem0: p1 start 791543808 is beyond EOD, truncated [ 183.445591][ T40] audit: type=1400 audit(1775491006.208:10696): avc: denied { append } for pid=12444 comm="syz.5.1831" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 183.466465][ T6120] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 183.618168][ T6120] usb 6-1: Using ep0 maxpacket: 32 [ 183.624883][ T6120] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 183.628780][ T6120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.631758][ T6120] usb 6-1: Product: syz [ 183.633465][ T6120] usb 6-1: Manufacturer: syz [ 183.641869][ T6120] usb 6-1: SerialNumber: syz [ 183.646231][ T6120] usb 6-1: config 0 descriptor?? [ 183.650498][ T6120] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 183.653211][ T6120] dvb-usb: bulk message failed: -22 (4/0) [ 183.657072][ T6120] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 183.660410][ T6120] dvb-usb: bulk message failed: -22 (5/0) [ 183.662235][ T6120] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 183.669015][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1836'. [ 183.671931][T12463] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1836'. [ 183.674874][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1836'. [ 183.679231][ T6120] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.684488][ T6120] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 183.686015][T12463] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1836'. [ 183.688960][ T6120] usb 6-1: media controller created [ 183.727494][ T6120] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.750953][ T6120] usb 6-1: selecting invalid altsetting 3 [ 183.755972][ T6120] ttusb2: set interface to alts=3 failed [ 183.782314][ T6120] DVB: Unable to find symbol tda10086_attach() [ 183.795971][ T6120] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 183.799596][ T6120] dvb-usb: bulk message failed: -22 (4/0) [ 183.801454][ T6120] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 183.804767][ T6120] dvb-usb: bulk message failed: -22 (5/0) [ 183.806647][ T6120] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 183.809837][ T6120] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 183.862663][T12433] dvb-usb: bulk message failed: -22 (7/0) [ 183.864858][T12433] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 183.869876][T12433] ttusb2: i2c transfer failed. [ 183.885279][T12477] 9pnet_virtio: no channels available for device syz [ 183.921951][T12483] FAULT_INJECTION: forcing a failure. [ 183.921951][T12483] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 183.927541][T12483] CPU: 3 UID: 0 PID: 12483 Comm: syz.6.1839 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.927569][T12483] Tainted: [L]=SOFTLOCKUP [ 183.927576][T12483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.927586][T12483] Call Trace: [ 183.927632][T12483] [ 183.927640][T12483] dump_stack_lvl+0x100/0x190 [ 183.927686][T12483] should_fail_ex.cold+0x5/0xa [ 183.927789][T12483] _copy_from_user+0x2e/0xd0 [ 183.927893][T12483] do_ipv6_setsockopt+0x74d/0x4510 [ 183.927931][T12483] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 183.927954][T12483] ? find_held_lock+0x2b/0x80 [ 183.927978][T12483] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 183.928091][T12483] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 183.928116][T12483] ? avc_has_perm_noaudit+0x145/0x3b0 [ 183.928139][T12483] ? avc_has_perm+0x135/0x1e0 [ 183.928158][T12483] ? __pfx_avc_has_perm+0x10/0x10 [ 183.928181][T12483] ? get_pid_task+0x106/0x250 [ 183.928203][T12483] ? sock_has_perm+0x258/0x2f0 [ 183.928258][T12483] ? __pfx_sock_has_perm+0x10/0x10 [ 183.928285][T12483] ? ipv6_setsockopt+0xcb/0x170 [ 183.928302][T12483] ipv6_setsockopt+0xcb/0x170 [ 183.928324][T12483] rawv6_setsockopt+0xee/0x5a0 [ 183.928354][T12483] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 183.928384][T12483] ? selinux_socket_setsockopt+0x6a/0x80 [ 183.928407][T12483] ? sock_common_setsockopt+0x2e/0xf0 [ 183.928427][T12483] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 183.928447][T12483] do_sock_setsockopt+0xf3/0x1d0 [ 183.928469][T12483] __sys_setsockopt+0x195/0x220 [ 183.928499][T12483] __x64_sys_setsockopt+0xbd/0x160 [ 183.928523][T12483] ? do_syscall_64+0x95/0xf80 [ 183.928540][T12483] ? lockdep_hardirqs_on+0x78/0x100 [ 183.928567][T12483] do_syscall_64+0x106/0xf80 [ 183.928582][T12483] ? clear_bhb_loop+0x40/0x90 [ 183.928604][T12483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.928622][T12483] RIP: 0033:0x7f7354f9c819 [ 183.928637][T12483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.928653][T12483] RSP: 002b:00007f7355d8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.928699][T12483] RAX: ffffffffffffffda RBX: 00007f7355215fa0 RCX: 00007f7354f9c819 [ 183.928711][T12483] RDX: 00000000000000d3 RSI: 0000000000000029 RDI: 0000000000000003 [ 183.928721][T12483] RBP: 00007f7355d8c090 R08: 000000000000005c R09: 0000000000000000 [ 183.928731][T12483] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 183.928741][T12483] R13: 00007f7355216038 R14: 00007f7355215fa0 R15: 00007fffc5269268 [ 183.928766][T12483] [ 184.026728][ T5936] Bluetooth: hci0: command tx timeout [ 184.136953][T12491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12491 comm=syz.6.1842 [ 184.215242][T12497] e]: renamed from vlan0 (while UP) [ 184.255027][T11860] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.262680][T11860] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.276898][T12501] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1847'. [ 184.307379][T12507] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 184.350066][T11860] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.353600][T11860] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.417995][T12511] FAULT_INJECTION: forcing a failure. [ 184.417995][T12511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.422153][T12511] CPU: 3 UID: 0 PID: 12511 Comm: syz.5.1849 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.422171][T12511] Tainted: [L]=SOFTLOCKUP [ 184.422175][T12511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.422182][T12511] Call Trace: [ 184.422187][T12511] [ 184.422192][T12511] dump_stack_lvl+0x100/0x190 [ 184.422215][T12511] should_fail_ex.cold+0x5/0xa [ 184.422231][T12511] _copy_from_user+0x2e/0xd0 [ 184.422245][T12511] ip6_mroute_setsockopt+0x269e/0x36d0 [ 184.422266][T12511] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 184.422282][T12511] ? __lock_acquire+0x4a5/0x2630 [ 184.422312][T12511] ? is_bpf_text_address+0x94/0x1a0 [ 184.422330][T12511] ? kernel_text_address+0x8d/0x100 [ 184.422343][T12511] ? __kernel_text_address+0xd/0x30 [ 184.422360][T12511] ? __might_fault+0xc5/0x140 [ 184.422380][T12511] ? do_ipv6_setsockopt+0x551/0x4510 [ 184.422392][T12511] do_ipv6_setsockopt+0x551/0x4510 [ 184.422408][T12511] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 184.422420][T12511] ? find_held_lock+0x2b/0x80 [ 184.422435][T12511] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 184.422447][T12511] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 184.422462][T12511] ? avc_has_perm_noaudit+0x145/0x3b0 [ 184.422476][T12511] ? avc_has_perm+0x135/0x1e0 [ 184.422504][T12511] ? __pfx_avc_has_perm+0x10/0x10 [ 184.422517][T12511] ? get_pid_task+0x106/0x250 [ 184.422530][T12511] ? sock_has_perm+0x258/0x2f0 [ 184.422544][T12511] ? __pfx_sock_has_perm+0x10/0x10 [ 184.422560][T12511] ? ipv6_setsockopt+0xcb/0x170 [ 184.422571][T12511] ipv6_setsockopt+0xcb/0x170 [ 184.422583][T12511] rawv6_setsockopt+0xee/0x5a0 [ 184.422602][T12511] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 184.422620][T12511] ? selinux_socket_setsockopt+0x6a/0x80 [ 184.422634][T12511] ? sock_common_setsockopt+0x2e/0xf0 [ 184.422646][T12511] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 184.422662][T12511] do_sock_setsockopt+0xf3/0x1d0 [ 184.422675][T12511] __sys_setsockopt+0x195/0x220 [ 184.422693][T12511] __x64_sys_setsockopt+0xbd/0x160 [ 184.422708][T12511] ? do_syscall_64+0x95/0xf80 [ 184.422718][T12511] ? lockdep_hardirqs_on+0x78/0x100 [ 184.422735][T12511] do_syscall_64+0x106/0xf80 [ 184.422744][T12511] ? clear_bhb_loop+0x40/0x90 [ 184.422758][T12511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.422769][T12511] RIP: 0033:0x7fdbaef9c819 [ 184.422779][T12511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.422790][T12511] RSP: 002b:00007fdbafd8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.422801][T12511] RAX: ffffffffffffffda RBX: 00007fdbaf215fa0 RCX: 00007fdbaef9c819 [ 184.422807][T12511] RDX: 00000000000000d3 RSI: 0000000000000029 RDI: 0000000000000003 [ 184.422813][T12511] RBP: 00007fdbafd8e090 R08: 000000000000005c R09: 0000000000000000 [ 184.422819][T12511] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 184.422825][T12511] R13: 00007fdbaf216038 R14: 00007fdbaf215fa0 R15: 00007ffe7716ad78 [ 184.422840][T12511] [ 184.582451][T11860] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.583252][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1850'. [ 184.585744][T11860] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.611857][T12515] 8021q: adding VLAN 0 to HW filter on device bond5 [ 184.626410][T12515] vlan0: entered promiscuous mode [ 184.628125][T12515] bond5: entered promiscuous mode [ 184.629918][T12515] vlan0: entered allmulticast mode [ 184.631603][T12515] bond5: entered allmulticast mode [ 184.637267][T12515] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1850'. [ 184.646695][T12515] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 184.649902][T12515] batadv1: entered promiscuous mode [ 184.651981][T12515] batadv1: entered allmulticast mode [ 184.654610][T12515] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 184.687846][T11860] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.691128][T11860] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.698212][T12515] kAFS: unable to lookup cell '(,cL' [ 184.716626][T12515] kAFS: unable to lookup cell '(,cL' [ 184.854924][T11860] bridge0: port 1(batadv0) entered disabled state [ 185.200301][T11860] bond0 (unregistering): Released all slaves [ 185.205735][T11860] bond1 (unregistering): (slave veth3): Releasing active interface [ 185.208680][T11860] batadv1: entered promiscuous mode [ 185.211823][T11860] bond1 (unregistering): (slave batadv1): Releasing active interface [ 185.215376][T11860] bond1 (unregistering): Released all slaves [ 185.222536][T12545] FAULT_INJECTION: forcing a failure. [ 185.222536][T12545] name failslab, interval 1, probability 0, space 0, times 1 [ 185.227481][T12545] CPU: 2 UID: 0 PID: 12545 Comm: syz.6.1858 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.227506][T12545] Tainted: [L]=SOFTLOCKUP [ 185.227512][T12545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.227520][T12545] Call Trace: [ 185.227526][T12545] [ 185.227533][T12545] dump_stack_lvl+0x100/0x190 [ 185.227564][T12545] should_fail_ex.cold+0x5/0xa [ 185.227586][T12545] should_failslab+0xc2/0x120 [ 185.227650][T12545] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 185.227674][T12545] ? __alloc_skb+0x140/0x710 [ 185.227699][T12545] __alloc_skb+0x140/0x710 [ 185.227719][T12545] ? __alloc_skb+0x5b7/0x710 [ 185.227744][T12545] ? __pfx___alloc_skb+0x10/0x10 [ 185.227762][T12545] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 185.227781][T12545] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 185.227802][T12545] mr6_netlink_event+0xd9/0x1b0 [ 185.227825][T12545] ip6_mroute_setsockopt+0x1810/0x36d0 [ 185.227852][T12545] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 185.227876][T12545] ? __lock_acquire+0x4a5/0x2630 [ 185.227893][T12545] ? is_bpf_text_address+0x94/0x1a0 [ 185.227915][T12545] ? kernel_text_address+0x8d/0x100 [ 185.227942][T12545] ? __might_fault+0xc5/0x140 [ 185.227970][T12545] ? do_ipv6_setsockopt+0x551/0x4510 [ 185.227987][T12545] do_ipv6_setsockopt+0x551/0x4510 [ 185.228009][T12545] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 185.228028][T12545] ? find_held_lock+0x2b/0x80 [ 185.228047][T12545] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 185.228066][T12545] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 185.228086][T12545] ? avc_has_perm_noaudit+0x145/0x3b0 [ 185.228105][T12545] ? avc_has_perm+0x135/0x1e0 [ 185.228122][T12545] ? __pfx_avc_has_perm+0x10/0x10 [ 185.228140][T12545] ? get_pid_task+0x106/0x250 [ 185.228159][T12545] ? sock_has_perm+0x258/0x2f0 [ 185.228179][T12545] ? __pfx_sock_has_perm+0x10/0x10 [ 185.228203][T12545] ? ipv6_setsockopt+0xcb/0x170 [ 185.228217][T12545] ipv6_setsockopt+0xcb/0x170 [ 185.228235][T12545] rawv6_setsockopt+0xee/0x5a0 [ 185.228260][T12545] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 185.228285][T12545] ? selinux_socket_setsockopt+0x6a/0x80 [ 185.228304][T12545] ? sock_common_setsockopt+0x2e/0xf0 [ 185.228320][T12545] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 185.228338][T12545] do_sock_setsockopt+0xf3/0x1d0 [ 185.228356][T12545] __sys_setsockopt+0x195/0x220 [ 185.228382][T12545] __x64_sys_setsockopt+0xbd/0x160 [ 185.228401][T12545] ? do_syscall_64+0x95/0xf80 [ 185.228416][T12545] ? lockdep_hardirqs_on+0x78/0x100 [ 185.228440][T12545] do_syscall_64+0x106/0xf80 [ 185.228453][T12545] ? clear_bhb_loop+0x40/0x90 [ 185.228472][T12545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.228488][T12545] RIP: 0033:0x7f7354f9c819 [ 185.228502][T12545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.228516][T12545] RSP: 002b:00007f73531f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 185.228532][T12545] RAX: ffffffffffffffda RBX: 00007f7355216090 RCX: 00007f7354f9c819 [ 185.228541][T12545] RDX: 00000000000000d3 RSI: 0000000000000029 RDI: 0000000000000003 [ 185.228550][T12545] RBP: 00007f73531f6090 R08: 000000000000005c R09: 0000000000000000 [ 185.228559][T12545] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 185.228568][T12545] R13: 00007f7355216128 R14: 00007f7355216090 R15: 00007fffc5269268 [ 185.228590][T12545] [ 185.230731][T12546] IPVS: Error connecting to the multicast addr [ 185.374925][ T40] audit: type=1400 audit(1775491008.138:10697): avc: denied { create } for pid=12552 comm="syz.6.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 185.474652][ T40] audit: type=1400 audit(1775491008.238:10698): avc: denied { setattr } for pid=12563 comm="syz.5.1866" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 185.653301][T12580] overlay: ./file1 is not a directory [ 185.845075][T12606] netlink: 'syz.2.1874': attribute type 1 has an invalid length. [ 185.869755][ T40] audit: type=1400 audit(1775491008.638:10699): avc: denied { ioctl } for pid=12610 comm="syz.5.1875" path="socket:[50963]" dev="sockfs" ino=50963 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 185.885477][T12609] QAT: failed to copy from user. [ 185.889453][T12609] loop4: detected capacity change from 0 to 7 [ 185.891008][ T40] audit: type=1400 audit(1775491008.658:10700): avc: denied { ioctl } for pid=12610 comm="syz.5.1875" path="socket:[51840]" dev="sockfs" ino=51840 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 185.891962][T12609] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.903129][T12609] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.905806][T12609] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.911920][T12609] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.915293][T12609] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.919129][T12609] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.923060][T12609] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.925678][T12609] ldm_validate_partition_table(): Disk read failed. [ 185.928635][T12609] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.933569][T12609] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.939458][T12609] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.947457][T12609] Dev loop4: unable to read RDB block 0 [ 185.949703][T12609] loop4: unable to read partition table [ 185.951581][T12609] loop4: partition table beyond EOD, truncated [ 185.953986][T12609] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 185.992813][T11860] hsr_slave_0: left promiscuous mode [ 185.995373][T11860] hsr_slave_1: left promiscuous mode [ 186.003005][T11860] veth1_macvtap: left promiscuous mode [ 186.004826][T11860] veth0_macvtap: left promiscuous mode [ 186.006834][T11860] veth1_vlan: left promiscuous mode [ 186.106976][ T5936] Bluetooth: hci0: command tx timeout [ 186.167995][ T10] usb 6-1: USB disconnect, device number 26 [ 186.197609][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 186.329742][T12644] cgroup2: Unknown parameter 'dont_hash' [ 186.332727][T12643] netlink: 'syz.2.1882': attribute type 1 has an invalid length. [ 186.384395][T12643] bond13: entered promiscuous mode [ 186.396662][T12643] 8021q: adding VLAN 0 to HW filter on device bond13 [ 186.409938][T12657] FAULT_INJECTION: forcing a failure. [ 186.409938][T12657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.415439][T12657] CPU: 2 UID: 0 PID: 12657 Comm: syz.1.1881 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.415457][T12657] Tainted: [L]=SOFTLOCKUP [ 186.415461][T12657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.415468][T12657] Call Trace: [ 186.415473][T12657] [ 186.415478][T12657] dump_stack_lvl+0x100/0x190 [ 186.415501][T12657] should_fail_ex.cold+0x5/0xa [ 186.415517][T12657] _copy_to_user+0x32/0xd0 [ 186.415531][T12657] simple_read_from_buffer+0xcb/0x170 [ 186.415544][T12657] proc_fail_nth_read+0x1af/0x230 [ 186.415562][T12657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.415579][T12657] ? rw_verify_area+0xce/0x6d0 [ 186.415595][T12657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.415611][T12657] vfs_read+0x1e4/0xb30 [ 186.415622][T12657] ? __pfx_vfs_read+0x10/0x10 [ 186.415632][T12657] ? __fget_files+0x215/0x3d0 [ 186.415647][T12657] ? __fget_files+0x21f/0x3d0 [ 186.415662][T12657] ksys_read+0x12a/0x250 [ 186.415672][T12657] ? __pfx_ksys_read+0x10/0x10 [ 186.415686][T12657] do_syscall_64+0x106/0xf80 [ 186.415696][T12657] ? clear_bhb_loop+0x40/0x90 [ 186.415710][T12657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.415721][T12657] RIP: 0033:0x7f914055d04e [ 186.415732][T12657] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.415742][T12657] RSP: 002b:00007f9141397fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.415753][T12657] RAX: ffffffffffffffda RBX: 00007f91413986c0 RCX: 00007f914055d04e [ 186.415759][T12657] RDX: 000000000000000f RSI: 00007f91413980a0 RDI: 0000000000000004 [ 186.415766][T12657] RBP: 00007f9141398090 R08: 0000000000000000 R09: 0000000000000000 [ 186.415772][T12657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.415778][T12657] R13: 00007f9140816128 R14: 00007f9140816090 R15: 00007ffd056159f8 [ 186.415791][T12657] [ 186.508719][T12643] bond13: (slave bridge6): making interface the new active one [ 186.511673][T12643] bridge6: entered promiscuous mode [ 186.515267][T12643] bond13: (slave bridge6): Enslaving as an active interface with an up link [ 186.593629][T12672] program syz.2.1889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.611399][ T40] audit: type=1400 audit(1775491009.388:10701): avc: denied { bind } for pid=12673 comm="syz.1.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 186.614885][T12674] GUP no longer grows the stack in syz.1.1890 (12674): 200000007000-20000000a000 (200000004000) [ 186.628465][T12674] CPU: 2 UID: 0 PID: 12674 Comm: syz.1.1890 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.628485][T12674] Tainted: [L]=SOFTLOCKUP [ 186.628489][T12674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.628496][T12674] Call Trace: [ 186.628501][T12674] [ 186.628506][T12674] dump_stack_lvl+0x100/0x190 [ 186.628530][T12674] gup_vma_lookup.cold+0x83/0x96 [ 186.628549][T12674] __get_user_pages+0x241/0x34d0 [ 186.628567][T12674] ? xdp_umem_create+0x648/0x11e0 [ 186.628582][T12674] ? xsk_setsockopt+0x7d8/0xab0 [ 186.628595][T12674] ? do_sock_setsockopt+0xf3/0x1d0 [ 186.628607][T12674] ? __pfx___get_user_pages+0x10/0x10 [ 186.628620][T12674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.628636][T12674] __gup_longterm_locked+0x279/0x16f0 [ 186.628649][T12674] ? __lock_acquire+0x400/0x2630 [ 186.628663][T12674] ? __pfx___gup_longterm_locked+0x10/0x10 [ 186.628683][T12674] pin_user_pages+0x13c/0x160 [ 186.628696][T12674] ? __pfx_pin_user_pages+0x10/0x10 [ 186.628710][T12674] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 186.628730][T12674] ? security_capable+0x50/0x260 [ 186.628748][T12674] xdp_umem_create+0x723/0x11e0 [ 186.628767][T12674] xsk_setsockopt+0x7d8/0xab0 [ 186.628782][T12674] ? __pfx_xsk_setsockopt+0x10/0x10 [ 186.628796][T12674] ? find_held_lock+0x2b/0x80 [ 186.628810][T12674] ? __fget_files+0x215/0x3d0 [ 186.628824][T12674] ? selinux_socket_setsockopt+0x6a/0x80 [ 186.628840][T12674] ? __pfx_xsk_setsockopt+0x10/0x10 [ 186.628857][T12674] do_sock_setsockopt+0xf3/0x1d0 [ 186.628870][T12674] __sys_setsockopt+0x195/0x220 [ 186.628888][T12674] __x64_sys_setsockopt+0xbd/0x160 [ 186.628903][T12674] ? do_syscall_64+0x95/0xf80 [ 186.628913][T12674] ? lockdep_hardirqs_on+0x78/0x100 [ 186.628930][T12674] do_syscall_64+0x106/0xf80 [ 186.628940][T12674] ? clear_bhb_loop+0x40/0x90 [ 186.628953][T12674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.628965][T12674] RIP: 0033:0x7f914059c819 [ 186.628980][T12674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.628992][T12674] RSP: 002b:00007f91413b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 186.629004][T12674] RAX: ffffffffffffffda RBX: 00007f9140815fa0 RCX: 00007f914059c819 [ 186.629011][T12674] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 186.629018][T12674] RBP: 00007f9140632c91 R08: 0000000000000020 R09: 0000000000000000 [ 186.629025][T12674] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 186.629032][T12674] R13: 00007f9140816038 R14: 00007f9140815fa0 R15: 00007ffd056159f8 [ 186.629047][T12674] [ 186.747747][ T40] audit: type=1326 audit(1775491009.518:10702): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12682 comm="syz.6.1893" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7354f9c819 code=0x0 [ 186.993345][T11860] IPVS: stop unused estimator thread 0... [ 187.036073][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 187.132423][T12717] program syz.1.1898 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.188427][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 187.191453][ T10] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 187.195340][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 187.198616][ T10] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.205476][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 187.209991][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 187.215504][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 187.218735][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 187.221426][ T10] usb 7-1: Product: syz [ 187.222964][ T10] usb 7-1: Manufacturer: syz [ 187.230980][T12676] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.234678][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 187.236662][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 187.239594][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 187.241636][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 187.436577][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 187.438602][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 187.440535][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 187.442454][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 187.444560][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 187.446633][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 187.448446][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 187.451457][ T10] usb 7-1: USB disconnect, device number 31 [ 187.677139][ T40] audit: type=1400 audit(1775491010.448:10703): avc: denied { getopt } for pid=12747 comm="syz.5.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 187.748604][T12757] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 187.828441][T12765] netlink: 'syz.5.1913': attribute type 32 has an invalid length. [ 187.908566][ T40] audit: type=1400 audit(1775491010.678:10704): avc: denied { setattr } for pid=12776 comm="syz.5.1917" name="TIPC" dev="sockfs" ino=51102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.107702][ T40] audit: type=1400 audit(1775491010.878:10705): avc: denied { connect } for pid=12790 comm="syz.2.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 188.586048][ T63] Bluetooth: hci0: command 0x0405 tx timeout [ 188.738051][T12777] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.740826][T12777] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.743614][T12777] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.750196][T12777] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.752700][T12777] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 188.756775][T12777] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 188.984592][T12796] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.987059][T12796] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.989207][T12796] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.991424][T12796] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 189.001497][T12818] __nla_validate_parse: 9 callbacks suppressed [ 189.001589][T12818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1928'. [ 189.034057][ T40] audit: type=1400 audit(1775491011.798:10706): avc: denied { lock } for pid=12819 comm="syz.6.1929" path="socket:[52893]" dev="sockfs" ino=52893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.142261][T12822] loop7: detected capacity change from 0 to 2640 [ 189.144991][T12822] ldm_validate_partition_table(): Disk read failed. [ 189.147553][T12822] Dev loop7: unable to read RDB block 0 [ 189.149656][T12822] loop7: unable to read partition table [ 189.151501][T12822] loop_reread_partitions: partition scan of loop7 (3 ) failed (rc=-5) [ 189.207417][ T5936] Bluetooth: hci0: unexpected event for opcode 0x0804 [ 189.246025][ T10] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 189.303111][T12828] SELinux: failed to load policy [ 189.367781][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1935'. [ 189.370743][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1935'. [ 189.406666][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 189.410936][ T10] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 189.414066][ T10] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 189.418806][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 189.421894][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 189.425458][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 189.430082][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 189.434480][ T10] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 189.437645][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.438800][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'. [ 189.442196][ T10] usb 10-1: config 0 descriptor?? [ 189.443809][T12846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.648485][ T10] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 189.658048][ T10] usb 10-1: USB disconnect, device number 16 [ 189.665602][ T10] usblp0: removed [ 189.723057][T12865] tmpfs: Bad value for 'mpol' [ 189.830460][ T5936] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 190.185993][ T10] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 190.336129][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 190.342605][ T10] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 190.347926][ T10] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 190.352256][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 190.356969][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.361258][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 190.365716][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 190.372278][ T10] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 190.376541][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.382944][ T10] usb 10-1: config 0 descriptor?? [ 190.571325][T12895] pmem0: [POWERTEC] p1 [ 190.573024][T12895] pmem0: p1 start 791543808 is beyond EOD, truncated [ 190.589179][ T10] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 190.735073][T12908] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 190.760680][T12908] f2fs: Unknown parameter '' [ 191.066085][ T5936] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.066177][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.299936][ T5341] pmem0: [POWERTEC] p1 [ 191.301487][ T5341] pmem0: p1 start 791543808 is beyond EOD, truncated [ 191.407616][T12944] Bluetooth: MGMT ver 1.23 [ 191.480945][T12952] sctp: [Deprecated]: syz.2.1969 (pid 12952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.480945][T12952] Use struct sctp_sack_info instead [ 191.489661][T12954] "syz.6.1974" (12954) uses obsolete ecb(arc4) skcipher [ 191.495487][T12949] macsec0: entered promiscuous mode [ 191.497789][T12949] macsec0: entered allmulticast mode [ 191.499656][T12949] veth1_macvtap: entered allmulticast mode [ 191.602747][T12961] syzkaller1: entered promiscuous mode [ 191.605354][T12961] syzkaller1: entered allmulticast mode [ 191.625721][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 191.625733][ T40] audit: type=1400 audit(1775491014.388:10708): avc: denied { node_bind } for pid=12963 comm="syz.6.1978" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 191.674767][ T40] audit: type=1326 audit(1775491014.438:10709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12966 comm="syz.6.1979" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7354f9c819 code=0x0 [ 191.725089][ T40] audit: type=1326 audit(1775491014.488:10710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12966 comm="syz.6.1979" exe="/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f7354f9c819 code=0x0 [ 191.872652][T12974] Malformed UNC in devname [ 191.872652][T12974] [ 191.876698][T12974] CIFS: VFS: Malformed UNC in devname [ 191.951817][T12980] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1984'. [ 191.980812][ T10] usb 10-1: USB disconnect, device number 17 [ 191.991502][ T10] usblp0: removed [ 192.020156][T12990] netlink: 'syz.5.1986': attribute type 64 has an invalid length. [ 192.612174][ T40] audit: type=1400 audit(1775491015.378:10711): avc: denied { write } for pid=12997 comm="syz.6.1988" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 192.612843][T12998] sd 0:0:0:0: PR command failed: 1026 [ 192.622824][T12998] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 192.625137][T12998] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 192.877304][T13002] 5gQ[: renamed from lo [ 192.946467][T12998] nbd0: detected capacity change from 0 to 128 [ 192.950967][ T63] block nbd0: Receive control failed (result -32) [ 192.951012][ T5936] block nbd0: Receive control failed (result -32) [ 192.952617][ T5934] block nbd0: Send control failed (result -32) [ 192.969715][ T5934] block nbd0: Request send failed, requeueing [ 192.978302][ T1286] block nbd0: Dead connection, failed to find a fallback [ 192.981333][ T1286] block nbd0: shutting down sockets [ 192.983655][ T1286] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.987833][ T1286] buffer_io_error: 35 callbacks suppressed [ 192.987843][ T1286] Buffer I/O error on dev nbd0, logical block 0, async page read [ 192.996000][ T5934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.999656][ T5934] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.006158][ T5934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.014522][ T5934] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.019261][ T5934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.023190][ T5934] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.025856][ T5934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.029646][ T5934] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.032698][ T5934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.036586][ T5934] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.039804][ T5934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.044074][ T5934] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.048216][ T5934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.052368][ T5934] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.056332][ T5934] ldm_validate_partition_table(): Disk read failed. [ 193.059584][ T5934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.063827][ T5934] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.069371][ T5934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.073890][ T5934] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.077633][ T5934] Dev nbd0: unable to read RDB block 0 [ 193.080315][ T5934] nbd0: unable to read partition table [ 193.099053][ T5934] ldm_validate_partition_table(): Disk read failed. [ 193.102505][ T5934] Dev nbd0: unable to read RDB block 0 [ 193.105593][ T5934] nbd0: unable to read partition table [ 193.184931][ T40] audit: type=1400 audit(1775491015.948:10712): avc: denied { bind } for pid=13016 comm="syz.6.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 193.196110][ T40] audit: type=1400 audit(1775491015.948:10713): avc: denied { write } for pid=13016 comm="syz.6.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 193.227935][ T5936] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 193.231546][ T5936] Bluetooth: hci0: Injecting HCI hardware error event [ 193.235514][ T63] Bluetooth: hci0: hardware error 0x00 [ 193.289880][T13030] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1996'. [ 193.362642][T13034] tipc: Started in network mode [ 193.364440][T13034] tipc: Node identity 96bfe7b40edf, cluster identity 4711 [ 193.369132][T13034] tipc: Enabled bearer , priority 0 [ 193.404964][T13035] syzkaller0: entered promiscuous mode [ 193.407366][T13035] syzkaller0: entered allmulticast mode [ 193.409756][T13035] tipc: Resetting bearer [ 193.479600][ T40] audit: type=1400 audit(1775491016.248:10714): avc: denied { append } for pid=13044 comm="syz.2.2001" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 193.546072][T13033] tipc: Resetting bearer [ 193.573567][T13053] gfs2: not a GFS2 filesystem [ 193.868108][ T5936] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 193.872283][ T5936] Bluetooth: hci3: Injecting HCI hardware error event [ 193.876629][ T5936] Bluetooth: hci3: hardware error 0x00 [ 194.909132][T13075] vxfs: unable to read disk superblock at 1 [ 194.911369][T13075] vxfs: unable to read disk superblock at 8 [ 194.913896][T13075] vxfs: can't find superblock. [ 195.295997][T13033] tipc: Disabling bearer [ 195.305974][ T63] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 195.310364][ T29] tipc: Node number set to 2556487604 [ 195.379195][ T40] audit: type=1326 audit(1775491018.148:10715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13079 comm="syz.1.2011" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f914059c819 code=0x0 [ 195.387091][T13080] bond2: option downdelay: invalid value (18446744073709551615) [ 195.389606][T13080] bond2: option downdelay: allowed values 0 - 2147483647 [ 195.393169][T13080] bond2 (unregistering): Released all slaves [ 195.428092][T13081] nbd: socks must be embedded in a SOCK_ITEM attr [ 195.436711][T13086] netlink: 412 bytes leftover after parsing attributes in process `syz.1.2011'. [ 195.531481][T11852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.534794][T11852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.550710][T13097] [ 195.551709][T13097] ====================================================== [ 195.554506][T13097] WARNING: possible circular locking dependency detected [ 195.557367][T13097] syzkaller #0 Tainted: G L [ 195.559772][T13097] ------------------------------------------------------ [ 195.562297][T13097] syz.5.2014/13097 is trying to acquire lock: [ 195.564441][T13097] ffffffff8e9ab8a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x4c/0x6e0 [ 195.567684][T13097] [ 195.567684][T13097] but task is already holding lock: [ 195.570187][T13097] ffffffff8e9794e8 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 195.573814][T13097] [ 195.573814][T13097] which lock already depends on the new lock. [ 195.573814][T13097] [ 195.577634][T13097] [ 195.577634][T13097] the existing dependency chain (in reverse order) is: [ 195.580873][T13097] [ 195.580873][T13097] -> #8 (slab_mutex){+.+.}-{4:4}: [ 195.583183][T13097] __mutex_lock+0x1a2/0x1b90 [ 195.584815][T13097] kmem_cache_destroy+0x59/0x180 [ 195.586597][T13097] p9_client_destroy+0x20c/0x3a0 [ 195.588334][T13097] v9fs_session_close+0x49/0x2d0 [ 195.590003][T13101] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 195.590195][T13097] v9fs_kill_super+0x4d/0xa0 [ 195.595564][T13097] deactivate_locked_super+0xc1/0x1b0 [ 195.597682][T13097] deactivate_super+0xe7/0x110 [ 195.599443][T13097] cleanup_mnt+0x21f/0x450 [ 195.601009][T13097] task_work_run+0x150/0x240 [ 195.602665][T13097] exit_to_user_mode_loop+0x100/0x4a0 [ 195.604534][T13097] do_syscall_64+0x67c/0xf80 [ 195.606143][T13097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.608205][T13097] [ 195.608205][T13097] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 195.610994][T13097] cpus_read_lock+0x42/0x170 [ 195.612899][T13097] static_key_disable+0x12/0x20 [ 195.614692][T13097] __inet_hash_connect+0x1378/0x1e40 [ 195.616607][T13097] tcp_v4_connect+0xeb0/0x1b40 [ 195.618281][T13097] __inet_stream_connect+0x208/0xfa0 [ 195.620148][T13097] inet_stream_connect+0x57/0xa0 [ 195.621876][T13097] __sys_connect_file+0x141/0x1a0 [ 195.623702][T13097] __sys_connect+0x141/0x170 [ 195.625489][T13097] __x64_sys_connect+0x72/0xb0 [ 195.627362][T13097] do_syscall_64+0x106/0xf80 [ 195.629337][T13097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.631465][T13097] [ 195.631465][T13097] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 195.633912][T13097] lock_sock_nested+0x41/0xf0 [ 195.635589][T13097] inet_shutdown+0x67/0x410 [ 195.637416][T13097] nbd_mark_nsock_dead+0xae/0x5c0 [ 195.639671][T13097] sock_shutdown+0x16b/0x200 [ 195.641644][T13097] nbd_config_put+0x1eb/0x750 [ 195.643697][T13097] nbd_release+0xb7/0x190 [ 195.645433][T13097] blkdev_put_whole+0xb0/0xf0 [ 195.647199][T13097] bdev_release+0x47f/0x6d0 [ 195.649045][T13097] blkdev_release+0x15/0x20 [ 195.650980][T13097] __fput+0x3ff/0xb40 [ 195.652425][T13097] task_work_run+0x150/0x240 [ 195.654058][T13097] exit_to_user_mode_loop+0x100/0x4a0 [ 195.655941][T13097] do_syscall_64+0x67c/0xf80 [ 195.657962][T13097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.660774][T13097] [ 195.660774][T13097] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 195.664285][T13097] __mutex_lock+0x1a2/0x1b90 [ 195.666387][T13097] nbd_queue_rq+0x428/0x1080 [ 195.668415][T13097] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 195.670833][T13097] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 195.673508][T13097] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 195.676081][T13097] blk_mq_run_hw_queue+0x23c/0x670 [ 195.678311][T13097] blk_mq_dispatch_list+0x51d/0x1360 [ 195.680720][T13097] blk_mq_flush_plug_list+0x130/0x600 [ 195.683191][T13097] __blk_flush_plug+0x2c4/0x4b0 [ 195.685445][T13097] __submit_bio+0x584/0x6c0 [ 195.687468][T13097] submit_bio_noacct_nocheck+0x562/0xc10 [ 195.689960][T13097] submit_bio_noacct+0xd17/0x2010 [ 195.692219][T13097] submit_bh_wbc+0x59c/0x770 [ 195.694323][T13097] block_read_full_folio+0x4c8/0x8e0 [ 195.696631][T13097] filemap_read_folio+0xfc/0x3b0 [ 195.698834][T13097] do_read_cache_folio+0x2d7/0x6b0 [ 195.701157][T13097] read_part_sector+0xd1/0x370 [ 195.703380][T13097] adfspart_check_ICS+0x93/0x910 [ 195.705540][T13097] bdev_disk_changed+0x7f8/0xc80 [ 195.707833][T13097] blkdev_get_whole+0x187/0x290 [ 195.710183][T13097] bdev_open+0x2c7/0xe40 [ 195.712193][T13097] blkdev_open+0x34e/0x4f0 [ 195.714180][T13097] do_dentry_open+0x6d8/0x1660 [ 195.716278][T13097] vfs_open+0x82/0x3f0 [ 195.718114][T13097] path_openat+0x208c/0x31a0 [ 195.720165][T13097] do_file_open+0x20e/0x430 [ 195.722148][T13097] do_sys_openat2+0x10d/0x1e0 [ 195.724219][T13097] __x64_sys_openat+0x12d/0x210 [ 195.726341][T13097] do_syscall_64+0x106/0xf80 [ 195.728425][T13097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.731171][T13097] [ 195.731171][T13097] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 195.734083][T13097] __mutex_lock+0x1a2/0x1b90 [ 195.736112][T13097] nbd_queue_rq+0xba/0x1080 [ 195.738096][T13097] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 195.740517][T13097] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 195.743292][T13097] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 195.745926][T13097] blk_mq_run_hw_queue+0x23c/0x670 [ 195.748181][T13097] blk_mq_dispatch_list+0x51d/0x1360 [ 195.750517][T13097] blk_mq_flush_plug_list+0x130/0x600 [ 195.752982][T13097] __blk_flush_plug+0x2c4/0x4b0 [ 195.755321][T13097] __submit_bio+0x584/0x6c0 [ 195.757372][T13097] submit_bio_noacct_nocheck+0x562/0xc10 [ 195.759831][T13097] submit_bio_noacct+0xd17/0x2010 [ 195.762017][T13097] submit_bh_wbc+0x59c/0x770 [ 195.764072][T13097] block_read_full_folio+0x4c8/0x8e0 [ 195.766395][T13097] filemap_read_folio+0xfc/0x3b0 [ 195.768543][T13097] do_read_cache_folio+0x2d7/0x6b0 [ 195.771024][T13097] read_part_sector+0xd1/0x370 [ 195.773445][T13097] adfspart_check_ICS+0x93/0x910 [ 195.775686][T13097] bdev_disk_changed+0x7f8/0xc80 [ 195.777871][T13097] blkdev_get_whole+0x187/0x290 [ 195.779961][T13097] bdev_open+0x2c7/0xe40 [ 195.781848][T13097] blkdev_open+0x34e/0x4f0 [ 195.783788][T13097] do_dentry_open+0x6d8/0x1660 [ 195.785952][T13097] vfs_open+0x82/0x3f0 [ 195.787872][T13097] path_openat+0x208c/0x31a0 [ 195.789746][T13097] do_file_open+0x20e/0x430 [ 195.791485][T13097] do_sys_openat2+0x10d/0x1e0 [ 195.793167][T13097] __x64_sys_openat+0x12d/0x210 [ 195.794882][T13097] do_syscall_64+0x106/0xf80 [ 195.796497][T13097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.798532][T13097] [ 195.798532][T13097] -> #3 (set->srcu){.+.+}-{0:0}: [ 195.800922][T13097] __synchronize_srcu+0xa2/0x300 [ 195.802913][T13097] blk_mq_quiesce_queue+0x149/0x1c0 [ 195.804956][T13097] elevator_switch+0x17b/0x7e0 [ 195.806711][T13097] elevator_change+0x352/0x530 [ 195.808407][T13097] elevator_set_default+0x29e/0x360 [ 195.810228][T13097] blk_register_queue+0x412/0x590 [ 195.812057][T13097] __add_disk+0x73f/0xe40 [ 195.813786][T13097] add_disk_fwnode+0x118/0x5c0 [ 195.815548][T13097] nbd_dev_add+0x77a/0xb10 [ 195.817175][T13097] nbd_init+0x291/0x2b0 [ 195.818800][T13097] do_one_initcall+0x11d/0x760 [ 195.820488][T13097] kernel_init_freeable+0x6e5/0x7a0 [ 195.822301][T13097] kernel_init+0x1f/0x1e0 [ 195.823892][T13097] ret_from_fork+0x754/0xd80 [ 195.825636][T13097] ret_from_fork_asm+0x1a/0x30 [ 195.827482][T13097] [ 195.827482][T13097] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 195.830236][T13097] __mutex_lock+0x1a2/0x1b90 [ 195.831884][T13097] elevator_change+0x1bc/0x530 [ 195.833554][T13097] elevator_set_none+0x92/0xf0 [ 195.835228][T13097] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 195.837216][T13097] nbd_start_device+0x1a6/0xbd0 [ 195.838920][T13097] nbd_genl_connect+0xff2/0x1a40 [ 195.840670][T13097] genl_family_rcv_msg_doit+0x214/0x300 [ 195.842621][T13097] genl_rcv_msg+0x560/0x800 [ 195.844277][T13097] netlink_rcv_skb+0x159/0x420 [ 195.846082][T13097] genl_rcv+0x28/0x40 [ 195.847669][T13097] netlink_unicast+0x5aa/0x870 [ 195.849448][T13097] netlink_sendmsg+0x8b0/0xda0 [ 195.851111][T13097] ____sys_sendmsg+0x9e1/0xb70 [ 195.852789][T13097] ___sys_sendmsg+0x190/0x1e0 [ 195.854464][T13097] __sys_sendmsg+0x170/0x220 [ 195.856145][T13097] do_syscall_64+0x106/0xf80 [ 195.857814][T13097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.859936][T13097] [ 195.859936][T13097] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 195.862817][T13097] blk_alloc_queue+0x610/0x790 [ 195.864554][T13097] blk_mq_alloc_queue+0x174/0x290 [ 195.866385][T13097] __blk_mq_alloc_disk+0x29/0x120 [ 195.868173][T13097] nbd_dev_add+0x492/0xb10 [ 195.869782][T13097] nbd_init+0x291/0x2b0 [ 195.871304][T13097] do_one_initcall+0x11d/0x760 [ 195.872987][T13097] kernel_init_freeable+0x6e5/0x7a0 [ 195.874835][T13097] kernel_init+0x1f/0x1e0 [ 195.876374][T13097] ret_from_fork+0x754/0xd80 [ 195.877992][T13097] ret_from_fork_asm+0x1a/0x30 [ 195.879702][T13097] [ 195.879702][T13097] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 195.881978][T13097] __lock_acquire+0x14b8/0x2630 [ 195.883898][T13097] lock_acquire+0x1cf/0x380 [ 195.885764][T13097] fs_reclaim_acquire+0xc4/0x100 [ 195.887730][T13097] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 195.889651][T13097] __kmem_cache_create_args+0x366/0x420 [ 195.891572][T13097] ieee80211_mesh_init_sdata+0x596/0x690 [ 195.893514][T13097] ieee80211_setup_sdata+0xabd/0xcf0 [ 195.895366][T13097] ieee80211_if_add+0xa30/0x1860 [ 195.897081][T13097] ieee80211_add_iface+0xaf/0x5d0 [ 195.898841][T13097] nl80211_new_interface+0x65f/0x11d0 [ 195.900726][T13097] genl_family_rcv_msg_doit+0x214/0x300 [ 195.902650][T13097] genl_rcv_msg+0x560/0x800 [ 195.904238][T13097] netlink_rcv_skb+0x159/0x420 [ 195.905914][T13097] genl_rcv+0x28/0x40 [ 195.907421][T13097] netlink_unicast+0x5aa/0x870 [ 195.909198][T13097] netlink_sendmsg+0x8b0/0xda0 [ 195.911057][T13097] ____sys_sendmsg+0x9e1/0xb70 [ 195.912745][T13097] ___sys_sendmsg+0x190/0x1e0 [ 195.914398][T13097] __sys_sendmsg+0x170/0x220 [ 195.916020][T13097] do_syscall_64+0x106/0xf80 [ 195.917632][T13097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.919693][T13097] [ 195.919693][T13097] other info that might help us debug this: [ 195.919693][T13097] [ 195.922868][T13097] Chain exists of: [ 195.922868][T13097] fs_reclaim --> cpu_hotplug_lock --> slab_mutex [ 195.922868][T13097] [ 195.926648][T13097] Possible unsafe locking scenario: [ 195.926648][T13097] [ 195.928964][T13097] CPU0 CPU1 [ 195.930702][T13097] ---- ---- [ 195.932462][T13097] lock(slab_mutex); [ 195.933817][T13097] lock(cpu_hotplug_lock); [ 195.936041][T13097] lock(slab_mutex); [ 195.938077][T13097] lock(fs_reclaim); [ 195.939417][T13097] [ 195.939417][T13097] *** DEADLOCK *** [ 195.939417][T13097] [ 195.942019][T13097] 4 locks held by syz.5.2014/13097: [ 195.943721][T13097] #0: ffffffff906c06f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 195.946296][T13097] #1: ffffffff906143a8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xae0 [ 195.949189][T13097] #2: ffff888036498788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_new_interface+0xac/0x11d0 [ 195.952585][T13097] #3: ffffffff8e9794e8 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 195.955831][T13097] [ 195.955831][T13097] stack backtrace: [ 195.957752][T13097] CPU: 3 UID: 0 PID: 13097 Comm: syz.5.2014 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.957768][T13097] Tainted: [L]=SOFTLOCKUP [ 195.957772][T13097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.957779][T13097] Call Trace: [ 195.957785][T13097] [ 195.957790][T13097] dump_stack_lvl+0x100/0x190 [ 195.957808][T13097] print_circular_bug.cold+0x178/0x1c7 [ 195.957827][T13097] check_noncircular+0x146/0x160 [ 195.957846][T13097] __lock_acquire+0x14b8/0x2630 [ 195.957857][T13097] ? __kmem_cache_create_args+0x44/0x420 [ 195.957872][T13097] lock_acquire+0x1cf/0x380 [ 195.957884][T13097] ? kmem_cache_alloc_noprof+0x4c/0x6e0 [ 195.957901][T13097] fs_reclaim_acquire+0xc4/0x100 [ 195.957914][T13097] ? kmem_cache_alloc_noprof+0x4c/0x6e0 [ 195.957930][T13097] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 195.957946][T13097] ? __kmem_cache_create_args+0x366/0x420 [ 195.957961][T13097] __kmem_cache_create_args+0x366/0x420 [ 195.957977][T13097] ieee80211_mesh_init_sdata+0x596/0x690 [ 195.957991][T13097] ? __pfx_ieee80211_mesh_init_sdata+0x10/0x10 [ 195.958003][T13097] ? __pfx___debug_object_init+0x10/0x10 [ 195.958022][T13097] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 195.958037][T13097] ? lockdep_init_map_type+0x5c/0x250 [ 195.958048][T13097] ieee80211_setup_sdata+0xabd/0xcf0 [ 195.958063][T13097] ieee80211_if_add+0xa30/0x1860 [ 195.958080][T13097] ieee80211_add_iface+0xaf/0x5d0 [ 195.958096][T13097] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 195.958112][T13097] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 195.958127][T13097] nl80211_new_interface+0x65f/0x11d0 [ 195.958143][T13097] ? __pfx_nl80211_new_interface+0x10/0x10 [ 195.958158][T13097] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 195.958171][T13097] ? nl80211_pre_doit+0x19a/0xae0 [ 195.958186][T13097] genl_family_rcv_msg_doit+0x214/0x300 [ 195.958199][T13097] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 195.958213][T13097] ? bpf_lsm_capable+0x9/0x10 [ 195.958224][T13097] ? security_capable+0x80/0x260 [ 195.958253][T13097] ? ns_capable+0xd2/0xf0 [ 195.958267][T13097] genl_rcv_msg+0x560/0x800 [ 195.958279][T13097] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.958290][T13097] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 195.958304][T13097] ? __pfx_nl80211_new_interface+0x10/0x10 [ 195.958317][T13097] ? __pfx_nl80211_post_doit+0x10/0x10 [ 195.958332][T13097] ? __lock_acquire+0x4a5/0x2630 [ 195.958342][T13097] netlink_rcv_skb+0x159/0x420 [ 195.958352][T13097] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.958363][T13097] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.958375][T13097] ? netlink_deliver_tap+0x1ae/0xcc0 [ 195.958392][T13097] genl_rcv+0x28/0x40 [ 195.958402][T13097] netlink_unicast+0x5aa/0x870 [ 195.958412][T13097] ? __pfx_netlink_unicast+0x10/0x10 [ 195.958423][T13097] netlink_sendmsg+0x8b0/0xda0 [ 195.958434][T13097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.958442][T13097] ? __might_fault+0x10/0x140 [ 195.958459][T13097] ____sys_sendmsg+0x9e1/0xb70 [ 195.958470][T13097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.958480][T13097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.958491][T13097] ? try_to_wake_up+0x644/0x1a80 [ 195.958506][T13097] ___sys_sendmsg+0x190/0x1e0 [ 195.958518][T13097] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.958529][T13097] ? futex_private_hash_put+0x107/0x1c0 [ 195.958555][T13097] __sys_sendmsg+0x170/0x220 [ 195.958570][T13097] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.958585][T13097] ? __x64_sys_futex+0x34f/0x4d0 [ 195.958599][T13097] do_syscall_64+0x106/0xf80 [ 195.958612][T13097] ? clear_bhb_loop+0x40/0x90 [ 195.958624][T13097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.958636][T13097] RIP: 0033:0x7fdbaef9c819 [ 195.958646][T13097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.958656][T13097] RSP: 002b:00007fdbafd8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.958666][T13097] RAX: ffffffffffffffda RBX: 00007fdbaf215fa0 RCX: 00007fdbaef9c819 [ 195.958672][T13097] RDX: 0000000024044884 RSI: 0000200000000300 RDI: 0000000000000003 [ 195.958678][T13097] RBP: 00007fdbaf032c91 R08: 0000000000000000 R09: 0000000000000000 [ 195.958684][T13097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.958690][T13097] R13: 00007fdbaf216038 R14: 00007fdbaf215fa0 R15: 00007ffe7716ad78 [ 195.958701][T13097] [ 196.099958][ T5936] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 196.131921][ T5936] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 196.131946][ T5936] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 199.547898][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.552544][ T1421] ieee802154 phy1 wpan1: encryption failed: -22