last executing test programs: 2m22.063067269s ago: executing program 2 (id=119): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r1, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="a6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="0f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000003f80)="93", 0x1}], 0x1}}], 0x4, 0x40048a0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendto$inet(r5, 0x0, 0x0, 0x4048000, 0x0, 0x0) listen(r4, 0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7520757365723a6e657f20"], 0x1a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r9, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2m21.922279027s ago: executing program 2 (id=122): rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffd4e, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ac4000/0x3000)=nil, 0x3000}) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x10000) shutdown(r2, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000140)="00fb0000", 0x4, 0x800c815, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) 2m21.906885413s ago: executing program 2 (id=124): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x7fffffff, 0x6a8801) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000040)=0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x8, @pix_mp={0x9, 0xb5f, 0x3136564e, 0x6, 0x2, [{0xbe20, 0xfffffffe}, {0x2b2, 0xf}, {0xb, 0x9}, {0xb4, 0xffff4739}, {0x8, 0x8001}, {0x4, 0x1}, {0x2}, {0x4, 0x8}], 0x3, 0x8, 0x3, 0x6, 0x3}}) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000400)={0x43b2, 0xc, 0x2d, "c6ca9de4932dbc4e344dada2bc2aee1c84f388bfb1f626eb79517fb6bfa6be35577840e084300497082c33fca8a63ec554cbf00ca52a041ac648b9a2", 0x13, "46fe08370ea147f4e0ed11a303ce380452d2eb9dc8f820bcfe7218314da9fae640106e9f78641e844ff9b01b6f0430f8e63906eecb530993c25bb011", 0x8}) syz_ublk_setup_io_uring(0x5e0d, &(0x7f0000000200)={0x0, 0x3348, 0x400, 0x1, 0x2f5, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x7, 0x400008, 0x200101, 0xb, 0x1d, "a6c00d00000400f8ffffff00"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0x8) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000040)=0xd) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000340)={0x1, {0x7ff, 0x0, 0xa, 0x3}, {0x1, 0x3, 0xf0, 0xffffae62}, {0x52a, 0x8}}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$char_usb(r5, &(0x7f0000000000)='-0', 0x2) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=@getqdisc={0x24, 0x26, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0xe, 0x4}, {0xffe0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 2m21.702137873s ago: executing program 2 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x2800000, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd70000000000003000000580001800d0001007564703a73797a320000000044000400200001000a004e240000bfa6ff010000000000000000000000000001f0020000200002000a004e2400000000fe80000000000000000000000000000e02000000dfb58fa5aabd0589c1239936b579a5fa9d59835e53b7f3c13bfcecdbc22569"], 0x6c}}, 0x4004090) chdir(&(0x7f0000000000)='./bus\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, r4, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) connect(r5, &(0x7f0000000140)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-neonbs\x00'}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000280)='.\x02\x00', 0x102) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', r6, &(0x7f0000000000)='./file0\x00', 0x0) 2m21.551619798s ago: executing program 2 (id=131): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)="43ee25") process_vm_readv(r4, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/93, 0x5d}], 0x1, &(0x7f0000000d40)=[{&(0x7f0000000740)=""/187, 0xbb}], 0x1, 0x0) ptrace$ARCH_GET_FS(0x1e, r4, &(0x7f0000000000), 0x1003) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x3, 0x8b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, &(0x7f0000000340)=0x0) syz_ublk_setup_queues(r5, r6, &(0x7f0000000380)={0x0, 0x983b, 0x1018, 0x2, 0x1ba, 0x0, r0}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4246, 0x1, 0x1, 0xfc, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x28c3, 0x0, 0x3, 0x18f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c99, 0x80, 0x3, 0x233}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xccc5, 0x4, 0x4000001, 0x1fa, 0x0, r0}}], 0x4, &(0x7f0000003040)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0xffffffffffdfe, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x0, 0xd8f, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m21.151984946s ago: executing program 2 (id=138): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xfc, 0x9}, {0x9, 0x4, 0x8, 0x0, 0xc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000}], 0x4}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1e8c, 0x181002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) (async) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e22, 0x4, @local, 0xb}, 0x1c) listen(r8, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0xa, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0xaecf, 0x0, 0x0, 0x0, 0x60}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}]}, &(0x7f0000000a00)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000a40)=""/4096, 0x41000, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001a80)={0x2, 0x7, 0x3, 0x3594}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3e0}, 0x94) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001b80), 0x628102, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001bc0)={r9, r10, 0x37, 0x0, @val=@netfilter={0x1, 0x1, 0x6, 0x1}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2m21.083266083s ago: executing program 32 (id=138): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xfc, 0x9}, {0x9, 0x4, 0x8, 0x0, 0xc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000}], 0x4}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1e8c, 0x181002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) (async) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e22, 0x4, @local, 0xb}, 0x1c) listen(r8, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0xa, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0xaecf, 0x0, 0x0, 0x0, 0x60}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}]}, &(0x7f0000000a00)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000a40)=""/4096, 0x41000, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001a80)={0x2, 0x7, 0x3, 0x3594}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3e0}, 0x94) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001b80), 0x628102, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001bc0)={r9, r10, 0x37, 0x0, @val=@netfilter={0x1, 0x1, 0x6, 0x1}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1m27.246289694s ago: executing program 3 (id=939): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8c04, 0x18) getdents64(r2, &(0x7f0000001400)=""/4099, 0x1003) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x58}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x3c}}, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r7 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x181080) ioctl$I2C_PEC(r7, 0x708, 0x1) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f00000001c0)={0x0, 0x3, 0x5, &(0x7f0000000140)={0x4, "5b34af798619902f2982e2cb3774a40f46d389becf8ed55b303c16496e9037095f"}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000640)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}, {0x2, 0x9a, 0x1}]}, 0x5) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0xc000000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffc}, 0x1c) 1m26.990353624s ago: executing program 3 (id=941): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet(0x2, 0x5, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x841}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e22, 0x6, @empty, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x400, @private2, 0x4}}, 0x5b, 0xfb0f}, 0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000002000)={r5, 0x3, 0x10}, 0xc) ioctl$EVIOCRMFF(r1, 0x41015500, &(0x7f0000000500)=0xfffffffb) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) 1m26.061196566s ago: executing program 3 (id=951): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='debugfs\x00', 0x208004, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) close(0x3) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@md0, 0xee01, &(0x7f0000000100)={0x0, 0x3, 0x5, 0x100000000, 0xffff, 0x1, 0xa5, 0x4, 0x5}) 1m26.056711411s ago: executing program 3 (id=954): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xac}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xb4, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0xfffffffffffffe2f, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x40030) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xf8f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_evm(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000180), &(0x7f0000000200)=@sha1={0x1, "2a8cde6fdfb743a583d0288ab76ee5fa165e9d37"}, 0x15, 0x3) chdir(&(0x7f0000000140)='./file0\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) syz_open_procfs(r4, &(0x7f0000000240)='smaps\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) setxattr$incfs_id(&(0x7f0000000280)='./bus/file0\x00', &(0x7f00000002c0), &(0x7f0000000e40)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m25.957288142s ago: executing program 3 (id=956): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x3, 0xef, 0x1ff, 0x10b00, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xb}, 0x50) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000080)={0x3, r1, 'id0\x00'}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x800, '\x00', 0x0, r1, 0x5, 0x0, 0x4}, 0x50) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r3, 0x9, 0x1, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x0, 0x4, 0x60, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x8000, 0x40, 0x9, 0x6}}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000400)={0x80, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex=r7, r4, 0x23, 0x2a, 0x0, @void, @void, @void, @value=r8, r6}, 0x20) ioctl$PTP_CLOCK_GETCAPS(r4, 0x80503d01, &(0x7f0000000440)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', r3}, 0x18) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000540), 0x7fff, 0x200000) ioctl$FE_READ_SIGNAL_STRENGTH(r9, 0x80026f47, &(0x7f0000000580)) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r7, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000680)={0x9, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=r10, r5, 0x24, 0x2038, 0x0, @void, @void, @value=r11, @void, r6}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000006c0)={{0x0, 0x3, 0x8, 0x7fff, '\x00', 0x7}, 0x1, [0x7, 0xb0, 0x6b6, 0x4, 0x2b2a, 0xffffffff9ce8938f, 0x5, 0x0, 0x5cb, 0x2, 0x8, 0x7fffffff, 0xfffffffffffffffb, 0x7, 0x6, 0x0, 0x9, 0x0, 0x81, 0x8, 0x8, 0x2, 0x2, 0x8, 0x2, 0x2, 0x7fffffff, 0x1, 0x8, 0x7fff, 0x2, 0xd, 0x5, 0xf, 0x7, 0x7, 0xffffffffffffffff, 0x6, 0x9, 0x1, 0xff, 0x6, 0x0, 0x200, 0x8, 0xff, 0x0, 0x8000000000000001, 0xb, 0x4, 0xd, 0xd, 0x5, 0x5, 0x60b, 0x200000000, 0x3, 0x4, 0x49, 0x4, 0x346d, 0x2, 0x10, 0xfffffffffffffffe, 0x100000000, 0x3, 0x7b85, 0xfffffffffffffff7, 0x9, 0xc4c, 0x1, 0x0, 0xfff, 0x9, 0x1, 0x101, 0x7fffffff, 0xbcf7, 0x5, 0x6, 0x5, 0xd6, 0xe, 0x7fffffff, 0x2, 0x3, 0xf64, 0x8, 0x685, 0x6, 0x5, 0x7, 0x3, 0x6, 0x3ff, 0xf, 0xffffffffffffffff, 0xfffffffffffffff8, 0x5, 0x7fffffff, 0x4, 0xffffffff, 0x46, 0x432, 0x2, 0x2, 0xc5, 0x7fff, 0xb560000000, 0x100, 0x800, 0x4, 0x10000, 0x100000001, 0x400, 0x0, 0x100000000, 0x9, 0x6e, 0x3, 0x7fffffff, 0xfffffffffffffc00, 0x6, 0x5, 0x8, 0xf, 0x79da, 0x9]}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0xb9, 0x0, 0x75071f48, 0x40119, r1, 0x1000, '\x00', r7, r4, 0x4, 0x0, 0x3, 0x3}, 0x50) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x8010, r2, 0xf9dd3000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r4, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)=r4}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r0, 0x58, &(0x7f0000000d00)}, 0x10) write$UHID_INPUT(r1, &(0x7f0000000dc0)={0x8, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000001e40)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001e80)={{r14}, r15, 0x0, @unused=[0xaf1, 0x9, 0x4000000000000, 0x7], @name="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"}) ioctl$NILFS_IOCTL_GET_CPSTAT(r13, 0x80186e83, &(0x7f0000002e80)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f40)={{r12}, &(0x7f0000002ec0), &(0x7f0000002f00)=r5}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000030c0)={0xfffffffa, 0x0}, 0x8) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003140)=@o_path={&(0x7f0000003100)='./file0\x00', 0x0, 0x4000, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0xc, 0x1, &(0x7f0000002f80)=@raw=[@generic={0x80, 0xa, 0x9, 0x2, 0x341}], &(0x7f0000002fc0)='syzkaller\x00', 0x3, 0x15, &(0x7f0000003000)=""/21, 0x40f00, 0x20, '\x00', r7, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000003040)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000003080)={0x2, 0xe, 0x9, 0x1}, 0x10, r16, r5, 0x0, &(0x7f0000003180)=[r17, r0, r12, r12], 0x0, 0x10, 0x5}, 0x94) 1m25.621162705s ago: executing program 3 (id=961): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000004100070328bd7000fbdbdf2503"], 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x2000c080) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000540)={0x1, 0xfffffffb, {}, {0xee01}, 0xffff, 0x7}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804756d6d79304000008002000000000000000a00a74cbc1ecec5c3e10169e2f5a28a20c814a9045d2392624d8752a97921ef8d3353d98d79252f1f166d2c0bd0e2c72884094224b92237984d984e61689f27150ce5033e2d60d99fb5f4300586351d11589f276fab792143290cf3722263f463986b29b87893cd3780ec259d64c5803a09b332e1c276383f8d1973849be31667509b9f1ecfccba5cafcfd7849d357500018e", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x8000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000180)=@req={0x6, 0x101, 0x2, 0x5}, 0x10) splice(r6, &(0x7f00000001c0)=0x8000000000000000, r4, &(0x7f0000000240)=0x6, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000004100070328bd7000fbdbdf2503"], 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x2000c080) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000540)={0x1, 0xfffffffb, {}, {0xee01}, 0xffff, 0x7}) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804756d6d79304000008002000000000000000a00a74cbc1ecec5c3e10169e2f5a28a20c814a9045d2392624d8752a97921ef8d3353d98d79252f1f166d2c0bd0e2c72884094224b92237984d984e61689f27150ce5033e2d60d99fb5f4300586351d11589f276fab792143290cf3722263f463986b29b87893cd3780ec259d64c5803a09b332e1c276383f8d1973849be31667509b9f1ecfccba5cafcfd7849d357500018e", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x8000) (async) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000180)=@req={0x6, 0x101, 0x2, 0x5}, 0x10) (async) splice(r6, &(0x7f00000001c0)=0x8000000000000000, r4, &(0x7f0000000240)=0x6, 0x6, 0x2) (async) 1m25.599573069s ago: executing program 33 (id=961): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000004100070328bd7000fbdbdf2503"], 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x2000c080) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000540)={0x1, 0xfffffffb, {}, {0xee01}, 0xffff, 0x7}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804756d6d79304000008002000000000000000a00a74cbc1ecec5c3e10169e2f5a28a20c814a9045d2392624d8752a97921ef8d3353d98d79252f1f166d2c0bd0e2c72884094224b92237984d984e61689f27150ce5033e2d60d99fb5f4300586351d11589f276fab792143290cf3722263f463986b29b87893cd3780ec259d64c5803a09b332e1c276383f8d1973849be31667509b9f1ecfccba5cafcfd7849d357500018e", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x8000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000180)=@req={0x6, 0x101, 0x2, 0x5}, 0x10) splice(r6, &(0x7f00000001c0)=0x8000000000000000, r4, &(0x7f0000000240)=0x6, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000004100070328bd7000fbdbdf2503"], 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x2000c080) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000540)={0x1, 0xfffffffb, {}, {0xee01}, 0xffff, 0x7}) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804756d6d79304000008002000000000000000a00a74cbc1ecec5c3e10169e2f5a28a20c814a9045d2392624d8752a97921ef8d3353d98d79252f1f166d2c0bd0e2c72884094224b92237984d984e61689f27150ce5033e2d60d99fb5f4300586351d11589f276fab792143290cf3722263f463986b29b87893cd3780ec259d64c5803a09b332e1c276383f8d1973849be31667509b9f1ecfccba5cafcfd7849d357500018e", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x8000) (async) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000180)=@req={0x6, 0x101, 0x2, 0x5}, 0x10) (async) splice(r6, &(0x7f00000001c0)=0x8000000000000000, r4, &(0x7f0000000240)=0x6, 0x6, 0x2) (async) 59.029335277s ago: executing program 4 (id=1294): syz_emit_ethernet(0xbe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 64) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (rerun: 64) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000180)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) (async) write(r0, 0x0, 0xfffffffffffffd69) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x50) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) (async) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = socket$kcm(0x2, 0x3, 0x84) (rerun: 64) sendmsg$inet(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000004f"], 0x4c}, 0x24001850) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010428bde40e6e7a4a5c231aa07000fcdbdf25160000071800018014000200b2c1c5c1657673696d3000000000000005000400000000"], 0x3c}}, 0x14008040) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket(0x1, 0x803, 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r10, 0x80015b11, 0x0) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c0012800b0001006970766c616e00000c000280060002000100000008000500", @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 58.865666006s ago: executing program 4 (id=1296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r2, 0x0, 0xa) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x3) r3 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000020800200000000000000", @ANYRES32=0x0, @ANYBLOB="80200100220004002000128008000100677470001400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="caba3d25bfb8f516a7fd6087f286a1fe55568dc46d722c48fb"], 0x40}, 0x1, 0xba01, 0x0, 0x4040080}, 0x0) 58.789530776s ago: executing program 4 (id=1298): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x7ff, 0x4) 58.727689155s ago: executing program 4 (id=1300): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0800040001006d6163766c616e00040002800600024b28a4d2"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x82802, 0x1ec541d9ca5bf1ef) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x1c, r5, 0x221, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r2, 0x25, 0x2, @void}, 0x10) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f00000001c0)={0x9, r0, 'id0\x00'}) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e24, @multicast2}, 0x10) (async) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="29e0", 0x2}], 0x1) 58.629944228s ago: executing program 4 (id=1301): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9b01, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f10000000101"], 0x0) (async) open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f10000000101"], 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x5) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x5) read$dsp(r0, &(0x7f0000000080)=""/131, 0x83) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f00000001c0)=""/119, 0x77}, &(0x7f0000000240)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x2, 0x26000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x2, 0x26000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000004c0)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x201, 0x4000003e, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000002c0)=""/210, &(0x7f00000003c0)=0xd2) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r8, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000007240)=[{&(0x7f0000000300)='\x00', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0", 0x2}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd", 0x3}, {&(0x7f00000072c0)="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", 0xd41}, {&(0x7f0000007200)="2e9ecf", 0x3}], 0x7}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000580)="b8", 0x1}, {&(0x7f00000002c0)='y@', 0x2}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000026c0)="38f60527", 0x4}], 0x1}}], 0x4, 0x4000000) (async) sendmmsg$inet(r8, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000007240)=[{&(0x7f0000000300)='\x00', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0", 0x2}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd", 0x3}, {&(0x7f00000072c0)="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", 0xd41}, {&(0x7f0000007200)="2e9ecf", 0x3}], 0x7}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000580)="b8", 0x1}, {&(0x7f00000002c0)='y@', 0x2}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000026c0)="38f60527", 0x4}], 0x1}}], 0x4, 0x4000000) sendto$inet(r8, &(0x7f00000025c0)='iN', 0x2, 0xc000, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 55.580850145s ago: executing program 4 (id=1323): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x183000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r2, 0x4b65, 0x7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0xbb, 0x315, {{0x7, 0x4, 0x3, 0x9, 0x1c, 0x66, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@generic={0x88, 0x6, "8a6fa0d3"}]}}}}}) ioctl$SIOCSIFMTU(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x5}) 40.611677013s ago: executing program 34 (id=1323): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x183000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r2, 0x4b65, 0x7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0xbb, 0x315, {{0x7, 0x4, 0x3, 0x9, 0x1c, 0x66, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@generic={0x88, 0x6, "8a6fa0d3"}]}}}}}) ioctl$SIOCSIFMTU(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x5}) 4.759640901s ago: executing program 6 (id=1976): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}]}]}, 0x34}}, 0x200480c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x24, r4, 0x605, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40) 4.690149308s ago: executing program 6 (id=1977): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x2, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x104) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x3136564e, 0x1, @discrete={0xff, 0xfffffeff}}) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) 4.469396725s ago: executing program 6 (id=1981): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f00000000c0)={0x401, "8f44a09ead8d16b5a2ff531b04b65ee52e7ce6fb87ce5309ca50120a7b07c860", 0x2, 0xa68653e064beb605}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x87, 0xfe, 0x4, 0xff}, {0x6}]}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRESDEC=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 3.584404315s ago: executing program 6 (id=1995): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffde7, 0x0, 0x0, 0xfffffdc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) (async, rerun: 32) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x19}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf, 0x3}, {0xd, 0x4}]}, @func={0x5, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x5f, 0x2e, 0x0, 0x0]}}, &(0x7f0000000100)=""/14, 0x47, 0xe, 0x1, 0x9b, 0x10000, @value=r2}, 0x28) 3.005206097s ago: executing program 6 (id=2012): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2402, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="49b5ed", 0x3}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r2, &(0x7f0000004780)=[{{&(0x7f0000000200)={0x2, 0x4e1e, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000640)="e092789a64346f11fd711e5eca49f8edf0fa84db5b827cc8276e59c56c02265d6add2df1ecaa73c6789f9ec7730ecabc94dc0d3e8c09fed4bc52e81ba1819164160841543bf0aded5a403d950107c50a96448e1a9ec3448715efef61f3f6190956585a9019eca2c5e9a08947a3c5a18883bd9a58b270918dbdbc87a6525f24f8ece87beda1f80599ea95c017b679658fa3f7a50d56d711c534c4", 0x9a}, {&(0x7f0000000740)="a2ff1d6033cc24329e66e83eb050851dd28da0cd5f5858c7d8339e6dbea9176081d28ae78b94274dcfb3606885c7fc43a588a67c3b11e70fe1b51e095a0bb607c9cc9b0acc81556d2b188e8aa0ccb88577f1fe89ad641c03b556778e226753e251255981ac94bef2487304e4bc5804a3ff2e2a4f9407b4e29e0ad3c689668d7201dbc22b5ffe410eb19cdad0a71e002024740e8d759f5da08e7618857626a9efa23257476e80ec738eaee889bf65b67c0a2e5a33b484166e76cd35e7e67c", 0xbe}, {&(0x7f0000000840)="6aa10343477f54142ae1d601d4019dd07c1b7042bf98", 0x16}], 0x3}}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f00000009c0)="a85d5facecb187d3a89f4a877080c592c88f31f9ebc7a6807a09692159d6213a5d6dc38fdd50df", 0x27}, {&(0x7f0000003480)="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", 0x42c}], 0x2}}], 0x3, 0x4c005) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg(r7, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c044) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000004b40)='./binderfs/binder-control\x00', 0x802, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) write$binfmt_misc(r2, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0x2, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r9, 0x0) 1.510306728s ago: executing program 5 (id=2031): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x40104d14, &(0x7f0000000640)={0x1, 0x0, 0x98, &(0x7f0000000580)={0xfffffffd, 0x10000, 0x5}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xc, 0x8, 0x7, 0x8, 0x60104, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x1, 0x1, 0x800, 0x80, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x7, &(0x7f0000000080)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xcc, &(0x7f0000000140)=""/204, 0x41000, 0x40, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000240)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x9, 0xf, 0x101, 0x40}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[r2, r2, r5, r2, r2, r2, r6, r2], &(0x7f0000000500)=[{0x3, 0x3, 0x9, 0x3}, {0x4, 0x2, 0x3, 0x7}, {0x4, 0x2, 0x3, 0x8}, {0x3, 0x1, 0x1, 0x9}, {0x3, 0x2, 0xf}, {0x5, 0x2, 0x2, 0x5}], 0x10, 0x3914}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500000000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 1.436747596s ago: executing program 5 (id=2033): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c01082cbd7000fbdbdf250c00000006000400"/28], 0x1c}}, 0x40) 1.434241133s ago: executing program 5 (id=2034): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) r2 = gettid() socket$inet6(0xa, 0x80002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x88042, 0x0) write$dsp(r3, &(0x7f0000000100)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/net\x00') ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 860.203585ms ago: executing program 0 (id=2044): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0xfffffffffffffffd, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x3c}}, 0x0) 859.138406ms ago: executing program 0 (id=2046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x50) ppoll(&(0x7f0000000180)=[{r0, 0x820}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000000)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$watch_queue(r7, &(0x7f0000000140)=""/4096, 0x1000) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x4) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x56}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) 659.963249ms ago: executing program 1 (id=2048): r0 = socket(0x200000000000011, 0x2, 0xd) (async) r1 = socket(0x40000000015, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xb2}]}, 0x48}}, 0x40800) (async) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, &(0x7f0000000b40)={0xb, 0x0, [{0x7, 0xfffffffb, 0x7, 0x4, 0x5, 0x3, 0xd849}, {0x40000000, 0xcaaf, 0x4, 0x1, 0x9f, 0x3, 0x1}, {0x0, 0xaab9, 0x5, 0xf, 0x100, 0x4, 0x4}, {0x1, 0x6, 0x6, 0x4, 0x9, 0xfffffffc}, {0xc0000000, 0x4, 0x4, 0x4, 0x0, 0x9, 0x7}, {0x4, 0x1, 0x2, 0x0, 0xfffffff9, 0x358, 0x5}, {0x80000019, 0xab, 0x2, 0x0, 0xdb02, 0x72f58a03, 0xffffffff}, {0xc0000001, 0x7, 0x4, 0xf, 0x2, 0x1, 0x2}, {0xb, 0x1, 0x3, 0x2, 0x800, 0xe5202cb}, {0x6, 0x2b4, 0x6, 0xf0, 0x10, 0x0, 0x7}, {0xc0000000, 0x4, 0x4, 0x5, 0x8, 0x0, 0x9}]}) (async) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x6, 0x2}, 0x20) (async) getsockname$packet(r1, 0x0, &(0x7f0000000200)) (async) r4 = msgget$private(0x0, 0x790) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x88}, 0x0, 0x0, 0x7, 0x2, 0x2, 0x9, 0x313, 0x4, 0x7a0, 0x1000, 0x0, 0xffffffffffffffff}) (async) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c0000000000059078640101000a0101008903d10000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6eab00fbef131039a85c907800000da560db647db214b80bc3"], 0x0) (async) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000040)=ANY=[@ANYBLOB="120100030000002030144b4740000102030109021f000101049005090400000101039304090505002d2fa1b3845d4c000000094004250100"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 658.323148ms ago: executing program 0 (id=2049): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x7c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x4000, @empty, 0xfffffe01}}}, 0x108) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f00000000c0)="2600000022024780e8ff06006d00000078cc6f920a97c99f494e83cf3b21f84fcf47e2af0bf9", 0x26) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc)=0x61, 0x4) sendto(r5, &(0x7f0000000380)="120000001200e7658e7b10000000000000a1", 0x12, 0x20000090, 0x0, 0x0) (async) sendto(r5, &(0x7f0000000380)="120000001200e7658e7b10000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000002d40)=""/4104, 0x1008}, {&(0x7f0000000800)=""/273, 0xbe}, {&(0x7f0000000000)=""/142, 0x8e}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f00000001c0)=""/131, 0x83}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000580)=""/123, 0x7b}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000100)=""/57, 0x39}], 0x9}, 0x10001}], 0x1, 0x10120, 0x0) (async) recvmmsg(r5, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000002d40)=""/4104, 0x1008}, {&(0x7f0000000800)=""/273, 0xbe}, {&(0x7f0000000000)=""/142, 0x8e}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f00000001c0)=""/131, 0x83}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000580)=""/123, 0x7b}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000100)=""/57, 0x39}], 0x9}, 0x10001}], 0x1, 0x10120, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, &(0x7f0000000300)="0f01c86766c7442400050000006766c74424029f0f047a6766c744240600000000670f0114240f784aa8b837010f00d02e3e1e0fe1169c4cdf5100660f3830c96f65650f01cf", 0x46}], 0x1, 0x20, &(0x7f0000000600)=[@cr4={0x1, 0x440a0}, @cstype0={0x4, 0xd}], 0x2) (async) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, &(0x7f0000000300)="0f01c86766c7442400050000006766c74424029f0f047a6766c744240600000000670f0114240f784aa8b837010f00d02e3e1e0fe1169c4cdf5100660f3830c96f65650f01cf", 0x46}], 0x1, 0x20, &(0x7f0000000600)=[@cr4={0x1, 0x440a0}, @cstype0={0x4, 0xd}], 0x2) landlock_restrict_self(r6, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) 655.744241ms ago: executing program 6 (id=2050): clock_adjtime(0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x7, 0x8) clock_gettime(0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r0, &(0x7f0000000440)="0f50748e", 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f0000000000)=ANY=[], 0x200002e6) read$FUSE(r2, &(0x7f0000003340)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) fcntl$setpipe(r3, 0x407, 0x7000000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='netdevsim0\x00'}) 569.432747ms ago: executing program 1 (id=2051): ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0xfff, 0x0, 0x4, 0xfffffff8, 0x1a, "ed9a49ddddf2b2a73d91fc0ac92667a762c7ca"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@map_idx, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x40, 0x4d, &(0x7f00000000c0)=""/77, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x9, 0xf, 0x49c5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x1, 0x3, 0x8, 0x8}], 0x10, 0x5}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) splice(r0, &(0x7f00000002c0)=0x7, r1, &(0x7f0000000340)=0xfffffffffffffffd, 0x620, 0x0) r2 = getpid() capset(&(0x7f0000000380)={0x20080522, r2}, &(0x7f00000003c0)={0x9, 0xa00, 0x2, 0x5, 0x553c321d, 0x2}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x740, 0x1, 0x4, 0x6, {{0xf, 0x4, 0x2, 0x7, 0x3c, 0x67, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ra={0x94, 0x4}, @rr={0x7, 0x23, 0x53, [@multicast2, @remote, @broadcast, @multicast2, @remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}}}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f00000004c0)={0x0, 0x0, 0xff, r3, 0x8000}, 0xc) read$FUSE(r1, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002840)={&(0x7f00000026c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x9}}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @union={0x9, 0x6, 0x0, 0x5, 0x0, 0x1, [{0x6, 0x4, 0x5}, {0x7, 0x3, 0x8}, {0xf, 0x4, 0xf}, {0xd, 0x2, 0x3}, {0xd, 0x4, 0x3}, {0xe, 0x3, 0x10}]}, @float={0xc, 0x0, 0x0, 0x10, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x3}}, @struct={0xc, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x3, 0x1027}]}, @typedef={0xb, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f, 0x30, 0x0, 0x5f, 0x61, 0x5f, 0x0]}}, &(0x7f00000027c0)=""/85, 0xe1, 0x55, 0x0, 0x401, 0x10000, @value=r1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000002940)={0xf, 0x10, &(0x7f0000002540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0x6, 0x0, 0x4, 0xfffffffffffffff0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000025c0)='GPL\x00', 0x2, 0xa1, &(0x7f0000002600)=""/161, 0x40f00, 0x20, '\x00', r3, @cgroup_device, r5, 0x8, &(0x7f0000002880)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000028c0)={0x2, 0x9, 0xff, 0x1}, 0x10, 0xffffffffffffffff, r0, 0x1, 0x0, &(0x7f0000002900)=[{0x0, 0x1, 0xf, 0x7}], 0x10, 0xfffff719}, 0x94) r6 = accept4$vsock_stream(r1, &(0x7f0000002a00)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) recvfrom(r6, &(0x7f0000002a40)=""/52, 0x34, 0x12000, &(0x7f0000002a80)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) capset(&(0x7f0000002b00)={0x20071026, r4}, &(0x7f0000002b40)={0x5, 0x1ff, 0xe, 0x154, 0x401, 0xffffff00}) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000002b80)) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000002bc0)=@x86={0xd, 0x4, 0xf5, 0x0, 0xfa, 0xea, 0x3, 0xa9, 0x6, 0x3, 0x7, 0x44, 0x0, 0x7, 0x800, 0xd, 0x1, 0x9, 0x9, '\x00', 0x16, 0x37a4}) r7 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) write(r7, &(0x7f0000002c00)="7f22fddc4da6cd44345617fea325ee7ae40808c04077590ed3ea6af6f21dd4ad4fd4ebc5614768110e418f0e3a1468d16493fcdf07eff2", 0x37) capget(&(0x7f0000002c40)={0x0, r2}, &(0x7f0000002c80)={0xffffffff, 0x3, 0x0, 0x1, 0x3, 0x4}) syz_genetlink_get_family_id$wireguard(&(0x7f0000002cc0), r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002d00)={0x0, 0x0}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) bind$inet(r1, &(0x7f0000002d80)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r6, 0x942e, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000002dc0)=0x3) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000002e00)={0x7, 0x8, [0x8, 0xfb]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000003e40)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000002e40)="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", 0x1000, r5}, 0x68) capget(&(0x7f0000003ec0)={0x19980330, r8}, &(0x7f0000003f00)={0xfffffffc, 0x643, 0x3, 0x93e, 0x52, 0x1000}) socket(0x27, 0x1, 0x200) 569.132073ms ago: executing program 1 (id=2052): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc3) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) read(r1, &(0x7f0000000340)=""/111, 0x6f) syz_clone(0x200, 0x0, 0xfffffffffffffef9, 0x0, 0x0, 0x0) syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) 469.322671ms ago: executing program 5 (id=2053): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000180), &(0x7f0000000ac0)='%pS \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000ac0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) dup2(r0, r1) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0:,:\x00', 0x0) read(r2, &(0x7f0000000080)=""/72, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x11, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x2, 0x0, 0x0, 0xc3100, 0x50, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) 399.672464ms ago: executing program 5 (id=2054): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x118, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x107, 0x4e, 0x0, 0x1, [@typed={0x1, 0x2}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7ad", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0xd0}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x1, 0x70bd27, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x42885}, 0x4004000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004f427ca6e387c756c3eeaaef0d1016365e820374a6a49010885e9e91f2ef839596e002c27047887c7aeff152b4d2f8974245f4032d9c6e998"], 0x4c}, 0x1, 0x0, 0x0, 0xc040}, 0x1) 336.534261ms ago: executing program 0 (id=2055): r0 = syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xf0, 0x40000}) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000000000/0x400000)=nil) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) 278.296035ms ago: executing program 5 (id=2056): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x1000, @empty, 0x5}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x84, 0x4) write$binfmt_script(r0, &(0x7f0000001180)={'#! ', './file0', [], 0xa, "4e0735accb670f40bdece300b23c463b67b7b1dd9f9660625f1a837915"}, 0x28) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd28, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x36aacc53}]}}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) bind$can_j1939(r7, &(0x7f0000000140)={0x1d, r8, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025020000000c0001800500020005000800020007000000080004859600040000001c000680060001000a0000000800070000000000000000", @ANYRES32=r5, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r8, @ANYBLOB="080002000500000014000680080003006401010208000300ac14140e"], 0x70}, 0x1, 0x0, 0x0, 0x4008021}, 0x81) r9 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000100)) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x5, 0x0, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x8, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x8, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e586, 0xffff, 0xcd3, 0xb, 0x1f, 0x4000404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x6, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x3ff, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x7, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0x80000f, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r10, 0x5501) write$input_event(r10, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r11 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0xa2c65) r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r12, &(0x7f000001a240)=""/102400, 0x19000, 0x40000ffffffff8) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r11, 0x80184132, &(0x7f0000000040)) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 277.527362ms ago: executing program 1 (id=2057): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x6, 0x28000000}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0xfffffffb, 0x0, 0x4, 0x5, 0xffe00000}, &(0x7f0000000500)=0x98) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x78, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x10, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f}}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x461}}, @TCA_U32_INDEV={0x14, 0x8, 'macsec0\x00'}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x40080c0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x3, 'veth1_to_hsr\x00', {0x1}, 0x6}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf256401010100000000000000000000000020010000000000000000000000000001000000004e2100020a0000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 159.962574ms ago: executing program 0 (id=2058): r0 = socket(0xa, 0x3, 0x3a) sendmsg(0xffffffffffffffff, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e978000000000000beff9ace035a013b000004000400"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800dd8d00000000ffffff2502101000fe0400060000002008001e0001"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000000000000001000000"], 0x20}}, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0xc, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_clone(0x80020000, &(0x7f00000023c0), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2007) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x7fff, @mcast2, 0x6}], 0x1c) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7040010000000f00000008002c000b00000008000300", @ANYRES32=r6], 0x2c}}, 0x18) 68.480288ms ago: executing program 1 (id=2059): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) (async) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) (async) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6072b2af00042f00fe800000000000000000000000000000ff02000000000000000000000000000100ae160e48442a5b64f45531beaa00883e001090780200000000000000e62abdfb214b0d389c442552d63179bbed24d3c62ad1d34f3872efaf15abee8bda2b46eb41cada76ba899bfeccec3f439878ed38692f70d79643c49791b3109ce3babed79e83d0b5293c1e633130f337a305ffba03166fed25b18c1dad6732e79e"], 0x0) 393.812µs ago: executing program 1 (id=2060): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r4, 0x8947, &(0x7f0000000040)="a6cc04e2d8f1c38afbf14b29b86e3a") r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 0s ago: executing program 0 (id=2061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x1, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}]}, 0x80}, 0x1, 0x0, 0x0, 0x4048}, 0x4040810) kernel console output (not intermixed with test programs): USB disconnect, device number 10 [ 472.950334][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 472.954960][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 472.958951][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 472.962446][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 472.965860][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 472.968058][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 472.971049][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 472.973407][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 472.978528][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 472.981545][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 472.981580][ T42] audit: type=1400 audit(1782771069.737:831): avc: denied { ioctl } for pid=10625 comm="syz.5.1329" path="socket:[40265]" dev="sockfs" ino=40265 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 472.992010][T10626] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 472.994149][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 472.994233][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.005132][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.007746][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.009939][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.012833][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.017798][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.020477][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.021393][T10626] cramfs: wrong magic [ 473.022386][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.022461][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.029264][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.031814][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.033844][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.036536][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.038518][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.041188][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.043181][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.046001][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.048227][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.051035][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.053176][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.056882][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.059243][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.062322][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.064495][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.067419][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.069874][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.072944][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.075145][T10626] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 473.075746][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.081383][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.083799][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.086395][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.088813][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.092783][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.094995][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.097461][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.099358][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.101824][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.103856][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.107149][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.109581][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.112365][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.114573][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.117629][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.119745][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.122744][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.125828][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.128618][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.130735][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.133476][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.136119][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.139215][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.141717][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.145103][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.145826][ T42] audit: type=1400 audit(1782771069.907:832): avc: denied { append } for pid=10629 comm="syz.5.1331" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 473.147972][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.158455][ T42] audit: type=1400 audit(1782771069.917:833): avc: denied { map } for pid=10629 comm="syz.5.1331" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 473.158861][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.170588][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.174331][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.174547][ T42] audit: type=1400 audit(1782771069.917:834): avc: denied { write execute } for pid=10629 comm="syz.5.1331" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 473.177258][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.190156][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.193258][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.196821][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.200842][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.204224][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.206605][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.209724][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.212077][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.214673][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.216618][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.219238][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.221284][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.224125][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.226263][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.228826][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.231223][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.234637][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.236650][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.239742][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.242040][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.245100][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.247165][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.249877][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.252372][ T5803] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 473.252548][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.259750][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.262359][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.266094][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.269211][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.273064][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.275846][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.278939][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.281427][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.285165][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.288208][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.291539][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.295967][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.298526][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.300935][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.304103][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.306725][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.309271][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.311051][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.313467][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.315402][T10633] ucma_write: process 295 (syz.5.1332) changed security contexts after opening file descriptor, this is not allowed. [ 473.319241][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.322721][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.325803][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.328555][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.330719][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.333151][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.335134][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.337639][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.339528][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.342117][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.344485][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.347139][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.349100][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.351611][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.353522][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.356231][T10623] binder: BINDER_SET_CONTEXT_MGR already set [ 473.358353][T10623] binder: 10621:10623 ioctl 4018620d 200000000100 returned -16 [ 473.404323][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1333'. [ 473.827299][ T5897] usb 5-1: USB disconnect, device number 17 [ 473.894955][T10664] kernel profiling enabled (shift: 63) [ 473.899073][T10664] profiling shift: 63 too large [ 474.204473][ T5897] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 474.321452][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1341'. [ 474.325559][T10688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1341'. [ 474.337117][T10688] geneve3: entered promiscuous mode [ 474.339448][T10688] geneve3: entered allmulticast mode [ 474.355828][ T5897] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 474.361397][ T5897] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 474.370026][ T5897] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 474.374999][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.384453][T10662] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 474.392461][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1343'. [ 474.393322][ T5897] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 474.593481][ T5897] usb 5-1: USB disconnect, device number 18 [ 474.864798][ T5761] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 475.014131][ T5761] usb 10-1: Using ep0 maxpacket: 8 [ 475.017681][ T5761] usb 10-1: config 0 has no interfaces? [ 475.022357][ T5761] usb 10-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 475.026473][ T5761] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.029945][ T5761] usb 10-1: Product: syz [ 475.031526][ T5761] usb 10-1: Manufacturer: syz [ 475.033123][ T5761] usb 10-1: SerialNumber: syz [ 475.039207][ T5761] usb 10-1: config 0 descriptor?? [ 475.262312][ T5761] usb 10-1: USB disconnect, device number 4 [ 475.418923][T10728] netlink: 'syz.5.1353': attribute type 12 has an invalid length. [ 475.441230][T10727] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1353'. [ 475.492562][T10731] tipc: Started in network mode [ 475.494959][T10731] tipc: Node identity 4, cluster identity 4711 [ 475.498286][T10731] tipc: Node number set to 4 [ 475.571580][T10734] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 475.621656][T10736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.717406][ T5761] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 475.886135][ T5761] usb 5-1: config 0 has no interfaces? [ 475.888375][ T5761] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 475.891865][ T5761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.902679][ T5761] usb 5-1: config 0 descriptor?? [ 475.945763][ T5897] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 476.104108][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 476.114355][ T40] usb 5-1: USB disconnect, device number 19 [ 476.131623][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 476.137194][ T5897] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 476.141242][ T5897] usb 6-1: can't read configurations, error -71 [ 476.324696][T10749] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 476.328208][T10749] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 476.332933][T10749] cramfs: wrong magic [ 476.336030][T10751] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 476.338579][T10751] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 476.343599][T10751] cramfs: wrong magic [ 476.407819][T10755] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1363'. [ 476.860301][T10772] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1369'. [ 476.869594][T10772] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1369'. [ 476.872846][T10772] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1369'. [ 477.217460][ T5897] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 477.227709][T10789] netlink: 'syz.0.1373': attribute type 4 has an invalid length. [ 477.313504][ T42] audit: type=1400 audit(1782771074.067:835): avc: denied { append } for pid=10790 comm="syz.0.1374" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 477.366675][ T5897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.371783][ T5897] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 477.376686][ T5897] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 477.380911][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.395580][ T5897] usb 6-1: config 0 descriptor?? [ 477.410560][ T5897] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 477.413573][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 477.423505][ T5897] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 477.427889][ T5897] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 477.430723][ T5897] usb 6-1: media controller created [ 477.434962][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 477.464837][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 477.472778][ T5897] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 477.484213][ T5897] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input25 [ 477.497346][ T5897] dvb-usb: schedule remote query interval to 150 msecs. [ 477.500448][ T5897] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 477.521107][ T42] audit: type=1326 audit(1782771074.267:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.5.1375" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcda6b9ce59 code=0x0 [ 477.609497][ T5799] usb 6-1: USB disconnect, device number 12 [ 477.626827][T10802] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 477.646042][ T5799] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 477.722133][ T42] audit: type=1400 audit(1782771074.477:837): avc: denied { listen } for pid=10806 comm="syz.0.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 477.968593][ T42] audit: type=1326 audit(1782771074.727:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.0.1380" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f469779ce59 code=0x0 [ 478.442661][T10823] netlink: 'syz.1.1383': attribute type 2 has an invalid length. [ 478.446027][T10823] netlink: 'syz.1.1383': attribute type 2 has an invalid length. [ 478.507993][ T42] audit: type=1400 audit(1782771075.267:839): avc: denied { bind } for pid=10826 comm="syz.1.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 478.898858][ T42] audit: type=1400 audit(1782771075.657:840): avc: denied { write } for pid=10864 comm="syz.5.1395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 478.989642][T10876] openvswitch: netlink: Missing key (keys=40, expected=100) [ 479.152724][T10891] fuse: Bad value for 'fd' [ 479.163070][ T42] audit: type=1400 audit(1782771075.917:841): avc: denied { write } for pid=10872 comm="syz.5.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 479.173296][ T42] audit: type=1400 audit(1782771075.937:842): avc: denied { ioctl } for pid=10872 comm="syz.5.1397" path="socket:[42362]" dev="sockfs" ino=42362 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 479.243045][T10880] infiniband uyz0: set active [ 479.245935][T10880] infiniband uyz0: added bridge_slave_1 [ 479.259702][T10880] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 479.266352][T10880] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 479.275811][T10880] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 479.319046][T10880] RDS/IB: uyz0: added [ 479.321328][T10880] smc: adding ib device uyz0 with port count 1 [ 479.326729][T10880] smc: ib device uyz0 port 1 has no pnetid [ 479.810182][T10874] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 479.811612][T10913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1399'. [ 480.339832][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'. [ 480.360459][T10941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.363708][T10941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.372080][T10941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.375713][T10941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.379916][T10941] batman_adv: batadv0: Removing interface: macvtap1 [ 480.397037][T10946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1413'. [ 480.464274][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1415'. [ 480.911435][ T42] audit: type=1400 audit(1782771077.667:843): avc: denied { write } for pid=10970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.001616][ T42] audit: type=1400 audit(1782771077.757:844): avc: denied { write } for pid=10973 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.134216][ T5803] Bluetooth: hci2: command 0x0c1a tx timeout [ 481.419672][T10978] netlink: 'syz.1.1421': attribute type 11 has an invalid length. [ 481.453395][ T42] audit: type=1326 audit(1782771078.207:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10981 comm="syz.1.1423" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd55d99ce59 code=0x0 [ 481.480275][T10980] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1422'. [ 481.483817][T10980] netlink: 'syz.5.1422': attribute type 7 has an invalid length. [ 481.487704][T10980] netlink: 'syz.5.1422': attribute type 8 has an invalid length. [ 481.491574][T10980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1422'. [ 481.498561][T10980] bond0: entered promiscuous mode [ 481.500864][T10980] bond_slave_0: entered promiscuous mode [ 481.503482][T10980] bond_slave_1: entered promiscuous mode [ 481.507941][T10980] bond0: left promiscuous mode [ 481.509946][T10980] bond_slave_0: left promiscuous mode [ 481.511877][T10980] bond_slave_1: left promiscuous mode [ 481.735639][ T42] audit: type=1400 audit(1782771078.497:846): avc: denied { ioctl } for pid=10989 comm="syz.0.1426" path="socket:[42515]" dev="sockfs" ino=42515 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 481.807994][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1426'. [ 481.853037][T10996] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1427'. [ 481.856568][T10996] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1427'. [ 481.865038][ T42] audit: type=1400 audit(1782771078.627:847): avc: denied { setopt } for pid=10989 comm="syz.0.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 481.920040][ T42] audit: type=1400 audit(1782771078.677:848): avc: denied { create } for pid=10999 comm="syz.5.1428" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 482.292231][T11011] smc: removing ib device uyz0 [ 482.334278][T11013] netlink: 'syz.1.1432': attribute type 1 has an invalid length. [ 482.349586][T11011] smbdirect: ib_dev[uyz0] removed [ 482.389426][T11013] 8021q: adding VLAN 0 to HW filter on device bond4 [ 482.459218][T11016] bond4: (slave geneve4): making interface the new active one [ 482.465854][T11016] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 482.899033][T11033] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1438'. [ 483.004272][T11030] macsec1: entered promiscuous mode [ 483.006807][T11030] macsec1: entered allmulticast mode [ 483.346545][T11046] tmpfs: Unknown parameter 'grpqhaPdl&Aa%' [ 483.444126][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.449913][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.582913][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 483.582957][ T42] audit: type=1400 audit(1782771080.337:857): avc: denied { connect } for pid=11061 comm="syz.1.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 483.669590][ T42] audit: type=1400 audit(1782771080.427:858): avc: denied { create } for pid=11064 comm="syz.5.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 483.696137][T11069] openvswitch: netlink: Actions may not be safe on all matching packets [ 483.895422][T11082] netlink: 'syz.5.1453': attribute type 39 has an invalid length. [ 483.984269][ T40] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 484.144051][ T40] usb 5-1: Using ep0 maxpacket: 32 [ 484.145403][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.150528][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.154119][ T40] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 484.158167][ T40] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 484.161378][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.168625][ T40] usb 5-1: config 0 descriptor?? [ 484.194010][ T5761] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 484.344097][ T5761] usb 10-1: Using ep0 maxpacket: 8 [ 484.348854][ T5761] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 484.352529][ T5761] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 484.357107][ T5761] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 484.362042][ T5761] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 484.366538][ T5761] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.372574][ T5761] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 484.377124][ T5761] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.588901][ T40] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0008/input/input26 [ 484.593847][ T5761] usb 10-1: GET_CAPABILITIES returned 0 [ 484.595786][ T5761] usbtmc 10-1:16.0: can't read capabilities [ 484.673663][T11087] usb usb9: usbfs: process 11087 (syz.1.1454) did not claim interface 0 before use [ 484.802106][ T40] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0008/input/input27 [ 484.904946][ T40] kye 0003:0458:5011.0008: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 484.925653][ T40] usb 5-1: USB disconnect, device number 20 [ 484.952123][T11094] fido_id[11094]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/5-1/report_descriptor': No such file or directory [ 485.004101][ T42] audit: type=1400 audit(1782771081.757:859): avc: denied { bind } for pid=11095 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 485.069617][ T42] audit: type=1400 audit(1782771081.827:860): avc: denied { connect } for pid=11097 comm="syz.1.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 485.085043][ T42] audit: type=1400 audit(1782771081.827:861): avc: denied { getopt } for pid=11097 comm="syz.1.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 485.099285][ T42] audit: type=1400 audit(1782771081.857:862): avc: denied { read } for pid=11097 comm="syz.1.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 485.149628][T11083] usbtmc 10-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 485.152535][T11083] batadv_slave_1: entered promiscuous mode [ 485.158685][ T42] audit: type=1400 audit(1782771081.917:863): avc: denied { mounton } for pid=11081 comm="syz.5.1453" path="/148/file0" dev="gadgetfs" ino=10317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 485.177737][T11083] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 485.351122][T11081] batadv_slave_1: left promiscuous mode [ 485.356534][ T5761] usb 10-1: USB disconnect, device number 5 [ 485.404151][ T5799] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 485.574167][ T5799] usb 6-1: Using ep0 maxpacket: 16 [ 485.578415][ T5799] usb 6-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 32 [ 485.582286][ T5799] usb 6-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 1024 [ 485.586971][ T5799] usb 6-1: config 1 interface 0 has no altsetting 0 [ 485.592243][ T5799] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 485.597567][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.601396][ T5799] usb 6-1: Product: ‸縴삳桠존 䡣罴䰡䢚䜡幁욊킑㕬쾫ੁ칭꬘묑쬵䂡쩳嘆◩읬ㅁ㎏ꎯ椵Ҷ [ 485.606570][ T5799] usb 6-1: Manufacturer: 炅젬擿屨鸵# [ 485.608510][ T5799] usb 6-1: SerialNumber: syz [ 485.612493][T11101] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 485.615813][T11101] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 485.823844][T11101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.831140][T11101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.894977][ T42] audit: type=1400 audit(1782771082.647:864): avc: granted { setsecparam } for pid=11097 comm="syz.1.1458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 485.971712][T11129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11129 comm=syz.0.1466 [ 486.141053][ T42] audit: type=1400 audit(1782771082.897:865): avc: denied { bind } for pid=11131 comm="syz.5.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 486.393055][T11145] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 486.394167][T11146] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 486.409006][T11146] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 486.409047][T11145] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 486.547738][T11154] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 486.864534][T11174] __nla_validate_parse: 2 callbacks suppressed [ 486.864554][T11174] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1479'. [ 486.870282][T11174] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1479'. [ 486.945680][T11177] can: request_module (can-proto-0) failed. [ 486.958329][T11179] fuse: Unknown parameter '30x0000000000000005' [ 486.958339][ T42] audit: type=1400 audit(1782771083.717:866): avc: denied { mounton } for pid=11175 comm="syz.5.1481" path="/161/file0" dev="tmpfs" ino=894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 487.089637][T11184] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.093391][T11184] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.125859][ T5799] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 487.133819][ T5799] usb 6-1: USB disconnect, device number 13 [ 487.270631][T11184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.281089][T11184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.372472][T11190] xt_hashlimit: max too large, truncated to 1048576 [ 487.375465][T11190] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 487.504050][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.514114][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.531404][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.540502][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.584946][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 487.597099][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 487.603150][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 487.610079][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 487.613000][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 487.653108][T11203] No fuse device found [ 487.690201][T11207] random: crng reseeded on system resumption [ 487.796641][ T6430] syz_tun (unregistering): left allmulticast mode [ 487.799661][T11203] block nbd0: server does not support multiple connections per device. [ 487.812429][T11203] block nbd0: shutting down sockets [ 488.017298][T11238] netlink: 'syz.0.1492': attribute type 3 has an invalid length. [ 488.020578][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'. [ 488.081762][T11248] 9p: Unknown access argument 00000000000000000000: -22 [ 488.097426][T11248] 9p: Unknown access argument 00000000000000000000: -22 [ 488.116703][T11252] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1490'. [ 488.312413][T11200] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.315434][T11200] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.318045][T11200] bridge_slave_0: entered allmulticast mode [ 488.321828][T11200] bridge_slave_0: entered promiscuous mode [ 488.325785][T11200] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.328532][T11200] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.341412][T11200] bridge_slave_1: entered allmulticast mode [ 488.346183][T11200] bridge_slave_1: entered promiscuous mode [ 488.379848][T11200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.386699][T11200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.407603][T11200] team0: Port device team_slave_0 added [ 488.438189][T11200] team0: Port device team_slave_1 added [ 488.485600][T11200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.488313][T11200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.500260][T11200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.516043][T11200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.518991][T11200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.535868][T11200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.587241][T11271] IPVS: Error joining to the multicast group [ 488.597317][T11266] : renamed from lo [ 488.634385][T11273] IPVS: Unknown mcast interface:  [ 488.670707][T11276] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 488.670853][T11200] hsr_slave_0: entered promiscuous mode [ 488.680377][T11200] hsr_slave_1: entered promiscuous mode [ 488.685731][T11200] debugfs: 'hsr0' already exists in 'hsr' [ 488.688211][T11200] Cannot create hsr debugfs directory [ 488.718726][ T5843] pimreg: left allmulticast mode [ 488.795024][T11284] comedi comedi3: s526: a I/O base address must be specified [ 488.852419][ T5843] bond0 (unregistering): Released all slaves [ 488.859213][ T5843] bond1 (unregistering): (slave bond2): Releasing backup interface [ 488.862509][ T5843] bond2 (unregistering): left promiscuous mode [ 488.866477][ T5843] bond1 (unregistering): Released all slaves [ 488.880352][ T5843] bond2 (unregistering): Released all slaves [ 488.896067][ T5843] bond3 (unregistering): Released all slaves [ 488.909845][ T5843] bond4 (unregistering): (slave veth3): Releasing active interface [ 488.914878][ T5843] bond4 (unregistering): Released all slaves [ 488.932543][ T5843] bond5 (unregistering): Released all slaves [ 488.965856][ T5901] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 489.070167][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 489.070191][ T42] audit: type=1400 audit(1782771085.827:878): avc: denied { write } for pid=11290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.110372][ T5901] usb 5-1: device descriptor read/64, error -71 [ 489.129398][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1502'. [ 489.132377][T11295] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 489.139377][ T42] audit: type=1400 audit(1782771085.897:879): avc: denied { write } for pid=11293 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.190751][ T5843] tipc: Left network mode [ 489.215035][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 489.356918][ T42] audit: type=1400 audit(1782771086.117:880): avc: denied { write } for pid=11299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.364914][ T5901] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 489.511657][ T5901] usb 5-1: device descriptor read/64, error -71 [ 489.514827][ T42] audit: type=1400 audit(1782771086.277:881): avc: denied { write } for pid=11304 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.600347][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 489.646618][ T5901] usb usb5-port1: attempt power cycle [ 489.697540][ T5803] Bluetooth: hci4: command tx timeout [ 489.720906][T11311] netlink: 'syz.5.1505': attribute type 4 has an invalid length. [ 489.738482][T11200] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 489.738515][T11311] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1505'. [ 489.762689][T11308] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 489.765686][T11200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.778072][T11200] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 489.814424][T11200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.836170][ T42] audit: type=1400 audit(1782771086.597:882): avc: denied { write } for pid=11313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.851000][T11311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.861524][T11311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.867202][T11311] bond0 (unregistering): Released all slaves [ 489.886126][ T7535] smbdirect: ib_dev[syz1] removed [ 489.927870][ T42] audit: type=1400 audit(1782771086.687:883): avc: denied { write } for pid=11319 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.941508][T11200] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 489.952623][T11200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 489.958128][T11200] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 489.965979][T11200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.973444][ T1046] infiniband syz1: ib_query_port failed (-19) [ 489.984172][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 490.024442][ T5901] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 490.057007][ T5901] usb 5-1: device descriptor read/8, error -71 [ 490.073615][T11200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.088583][T11200] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.099116][ T42] audit: type=1400 audit(1782771086.857:884): avc: denied { write } for pid=11330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.118609][ T6797] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.122056][ T6797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.137715][ T6797] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.140649][ T6797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.185102][ T42] audit: type=1400 audit(1782771086.927:885): avc: denied { write } for pid=11337 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.206914][ T42] audit: type=1400 audit(1782771086.967:886): avc: denied { mount } for pid=11339 comm="syz.1.1509" name="/" dev="rpc_pipefs" ino=44192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 490.229508][ T42] audit: type=1400 audit(1782771086.977:887): avc: denied { mounton } for pid=11339 comm="syz.1.1509" path="/344/file0" dev="rpc_pipefs" ino=44192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 490.261131][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 490.315507][ T5901] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 490.354668][ T5901] usb 5-1: device descriptor read/8, error -71 [ 490.437486][ T5843] hsr_slave_0: left promiscuous mode [ 490.440158][ T5843] hsr_slave_1: left promiscuous mode [ 490.464433][ T5901] usb usb5-port1: unable to enumerate USB device [ 490.570879][T11360] netlink: 'syz.1.1512': attribute type 1 has an invalid length. [ 490.932171][T11200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.092873][T11397] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 491.160517][T11407] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 491.198431][T11200] veth0_vlan: entered promiscuous mode [ 491.206411][T11200] veth1_vlan: entered promiscuous mode [ 491.245701][T11200] veth0_macvtap: entered promiscuous mode [ 491.255292][T11200] veth1_macvtap: entered promiscuous mode [ 491.281259][ T5843] IPVS: stop unused estimator thread 0... [ 491.283983][T11200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.309545][T11200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.323704][T11318] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.332645][T11318] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.349568][T11318] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.355586][T11318] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.427913][T11424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.558858][T11432] FAT-fs (nullb0): bogus number of reserved sectors [ 491.559927][ T6797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.569392][T11432] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 491.573932][ T6797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.601720][ T6785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.605774][ T6785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.694197][T11442] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 491.768989][T11444] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 491.772124][T11444] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 491.775810][ T5803] Bluetooth: hci4: command tx timeout [ 491.787004][T11444] vhci_hcd vhci_hcd.0: Device attached [ 491.794657][T11445] vhci_hcd: connection closed [ 491.794897][ T5884] vhci_hcd vhci_hcd.0: stop threads [ 491.799141][ T5884] vhci_hcd vhci_hcd.0: release socket [ 491.799620][T11432] syz.1.1523: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 491.801462][ T5884] vhci_hcd vhci_hcd.0: disconnect device [ 491.809391][T11432] ,cpuset=/,mems_allowed=0-1 [ 491.812642][T11432] CPU: 2 UID: 0 PID: 11432 Comm: syz.1.1523 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.812681][T11432] Tainted: [L]=SOFTLOCKUP [ 491.812690][T11432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 491.812721][T11432] Call Trace: [ 491.812731][T11432] [ 491.812742][T11432] dump_stack_lvl+0x100/0x190 [ 491.812888][T11432] warn_alloc.cold+0x94/0xa8 [ 491.812916][T11432] ? __pfx_warn_alloc+0x10/0x10 [ 491.812964][T11432] ? do_syscall_64+0x115/0x870 [ 491.813053][T11432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.813089][T11432] ? __lock_acquire+0x49f/0x1a40 [ 491.813135][T11432] ? find_held_lock+0x2b/0x80 [ 491.813157][T11432] ? avc_has_extended_perms+0x33a/0x1080 [ 491.813221][T11432] ? avc_has_extended_perms+0x33a/0x1080 [ 491.813249][T11432] ? __UNIQUE_ID_modinfo_723+0x63bc53da/0xffffffffffeca290 [ 491.813390][T11432] ? __UNIQUE_ID_modinfo_723+0x63bc53da/0xffffffffffeca290 [ 491.813414][T11432] __vmalloc_node_range_noprof+0x136c/0x1630 [ 491.813454][T11432] ? __UNIQUE_ID_modinfo_723+0x63bc53da/0xffffffffffeca290 [ 491.813480][T11432] ? trace_contention_end+0x126/0x160 [ 491.813508][T11432] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 491.813571][T11432] ? dvb_demux_do_ioctl+0x929/0x1200 [ 491.813603][T11432] ? find_held_lock+0x2b/0x80 [ 491.813623][T11432] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 491.813653][T11432] ? __pfx___mutex_lock+0x10/0x10 [ 491.813687][T11432] ? tomoyo_path_number_perm+0x188/0x580 [ 491.813716][T11432] ? __UNIQUE_ID_modinfo_723+0x63bc53da/0xffffffffffeca290 [ 491.813742][T11432] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 491.813768][T11432] __vmalloc_node_noprof+0xad/0xf0 [ 491.813796][T11432] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 491.813822][T11432] ? __UNIQUE_ID_modinfo_723+0x63bc53da/0xffffffffffeca290 [ 491.813849][T11432] dvb_demux_do_ioctl+0x9e0/0x1200 [ 491.813901][T11432] ? do_vfs_ioctl+0x226/0x13e0 [ 491.813937][T11432] ? __UNIQUE_ID_modinfo_723+0x63bc53da/0xffffffffffeca290 [ 491.813968][T11432] dvb_usercopy+0x167/0x340 [ 491.813992][T11432] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 491.814017][T11432] ? __UNIQUE_ID_modinfo_723+0x63bc53da/0xffffffffffeca290 [ 491.814043][T11432] ? __pfx_dvb_usercopy+0x10/0x10 [ 491.814075][T11432] ? __UNIQUE_ID_modinfo_723+0x63bc53da/0xffffffffffeca290 [ 491.814099][T11432] ? __UNIQUE_ID_modinfo_723+0x63bc53da/0xffffffffffeca290 [ 491.814127][T11432] ? selinux_file_ioctl+0x13b/0x290 [ 491.814154][T11432] ? __UNIQUE_ID_modinfo_723+0x63bc53da/0xffffffffffeca290 [ 491.814177][T11432] ? selinux_file_ioctl+0xb6/0x290 [ 491.814206][T11432] ? __UNIQUE_ID_modinfo_723+0x63bc53da/0xffffffffffeca290 [ 491.814231][T11432] ? __UNIQUE_ID_modinfo_723+0x63bc53da/0xffffffffffeca290 [ 491.814256][T11432] dvb_demux_ioctl+0x29/0x40 [ 491.814278][T11432] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 491.814300][T11432] __x64_sys_ioctl+0x18e/0x210 [ 491.814331][T11432] do_syscall_64+0x115/0x870 [ 491.814358][T11432] ? clear_bhb_loop+0x40/0x90 [ 491.814383][T11432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.814403][T11432] RIP: 0033:0x7fd55d99ce59 [ 491.814421][T11432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.814439][T11432] RSP: 002b:00007fd55e867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.814459][T11432] RAX: ffffffffffffffda RBX: 00007fd55dc15fa0 RCX: 00007fd55d99ce59 [ 491.814471][T11432] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000004 [ 491.814482][T11432] RBP: 00007fd55da32e6f R08: 0000000000000000 R09: 0000000000000000 [ 491.814494][T11432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.814505][T11432] R13: 00007fd55dc16038 R14: 00007fd55dc15fa0 R15: 00007ffc955e8778 [ 491.814525][T11432] ? __UNIQUE_ID_modinfo_723+0x63bc53da/0xffffffffffeca290 [ 491.814556][T11432] [ 491.965977][T11432] Mem-Info: [ 491.967129][T11432] active_anon:22115 inactive_anon:12009 isolated_anon:0 [ 491.967129][T11432] active_file:56 inactive_file:62613 isolated_file:0 [ 491.967129][T11432] unevictable:1768 dirty:63 writeback:0 [ 491.967129][T11432] slab_reclaimable:9544 slab_unreclaimable:77809 [ 491.967129][T11432] mapped:25480 shmem:21859 pagetables:1701 [ 491.967129][T11432] sec_pagetables:297 bounce:0 [ 491.967129][T11432] kernel_misc_reclaimable:0 [ 491.967129][T11432] free:411088 free_pcp:16577 free_cma:0 [ 491.982623][T11432] Node 0 active_anon:59528kB inactive_anon:48036kB active_file:224kB inactive_file:250156kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:85520kB dirty:240kB writeback:0kB shmem:55088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15360kB pagetables:6592kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 491.998159][T11432] Node 1 active_anon:28932kB inactive_anon:0kB active_file:0kB inactive_file:296kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16400kB dirty:12kB writeback:0kB shmem:32348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 492.010222][T11432] Node 0 DMA free:10440kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1104kB inactive_anon:2484kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:160kB local_pcp:4kB free_cma:0kB [ 492.022223][T11432] lowmem_reserve[]: 0 1229 1229 1229 1229 [ 492.025581][T11432] Node 0 DMA32 free:84192kB boost:14336kB min:41780kB low:48640kB high:55500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55880kB inactive_anon:45552kB active_file:224kB inactive_file:250156kB unevictable:3536kB writepending:248kB zspages:0kB present:2080628kB managed:1258700kB mlocked:0kB bounce:0kB free_pcp:37968kB local_pcp:11812kB free_cma:0kB [ 492.036974][T11432] lowmem_reserve[]: 0 0 0 0 0 [ 492.038879][T11432] Node 1 Normal free:1548712kB boost:0kB min:39796kB low:49744kB high:59692kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28932kB inactive_anon:0kB active_file:0kB inactive_file:296kB unevictable:3536kB writepending:12kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:29644kB local_pcp:12184kB free_cma:0kB [ 492.049756][T11432] lowmem_reserve[]: 0 0 0 0 0 [ 492.051954][T11432] Node 0 DMA: 50*4kB (UM) 36*8kB (UM) 38*16kB (UM) 24*32kB (UM) 24*64kB (UM) 3*128kB (UM) 2*256kB (M) 0*512kB 2*1024kB (UM) 0*2048kB 1*4096kB (M) = 10440kB [ 492.059253][T11432] Node 0 DMA32: 862*4kB (UME) 264*8kB (UME) 68*16kB (UME) 383*32kB (UME) 138*64kB (UME) 47*128kB (UME) 17*256kB (UME) 15*512kB (UM) 9*1024kB (UM) 7*2048kB (UM) 8*4096kB (U) = 102104kB [ 492.087469][T11432] Node 1 Normal: 109*4kB (UME) 51*8kB (UME) 48*16kB (UME) 31*32kB (UME) 22*64kB (UME) 18*128kB (UME) 15*256kB (M) 11*512kB (UME) 9*1024kB (UM) 10*2048kB (UME) 367*4096kB (UM) = 1548716kB [ 492.096859][T11432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 492.102938][T11432] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 492.107415][T11432] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 492.111682][T11432] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 492.117266][T11432] 84537 total pagecache pages [ 492.119655][T11432] 0 pages in swap cache [ 492.121502][T11432] Free swap = 124996kB [ 492.123735][T11432] Total swap = 124996kB [ 492.126060][T11432] 1048443 pages RAM [ 492.127924][T11432] 0 pages HighMem/MovableOnly [ 492.134223][T11432] 284457 pages reserved [ 492.136827][T11432] 0 pages cma reserved [ 492.142667][T11460] xt_hashlimit: size too large, truncated to 1048576 [ 492.347332][T11472] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=11472 comm=syz.0.1533 [ 492.398143][ T34] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 492.429179][T11476] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1534'. [ 492.568668][ T34] usb 11-1: config 0 has an invalid interface number: 120 but max is 0 [ 492.575735][ T34] usb 11-1: config 0 has no interface number 0 [ 492.579113][ T34] usb 11-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.584506][ T34] usb 11-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 492.590995][ T34] usb 11-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 492.596207][ T34] usb 11-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 492.600049][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.621808][ T34] usb 11-1: config 0 descriptor?? [ 492.656438][ T34] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.120/input/input29 [ 492.678100][ C1] usbtouchscreen 11-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 492.730388][T11488] hfs: can't find a HFS filesystem on dev sr0 [ 492.805432][T11488] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 492.905599][ T5761] usb 11-1: USB disconnect, device number 2 [ 493.007963][T11507] netlink: 'syz.1.1543': attribute type 1 has an invalid length. [ 493.032960][T11506] /dev/sr0: Can't open blockdev [ 493.074572][T11512] libceph: secret too big 3051 [ 493.081644][T11510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=11510 comm=syz.1.1545 [ 493.088525][T11510] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.1545'. [ 493.128929][T11512] ocfs2: Unknown parameter 'grpquotast-net' [ 493.139924][T11517] NILFS (nbd1): device size too small [ 493.394783][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 493.409056][T11529] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 493.413279][T11529] block device autoloading is deprecated and will be removed. [ 493.570422][T11548] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 493.602134][T11548] netlink: zone id is out of range [ 493.605291][T11548] netlink: zone id is out of range [ 493.607813][T11548] netlink: zone id is out of range [ 493.609777][T11548] netlink: zone id is out of range [ 493.611926][T11548] netlink: zone id is out of range [ 493.613861][T11548] netlink: zone id is out of range [ 493.620397][T11548] netlink: zone id is out of range [ 493.668079][T11552] syzkaller0: entered promiscuous mode [ 493.670757][T11552] syzkaller0: entered allmulticast mode [ 493.854321][ T5803] Bluetooth: hci4: command tx timeout [ 493.886548][T11564] xt_hashlimit: size too large, truncated to 1048576 [ 493.942818][T11568] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 494.191861][T11572] netlink: 'syz.1.1563': attribute type 4 has an invalid length. [ 494.201360][T11572] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1563'. [ 494.207571][T11572] net_ratelimit: 360 callbacks suppressed [ 494.207593][T11572] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 494.333316][T11579] program syz.5.1565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 494.947057][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 494.947077][ T42] audit: type=1400 audit(1782771091.707:903): avc: denied { write } for pid=11605 comm="syz.6.1573" name="/" dev="9p" ino=79431487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 494.959066][ T42] audit: type=1400 audit(1782771091.707:904): avc: denied { rmdir } for pid=11605 comm="syz.6.1573" name="file2" dev="9p" ino=79431497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 494.966723][ T42] audit: type=1400 audit(1782771091.717:905): avc: denied { write } for pid=11604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.027849][ T42] audit: type=1400 audit(1782771091.787:906): avc: denied { write } for pid=11609 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.136113][T11574] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 495.139122][ T42] audit: type=1400 audit(1782771091.897:907): avc: denied { write } for pid=11612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.189407][ T42] audit: type=1400 audit(1782771091.947:908): avc: denied { write } for pid=11615 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.246285][T11617] fusectl: Unknown parameter 'wlan0' [ 495.335839][T11630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.508457][T11648] xt_hashlimit: max too large, truncated to 1048576 [ 495.515921][T11648] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 495.640103][ T5795] udevd[5795]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 495.656180][ T42] audit: type=1400 audit(1782771092.417:909): avc: denied { write } for pid=11654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.703270][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1585'. [ 495.717518][ T42] audit: type=1400 audit(1782771092.477:910): avc: denied { write } for pid=11662 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.772630][T11660] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 495.817927][ T42] audit: type=1400 audit(1782771092.577:911): avc: denied { write } for pid=11665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.888753][ T42] audit: type=1400 audit(1782771092.647:912): avc: denied { write } for pid=11673 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.946342][ T5805] Bluetooth: hci4: command tx timeout [ 495.957193][T11684] IPv6: NLM_F_CREATE should be specified when creating new route [ 496.065245][T11690] kvm: kvm [11689]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xaae7 [ 496.068916][T11690] kvm: kvm [11689]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x909e [ 496.091733][T11690] kvm: kvm [11689]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x895 [ 496.112287][T11690] kvm: kvm [11689]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xe0e7 [ 496.113788][T11702] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1593'. [ 496.117245][T11690] kvm: kvm [11689]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xc69e [ 496.167687][T11705] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 496.172844][T11705] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 496.177628][T11705] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 496.181014][T11705] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 496.343110][T11708] syzkaller0: entered promiscuous mode [ 496.345895][T11708] syzkaller0: entered allmulticast mode [ 496.567797][T11715] netlink: 484 bytes leftover after parsing attributes in process `syz.6.1597'. [ 496.810797][T11738] MPI: mpi too large (16392 bits) [ 496.930753][T11753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11753 comm=syz.6.1608 [ 496.945515][T11753] netlink: 'syz.6.1608': attribute type 1 has an invalid length. [ 497.050037][T11761] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.1611'. [ 497.056448][T11761] veth0_to_bond: default FDB implementation only supports local addresses [ 497.065225][ T5761] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 497.080904][T11765] netlink: 'syz.6.1612': attribute type 10 has an invalid length. [ 497.095963][T11765] team0: Port device veth0 added [ 497.166598][T11767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.227670][ T5761] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 497.236227][ T5761] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.248904][ T5761] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 497.253102][ T5761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.470782][T11793] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1620'. [ 497.475399][ T5761] usb 6-1: usb_control_msg returned -32 [ 497.479517][ T5761] usbtmc 6-1:16.0: can't read capabilities [ 497.482441][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'. [ 497.826646][T11812] netlink: 'syz.1.1605': attribute type 39 has an invalid length. [ 497.867389][T11812] hsr_slave_0 (unregistering): left promiscuous mode [ 497.869150][T11814] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1625'. [ 498.014149][ T5798] Bluetooth: hci4: command 0x0405 tx timeout [ 498.162788][T11833] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x0) [ 498.298335][T11841] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1631'. [ 498.307271][T11841] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11841 comm=syz.0.1631 [ 498.481714][T11849] erspan0: entered promiscuous mode [ 498.485027][T11849] macsec2: entered promiscuous mode [ 498.716550][T11861] netlink: 'syz.0.1638': attribute type 3 has an invalid length. [ 498.719726][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1638'. [ 498.729910][T11866] binder: 11865:11866 ioctl c0306201 0 returned -14 [ 498.732605][T11867] netlink: 'syz.6.1639': attribute type 39 has an invalid length. [ 498.788076][T11870] xt_hashlimit: size too large, truncated to 1048576 [ 499.091328][T11882] netlink: 'syz.0.1643': attribute type 1 has an invalid length. [ 499.094006][T11882] netlink: 'syz.0.1643': attribute type 4 has an invalid length. [ 499.096577][T11882] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1643'. [ 499.339376][T11896] EXT4-fs (nbd6): unable to read superblock [ 499.374069][ T5803] Bluetooth: hci0: command 0x1003 tx timeout [ 499.375883][ T5805] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 499.476959][ T5843] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.481282][ T5843] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.488049][ T5843] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.497269][ T5843] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.573596][T11908] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 499.607270][T11914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1653'. [ 499.818216][ T5805] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 499.829927][ T5805] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 499.870173][ T40] usb 6-1: USB disconnect, device number 14 [ 499.945215][ T5897] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 499.959391][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 499.959407][ T42] audit: type=1400 audit(1782771096.717:922): avc: denied { listen } for pid=11932 comm="syz.5.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 500.104162][ T5897] usb 11-1: Using ep0 maxpacket: 32 [ 500.107913][ T5897] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 500.114232][ T5897] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 500.118921][ T5897] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 500.122344][ T5897] usb 11-1: Product: syz [ 500.127559][ T5897] usb 11-1: Manufacturer: syz [ 500.130842][T11945] x_tables: duplicate underflow at hook 3 [ 500.131188][ T5897] usb 11-1: SerialNumber: syz [ 500.138336][ T5897] usb 11-1: config 0 descriptor?? [ 500.141207][T11924] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 500.148258][ T5897] hub 11-1:0.0: bad descriptor, ignoring hub [ 500.151235][ T5897] hub 11-1:0.0: probe with driver hub failed with error -5 [ 500.218200][T11947] netlink: 'syz.1.1668': attribute type 21 has an invalid length. [ 500.221265][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1668'. [ 500.225690][T11947] netlink: 'syz.1.1668': attribute type 21 has an invalid length. [ 500.228769][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1668'. [ 500.343762][T11962] netlink: 344 bytes leftover after parsing attributes in process `syz.1.1672'. [ 500.454343][ T5897] usb 11-1: USB disconnect, device number 3 [ 500.658981][T12000] netlink: 'syz.0.1683': attribute type 4 has an invalid length. [ 500.952385][ T42] audit: type=1400 audit(1782771097.707:923): avc: denied { write } for pid=12016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.143472][ T42] audit: type=1400 audit(1782771097.897:924): avc: denied { write } for pid=12023 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.298945][ T42] audit: type=1400 audit(1782771098.057:925): avc: denied { write } for pid=12031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.414201][ T9] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 501.506620][ T42] audit: type=1400 audit(1782771098.267:926): avc: denied { write } for pid=12034 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.586105][ T9] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 501.590828][ T9] usb 11-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 501.595600][ T9] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 501.598791][ T9] usb 11-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 501.603461][ T9] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 501.608571][ T9] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 501.642868][ T42] audit: type=1400 audit(1782771098.397:927): avc: denied { write } for pid=12041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.692972][ T42] audit: type=1400 audit(1782771098.447:928): avc: denied { write } for pid=12045 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.711044][ T9] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 501.717328][ T9] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 501.727998][ T9] usb 11-1: Product: syz [ 501.729900][ T9] usb 11-1: Manufacturer: syz [ 501.743067][T12026] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 501.754356][ T9] cdc_wdm 11-1:1.0: skipping garbage [ 501.758581][ T9] cdc_wdm 11-1:1.0: skipping garbage [ 501.765409][ T9] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 501.768920][ T9] cdc_wdm 11-1:1.0: Unknown control protocol [ 501.935294][T12049] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 501.947593][T12049] bond5 (unregistering): Released all slaves [ 501.956437][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 501.959805][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 501.963184][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 501.966316][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 501.968672][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 501.971004][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 501.973508][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 501.975892][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 501.979269][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 501.982155][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 501.985073][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 501.987864][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 501.990872][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 501.994252][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 501.997197][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 502.000102][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 502.003007][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 502.005912][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 502.009545][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 502.012558][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 502.018365][ T9] usb 11-1: USB disconnect, device number 4 [ 502.021617][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 502.030080][T12058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 502.056481][T12058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 502.059945][T12058] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 502.066412][T12058] bond3: (slave vti0): Error -95 calling set_mac_address [ 502.099359][T12069] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 502.108864][T12069] CIFS: VFS: Malformed UNC in devname [ 502.198983][ T42] audit: type=1400 audit(1782771098.957:929): avc: denied { getopt } for pid=12080 comm="syz.0.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 502.320882][T12074] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 502.346572][ T6785] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 502.356830][ T6785] Bluetooth: hci0: Frame reassembly failed (-84) [ 502.423189][ T42] audit: type=1400 audit(1782771099.177:930): avc: denied { write } for pid=12095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.467256][ T42] audit: type=1400 audit(1782771099.227:931): avc: denied { write } for pid=12102 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.726953][ T6785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.730180][ T6785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.773327][T12115] tmpfs: Bad value for 'mpol' [ 502.821429][T12117] netlink: 'syz.5.1708': attribute type 3 has an invalid length. [ 502.950739][T12127] __nla_validate_parse: 2 callbacks suppressed [ 502.950760][T12127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1705'. [ 503.150003][T12140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1713'. [ 503.201105][T12142] netlink: 'syz.5.1714': attribute type 4 has an invalid length. [ 503.205462][ T5803] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 503.205693][T12142] fuse: Bad value for 'fd' [ 503.240999][T12144] xt_l2tp: v2 tid > 0xffff: 2031748 [ 503.312567][T12147] syzkaller0: entered promiscuous mode [ 503.314648][T12147] syzkaller0: entered allmulticast mode [ 503.329702][T12152] ALSA: mixer_oss: invalid OSS volume '' [ 503.373214][T12154] veth0_to_team: entered promiscuous mode [ 503.376720][T12154] veth0_to_team: left promiscuous mode [ 503.404530][T12156] xt_hashlimit: size too large, truncated to 1048576 [ 503.488036][T12164] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1722'. [ 503.631532][T12166] input: syz1 as /devices/virtual/input/input30 [ 503.641915][T12166] netlink: 868 bytes leftover after parsing attributes in process `syz.6.1723'. [ 503.885402][T12178] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 504.340759][ T5805] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 504.348734][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1729'. [ 504.564389][T12199] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio0-cursor) [ 504.602541][T12201] tmpfs: Bad value for 'mpol' [ 504.631789][T12201] pvfs2: Unknown parameter '#' [ 504.760186][T12209] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1735'. [ 504.766698][T12209] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12209 comm=syz.6.1735 [ 504.785298][T12209] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 504.796411][T12209] overlayfs: failed lookup in lower (newroot/43, name='file0', err=-40): overlapping layers [ 504.806705][T12209] overlayfs: failed lookup in lower (newroot/43, name='file0', err=-40): overlapping layers [ 504.931336][T12214] netlink: 'syz.0.1737': attribute type 29 has an invalid length. [ 505.023371][T12223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12223 comm=syz.6.1740 [ 505.291287][T12240] tmpfs: User quota inode hardlimit too large. [ 505.365275][T12251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.381240][T12243] fuse: Bad value for 'fd' [ 505.397924][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 505.397949][ T42] audit: type=1400 audit(1782771358.161:935): avc: granted { setsecparam } for pid=12256 comm="syz.0.1750" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 505.398076][T12251] loop4: detected capacity change from 0 to 7 [ 505.441040][T12251] Dev loop4: unable to read RDB block 7 [ 505.442896][T12251] loop4: AHDI p1 p2 p3 [ 505.452717][T12251] loop4: partition table partially beyond EOD, truncated [ 505.457263][T12251] loop4: p1 start 1601398130 is beyond EOD, truncated [ 505.460029][T12251] loop4: p2 start 1702059890 is beyond EOD, truncated [ 505.525178][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 505.585046][T12274] comedi comedi3: comedi_config --init_data is deprecated [ 505.589583][T12276] overlayfs: missing 'lowerdir' [ 505.641406][T12276] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.652465][T12276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.678295][ T6785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.685360][ T6785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.688871][T12276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.695071][T12276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.702698][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.703860][T12276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 505.710865][ T6797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.718137][T12276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.723291][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.730703][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.731742][T12276] veth1_vlan: left promiscuous mode [ 505.736824][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.747697][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.749042][T12276] veth0_vlan: left promiscuous mode [ 505.755803][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1755'. [ 505.756977][T12276] veth0_vlan: entered promiscuous mode [ 505.759239][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1755'. [ 505.762516][T12276] veth1_vlan: entered promiscuous mode [ 505.763798][T12278] netlink: 'syz.5.1755': attribute type 12 has an invalid length. [ 505.789458][T12276] veth0_macvtap: left promiscuous mode [ 505.792077][T12276] veth0_macvtap: entered promiscuous mode [ 505.801373][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.805035][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.808580][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.815469][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.821178][T12276] A link change request failed with some changes committed already. Interface pim6reg1 may have been left with an inconsistent configuration, please check. [ 505.846604][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.849266][ T6782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.853354][ T6782] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.856605][ T6782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.888032][ T5884] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.892827][ T5884] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.919166][T12269] syzkaller0: entered promiscuous mode [ 505.922212][T12269] syzkaller0: entered allmulticast mode [ 505.958373][ T5884] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.963300][T12291] ipt_REJECT: TCP_RESET invalid for non-tcp [ 505.970622][ T5884] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.114351][T12303] binder: 12300:12303 unknown command 0 [ 506.117604][T12303] binder: 12300:12303 ioctl c0306201 200000000040 returned -22 [ 506.382144][ T42] audit: type=1400 audit(1782771359.141:936): avc: denied { name_bind } for pid=12317 comm="syz.0.1766" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 506.385934][T12316] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 506.504577][T12327] netlink: 'syz.6.1767': attribute type 2 has an invalid length. [ 506.749677][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.434615][T12333] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 508.664603][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 509.072295][T12342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1772'. [ 509.080918][ T42] audit: type=1400 audit(1782771361.841:937): avc: denied { write } for pid=12341 comm="syz.0.1772" name="file0" dev="tmpfs" ino=2675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 509.080954][ T42] audit: type=1400 audit(1782771361.841:938): avc: denied { ioctl } for pid=12341 comm="syz.0.1772" path="/505/file0" dev="tmpfs" ino=2675 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 509.126048][ T42] audit: type=1400 audit(1782771361.891:939): avc: denied { write } for pid=12347 comm="syz.0.1775" path="socket:[49662]" dev="sockfs" ino=49662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 509.286007][ T42] audit: type=1400 audit(1782771362.051:940): avc: denied { map } for pid=12372 comm="syz.0.1783" path="/dev/video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 509.307328][ T42] audit: type=1400 audit(1782771362.061:941): avc: denied { write } for pid=12362 comm="syz.1.1778" name="/" dev="9p" ino=79431487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 509.462290][ T42] audit: type=1400 audit(1782771362.221:942): avc: denied { ioctl } for pid=12387 comm="syz.0.1788" path="socket:[49707]" dev="sockfs" ino=49707 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 509.480562][T12388] SELinux: failed to load policy [ 509.526729][T12403] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 509.531931][T12402] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 509.632856][T12418] random: crng reseeded on system resumption [ 509.635411][ T42] audit: type=1400 audit(1782771362.391:943): avc: denied { append } for pid=12417 comm="syz.6.1794" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 509.788212][T12423] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 509.788427][T12424] netlink: 'syz.0.1796': attribute type 2 has an invalid length. [ 509.797946][T12424] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1796'. [ 509.924066][ T7088] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 509.926223][T12427] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.979198][T12431] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 510.054657][ T5897] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 510.075546][ T7088] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 510.080048][ T7088] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 510.083877][ T7088] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 510.088296][ T7088] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.097739][T12418] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 510.105041][ T7088] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 510.155713][ T42] audit: type=1400 audit(1782771362.921:944): avc: denied { append } for pid=12438 comm="syz.5.1801" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 510.205754][ T5897] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 510.210334][ T5897] usb 5-1: config 1 interface 0 has no altsetting 0 [ 510.215648][ T5897] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.40 [ 510.219186][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.222181][ T5897] usb 5-1: Product: syz [ 510.223694][ T5897] usb 5-1: Manufacturer: syz [ 510.226324][ T5897] usb 5-1: SerialNumber: syz [ 510.303946][ T1046] usb 11-1: USB disconnect, device number 5 [ 510.446822][ T5897] usbhid 5-1:1.0: can't add hid device: -71 [ 510.448858][ T5897] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 510.452835][ T5897] usb 5-1: USB disconnect, device number 25 [ 510.465389][T12445] overlayfs: missing 'lowerdir' [ 510.538778][T12445] kvm: kvm [12443]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 510.545566][T12445] kvm: kvm [12443]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 510.675152][T12461] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 510.739662][T12463] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 511.034054][ T5897] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 511.193389][T12490] overlayfs: failed to verify upper root origin [ 511.195777][ T5897] usb 10-1: Using ep0 maxpacket: 8 [ 511.206504][ T5897] usb 10-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.212937][ T5897] usb 10-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 511.214564][ T7545] net_ratelimit: 8 callbacks suppressed [ 511.214576][ T7545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.220853][ T5897] usb 10-1: config 1 interface 0 has no altsetting 0 [ 511.221967][ T7545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.227366][ T5897] usb 10-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.40 [ 511.229179][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.236049][ T5897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.238394][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.241441][ T5897] usb 10-1: Product: 戛比ꦕ浃睢芕禺ᒪ㨃௢ᮿ둖洝ᫌ졃ꀳ䢷ᑜ㗁짎텭巪跔 [ 511.255276][ T5897] usb 10-1: Manufacturer: ы [ 511.257242][ T5897] usb 10-1: SerialNumber: ᣶䴢竗现ᘢ怿央걩༊ḙ뵘읋汃㱛貂땲ퟹ⃒샊౭좣쭨ﴏ壝绨蔃얏혹祟僶筆磤粢쟲視넅넻劣ﾣኳ븣ᯟⱮ︉芍峋賿苆侓瓐㞎⁗꒹䩒\ጫ垖でೢၦ荨⥸몓轰擖缌澫豏빀ᛡ⒎䆞吹窎懡뫒▣灰⺃ [ 511.471817][T12504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12504 comm=syz.0.1822 [ 511.636334][ T42] audit: type=1400 audit(1782771364.401:945): avc: denied { append } for pid=12508 comm="syz.0.1824" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 511.652355][T12507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.713204][T12510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.743403][ T5762] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 511.748201][ T5762] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 511.770885][T12507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.865218][ T6785] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 511.976750][T12516] fuse: Bad value for 'group_id' [ 511.976776][ T6797] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 511.978478][T12516] fuse: Bad value for 'group_id' [ 511.989268][T12516] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 512.084648][ T6797] wlan1: authentication with 08:02:11:00:00:00 timed out [ 512.365527][T12543] ceph: Path missing in source [ 512.369624][ T42] audit: type=1400 audit(1782771365.131:946): avc: denied { setattr } for pid=12540 comm="syz.0.1831" path="socket:[50949]" dev="sockfs" ino=50949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 512.385109][ T42] audit: type=1400 audit(1782771365.151:947): avc: denied { map } for pid=12540 comm="syz.0.1831" path="socket:[50950]" dev="sockfs" ino=50950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 512.395598][ T42] audit: type=1400 audit(1782771365.151:948): avc: denied { read } for pid=12540 comm="syz.0.1831" path="socket:[50950]" dev="sockfs" ino=50950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 512.576259][T12562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1838'. [ 512.617585][T12553] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.621659][T12553] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.751631][T12553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.768818][T12553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.064837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.099841][T12583] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 513.154373][ T12] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.157453][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.161895][ T12] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.166761][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.172085][ T12] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.175130][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.178527][ T12] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.181932][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.240797][T12589] netlink: 'syz.6.1843': attribute type 1 has an invalid length. [ 513.372503][T12595] erspan0: entered promiscuous mode [ 513.380321][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1846'. [ 513.449847][T12599] loop8: detected capacity change from 0 to 7 [ 513.467217][ C3] blk_print_req_error: 15 callbacks suppressed [ 513.467252][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.473772][ C3] buffer_io_error: 15 callbacks suppressed [ 513.473800][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 513.480742][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.485965][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 513.491122][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.495813][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 513.504275][ T5761] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 513.508039][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.512679][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 513.520570][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.524744][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 513.528693][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.533277][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 513.536200][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.540046][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 513.544614][T12599] ldm_validate_partition_table(): Disk read failed. [ 513.547998][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.552124][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 513.556396][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.561837][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 513.565816][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.570078][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 513.574617][T12599] Dev loop8: unable to read RDB block 0 [ 513.579088][T12599] loop8: unable to read partition table [ 513.582235][T12599] loop8: partition table beyond EOD, truncated [ 513.585269][T12599] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?) failed (rc=-5) [ 513.650701][T12605] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1849'. [ 513.674059][ T5761] usb 6-1: Using ep0 maxpacket: 32 [ 513.677850][ T5761] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 513.681038][ T5761] usb 6-1: config 0 has no interface number 0 [ 513.683318][ T5761] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 513.687232][ T5761] usb 6-1: config 0 interface 196 has no altsetting 0 [ 513.692038][ T5761] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 513.695623][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.698489][ T5761] usb 6-1: Product: syz [ 513.700031][ T5761] usb 6-1: Manufacturer: syz [ 513.701970][ T5761] usb 6-1: SerialNumber: syz [ 513.711835][ T5761] usb 6-1: config 0 descriptor?? [ 513.714833][T12587] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 513.841169][ T5897] usbhid 10-1:1.0: can't add hid device: -71 [ 513.845242][ T5897] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 513.849679][ T5897] usb 10-1: USB disconnect, device number 6 [ 514.095561][T12625] set match dimension is over the limit! [ 514.195641][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 514.213385][T12630] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1859'. [ 514.334671][ T34] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 514.340999][T12636] binder: 12635:12636 ioctl 8922 200000000040 returned -22 [ 514.343690][T12636] binder: 12635:12636 ioctl c0306201 200000000640 returned -22 [ 514.504353][ T34] usb 10-1: Using ep0 maxpacket: 32 [ 514.509867][ T34] usb 10-1: unable to get BOS descriptor or descriptor too short [ 514.517747][ T34] usb 10-1: string descriptor 0 read error: -22 [ 514.521022][ T34] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 514.525633][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.548105][ T34] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 514.554945][ T34] dw2102: su3000_power_ctrl: 1, initialized 0 [ 514.558202][ T34] dvb-usb: bulk message failed: -22 (2/0) [ 514.567544][ T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 514.572232][ T34] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 514.576609][ T34] usb 10-1: media controller created [ 514.578746][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 514.581151][ T34] dw2102: i2c transfer failed. [ 514.582820][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 514.585116][ T34] dw2102: i2c transfer failed. [ 514.587087][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 514.589623][ T34] dw2102: i2c transfer failed. [ 514.592220][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 514.594857][ T34] dw2102: i2c transfer failed. [ 514.596393][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 514.598581][ T34] dw2102: i2c transfer failed. [ 514.600459][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 514.603100][ T34] dw2102: i2c transfer failed. [ 514.605678][ T34] dvb-usb: MAC address: 02:02:02:02:02:02 [ 514.616129][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 514.632045][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 514.634641][ T34] dw2102: command 0x0e transfer failed. [ 514.636722][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 514.638924][ T34] dw2102: command 0x0e transfer failed. [ 514.664188][ T5799] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 514.814053][ T5799] usb 11-1: Using ep0 maxpacket: 8 [ 514.818361][ T5799] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 514.822522][ T5799] usb 11-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 514.827912][ T5799] usb 11-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice= 0.40 [ 514.831646][ T5799] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.834315][ T5799] usb 11-1: Product: 萁셉ず뗠〾䄡詠ᶞ봾瀱餋雯鰍闹栭耔뽬헡肿윏諶瑈崋솢癟▟仆噊歺홉ₔ뇧む쥑嘠墢䄴䔨깸ꐿ殩け杗炸蛉ﱝ銲둏첡埳喐᠈ꕥ㡦쮻中膏㇊乹䲖㲧࿝岏밼㏄道㎟eꥯ鍞돉ꬶ褷鯳⊛䋘얱ꢳ鯴㉿㭜আ믎䳓夐錒ᶞ繐➋惈 [ 514.845881][ T5799] usb 11-1: Manufacturer: 퍅뚂②✦нᴦꇐܨ⯁䦀䩕괭낚⮈ⲥ̅၎୐霆攇ꋟ榓ሢ钦芬Გ螱纋ⴕᠳ朔镗蜁ෞ⏆戻䱜拚㡢휻焓᯼悐퀏煒믟䷕ᠥ蟲뢴鸐훴㺟꼆ꞓꆋ鏽藝攠蓿숵덎䅠膻㪰烙긷斥ઽ洑 [ 514.854472][ T5799] usb 11-1: SerialNumber: о [ 514.944009][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 514.946515][ T34] dw2102: command 0x0e transfer failed. [ 514.948994][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 514.951601][ T34] dw2102: command 0x0e transfer failed. [ 514.954155][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 514.956745][ T34] dw2102: command 0x51 transfer failed. [ 514.988084][ T34] DVB: Unable to find symbol ds3000_attach() [ 514.993318][ T34] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 515.055235][ T34] rc_core: IR keymap rc-su3000 not found [ 515.057650][ T34] Registered IR keymap rc-empty [ 515.061881][ T34] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 515.065301][ T5799] usb 11-1: BAAD HEADSET c_chmask mismatch [ 515.070014][ T5799] snd-usb-audio 11-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 515.072223][ T34] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input31 [ 515.078260][ T5799] usb 11-1: Audio class v2/v3 interfaces need an interface association [ 515.082527][ T5799] snd-usb-audio 11-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 515.082551][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 515.089843][ T34] dw2102: su3000_power_ctrl: 0, initialized 1 [ 515.090719][ T5799] usb 11-1: Audio class v2/v3 interfaces need an interface association [ 515.092531][ T34] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 515.105404][ T34] usb 10-1: USB disconnect, device number 7 [ 515.150323][ T5799] snd-usb-audio 11-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 515.165255][ T6065] udevd[6065]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 515.174225][ T6065] udevd[6065]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 515.202232][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.230865][ T34] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 515.261796][ T5799] usb 11-1: USB disconnect, device number 6 [ 515.604184][ T34] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 515.755877][ T34] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 515.759877][ T34] usb 10-1: config 0 has no interface number 0 [ 515.762563][ T34] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 515.767949][ T34] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 515.772441][ T34] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 515.779305][ T34] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 515.788419][ T34] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 515.796914][ T34] usb 10-1: Product: syz [ 515.799993][ T34] usb 10-1: SerialNumber: syz [ 515.809415][ T34] usb 10-1: config 0 descriptor?? [ 515.825833][T12653] macvtap1: entered promiscuous mode [ 515.826783][ T34] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 515.829104][T12653] dummy0: entered promiscuous mode [ 515.834601][ T34] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.8/input/input32 [ 515.842375][T12653] team0: Device macvtap1 failed to register rx_handler [ 515.846734][T12653] dummy0: left promiscuous mode [ 515.992224][T12655] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 516.025883][ C3] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 516.026712][ T9] usb 10-1: USB disconnect, device number 8 [ 516.028879][ C3] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 516.084805][ T9] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 516.239601][ T5761] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 516.243663][ T5761] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 516.252770][ T5761] usb 6-1: USB disconnect, device number 15 [ 516.525408][T12680] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.973159][T12697] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 516.987670][T12697] bond3 (unregistering): Released all slaves [ 517.055558][T12698] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 517.060242][T12698] bond3 (unregistering): Released all slaves [ 517.090013][T11318] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.093744][T11318] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.097786][T11318] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.101929][T11318] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.106963][T11318] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.110641][T11318] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.114826][T11318] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.119016][T11318] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.166656][T12701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1879'. [ 517.171310][T12701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1879'. [ 517.307098][T12714] can: request_module (can-proto-0) failed. [ 517.362991][T12714] batman_adv: batadv0: Adding interface: dummy0 [ 517.365935][T12714] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.386313][T12714] batman_adv: batadv0: Interface activated: dummy0 [ 517.420555][T12714] batadv0: mtu less than device minimum [ 517.426318][T12714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.431872][T12714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.438453][T12714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.442428][T12714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.446352][T12714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.450411][T12714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.457315][T12714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.461469][T12714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.465172][T12714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.634574][T12744] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1893'. [ 517.783441][T12755] netlink: 'syz.1.1897': attribute type 10 has an invalid length. [ 517.806964][T12755] bond2: (slave dummy0): Releasing backup interface [ 517.839862][T12760] netlink: 'syz.1.1897': attribute type 13 has an invalid length. [ 517.845011][T12755] team0: Port device dummy0 added [ 517.911160][T12759] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1899'. [ 517.970927][T12762] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 517.979033][T12762] CPU: 2 UID: 0 PID: 12762 Comm: syz.6.1899 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.979054][T12762] Tainted: [L]=SOFTLOCKUP [ 517.979058][T12762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 517.979077][T12762] Call Trace: [ 517.979082][T12762] [ 517.979087][T12762] dump_stack_lvl+0x100/0x190 [ 517.979176][T12762] sysfs_warn_dup.cold+0x1c/0x28 [ 517.979195][T12762] sysfs_create_dir_ns+0x24b/0x2b0 [ 517.979223][T12762] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 517.979241][T12762] ? find_held_lock+0x2b/0x80 [ 517.979263][T12762] ? kobject_add_internal+0x25f/0x930 [ 517.979313][T12762] ? kobject_add_internal+0x25f/0x930 [ 517.979328][T12762] ? class_dir_child_ns_type+0xd/0x60 [ 517.979377][T12762] kobject_add_internal+0x2c8/0x930 [ 517.979394][T12762] kobject_add+0x16a/0x1e0 [ 517.979412][T12762] ? __pfx_kobject_add+0x10/0x10 [ 517.979426][T12762] ? get_device_parent+0x1b3/0x4c0 [ 517.979440][T12762] ? kobject_put+0xb9/0x640 [ 517.979455][T12762] device_add+0x294/0x1970 [ 517.979470][T12762] ? lockdep_init_map_type+0x5c/0x250 [ 517.979485][T12762] ? __pfx_device_add+0x10/0x10 [ 517.979500][T12762] ? lockdep_init_map_type+0x5c/0x250 [ 517.979516][T12762] ? __init_waitqueue_head+0xca/0x150 [ 517.979535][T12762] tty_register_device_attr+0x388/0x7f0 [ 517.979588][T12762] ? lockdep_init_map_type+0x5c/0x250 [ 517.979604][T12762] ? __pfx_tty_register_device_attr+0x10/0x10 [ 517.979622][T12762] ? tty_port_init+0x156/0x1c0 [ 517.979640][T12762] gsm_activate_mux+0x155/0x2a0 [ 517.979657][T12762] gsmld_ioctl+0xbbc/0x15c0 [ 517.979681][T12762] ? __pfx_gsmld_ioctl+0x10/0x10 [ 517.979698][T12762] ? __ldsem_down_read_nested+0xf3/0x890 [ 517.979717][T12762] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 517.979737][T12762] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 517.979752][T12762] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 517.979771][T12762] ? __pfx_gsmld_ioctl+0x10/0x10 [ 517.979786][T12762] tty_ioctl+0x11b4/0x1640 [ 517.979800][T12762] ? __pfx_tty_ioctl+0x10/0x10 [ 517.979813][T12762] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 517.979881][T12762] ? __fget_files+0x215/0x3d0 [ 517.979893][T12762] ? hook_file_ioctl_common+0x140/0x440 [ 517.979910][T12762] ? selinux_file_ioctl+0x13b/0x290 [ 517.979926][T12762] ? selinux_file_ioctl+0xb6/0x290 [ 517.979944][T12762] ? __pfx_tty_ioctl+0x10/0x10 [ 517.979958][T12762] __x64_sys_ioctl+0x18e/0x210 [ 517.979976][T12762] do_syscall_64+0x115/0x870 [ 517.979992][T12762] ? clear_bhb_loop+0x40/0x90 [ 517.980006][T12762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.980017][T12762] RIP: 0033:0x7f2907b9ce59 [ 517.980028][T12762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.980038][T12762] RSP: 002b:00007f2908ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 517.980051][T12762] RAX: ffffffffffffffda RBX: 00007f2907e16090 RCX: 00007f2907b9ce59 [ 517.980059][T12762] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000004 [ 517.980066][T12762] RBP: 00007f2907c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 517.980072][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.980079][T12762] R13: 00007f2907e16128 R14: 00007f2907e16090 R15: 00007fff0b0ef9f8 [ 517.980093][T12762] [ 517.980213][T12762] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 518.193489][T12770] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 518.200206][T12770] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 518.206544][T12770] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 518.214459][ T5762] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 518.335536][ T42] audit: type=1400 audit(1782771371.091:949): avc: denied { write } for pid=12776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.366211][ T5762] usb 10-1: device descriptor read/64, error -71 [ 518.401354][ T42] audit: type=1400 audit(1782771371.161:950): avc: denied { write } for pid=12781 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.456183][T12783] tmpfs: Bad value for 'mpol' [ 518.520401][T12787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.614329][ T5762] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 518.744136][ T5762] usb 10-1: device descriptor read/64, error -71 [ 518.854430][ T5762] usb usb10-port1: attempt power cycle [ 518.874105][ T5897] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 519.004136][ T5897] usb 11-1: device descriptor read/64, error -71 [ 519.058927][T12791] SQUASHFS error: Failed to read block 0x0: -5 [ 519.061080][T12791] unable to read squashfs_super_block [ 519.214151][ T5762] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 519.236489][ T5762] usb 10-1: device descriptor read/8, error -71 [ 519.254048][ T5897] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 519.384163][ T5897] usb 11-1: device descriptor read/64, error -71 [ 519.420670][T12803] loop8: detected capacity change from 0 to 8 [ 519.424726][T12803] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 519.427709][T12803] loop8: p1 start 645956396 is beyond EOD, truncated [ 519.430370][T12803] loop8: p2 start 906413296 is beyond EOD, truncated [ 519.432760][T12803] loop8: p3 start 1667825979 is beyond EOD, truncated [ 519.435423][T12803] loop8: p4 start 3080274856 is beyond EOD, truncated [ 519.438501][T12803] loop8: p5 start 900447353 is beyond EOD, truncated [ 519.441259][T12803] loop8: p6 start 3405795862 is beyond EOD, truncated [ 519.443782][T12803] loop8: p7 start 2279387816 is beyond EOD, truncated [ 519.446261][T12803] loop8: p8 start 1800973588 is beyond EOD, truncated [ 519.448597][T12803] loop8: p9 start 3956679536 is beyond EOD, truncated [ 519.450895][T12803] loop8: p10 start 1530271537 is beyond EOD, truncated [ 519.453175][T12803] loop8: p11 start 10522187 is beyond EOD, truncated [ 519.456606][T12803] loop8: p12 start 2075893155 is beyond EOD, truncated [ 519.474083][ T5762] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 519.504810][ T5897] usb usb11-port1: attempt power cycle [ 519.507768][ T5762] usb 10-1: device descriptor read/8, error -71 [ 519.614366][ T5762] usb usb10-port1: unable to enumerate USB device [ 519.865093][ T5897] usb 11-1: new low-speed USB device number 9 using dummy_hcd [ 519.884684][ T5897] usb 11-1: device descriptor read/8, error -71 [ 519.960882][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 520.037484][ T42] audit: type=1400 audit(1782771372.801:951): avc: denied { listen } for pid=12813 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 520.124268][ T5897] usb 11-1: new low-speed USB device number 10 using dummy_hcd [ 520.144829][ T5897] usb 11-1: device descriptor read/8, error -71 [ 520.197622][T12832] veth0_to_hsr: entered allmulticast mode [ 520.255319][ T5897] usb usb11-port1: unable to enumerate USB device [ 520.300383][T12836] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1921'. [ 520.310017][T12838] netlink: 'syz.1.1920': attribute type 4 has an invalid length. [ 520.312936][T12838] netlink: 'syz.1.1920': attribute type 4 has an invalid length. [ 520.501624][ T42] audit: type=1400 audit(1782771373.261:952): avc: denied { cmd } for pid=12852 comm="syz.0.1925" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 520.509588][T12854] netlink: 'syz.1.1924': attribute type 13 has an invalid length. [ 520.528644][T12854] gretap0: refused to change device tx_queue_len [ 520.910769][T12863] /dev/nullb0: Can't open blockdev [ 521.022435][T12872] /dev/nullb0: Can't open blockdev [ 521.445151][ T42] audit: type=1400 audit(1782771374.201:953): avc: denied { lock } for pid=12892 comm="syz.1.1937" path="socket:[54725]" dev="sockfs" ino=54725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 521.547246][T12899] 9pnet_virtio: no channels available for device syz [ 522.082282][ T5805] Bluetooth: hci4: unexpected event for opcode 0x200b [ 522.108360][T12929] wireguard0: entered promiscuous mode [ 522.213705][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1950'. [ 522.218040][T12940] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1950'. [ 522.223537][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1950'. [ 522.227649][T12940] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1950'. [ 522.411694][T12953] fuse: Bad value for 'user_id' [ 522.416422][T12953] fuse: Bad value for 'user_id' [ 522.673303][T12981] SELinux: truncated policydb string identifier [ 522.676900][T12981] SELinux: failed to load policy [ 522.726240][ T42] audit: type=1400 audit(1782771375.491:954): avc: denied { write } for pid=12982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.810082][ T42] audit: type=1400 audit(1782771375.571:955): avc: denied { write } for pid=12993 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.814894][ T5897] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 522.943825][ T42] audit: type=1400 audit(1782771375.701:956): avc: denied { write } for pid=13001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.965125][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 522.972726][ T5897] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.984132][ T5897] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.997984][ T5897] usb 6-1: config 0 interface 0 has no altsetting 0 [ 523.003031][ T5897] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 523.014004][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.025483][ T5897] usb 6-1: config 0 descriptor?? [ 523.059315][ T42] audit: type=1400 audit(1782771375.821:957): avc: denied { write } for pid=13012 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.300665][T13024] net_ratelimit: 18 callbacks suppressed [ 523.300697][T13024] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 523.436776][ T5897] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 523.443013][ T5897] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 523.447926][ T5897] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 523.451136][ T5897] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 523.454319][ T5897] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 523.457148][ T5897] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 523.601470][ T42] audit: type=1326 audit(1782771376.361:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13039 comm="syz.6.1981" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2907b9ce59 code=0x0 [ 523.642649][ C0] sr 2:0:0:0: [sr0] tag#5 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 523.646340][ C0] sr 2:0:0:0: [sr0] tag#5 CDB: Unmap/Read sub-channel 42 2b b5 58 8b 82 [ 523.652826][ T42] audit: type=1400 audit(1782771376.411:959): avc: denied { search } for pid=13041 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.665226][ T42] audit: type=1400 audit(1782771376.421:960): avc: denied { read write } for pid=13041 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 523.677638][ T42] audit: type=1400 audit(1782771376.421:961): avc: denied { open } for pid=13041 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 523.692201][ T42] audit: type=1400 audit(1782771376.421:962): avc: denied { lock } for pid=13041 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 523.704558][ T42] audit: type=1400 audit(1782771376.431:963): avc: denied { read } for pid=13041 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 523.714587][ T42] audit: type=1400 audit(1782771376.441:964): avc: denied { listen } for pid=13042 comm="syz.0.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 523.728657][T13044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1982'. [ 523.779348][T13051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1983'. [ 523.789203][ T5897] usb 6-1: USB disconnect, device number 16 [ 523.845644][T13042] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 523.886178][ T42] audit: type=1400 audit(1782771376.641:965): avc: denied { write } for pid=13052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.988427][T13063] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 523.991267][T13063] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 523.996129][T13063] vhci_hcd vhci_hcd.0: Device attached [ 524.001336][ T42] audit: type=1400 audit(1782771376.761:966): avc: denied { write } for pid=13061 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.056309][T13070] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 524.058944][T13070] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 524.061928][T13070] vhci_hcd vhci_hcd.0: Device attached [ 524.071739][T13072] vhci_hcd: connection closed [ 524.075955][ T5884] vhci_hcd vhci_hcd.0: stop threads [ 524.079652][ T5884] vhci_hcd vhci_hcd.0: release socket [ 524.081596][ T5884] vhci_hcd vhci_hcd.0: disconnect device [ 524.086051][ T42] audit: type=1400 audit(1782771376.851:967): avc: denied { write } for pid=13069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.086370][T13064] vhci_hcd: connection closed [ 524.096983][ T5884] vhci_hcd vhci_hcd.0: stop threads [ 524.100284][ T5884] vhci_hcd vhci_hcd.0: release socket [ 524.101946][ T5884] vhci_hcd vhci_hcd.0: disconnect device [ 524.148755][T13081] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 524.202478][T13084] netlink: 'syz.5.1989': attribute type 1 has an invalid length. [ 524.202569][T13085] netlink: 'syz.5.1989': attribute type 1 has an invalid length. [ 524.220729][T13084] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.233005][T13085] bond3: (slave veth0_to_bond): making interface the new active one [ 524.239181][T13085] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 524.255306][T13084] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 524.374601][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 524.402319][T13097] overlay: Bad value for 'metacopy' [ 524.534059][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 524.537301][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 524.540245][ T9] usb 5-1: config 179 has no interface number 0 [ 524.542427][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 524.546527][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 524.550658][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 524.554235][T13104] block nbd0: server does not support multiple connections per device. [ 524.554403][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 524.558061][T13104] block nbd0: shutting down sockets [ 524.562334][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 524.569145][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 524.572858][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.581898][T13078] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 524.769823][T13127] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2002'. [ 524.835870][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input33 syzkaller syzkaller login: [ 525.175048][ T9] usb 5-1: USB disconnect, device number 26 [ 525.177364][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 525.177397][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 525.318637][T13171] xt_socket: unknown flags 0x58 [ 525.539885][T13179] nbd: must specify an index to disconnect [ 525.771237][T13190] netlink: 'syz.0.2022': attribute type 1 has an invalid length. [ 525.821972][T13190] 8021q: adding VLAN 0 to HW filter on device bond4 [ 525.842076][T13193] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2022'. [ 525.862171][T13188] x_tables: unsorted entry at hook 3 [ 525.966163][T13200] binder: 13199:13200 ioctl 4018620d 0 returned -22 [ 526.154160][T13198] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 526.653648][T13227] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 526.696874][T13229] serio: Serial port ptm0 [ 526.993701][T13250] gfs2: error -5 reading superblock [ 527.092017][T13252] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 527.096862][T13252] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 527.102432][T13252] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 527.115757][T13252] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 527.402660][T13273] geneve5: entered promiscuous mode [ 527.404596][T13273] geneve5: entered allmulticast mode [ 527.406929][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 527.412487][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 527.415953][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 527.578162][T13289] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 527.585908][T13289] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 527.592838][T13285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=13285 comm=syz.0.2049 [ 527.605771][T13291] libceph: resolve '0' (ret=-3): failed [ 527.661345][T13295] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2054'. [ 527.730003][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2055'. [ 527.734129][T13297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2055'. [ 527.826420][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2056'. [ 527.896276][T13307] input: syz1 as /devices/virtual/input/input34 [ 527.911634][T13309] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2057'. [ 527.935421][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 528.025073][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 528.069289][T13321] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 528.114598][T13324] netlink: 'syz.0.2061': attribute type 2 has an invalid length. [ 528.120411][T13321] bond5: entered promiscuous mode [ 528.123729][T13321] bond5: entered allmulticast mode [ 528.128814][T13321] 8021q: adding VLAN 0 to HW filter on device bond5 [ 528.139557][T13325] erspan1: entered allmulticast mode [ 528.146740][T13325] bond5: (slave erspan1): making interface the new active one [ 528.149455][T13325] erspan1: entered promiscuous mode [ 528.156284][T13325] [ 528.157464][T13325] ============================================ [ 528.159696][T13325] WARNING: possible recursive locking detected [ 528.162047][T13325] syzkaller #0 Tainted: G L [ 528.164368][T13325] -------------------------------------------- [ 528.166985][T13325] syz.1.2060/13325 is trying to acquire lock: [ 528.169883][T13325] ffff8880281c6558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc70 [ 528.174339][T13325] [ 528.174339][T13325] but task is already holding lock: [ 528.177338][T13325] ffff88804a945958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc70 [ 528.180890][T13325] [ 528.180890][T13325] other info that might help us debug this: [ 528.183623][T13325] Possible unsafe locking scenario: [ 528.183623][T13325] [ 528.186392][T13325] CPU0 [ 528.187656][T13325] ---- [ 528.188846][T13325] lock(&qdisc_xmit_lock_key#3); [ 528.190630][T13325] lock(&qdisc_xmit_lock_key#3); [ 528.192314][T13325] [ 528.192314][T13325] *** DEADLOCK *** [ 528.192314][T13325] [ 528.194920][T13325] May be due to missing lock nesting notation [ 528.194920][T13325] [ 528.197855][T13325] 10 locks held by syz.1.2060/13325: [ 528.199711][T13325] #0: ffffffff90fd9ae8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 528.203070][T13325] #1: ffffffff9083eac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 528.206046][T13325] #2: ffffffff8e9e6060 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x296/0x4940 [ 528.209444][T13325] #3: ffff888022ccf228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x24e2/0x4940 [ 528.214314][T13325] #4: ffff88804a945958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc70 [ 528.218039][T13325] #5: ffffffff8e9e60c0 (rcu_read_lock){....}-{1:3}, at: ip_output+0xb3/0xc10 [ 528.220953][T13325] #6: ffffffff8e9e60c0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x356/0x2400 [ 528.224237][T13325] #7: ffffffff8e9e60c0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x26/0x2e0 [ 528.227512][T13325] #8: ffffffff8e9e6060 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x296/0x4940 [ 528.231681][T13325] #9: ffff888056b48228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x24e2/0x4940 [ 528.237059][T13325] [ 528.237059][T13325] stack backtrace: [ 528.239615][T13325] CPU: 0 UID: 0 PID: 13325 Comm: syz.1.2060 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.239650][T13325] Tainted: [L]=SOFTLOCKUP [ 528.239658][T13325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 528.239690][T13325] Call Trace: [ 528.239700][T13325] [ 528.239710][T13325] dump_stack_lvl+0x100/0x190 [ 528.239793][T13325] print_deadlock_bug.cold+0xbd/0xca [ 528.239827][T13325] __lock_acquire+0x1256/0x1a40 [ 528.239873][T13325] lock_acquire+0x1b9/0x370 [ 528.239896][T13325] ? sch_direct_xmit+0x3b5/0xc70 [ 528.239925][T13325] _raw_spin_lock+0x2e/0x40 [ 528.239989][T13325] ? sch_direct_xmit+0x3b5/0xc70 [ 528.240012][T13325] sch_direct_xmit+0x3b5/0xc70 [ 528.240036][T13325] ? lock_acquire+0x1b9/0x370 [ 528.240060][T13325] ? __pfx_sch_direct_xmit+0x10/0x10 [ 528.240084][T13325] ? do_raw_spin_lock+0x1c0/0x260 [ 528.240117][T13325] __dev_queue_xmit+0x278a/0x4940 [ 528.240146][T13325] ? __pfx_arpt_do_table+0x10/0x10 [ 528.240171][T13325] ? __pfx___dev_queue_xmit+0x10/0x10 [ 528.240198][T13325] ? lock_acquire+0xc0/0x370 [ 528.240220][T13325] ? find_held_lock+0x2b/0x80 [ 528.240237][T13325] ? nf_hook.constprop.0+0x2f0/0x760 [ 528.240255][T13325] ? nf_hook.constprop.0+0x2f0/0x760 [ 528.240276][T13325] ? nf_hook.constprop.0+0x2fa/0x760 [ 528.240294][T13325] ? __pfx_arp_xmit_finish+0x10/0x10 [ 528.240318][T13325] arp_xmit+0x106/0x2e0 [ 528.240336][T13325] arp_send_dst+0x200/0x280 [ 528.240351][T13325] arp_solicit+0x672/0x1070 [ 528.240370][T13325] ? trace_kmem_cache_alloc+0xdd/0x100 [ 528.240407][T13325] ? __kasan_slab_alloc+0x89/0x90 [ 528.240430][T13325] ? __pfx_arp_solicit+0x10/0x10 [ 528.240449][T13325] ? neigh_probe+0x72/0x110 [ 528.240467][T13325] ? __pfx_arp_solicit+0x10/0x10 [ 528.240485][T13325] neigh_probe+0xce/0x110 [ 528.240503][T13325] __neigh_event_send+0xabe/0x13d0 [ 528.240529][T13325] neigh_resolve_output+0x550/0x8f0 [ 528.240553][T13325] ? __pfx____neigh_create+0x10/0x10 [ 528.240579][T13325] ip_finish_output2+0x851/0x2400 [ 528.240611][T13325] ? __pfx_ip_finish_output2+0x10/0x10 [ 528.240646][T13325] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 528.240676][T13325] ? nf_nat_ipv4_out+0xb2/0x510 [ 528.240700][T13325] ? find_held_lock+0x2b/0x80 [ 528.240720][T13325] __ip_finish_output.part.0+0x444/0x6f0 [ 528.240751][T13325] ip_output+0x39b/0xc10 [ 528.240780][T13325] ? __pfx_ip_output+0x10/0x10 [ 528.240808][T13325] ? __pfx_get_random_u32+0x10/0x10 [ 528.240868][T13325] ? __pfx_ip_finish_output+0x10/0x10 [ 528.240900][T13325] ? __pfx_ip_output+0x10/0x10 [ 528.240931][T13325] ip_local_out+0x193/0x1f0 [ 528.240961][T13325] iptunnel_xmit+0x722/0xd20 [ 528.240985][T13325] ip_tunnel_xmit+0x1b91/0x3210 [ 528.241021][T13325] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 528.241048][T13325] ? mark_held_locks+0x40/0x70 [ 528.241070][T13325] ? kasan_quarantine_put+0xcf/0x240 [ 528.241090][T13325] ? lockdep_hardirqs_on+0x78/0x100 [ 528.241123][T13325] __gre_xmit+0x820/0xb20 [ 528.241151][T13325] ? __pfx___gre_xmit+0x10/0x10 [ 528.241174][T13325] ? __pfx_pskb_expand_head+0x10/0x10 [ 528.241193][T13325] ? kfree_skbmem+0x19f/0x210 [ 528.241216][T13325] ? sk_skb_reason_drop+0x114/0x1b0 [ 528.241238][T13325] erspan_xmit+0x55a/0x1ec0 [ 528.241262][T13325] ? __pfx_packet_rcv+0x10/0x10 [ 528.241304][T13325] ? __pfx_erspan_xmit+0x10/0x10 [ 528.241334][T13325] dev_hard_start_xmit+0x121/0x760 [ 528.241364][T13325] sch_direct_xmit+0x1b2/0xc70 [ 528.241388][T13325] ? lock_acquire+0x1b9/0x370 [ 528.241409][T13325] ? __pfx_sch_direct_xmit+0x10/0x10 [ 528.241430][T13325] ? do_raw_spin_lock+0x1c0/0x260 [ 528.241460][T13325] __dev_queue_xmit+0x278a/0x4940 [ 528.241488][T13325] ? trace_kmem_cache_alloc+0xdd/0x100 [ 528.241511][T13325] ? __pfx___dev_queue_xmit+0x10/0x10 [ 528.241537][T13325] ? kmem_cache_alloc_node_noprof+0x2e6/0x6b0 [ 528.241561][T13325] ? kmalloc_reserve+0xf9/0x350 [ 528.241584][T13325] ? __asan_memset+0x23/0x50 [ 528.241601][T13325] ? __alloc_skb+0x4e9/0x710 [ 528.241626][T13325] ? __netdev_alloc_skb+0x10d/0x960 [ 528.241645][T13325] alb_send_lp_vid+0x31e/0x540 [ 528.241693][T13325] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 528.241720][T13325] alb_send_learning_packets+0xe0/0x2f0 [ 528.241743][T13325] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 528.241768][T13325] ? __pfx_alb_swap_mac_addr+0x10/0x10 [ 528.241795][T13325] alb_fasten_mac_swap+0x47f/0xa90 [ 528.241819][T13325] bond_alb_handle_active_change+0x634/0x10b0 [ 528.241847][T13325] ? __pfx_bond_alb_handle_active_change+0x10/0x10 [ 528.241872][T13325] ? __hw_addr_add_ex+0x4df/0x650 [ 528.241900][T13325] ? dev_mc_sync+0x121/0x180 [ 528.241930][T13325] ? __local_bh_enable_ip+0x9e/0x120 [ 528.241957][T13325] bond_change_active_slave+0x160c/0x2ed0 [ 528.241987][T13325] ? __pfx_bond_change_active_slave+0x10/0x10 [ 528.242017][T13325] bond_select_active_slave+0x3f5/0xca0 [ 528.242045][T13325] ? __pfx_bond_select_active_slave+0x10/0x10 [ 528.242071][T13325] ? find_held_lock+0x2b/0x80 [ 528.242091][T13325] bond_enslave+0x4513/0x5cb0 [ 528.242120][T13325] ? __pfx_bond_enslave+0x10/0x10 [ 528.242145][T13325] ? nlmsg_notify+0xdc/0x290 [ 528.242171][T13325] ? rtmsg_ifinfo+0x70/0x1b0 [ 528.242199][T13325] ? __pfx___dev_change_flags+0x10/0x10 [ 528.242218][T13325] ? __pfx_bond_enslave+0x10/0x10 [ 528.242239][T13325] do_set_master+0x40f/0x730 [ 528.242253][T13325] ? rtnl_configure_link+0x140/0x280 [ 528.242277][T13325] rtnl_newlink+0x15c7/0x2380 [ 528.242299][T13325] ? __pfx_rtnl_newlink+0x10/0x10 [ 528.242316][T13325] ? find_held_lock+0x2b/0x80 [ 528.242331][T13325] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 528.242379][T13325] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 528.242398][T13325] ? avc_has_perm_noaudit+0x145/0x3b0 [ 528.242427][T13325] ? find_held_lock+0x2b/0x80 [ 528.242443][T13325] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 528.242461][T13325] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 528.242481][T13325] ? __pfx_rtnl_newlink+0x10/0x10 [ 528.242501][T13325] rtnetlink_rcv_msg+0x95e/0xe90 [ 528.242521][T13325] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 528.242545][T13325] ? ref_tracker_free+0x37e/0x6c0 [ 528.242585][T13325] netlink_rcv_skb+0x159/0x420 [ 528.242610][T13325] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 528.242634][T13325] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 528.242664][T13325] ? netlink_deliver_tap+0x1ae/0xcc0 [ 528.242690][T13325] netlink_unicast+0x585/0x850 [ 528.242752][T13325] ? __pfx_netlink_unicast+0x10/0x10 [ 528.242782][T13325] netlink_sendmsg+0x8b0/0xda0 [ 528.242809][T13325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.242838][T13325] ____sys_sendmsg+0xa4d/0xbe0 [ 528.242862][T13325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.242887][T13325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 528.242912][T13325] ? kasan_quarantine_put+0x104/0x240 [ 528.242933][T13325] ? find_held_lock+0x2b/0x80 [ 528.242951][T13325] ___sys_sendmsg+0x190/0x1e0 [ 528.242979][T13325] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.242997][T13325] ? __lock_acquire+0x49f/0x1a40 [ 528.243028][T13325] __sys_sendmsg+0x160/0x210 [ 528.243046][T13325] ? __pfx___sys_sendmsg+0x10/0x10 [ 528.243062][T13325] ? kcov_ioctl+0x17a/0x750 [ 528.243089][T13325] do_syscall_64+0x115/0x870 [ 528.243115][T13325] ? clear_bhb_loop+0x40/0x90 [ 528.243134][T13325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.243152][T13325] RIP: 0033:0x7fd55d99ce59 [ 528.243167][T13325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.243184][T13325] RSP: 002b:00007fd55e846028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.243200][T13325] RAX: ffffffffffffffda RBX: 00007fd55dc16090 RCX: 00007fd55d99ce59 [ 528.243212][T13325] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 528.243223][T13325] RBP: 00007fd55da32e6f R08: 0000000000000000 R09: 0000000000000000 [ 528.243233][T13325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.243243][T13325] R13: 00007fd55dc16128 R14: 00007fd55dc16090 R15: 00007ffc955e8778 [ 528.243260][T13325] [ 528.244959][T13328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2062'. [ 528.271685][T13325] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 528.316760][T13331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2060'. [ 528.555016][T13331] bond5 (unregistering): (slave erspan1): Releasing active interface [ 528.557820][T13331] erspan1: left promiscuous mode [ 528.596606][T13331] bond5 (unregistering): Released all slaves