last executing test programs: 1m40.782787343s ago: executing program 2 (id=1469): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0xfec00000, 0x1, 0x401, 0x80000001, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x9c, 0xb6, 0x89, '\x00', 0x80}, {0x7, 0x8, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x8}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc1, 0x7, '\x00', 0x3}, {0x8, 0x2, 0x4b, '\x00', 0x5}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0xa, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x81, 0x4, '\x00', 0xff}]}}) 1m40.682276162s ago: executing program 2 (id=1470): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r1, 0x5, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40048}, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount_setattr(0xffffffffffffffff, 0x0, 0x9900, &(0x7f0000000180)={0x200008, 0x100000, 0x20000}, 0x20) getsockopt$inet6_int(r3, 0x29, 0xd0, 0x0, &(0x7f0000000100)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c87006000500130602008a02"], 0xf) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000080), 0x4) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_buf(r5, 0x1, 0x3d, 0x0, &(0x7f0000000100)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000200)={0x1f, 0x4, 0x4}, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0xfffffffffffffe0c, 0x1) 1m40.681483872s ago: executing program 2 (id=1471): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) (fail_nth: 62) sync() 1m40.473538617s ago: executing program 2 (id=1472): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newnexthop={0x2c, 0x68, 0x1, 0x70bd2d, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x4}, {0x2, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x40004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x78, r3, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4002}, 0x4044014) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000340)="b9680591583a8e8e6bbbc119ae4555653512b1586fe6f2864f7660c2ad803c7552ab12d0c070daeca352d19df8d8c8c81b1f6408a1b74c6fa99cf63a40febcc768774d309cf23e783516051bda2001688d6f1d942c5a3e3a8fe89fdb103598da257e4d240f8fde5be59e21efcebcb2e45cacc9", 0x73}, {&(0x7f0000004ac0)="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", 0x64f}], 0x2}}], 0x1, 0x800) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000080)=0x2000004, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe0, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x77be}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x20000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffff01}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}]}]}, 0xe0}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000000380)) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000240)=0xe0, 0x4) sendmmsg$inet6(r1, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="c3", 0x1}], 0x1}}], 0x1, 0x4c800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x128, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0xfc, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17b40d59f65cf2f1}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x28}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0xac, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x9c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_EXPRESSIONS={0x68, 0xa, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}]}}}]}]}], {0x14}}, 0x150}, 0x1, 0x0, 0x0, 0x850}, 0x44002) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 1m40.351508581s ago: executing program 2 (id=1473): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x4, 0x42) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0xfffffffd, 0xb77, 0x2015, 0x0, 0x3, 0x2, 0x2, 0xa4de36948e08189d}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x400}, 0x6000) 1m40.093954765s ago: executing program 2 (id=1474): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r0, 0xc008644c, &(0x7f0000000000)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup(r1) getsockname$l2tp(r2, 0x0, &(0x7f0000000e40)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[r3, r3, r3], 0x3}) 1m40.044459575s ago: executing program 32 (id=1474): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r0, 0xc008644c, &(0x7f0000000000)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup(r1) getsockname$l2tp(r2, 0x0, &(0x7f0000000e40)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[r3, r3, r3], 0x3}) 4.709749691s ago: executing program 4 (id=2895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000500)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x0) r4 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r4, 0xb) unshare(0x26020480) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r8 = epoll_create1(0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') write$cgroup_subtree(r9, 0x0, 0x4c) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r10, r7, 0x1f, 0x0, r10}, 0x20) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r6, r7, 0x11, 0x0, r6}, 0x11) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) pwrite64(r0, &(0x7f0000000080)="f24de932f794d163b83a2834798f5bc2cdb0dcc68fa4a476d4aa670ddf892a234687b7c6e7f8da92b7763f504ac1e2d60f034b546d90d534df57a2362ffa9a54d32bcfe0623e476d9a579dc1893a84b5ba903a4b1b71", 0x56, 0x2) 4.607843883s ago: executing program 4 (id=2897): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1d, 0xfffffffffffffffe, 0x70bd23, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x20, 0x7e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x101100, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) read$proc_mixer(r2, &(0x7f00000003c0)=""/259, 0x103) 4.50977865s ago: executing program 4 (id=2899): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000103c0)="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", 0x2000, &(0x7f0000014c40)={&(0x7f00000123c0)={0x50, 0xfffffffffffffffe, 0x3, {0x7, 0x2d, 0xb, 0xffffffff82003010, 0x5, 0x2, 0x3, 0x9, 0x0, 0x0, 0x4}}, &(0x7f0000012440)={0x18, 0x0, 0x4, {0x5a}}, &(0x7f0000012480)={0x18, 0x0, 0x7, {0xb9}}, &(0x7f00000124c0)={0x18, 0xfffffffffffffff5, 0x6, {0xbf6}}, &(0x7f0000012500)={0x18, 0xffffffffffffffda, 0x6, {0x2}}, &(0x7f0000012540)={0x28, 0x0, 0xf, {{0x80000000, 0x3, 0x2}}}, &(0x7f0000012580)={0x60, 0x0, 0x1, {{0x7fffffff, 0x60, 0x434e, 0x401, 0x4, 0xfffffe01, 0x6, 0x4}}}, &(0x7f0000012600)={0x18, 0xffffffffffffffda, 0xf, {0x4}}, &(0x7f0000012640)=ANY=[@ANYBLOB="15000000f5ffffff060000001c000007254e2e5900"], &(0x7f0000012680)={0x20, 0x0, 0x7, {0x0, 0x2}}, &(0x7f00000126c0)={0x78, 0x0, 0x2, {0xe339, 0x10000, 0x0, {0x5, 0x3000, 0xfffffffffffffff9, 0x2, 0x2, 0x1, 0x7, 0xffffff00, 0x4, 0xa000, 0x400, r2, r3, 0x9, 0xe}}}, &(0x7f0000012740)={0x90, 0xfffffffffffffff5, 0x4686, {0x6, 0x2, 0x4, 0x1, 0x7, 0x2, {0x5, 0x5, 0xf4, 0x4, 0x10, 0x81, 0x80, 0xdc6, 0x6, 0xa000, 0x3, r2, 0x0, 0x7fffffff, 0x6}}}, &(0x7f0000012800)=ANY=[@ANYBLOB="30000000000000000100000000000000030000000000000034101575736500000000"], &(0x7f0000014880)={0x150, 0x0, 0x9, [{{0x0, 0x1, 0x24, 0x7, 0x7, 0x7fffffff, {0x6, 0x7, 0x3, 0x99, 0x5, 0xf689, 0x9, 0x7, 0x2, 0x6000, 0x401, 0x0, 0x0, 0x9, 0x1000}}, {0x0, 0xf6c, 0x4, 0x3ff, '.(:\\'}}, {{0x1, 0x0, 0x81, 0xeed, 0x3, 0x5, {0x2, 0x9, 0x1000, 0x9, 0x8, 0x4, 0x3, 0x9, 0x80, 0x4000, 0x8, r2, 0x0, 0xfffffff9, 0x2}}, {0x1, 0x101, 0x5, 0x2, 'fuse\x00'}}]}, &(0x7f0000014a00)={0xa0, 0xffffffffffffffda, 0x40bb, {{0x5, 0x0, 0x4, 0x9, 0x10001, 0x2, {0x4, 0x8, 0x39, 0x0, 0xffff, 0x81, 0x0, 0x1ff, 0xffffffdd, 0x82fcef58c9d96162, 0x0, 0x0, 0x0, 0x3, 0xfb}}, {0x0, 0x2}}}, &(0x7f0000014ac0)={0x20, 0x0, 0x10, {0xbb, 0x0, 0xad, 0xd}}, &(0x7f0000014b00)={0x130, 0xffffffffffffffda, 0xa, {0x8, 0x4, 0x0, '\x00', {0x0, 0x4, 0x8001, 0xf501, r2, r3, 0x4000, '\x00', 0x7fff, 0x80000001, 0x9, 0x8, {0x0, 0x3}, {0x4, 0x1}, {0x2, 0x9}, {0x7, 0x959}, 0x5, 0x1, 0x0, 0xcb}}}}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000006d80)={0xe35, 0x5, {r4}, {r2}, 0x3, 0x7f}) 3.592020385s ago: executing program 4 (id=2903): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') connect(r1, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x3, @remote}}, 0x80) r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffff8001, 0x1000007, 0x0, 0x7}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0x70, 0xa8, 0x48}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) openat(0xffffffffffffffff, 0x0, 0x2000, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0xe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000140)) connect$unix(r5, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 3.340421557s ago: executing program 4 (id=2907): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) (async) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000007000000030000000100000f042000000f00000000000000000000000000000400000000005f00612e30"], &(0x7f0000001fc0)=""/4124, 0x3f, 0x101c, 0x1}, 0x28) (async) r1 = socket$inet(0x2, 0x2, 0x400) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffd, @loopback}, 0x10, &(0x7f000000c540)=[{&(0x7f0000000280)='\b\x00', 0x2}, {&(0x7f000000b540)="920ca227df65", 0x6}], 0x2, &(0x7f000000b440)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a"], 0x20}, 0x20000890) 3.209489876s ago: executing program 4 (id=2910): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040de284211000000000001090224"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x242, 0x18e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_usb_connect$midi(0x2, 0x2b, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x10, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x48, 0x7}]}}}}}]}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x0, 0x1, 0x2, 0x5, 0x3, 0x3e, 0xed24, 0xfd, 0x40, 0x2b6, 0xd, 0x9, 0x38, 0x1, 0xc, 0x1, 0x469}, [{0x70000000, 0x0, 0x7, 0x33, 0x100000001, 0x100000000, 0x9, 0x2}], "", ['\x00', '\x00', '\x00']}, 0x378) 2.191118826s ago: executing program 3 (id=2926): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x2, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x9, @private1, 0x5}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f00000006c0)=ANY=[], 0x2a8}}], 0x2, 0xff14) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x3bd98cae, 0xc01) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000600)={0x2, 0x1, @status={[0x8, 0x8, 0x2, 0x0, 0x1, 0x64]}, [0x8d50, 0x2, 0x1000000, 0x6, 0x5, 0x3, 0x3, 0x5, 0x6cb6, 0x1ff, 0x1, 0x5, 0x100, 0x1, 0xdef, 0xc, 0x2, 0xa, 0x3, 0x8, 0x716e, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x4b, 0x3, 0x7, 0x4ac5, 0xfffffffffffffeff, 0x0, 0xc8, 0x5, 0xa, 0xfffffffffffffff8, 0x9, 0x80000000, 0x7b, 0xf0, 0x7, 0x8, 0x101, 0x2, 0xfffffffffffffff8, 0x5, 0x8, 0x40, 0x5963, 0xfff, 0x3, 0x2c, 0x0, 0x0, 0x9, 0x692, 0xf71, 0x7, 0x8, 0x8, 0x100000001, 0x6, 0x671b, 0x3f9, 0x3, 0x2, 0xd7]}) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES32=r0]) 2.052468508s ago: executing program 3 (id=2928): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000080)={0x3, 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000140)="68e77b6fa548aa74666c8afb9081797716cd4b94094e3fd71f479f62c743d5fb3cfa4dfe97c86e41942d7c11264cd8d7425dfae72ea933816aaa5cad9e19485f031985557c0cd118b82e21464dca86e3464bdd1bc1b22d24eb4e570960ec4a5ea9e2490b9f0d45aab44898b21db75c4505e3b076d0f7486e0b741bbc380f6dff7663de3841af17ea0a5bab42de79b3c589a7e57ab5466dad4648943aee092df1244b23f6ab14732422c3c6e8cd12bfd1e4c3e76b38a76a2b04de2c3ee0be16723f21913c8422844c1a5606c893487fd1d42558ed96859556cea5a8ed3c15cd118376", 0xe2}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="509813512064fc729aafb28dd7603cac433fb5c6f65b8b070b900fbee35a4551327c544295f8df4be217c9ee5c623686c5c857dedf4c947051969cd512", 0x3d}, {&(0x7f0000001280)="2335fbd5d813181902abb2ce55c55475e4d7a81ca12f959b8aa4689fc9b9619df5cc6ee1172826ec71bbd4635102e32551a6fbc42e96982bf8c2427dd5d76818986443b53187899a5dfb7c2bad66f6e474d88f4446bc96ba90cc57b145cc419b647c6c601235aba2618ba379", 0x6c}, {&(0x7f0000001300)="1dd82083b7164d308451beebe491defaa994e9fd1e990708143bec7568d07cf03fcedee0a1d7d8654718ffbe81af93b9d0ad6e2782be57b90c18e8e3774790840c4fe1f3e68dd2de2c30b50f066d420783f976f9ca574b95ca097e1f91f6882968f2e37342585c1bf2478c6e98ee489f0d436dc7d3c5ccc48a07eeb8f27a65cd1a75f0bc040e0ec15d071b88116d043c76980a77b80a5d18bb598119b68bc71ef22cc8a7fe15bc2a252b8d6dce2dcf309af0bade4b5017", 0xb7}, {&(0x7f00000013c0)="9f5484af8613161d304b0c95959f70ab0c72ec46494ae22681c5f441feb9178a9a49592ce65e5df5ccc3dabb66645eb4f6a8f165c3770832532d0a3b5c287519fa21e484fb90e89ba862d2f453f3", 0x4e}, {&(0x7f0000001440)="8a63d8067b3b8d925c86203ec1d44218487df968a258d664772ac08b670cc0b29ebbd4ae638e83cb10e212e0103b40bc507ed241a0de42dcc5a144c3092f28c09955b969f1eba9e206bb9c4e56f3b416f433e7e107ef8121c5e86ab6706ed0a0977fc53014d2aac6d374430cddf75d062abcc1a0ec56312072394742ed05472131ae3df173cfe0b086bf7109", 0x8c}], 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001580)={@mcast2, 0x749, 0x2, 0x0, 0x0, 0x2, 0x3}, 0x20) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000015c0)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001600), 0x8000, 0x0) close(r2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000001640)={0x0, @reserved}) r3 = epoll_create1(0x80000) clock_gettime(0x0, &(0x7f0000001740)={0x0, 0x0}) epoll_pwait2(r3, &(0x7f0000001700)=[{}, {}, {}], 0x3, &(0x7f0000001780)={r4, r5+10000000}, &(0x7f00000017c0)={[0x557]}, 0x8) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001800)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000001840)) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000001880)={0x18, 0x1, 0x0, 0x0, 0x0, 0xa}) socket$kcm(0x29, 0x5, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000018c0)=0x2) clock_gettime(0x6, &(0x7f0000001900)) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000001940), &(0x7f0000001980)=0x4) clock_gettime(0x0, &(0x7f0000001a00)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000019c0), 0x0, &(0x7f0000001a40)={r6, r7+60000000}, 0x8) openat$fb1(0xffffffffffffff9c, &(0x7f0000001a80), 0x400200, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000001ac0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001b00), 0x400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000001b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000001b80)={0x48, 0x2, r9}) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000001c00)=0x1e) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000001c40)=0x1) 1.582080889s ago: executing program 1 (id=2935): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffffff, 0xff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x4, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x10000}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000000000000b05000100440016001600"/36], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20044004) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) timerfd_create(0x7, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000054c92734d47ef6b91b13c88f7ce2692c3ee6ff3ce036855d6b6c86a95f1eae78447fa51c3de5dac3466f51e65ed35bfc3f451968f7484d36000000000bc198b9ad8e8fc7c12b4707c8ec2889cc637b", @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a0034000202020202020000080026006c090000"], 0x30}}, 0x0) 1.379932536s ago: executing program 1 (id=2936): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) ioctl$COMEDI_BUFINFO(r3, 0xc02c640e, &(0x7f0000000180)={0x1, 0xfffffff7, 0x6, 0xa748, 0x2, 0x4, 0x8}) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r2, 0x8) 1.321728355s ago: executing program 1 (id=2937): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000100001040000000003cd628b00000000", @ANYRES64=r1, @ANYBLOB="3f000000000000001c0012800900010069706970000000000c000280060011004e220000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x7, 0x600880) (async) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x7, 0x600880) mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x8010, r3, 0x82000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000003c0), &(0x7f00000001c0)=0x80) gettimeofday(&(0x7f0000000000), &(0x7f0000000080)) (async) gettimeofday(&(0x7f0000000000), &(0x7f0000000080)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, r5, 0x40000000) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) (async) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f0000000140)={0x1d, r10, 0x3, {0x1, 0xff, 0x4}}, 0x18) (async) bind$can_j1939(r11, &(0x7f0000000140)={0x1d, r10, 0x3, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r9, &(0x7f0000003dc0)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000000600)="0a6501d3a4f74bd627e7e993e55da8fd2f66421ed1213b599ca5801d079f4b9699a8367b0b9e12f1553495c15307c34659743c6d315373a60171ffb543316d383df1dd837bf8bc2380e04830281e5111a7bdeaaf8f646644c905e9d83473b75c2bf38433feca347e1410f474ec003df72496b98353534a63b8d4d35e3da88d770118cc5e13fb04d03ce930", 0x8b}], 0x1}}], 0x1, 0x48010) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r10, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000009800"/72], 0x48) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000009800"/72], 0x48) getdents64(r7, &(0x7f0000000080)=""/158, 0xd7) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) 1.032586201s ago: executing program 3 (id=2938): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000180)="0000000000000000000000000005", 0x0, 0x7fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 887.033692ms ago: executing program 1 (id=2939): unshare(0x2a020480) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x4040080, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) (async) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000000, 0x32, 0xffffffffffffffff, 0xfb2f000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'wlan0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x1, 0x7, 0x4, 0x106a, 0x53, 0x0, 0x5, [0x61, 0x9]}}) (async) unshare(0x2c000000) (async) r6 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SLAVE(r6, 0x703, 0x68) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', r8, 0x29, 0x8, 0x6, 0x2, 0x1d, @dev={0xfe, 0x80, '\x00', 0xe}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x20, 0x29ba08c5, 0xc48}}) 772.48033ms ago: executing program 1 (id=2941): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000001040000000000000000791210000000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000180)=0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1b, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32f1cc26f7061a74df2cfc06c89fd3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a00", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) writev(r5, &(0x7f0000000b00)=[{&(0x7f0000000340)='$', 0x1}], 0x1) fchown(r2, r3, r4) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0)={r7, r1, 0x4, r1}, 0x10) 638.727031ms ago: executing program 0 (id=2943): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xa71, 0x204000) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10000000000088a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x19, 0x1, 0x0, "14a5593b595ccb9e289f1548f12ec9745f90084a093424cf6dc99d2466980300", 0x38414761}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r0, 0x108000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) (async) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000001340)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)=@multiplanar_mmap={0x4d2, 0x1, 0x4, 0x1000, 0x2, {0x77359400}, {0x1, 0x3, 0x7, 0x2, 0x2, 0x4, "20b46086"}, 0x266, 0x1, {&(0x7f00000002c0)=[{0x9, 0x3, {0x4}, 0x8}, {0x0, 0x3, {0x200}, 0x9}]}, 0x6, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)=@multiplanar_mmap={0x4d2, 0x1, 0x4, 0x1000, 0x2, {0x77359400}, {0x1, 0x3, 0x7, 0x2, 0x2, 0x4, "20b46086"}, 0x266, 0x1, {&(0x7f00000002c0)=[{0x9, 0x3, {0x4}, 0x8}, {0x0, 0x3, {0x200}, 0x9}]}, 0x6, 0x0, r2}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7, 0x6832, 0xffffffffffffffff, 0x1000) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7, 0x6832, 0xffffffffffffffff, 0x1000) socket$kcm(0xa, 0x3, 0x3a) (async) r4 = socket$kcm(0xa, 0x3, 0x3a) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getpgid(0x0) r7 = syz_open_procfs$pagemap(r3, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x77, 0xe, 0x2, 0x2}) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00') sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @broadcast}}, [0x2, 0x4e738bf5, 0xf, 0x6, 0x100000001, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0xffffffffffffff01, 0x9, 0x4, 0x7fff, 0xdf, 0x400]}, &(0x7f0000000200)=0x100) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @broadcast}}, [0x2, 0x4e738bf5, 0xf, 0x6, 0x100000001, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0xffffffffffffff01, 0x9, 0x4, 0x7fff, 0xdf, 0x400]}, &(0x7f0000000200)=0x100) mremap(&(0x7f0000562000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000315000/0x1000)=nil) syz_emit_ethernet(0x26, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000f070a23f0d69080045cb001840680000d2899078ac1e0001ffffffff8f84e8eb6a6c89b82408b8654f54aae9638685"], 0x0) ioctl$FIONCLEX(r8, 0x5450) (async) ioctl$FIONCLEX(r8, 0x5450) 467.537486ms ago: executing program 0 (id=2944): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x7, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x1, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x8000009}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x85a1, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x0, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x3, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x400, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x2000001, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0x9, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1fd}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7fffffff, 0x4}, {0x4, 0x6, 0x0, 0x9, 0xfffefffe, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x10001, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x5, 0x6, 0x8936, 0xdcb, 0x5, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) socket$netlink(0x10, 0x3, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e22, 0x3, 'nq\x00', 0x13, 0x4, 0x79}, 0x2c) r12 = socket$kcm(0xa, 0x2, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r13, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r12, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 282.188227ms ago: executing program 0 (id=2945): socket$inet_udp(0x2, 0x2, 0x0) 281.62ms ago: executing program 0 (id=2946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00198008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockopt$sock_cred(r2, 0x1, 0x45, 0x0, &(0x7f0000000300)) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf250500000008000300f3"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={0x20, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4084) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x369}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x663}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x820) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00198008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) getsockopt$sock_cred(r2, 0x1, 0x45, 0x0, &(0x7f0000000300)) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf250500000008000300f3"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r5) (async) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={0x20, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4084) (async) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x369}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x663}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x820) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 182.080475ms ago: executing program 0 (id=2947): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) (async, rerun: 32) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x10) (async) write$binfmt_elf32(r1, &(0x7f00000004c0)=ANY=[], 0x258) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x14, 0x15, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x4c, r3, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xcd97, 0x88f6, 0x7, 0x1d0, 0x2, 0x3, 0xb]}}]}]}]}]}]}, 0x4c}}, 0x40000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) (async) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82) ioctl$FE_SET_PROPERTY(r9, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000240)=[{0x9, '\x00', @data=0x800, 0x5}]}) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) syz_open_dev$vcsa(&(0x7f00000001c0), 0x6, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000e5ff0000000000000018110000", @ANYRES16=r9, @ANYRES8=r10], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) (async) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @random="0000ea0700", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x2d, 0x48, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x13, 0x9, [@multicast2, @local, @empty, @local]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x4000, {[@timestamp={0x8, 0xa, 0x0, 0x2e1}]}}}}}}}, 0x0) (async) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) 181.65453ms ago: executing program 1 (id=2948): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) 181.489703ms ago: executing program 3 (id=2949): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}, [], {}, {0x20, 0x5}}, 0x24, 0x2) r0 = memfd_secret(0x0) close_range(r0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/14, 0xe) 80.4014ms ago: executing program 0 (id=2950): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x9, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x5f, 0x0, 0x5f, 0x30]}}, &(0x7f0000000300)=""/137, 0x2b, 0x89, 0x1, 0x2, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r0, 0x20, &(0x7f00000006c0)={&(0x7f0000000400)=""/74, 0x4a, 0x0, &(0x7f00000004c0)=""/42, 0x2a}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x2f, 0x6a, 0x6e, 0x0, 0x28, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x900, 0x20, 0x7}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000500)='GPL\x00', 0x0, 0xfffffe0e, 0x0, 0x41100, 0x42, '\x00', r3, @sched_cls, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r4, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000800)=""/1, 0x1}], 0x1}, 0x3}], 0x1, 0x0, 0x0) 80.089931ms ago: executing program 3 (id=2951): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_follow}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="e094af48a9797982fb37b20349339cb82261def1e9289a3e82f2abc190101fa246696e933b6a63b081e839762354810d2f0b299a0ce51f1466d7b33c7b9eadebcad9b83d751d80052fb5708ef710c931c66d6b169b1c62aa3b9cda81cd88b57ce6584eb15e851dd5c0e60584881e55e247ea2abd7ef73ba304946753a5fc681aee2e59a21a9a12b39782c94d8852fc48ac5ba4b4e2cb62441c57ff4a", @ANYRES16=r2, @ANYBLOB="05002abd7000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a003400010101010101000008004a0005ac0f0004000801060066000093000004006700"], 0x40}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000600)={0x0, 0x0, 0x804, 0x2, 0x496}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_follow}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="e094af48a9797982fb37b20349339cb82261def1e9289a3e82f2abc190101fa246696e933b6a63b081e839762354810d2f0b299a0ce51f1466d7b33c7b9eadebcad9b83d751d80052fb5708ef710c931c66d6b169b1c62aa3b9cda81cd88b57ce6584eb15e851dd5c0e60584881e55e247ea2abd7ef73ba304946753a5fc681aee2e59a21a9a12b39782c94d8852fc48ac5ba4b4e2cb62441c57ff4a", @ANYRES16=r2, @ANYBLOB="05002abd7000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a003400010101010101000008004a0005ac0f0004000801060066000093000004006700"], 0x40}}, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000600)={0x0, 0x0, 0x804, 0x2, 0x496}) (async) 0s ago: executing program 3 (id=2952): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000000)={0x30a32c1, 0x1, @qpsk={0x9, 0x7}}) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.1.2197'. [ 247.962112][T12498] geneve2: entered promiscuous mode [ 247.964371][T12498] geneve2: entered allmulticast mode [ 248.081314][ T40] kauditd_printk_skb: 208 callbacks suppressed [ 248.081334][ T40] audit: type=1400 audit(1777627352.452:30874): avc: denied { create } for pid=12499 comm="syz.1.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 248.084078][T12500] netlink: 484 bytes leftover after parsing attributes in process `syz.1.2198'. [ 248.085745][ T40] audit: type=1400 audit(1777627352.452:30875): avc: denied { setopt } for pid=12499 comm="syz.1.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 248.241234][ T40] audit: type=1400 audit(1777627352.612:30876): avc: denied { name_bind } for pid=12508 comm="syz.0.2202" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 248.250145][ T40] audit: type=1400 audit(1777627352.612:30877): avc: denied { node_bind } for pid=12508 comm="syz.0.2202" saddr=fc01::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 248.267587][ T40] audit: type=1400 audit(1777627352.642:30878): avc: denied { unlink } for pid=12508 comm="syz.0.2202" name="#1e" dev="tmpfs" ino=2890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 248.279226][ T40] audit: type=1400 audit(1777627352.642:30879): avc: denied { mount } for pid=12508 comm="syz.0.2202" name="/" dev="overlay" ino=2886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 248.290706][ T40] audit: type=1400 audit(1777627352.642:30880): avc: denied { create } for pid=12504 comm="syz.1.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 248.299370][ T40] audit: type=1400 audit(1777627352.642:30881): avc: denied { setopt } for pid=12504 comm="syz.1.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 248.373425][ T40] audit: type=1400 audit(1777627352.742:30882): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 248.403019][ T40] audit: type=1400 audit(1777627352.772:30883): avc: denied { create } for pid=12511 comm="syz.0.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 248.450405][T12514] usb 2-1: USB disconnect, device number 2 [ 248.674478][ T5746] Bluetooth: hci0: command 0x040f tx timeout [ 249.081526][T12535] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 249.134951][T12537] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2211'. [ 249.147369][T12537] Mount JFS Failure: -5 [ 249.149048][T12537] jfs_mount failed w/return code = -5 [ 249.197075][T12539] xt_hashlimit: size too large, truncated to 1048576 [ 249.674303][ T59] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 249.811283][T12565] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 249.924039][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 250.094052][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 250.096969][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 250.104099][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 250.109252][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 250.114312][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 250.117505][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 250.120906][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 250.127958][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 250.131906][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.136343][ T9] usb 5-1: config 0 descriptor?? [ 250.350871][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 250.354918][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2230'. [ 250.356697][ T9] usb 5-1: USB disconnect, device number 24 [ 250.358008][T12590] netlink: 'syz.3.2230': attribute type 30 has an invalid length. [ 250.361655][ T9] usblp0: removed [ 250.362590][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2230'. [ 250.369056][T12590] tmpfs: Unknown parameter 'grpquotardlimt' [ 250.475575][T12595] veth0: mtu less than device minimum [ 250.509616][T12597] program syz.3.2232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.546771][T12599] nbd: must specify a device to reconfigure [ 250.548810][T12601] fuse: Bad value for 'fd' [ 250.549036][T12599] nbd: must specify a device to reconfigure [ 250.553873][T12599] nbd: must specify a device to reconfigure [ 250.556266][T12599] nbd: must specify a device to reconfigure [ 250.558809][T12599] nbd: must specify a device to reconfigure [ 250.560757][T12599] nbd: must specify a device to reconfigure [ 250.562981][T12599] nbd: must specify a device to reconfigure [ 250.570238][T12599] nbd: must specify a device to reconfigure [ 250.572254][T12599] nbd: must specify a device to reconfigure [ 250.574504][T12599] nbd: must specify a device to reconfigure [ 250.576895][T12599] nbd: must specify a device to reconfigure [ 250.578832][T12599] nbd: must specify a device to reconfigure [ 250.580884][T12599] nbd: must specify a device to reconfigure [ 250.582863][T12599] nbd: must specify a device to reconfigure [ 250.585350][T12599] nbd: must specify a device to reconfigure [ 250.587537][T12599] nbd: must specify a device to reconfigure [ 250.589533][T12599] nbd: must specify a device to reconfigure [ 250.591494][T12599] nbd: must specify a device to reconfigure [ 250.593599][T12599] nbd: must specify a device to reconfigure [ 250.595832][T12599] nbd: must specify a device to reconfigure [ 250.597893][T12599] nbd: must specify a device to reconfigure [ 250.600087][T12599] nbd: must specify a device to reconfigure [ 250.602978][T12599] nbd: must specify a device to reconfigure [ 250.605808][T12599] nbd: must specify a device to reconfigure [ 250.608197][T12599] nbd: must specify a device to reconfigure [ 250.610227][T12599] nbd: must specify a device to reconfigure [ 250.612204][T12599] nbd: must specify a device to reconfigure [ 250.614677][T12599] nbd: must specify a device to reconfigure [ 250.616794][T12599] nbd: must specify a device to reconfigure [ 250.618802][T12599] nbd: must specify a device to reconfigure [ 250.620807][T12599] nbd: must specify a device to reconfigure [ 250.622772][T12599] nbd: must specify a device to reconfigure [ 250.624862][T12599] nbd: must specify a device to reconfigure [ 250.626868][T12599] nbd: must specify a device to reconfigure [ 250.629289][T12599] nbd: must specify a device to reconfigure [ 250.631990][T12599] nbd: must specify a device to reconfigure [ 250.634286][T12599] nbd: must specify a device to reconfigure [ 250.636524][T12599] nbd: must specify a device to reconfigure [ 250.638544][T12599] nbd: must specify a device to reconfigure [ 250.641844][T12599] nbd: must specify a device to reconfigure [ 250.643863][T12599] nbd: must specify a device to reconfigure [ 250.646009][T12599] nbd: must specify a device to reconfigure [ 250.648201][T12599] nbd: must specify a device to reconfigure [ 250.650155][T12599] nbd: must specify a device to reconfigure [ 250.652394][T12599] nbd: must specify a device to reconfigure [ 250.654619][T12599] nbd: must specify a device to reconfigure [ 250.656598][T12599] nbd: must specify a device to reconfigure [ 250.658548][T12599] nbd: must specify a device to reconfigure [ 250.660536][T12599] nbd: must specify a device to reconfigure [ 250.662471][T12599] nbd: must specify a device to reconfigure [ 250.664497][T12599] nbd: must specify a device to reconfigure [ 250.666536][T12599] nbd: must specify a device to reconfigure [ 250.668476][T12599] nbd: must specify a device to reconfigure [ 250.670783][T12599] nbd: must specify a device to reconfigure [ 250.672721][T12599] nbd: must specify a device to reconfigure [ 250.675732][T12599] nbd: must specify a device to reconfigure [ 250.677752][T12599] nbd: must specify a device to reconfigure [ 250.679761][T12599] nbd: must specify a device to reconfigure [ 250.682187][T12599] nbd: must specify a device to reconfigure [ 250.684287][T12599] nbd: must specify a device to reconfigure [ 250.686303][T12599] nbd: must specify a device to reconfigure [ 250.688211][T12599] nbd: must specify a device to reconfigure [ 250.690458][T12599] nbd: must specify a device to reconfigure [ 250.694175][T12599] nbd: must specify a device to reconfigure [ 250.696165][T12599] nbd: must specify a device to reconfigure [ 250.722863][T12607] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 250.725006][T12607] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 250.728382][T12607] vhci_hcd vhci_hcd.0: Device attached [ 250.730638][T12608] vhci_hcd: cannot find the pending unlink 4 [ 250.737217][T12608] vhci_hcd: connection closed [ 250.738341][ T8990] vhci_hcd vhci_hcd.3: stop threads [ 250.741777][ T8990] vhci_hcd vhci_hcd.3: release socket [ 250.743522][ T8990] vhci_hcd vhci_hcd.3: disconnect device [ 250.794056][ T5810] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 250.944131][ T5810] usb 5-1: Using ep0 maxpacket: 32 [ 250.949240][ T5810] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 250.956598][ T5810] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 250.960219][ T5810] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 250.964500][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 250.967857][T12627] overlayfs: failed to clone upperpath [ 250.968438][ T5810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 250.974912][ T5810] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 250.980160][ T5810] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 250.983830][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.989513][ T5810] usb 5-1: config 0 descriptor?? [ 251.116325][ T5746] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 251.119772][T12635] MTD: Couldn't look up './bus': -15 [ 251.182813][T12639] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 251.184158][T12640] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 251.198068][ T5810] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 251.248091][T12644] /dev/nullb0: Can't lookup blockdev [ 251.273008][T12647] fuse: fd is not a fuse device [ 251.278695][T12647] fuse: Unknown parameter '00000000000000000000003' [ 251.282207][T12648] xt_hashlimit: size too large, truncated to 1048576 [ 251.399557][ T5810] usb 5-1: USB disconnect, device number 25 [ 251.414869][ T5810] usblp0: removed [ 251.574159][ T29] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 251.725615][ T29] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 251.729758][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 251.734661][ T29] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 251.738630][ T29] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 251.742453][ T29] usb 8-1: Product: syz [ 251.744703][ T29] usb 8-1: Manufacturer: syz [ 251.747097][ T29] usb 8-1: SerialNumber: syz [ 251.751084][ T29] usb 8-1: config 0 descriptor?? [ 251.755683][ T29] usb 8-1: selecting invalid altsetting 0 [ 251.964735][ T29] usb 8-1: USB disconnect, device number 37 [ 252.150100][T12676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12676 comm=syz.4.2263 [ 252.155353][T12676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12676 comm=syz.4.2263 [ 252.159732][T12676] netlink: 'syz.4.2263': attribute type 1 has an invalid length. [ 252.173734][T12676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.190295][T12676] bond3: (slave geneve3): making interface the new active one [ 252.193709][T12676] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 252.196147][T12692] misc userio: Invalid payload size [ 252.200990][T12693] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd0": -EINTR [ 252.235835][T12700] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.241459][T12700] program syz.0.2268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.276361][T12704] __nla_validate_parse: 3 callbacks suppressed [ 252.276373][T12704] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2270'. [ 252.302695][T12707] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2271'. [ 252.437359][T12720] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 252.475370][T12720] input: syz0 as /devices/virtual/input/input16 [ 252.490572][T12724] kAFS: unable to lookup cell '1' [ 252.500555][T12724] 9pnet_virtio: no channels available for device syz [ 252.824848][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 252.904843][T12751] netlink: 200840 bytes leftover after parsing attributes in process `syz.3.2285'. [ 252.913096][T12749] 9p: Could not find request transport: virtio [ 259.561587][T13072] dump_stack_lvl+0x100/0x190 [ 259.561655][T13072] should_fail_ex.cold+0x5/0xa [ 259.561707][T13072] _copy_to_user+0x32/0xd0 [ 259.561730][T13072] simple_read_from_buffer+0xcb/0x170 [ 259.561784][T13072] proc_fail_nth_read+0x1af/0x230 [ 259.561833][T13072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.561846][T13072] ? rw_verify_area+0xce/0x6d0 [ 259.561897][T13072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.561909][T13072] vfs_read+0x1e4/0xb30 [ 259.561922][T13072] ? __pfx_vfs_read+0x10/0x10 [ 259.561933][T13072] ? __fget_files+0x215/0x3d0 [ 259.561950][T13072] ? __fget_files+0x21f/0x3d0 [ 259.561967][T13072] ksys_read+0x12a/0x250 [ 259.561978][T13072] ? __pfx_ksys_read+0x10/0x10 [ 259.561990][T13072] ? rcu_is_watching+0x12/0xc0 [ 259.562043][T13072] do_syscall_64+0x10b/0xf80 [ 259.562063][T13072] ? clear_bhb_loop+0x40/0x90 [ 259.562077][T13072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.562088][T13072] RIP: 0033:0x7f60ced5d60e [ 259.562098][T13072] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 259.562108][T13072] RSP: 002b:00007f60cfb90fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.562120][T13072] RAX: ffffffffffffffda RBX: 00007f60cfb916c0 RCX: 00007f60ced5d60e [ 259.562128][T13072] RDX: 000000000000000f RSI: 00007f60cfb910a0 RDI: 0000000000000004 [ 259.562136][T13072] RBP: 00007f60cfb91090 R08: 0000000000000000 R09: 0000000000000000 [ 259.562143][T13072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.562149][T13072] R13: 00007f60cf016128 R14: 00007f60cf016090 R15: 00007ffc6b8ce088 [ 259.562164][T13072] [ 259.570131][ T58] usb 8-1: USB disconnect, device number 40 [ 259.595629][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.647735][T13078] overlayfs: missing 'lowerdir' [ 259.651670][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.657448][T13078] overlayfs: missing 'lowerdir' [ 259.660333][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.664217][T13078] overlayfs: missing 'lowerdir' [ 259.666785][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.670575][T13078] overlayfs: missing 'lowerdir' [ 259.673329][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.678699][T13078] overlayfs: missing 'lowerdir' [ 259.681585][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.685834][T13078] overlayfs: missing 'lowerdir' [ 259.690022][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.697714][T13078] overlayfs: missing 'lowerdir' [ 259.699841][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.703495][T13078] overlayfs: missing 'lowerdir' [ 259.708358][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.712162][T13078] overlayfs: missing 'lowerdir' [ 259.719150][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.725526][T13084] gtp1: entered allmulticast mode [ 259.734367][T13078] overlayfs: missing 'lowerdir' [ 259.735111][T13084] team0: Device gtp1 is of different type [ 259.739123][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.742692][T13078] overlayfs: missing 'lowerdir' [ 259.748148][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.751627][T13078] overlayfs: missing 'lowerdir' [ 259.754954][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2397'. [ 259.755380][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.758732][T13087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2397'. [ 259.761630][T13078] overlayfs: missing 'lowerdir' [ 259.766484][T13088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2396'. [ 259.772774][T13088] openvswitch: netlink: Missing key (keys=40, expected=80) [ 259.773183][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.779285][T13078] overlayfs: missing 'lowerdir' [ 259.781458][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.784817][T13078] overlayfs: missing 'lowerdir' [ 259.787101][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.789899][T13078] overlayfs: missing 'lowerdir' [ 259.792435][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.801023][T13078] overlayfs: missing 'lowerdir' [ 259.806566][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.810358][T13078] overlayfs: missing 'lowerdir' [ 259.818459][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.822423][T13078] overlayfs: missing 'lowerdir' [ 259.833937][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.837172][T13078] overlayfs: missing 'lowerdir' [ 259.839584][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.842408][T13078] overlayfs: missing 'lowerdir' [ 259.849968][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.853198][T13078] overlayfs: missing 'lowerdir' [ 259.855691][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.859476][T13078] overlayfs: missing 'lowerdir' [ 259.862256][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.869777][T13078] overlayfs: missing 'lowerdir' [ 259.874328][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.878292][T13078] overlayfs: missing 'lowerdir' [ 259.885918][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.888771][T13078] overlayfs: missing 'lowerdir' [ 259.897895][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.903518][T13078] overlayfs: missing 'lowerdir' [ 259.914131][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.924406][T13078] overlayfs: missing 'lowerdir' [ 259.929107][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.932543][T13078] overlayfs: missing 'lowerdir' [ 259.937302][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.940225][T13078] overlayfs: missing 'lowerdir' [ 259.944523][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.947855][T13078] overlayfs: missing 'lowerdir' [ 259.951470][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.955765][T13078] overlayfs: missing 'lowerdir' [ 259.959165][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.959599][T13099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13099 comm=syz.1.2400 [ 259.962631][T13078] overlayfs: missing 'lowerdir' [ 259.968135][T13099] netlink: 'syz.1.2400': attribute type 1 has an invalid length. [ 259.971874][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.975726][T13078] overlayfs: missing 'lowerdir' [ 259.978157][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.982210][T13078] overlayfs: missing 'lowerdir' [ 259.986442][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.990357][T13078] overlayfs: missing 'lowerdir' [ 259.993514][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 259.998425][T13078] overlayfs: missing 'lowerdir' [ 260.001412][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.005761][T13078] overlayfs: missing 'lowerdir' [ 260.008606][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.012469][T13078] overlayfs: missing 'lowerdir' [ 260.018070][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.022666][T13078] overlayfs: missing 'lowerdir' [ 260.024146][T13100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13100 comm=syz.1.2400 [ 260.029409][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.033242][T13078] overlayfs: missing 'lowerdir' [ 260.035786][T13100] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 260.043539][T13100] VFS: Can't find a romfs filesystem on dev nullb0. [ 260.043539][T13100] [ 260.044649][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.050946][T13078] overlayfs: missing 'lowerdir' [ 260.055642][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.059798][T13078] overlayfs: missing 'lowerdir' [ 260.062843][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.067432][T13078] overlayfs: missing 'lowerdir' [ 260.070371][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.075445][T13078] overlayfs: missing 'lowerdir' [ 260.080821][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.085727][T13078] overlayfs: missing 'lowerdir' [ 260.088715][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.099861][T13078] overlayfs: missing 'lowerdir' [ 260.105978][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.114412][T13078] overlayfs: missing 'lowerdir' [ 260.121137][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.125936][T13078] overlayfs: missing 'lowerdir' [ 260.133101][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.138016][T13078] overlayfs: missing 'lowerdir' [ 260.141322][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.145661][T13078] overlayfs: missing 'lowerdir' [ 260.148606][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.153951][T13078] overlayfs: missing 'lowerdir' [ 260.159912][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.165071][T13078] overlayfs: missing 'lowerdir' [ 260.171546][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.176070][T13078] overlayfs: missing 'lowerdir' [ 260.180424][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.186002][T13078] overlayfs: missing 'lowerdir' [ 260.189891][T13078] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.194988][T13078] overlayfs: missing 'lowerdir' [ 260.329276][T13121] netlink: 'syz.1.2403': attribute type 2 has an invalid length. [ 260.383406][T13122] /dev/sg0: Can't lookup blockdev [ 260.393260][T13127] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2409'. [ 260.495556][T13134] xt_hashlimit: size too large, truncated to 1048576 [ 260.665640][T13152] 8021q: VLANs not supported on wg0 [ 260.687053][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.690265][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.929097][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2424'. [ 260.932069][T13168] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 260.977161][T13176] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 261.854526][ T58] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 261.881142][T13253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13253 comm=syz.4.2450 [ 262.005689][ T58] usb 8-1: Using ep0 maxpacket: 8 [ 262.008947][ T58] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 262.011582][ T58] usb 8-1: config 0 has no interface number 0 [ 262.013584][ T58] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 262.017595][ T58] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 262.021640][ T58] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 262.025752][ T58] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 262.029995][ T58] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 262.032831][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.038468][ T58] usb 8-1: config 0 descriptor?? [ 262.043089][ T58] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 262.247241][ T9] usb 8-1: USB disconnect, device number 41 [ 262.257695][ T9] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 262.722158][T13281] CIFS: bad ip= option (.RHe'ˠ/1C~1WexEAeSb{~R) [ 263.057101][T13296] 9p: Could not find request transport: rdmaoort=0x0000000000004e22 [ 263.127444][T13300] tipc: Enabled bearer , priority 0 [ 263.131778][T13300] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 263.142790][T13300] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 263.172866][ T40] kauditd_printk_skb: 176 callbacks suppressed [ 263.172885][ T40] audit: type=1400 audit(1777627367.542:31422): avc: denied { create } for pid=13302 comm="syz.4.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 263.175921][T13303] netlink: 'syz.4.2466': attribute type 1 has an invalid length. [ 263.186838][T13303] netlink: 'syz.4.2466': attribute type 1 has an invalid length. [ 263.189634][T13303] __nla_validate_parse: 1 callbacks suppressed [ 263.189645][T13303] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.2466'. [ 263.193801][ T40] audit: type=1400 audit(1777627367.552:31423): avc: denied { getopt } for pid=13302 comm="syz.4.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 263.218632][ T40] audit: type=1400 audit(1777627367.592:31424): avc: denied { read write } for pid=13304 comm="syz.3.2467" name="vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 263.230164][ T40] audit: type=1400 audit(1777627367.592:31425): avc: denied { open } for pid=13304 comm="syz.3.2467" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 263.242345][ T40] audit: type=1400 audit(1777627367.602:31426): avc: denied { ioctl } for pid=13304 comm="syz.3.2467" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 263.275426][ T40] audit: type=1400 audit(1777627367.652:31427): avc: denied { write } for pid=13307 comm="syz.3.2468" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 263.284744][ T40] audit: type=1400 audit(1777627367.652:31428): avc: denied { open } for pid=13307 comm="syz.3.2468" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 263.307721][ T40] audit: type=1400 audit(1777627367.682:31429): avc: denied { mounton } for pid=13309 comm="syz.3.2469" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 263.353735][ T40] audit: type=1400 audit(1777627367.722:31430): avc: denied { create } for pid=13311 comm="syz.4.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 263.362929][ T40] audit: type=1400 audit(1777627367.732:31431): avc: denied { mounton } for pid=13311 comm="syz.4.2470" path="/429/file0" dev="tmpfs" ino=2299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 263.428423][T13310] /dev/sr0: Can't open blockdev [ 263.677187][T13336] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2475'. [ 263.709544][ C0] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 263.714045][ C0] sr 2:0:0:0: [sr0] tag#7 CDB: Test Unit Ready [ 263.848570][T13345] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2478'. [ 263.881357][T13352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2481'. [ 263.906303][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2482'. [ 263.907054][T13355] netlink: 'syz.0.2478': attribute type 10 has an invalid length. [ 263.913623][T13355] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2478'. [ 263.929614][T13354] (syz.1.2482,13354,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 264.036600][T13367] netlink: 'syz.4.2487': attribute type 1 has an invalid length. [ 264.080984][T13362] bond2 (unregistering): Released all slaves [ 264.126588][T13367] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.195580][T13373] bond4: (slave veth7): Enslaving as an active interface with a down link [ 264.203307][T13379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=13379 comm=syz.1.2490 [ 264.214840][T13373] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2487'. [ 264.218552][T13379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=13379 comm=syz.1.2490 [ 264.219942][ T58] tipc: Node number set to 2695090244 [ 264.237671][T13379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=13379 comm=syz.1.2490 [ 264.247404][T13379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=13379 comm=syz.1.2490 [ 264.253346][T13379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=13379 comm=syz.1.2490 [ 264.264343][T13384] netlink: 'syz.1.2490': attribute type 3 has an invalid length. [ 264.266440][T13379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=13379 comm=syz.1.2490 [ 264.271697][T13384] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2490'. [ 264.369619][T13396] netlink: 'syz.3.2496': attribute type 1 has an invalid length. [ 264.405574][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2499'. [ 264.418261][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2499'. [ 264.532849][T13422] dvmrp8: entered allmulticast mode [ 264.539478][T13422] overlayfs: failed to clone upperpath [ 264.593041][ T10] hid-generic 0005:000B:0009.0006: unknown main item tag 0x0 [ 264.600910][ T10] hid-generic 0005:000B:0009.0006: unknown main item tag 0x0 [ 264.604205][ T10] hid-generic 0005:000B:0009.0006: unknown main item tag 0x0 [ 264.606751][ T10] hid-generic 0005:000B:0009.0006: unknown main item tag 0x0 [ 264.609124][ T10] hid-generic 0005:000B:0009.0006: unknown main item tag 0x0 [ 264.611448][ T10] hid-generic 0005:000B:0009.0006: unknown main item tag 0x0 [ 264.614216][ T10] hid-generic 0005:000B:0009.0006: unknown main item tag 0x0 [ 264.616889][ T10] hid-generic 0005:000B:0009.0006: unknown main item tag 0x0 [ 264.619360][ T10] hid-generic 0005:000B:0009.0006: unknown main item tag 0x0 [ 264.621763][ T10] hid-generic 0005:000B:0009.0006: unknown main item tag 0x0 [ 264.654142][ T5824] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 264.654349][ T10] hid-generic 0005:000B:0009.0006: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on syz1 [ 264.668279][T13430] openvswitch: netlink: Invalid VLAN frame [ 264.819955][ T5824] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.824523][ T5824] usb 6-1: config 0 has no interfaces? [ 264.826962][ T5824] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 264.830684][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.838233][ T5824] usb 6-1: config 0 descriptor?? [ 264.864172][T13438] netlink: 'syz.0.2509': attribute type 9 has an invalid length. [ 264.868938][ T5746] Bluetooth: hci1: unexpected event for opcode 0x100c [ 265.154266][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 265.284100][ T10] usb 5-1: device descriptor read/64, error -71 [ 265.399142][T13445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.403266][T13445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.524078][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 265.579960][T13452] 9p: Unknown Cache mode or invalid value fscacheo&M]?Y [ 265.654077][ T10] usb 5-1: device descriptor read/64, error -71 [ 265.770292][T13485] binder: 13484:13485 ioctl c02c564a 200000000000 returned -22 [ 265.776563][ T10] usb usb5-port1: attempt power cycle [ 265.784129][T13485] NILFS (nullb0): couldn't find nilfs on the device [ 266.064125][ T24] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 266.114159][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 266.134602][ T10] usb 5-1: device descriptor read/8, error -71 [ 266.234106][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 266.237219][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 266.240979][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 266.244812][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 266.249963][ T24] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 266.253021][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.255758][ T24] usb 8-1: Product: syz [ 266.257189][ T24] usb 8-1: Manufacturer: syz [ 266.258813][ T24] usb 8-1: SerialNumber: syz [ 266.262035][ T24] usb 8-1: config 0 descriptor?? [ 266.267071][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input18 [ 266.374168][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 266.396443][ T10] usb 5-1: device descriptor read/8, error -71 [ 266.506753][ T10] usb usb5-port1: unable to enumerate USB device [ 266.647106][ T5810] usb 8-1: USB disconnect, device number 42 [ 266.647308][ C1] xpad 8-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 267.293421][T13538] netlink: 'syz.4.2535': attribute type 7 has an invalid length. [ 267.412230][ T10] usb 6-1: USB disconnect, device number 38 [ 267.819028][T13566] gre0: Master is either lo or non-ether device [ 268.334348][ T29] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 268.495517][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.499801][ T29] usb 5-1: config 0 has no interfaces? [ 268.502315][ T29] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 268.506393][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.511113][ T29] usb 5-1: config 0 descriptor?? [ 268.570201][ T40] kauditd_printk_skb: 204 callbacks suppressed [ 268.570213][ T40] audit: type=1400 audit(1777627628.941:31636): avc: denied { mac_admin } for pid=13577 comm="syz.1.2549" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.584211][T13578] SELinux: Context system_u:object_r:hald_var_lib_t:s0 is not valid (left unmapped). [ 268.588162][ T40] audit: type=1400 audit(1777627628.961:31637): avc: denied { relabelto } for pid=13577 comm="syz.1.2549" name="file0" dev="tmpfs" ino=2994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 268.604193][ T40] audit: type=1400 audit(1777627628.961:31638): avc: denied { associate } for pid=13577 comm="syz.1.2549" name="file0" dev="tmpfs" ino=2994 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_var_lib_t:s0" [ 268.615017][ T40] audit: type=1400 audit(1777627628.971:31639): avc: denied { create } for pid=13577 comm="syz.1.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 268.626705][ T40] audit: type=1400 audit(1777627628.971:31640): avc: denied { write } for pid=13577 comm="syz.1.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 268.635150][ T40] audit: type=1400 audit(1777627628.981:31641): avc: denied { rmdir } for pid=5739 comm="syz-executor" name="file0" dev="tmpfs" ino=2994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 268.672434][ T40] audit: type=1400 audit(1777627629.041:31642): avc: denied { read write } for pid=13580 comm="syz.1.2550" name="video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 268.685690][ T40] audit: type=1400 audit(1777627629.041:31643): avc: denied { open } for pid=13580 comm="syz.1.2550" path="/dev/video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 268.690023][T13583] gfs2: not a GFS2 filesystem [ 268.692452][ T40] audit: type=1400 audit(1777627629.051:31644): avc: denied { ioctl } for pid=13580 comm="syz.1.2550" path="/dev/video1" dev="devtmpfs" ino=956 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 268.701652][ T40] audit: type=1400 audit(1777627629.061:31645): avc: denied { read } for pid=13582 comm="syz.3.2548" dev="nsfs" ino=4026532883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 268.771770][T13590] __nla_validate_parse: 8 callbacks suppressed [ 268.771783][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2552'. [ 268.784023][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2552'. [ 268.801335][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2552'. [ 268.804213][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2552'. [ 268.816854][T13581] netlink: 'syz.1.2550': attribute type 10 has an invalid length. [ 268.886687][T13601] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.962409][T13606] netlink: 'syz.4.2555': attribute type 21 has an invalid length. [ 268.974072][T13606] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2555'. [ 268.979594][T13606] netlink: 'syz.4.2555': attribute type 4 has an invalid length. [ 268.983330][T13606] netlink: 'syz.4.2555': attribute type 5 has an invalid length. [ 268.987990][T13606] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2555'. [ 269.078524][T13623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.082770][T13623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.088750][T13615] cgroup: Need name or subsystem set [ 269.095982][T13615] syz.3.2559: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 269.104319][T13615] CPU: 2 UID: 0 PID: 13615 Comm: syz.3.2559 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.104369][T13615] Tainted: [L]=SOFTLOCKUP [ 269.104377][T13615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.104391][T13615] Call Trace: [ 269.104492][T13615] [ 269.104500][T13615] dump_stack_lvl+0x100/0x190 [ 269.104634][T13615] warn_alloc.cold+0x95/0x1c1 [ 269.104701][T13615] ? __pfx_warn_alloc+0x10/0x10 [ 269.104797][T13615] ? stack_depot_save_flags+0x27/0x9d0 [ 269.104855][T13615] ? __lock_acquire+0x4a5/0x2630 [ 269.104924][T13615] ? xskq_create+0xfb/0x1d0 [ 269.104969][T13615] __vmalloc_node_range_noprof+0x136c/0x1630 [ 269.105006][T13615] ? xskq_create+0xfb/0x1d0 [ 269.105042][T13615] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 269.105076][T13615] ? xskq_create+0xfb/0x1d0 [ 269.105099][T13615] vmalloc_user_noprof+0x9e/0xe0 [ 269.105121][T13615] ? xskq_create+0xfb/0x1d0 [ 269.105149][T13615] xskq_create+0xfb/0x1d0 [ 269.105180][T13615] xsk_setsockopt+0x743/0xab0 [ 269.105210][T13615] ? __pfx_xsk_setsockopt+0x10/0x10 [ 269.105237][T13615] ? find_held_lock+0x2b/0x80 [ 269.105257][T13615] ? __fget_files+0x215/0x3d0 [ 269.105326][T13615] ? selinux_socket_setsockopt+0x6a/0x80 [ 269.105354][T13615] ? __pfx_xsk_setsockopt+0x10/0x10 [ 269.105382][T13615] do_sock_setsockopt+0xf3/0x1d0 [ 269.105405][T13615] __sys_setsockopt+0x195/0x220 [ 269.105434][T13615] __x64_sys_setsockopt+0xbd/0x160 [ 269.105458][T13615] ? do_syscall_64+0x90/0xf80 [ 269.105479][T13615] ? lockdep_hardirqs_on+0x78/0x100 [ 269.105499][T13615] do_syscall_64+0x10b/0xf80 [ 269.105518][T13615] ? clear_bhb_loop+0x40/0x90 [ 269.105541][T13615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.105561][T13615] RIP: 0033:0x7f60ced9cdd9 [ 269.105588][T13615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.105610][T13615] RSP: 002b:00007f60cfbb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 269.105632][T13615] RAX: ffffffffffffffda RBX: 00007f60cf015fa0 RCX: 00007f60ced9cdd9 [ 269.105646][T13615] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 269.105658][T13615] RBP: 00007f60cee32d69 R08: 0000000000000004 R09: 0000000000000000 [ 269.105671][T13615] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.105682][T13615] R13: 00007f60cf016038 R14: 00007f60cf015fa0 R15: 00007ffc6b8ce088 [ 269.105709][T13615] [ 269.105913][T13615] Mem-Info: [ 269.215527][T13615] active_anon:22278 inactive_anon:33025 isolated_anon:8 [ 269.215527][T13615] active_file:7379 inactive_file:16566 isolated_file:3 [ 269.215527][T13615] unevictable:1799 dirty:126 writeback:0 [ 269.215527][T13615] slab_reclaimable:14264 slab_unreclaimable:74850 [ 269.215527][T13615] mapped:25510 shmem:47731 pagetables:3734 [ 269.215527][T13615] sec_pagetables:300 bounce:0 [ 269.215527][T13615] kernel_misc_reclaimable:0 [ 269.215527][T13615] free:430446 free_pcp:9308 free_cma:0 [ 269.236031][T13615] Node 0 active_anon:88068kB inactive_anon:132100kB active_file:29516kB inactive_file:66132kB unevictable:3660kB isolated(anon):32kB isolated(file):12kB mapped:102040kB dirty:504kB writeback:0kB shmem:186324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14560kB pagetables:8592kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 269.250519][T13615] Node 1 active_anon:1044kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:6220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 269.264259][T13615] Node 0 DMA free:13652kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:80kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:260kB local_pcp:68kB free_cma:0kB [ 269.277611][T13615] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 269.280255][T13615] Node 0 DMA32 free:79028kB boost:0kB min:27480kB low:34348kB high:41216kB reserved_highatomic:0KB free_highatomic:0KB active_anon:87988kB inactive_anon:132100kB active_file:29516kB inactive_file:66124kB unevictable:3660kB writepending:504kB zspages:0kB present:2080628kB managed:1260920kB mlocked:124kB bounce:0kB free_pcp:13528kB local_pcp:3424kB free_cma:0kB [ 269.294545][T13615] lowmem_reserve[]: 0 0 0 0 0 [ 269.296875][T13615] Node 1 Normal free:1628212kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1044kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:23880kB local_pcp:9260kB free_cma:0kB [ 269.310683][T13615] lowmem_reserve[]: 0 0 0 0 0 [ 269.312783][T13615] Node 0 DMA: 16*4kB (UME) 14*8kB (ME) 31*16kB (UME) 30*32kB (UM) 28*64kB (UME) 10*128kB (UME) 9*256kB (UME) 9*512kB (UM) 2*1024kB (ME) 0*2048kB 0*4096kB = 13664kB [ 269.320070][T13615] Node 0 DMA32: 1065*4kB (UME) 1491*8kB (UME) 906*16kB (UME) 490*32kB (UME) 141*64kB (UME) 48*128kB (UM) 18*256kB (UME) 11*512kB (M) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 77916kB [ 269.327672][T13615] Node 1 Normal: 9*4kB (UM) 119*8kB (UME) 278*16kB (UM) 286*32kB (UME) 297*64kB (UME) 284*128kB (UME) 267*256kB (UME) 258*512kB (UME) 226*1024kB (UME) 10*2048kB (UME) 270*4096kB (UME) = 1628220kB [ 269.337218][T13615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.354292][T13615] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 269.358395][T13615] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.365866][T13615] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 269.370057][T13615] 71675 total pagecache pages [ 269.372236][T13615] 0 pages in swap cache [ 269.376932][T13615] Free swap = 124996kB [ 269.378865][T13615] Total swap = 124996kB [ 269.380772][T13615] 1048443 pages RAM [ 269.382549][T13615] 0 pages HighMem/MovableOnly [ 269.385723][T13615] 283902 pages reserved [ 269.387675][T13615] 0 pages cma reserved [ 269.388621][T13629] netlink: 'syz.4.2563': attribute type 1 has an invalid length. [ 269.398303][T13630] netlink: 'syz.4.2563': attribute type 1 has an invalid length. [ 269.452259][T13636] xt_hashlimit: size too large, truncated to 1048576 [ 269.585432][T13642] netlink: 'syz.4.2566': attribute type 1 has an invalid length. [ 269.659065][T13642] gretap1: entered promiscuous mode [ 269.662143][T13642] batman_adv: batadv0: Adding interface: gretap1 [ 269.669992][T13642] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 269.677681][T13642] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 269.818532][T13663] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 269.855680][T13665] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2573'. [ 269.901976][T13665] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2573'. [ 270.861413][ T29] libceph: mon0 (1)[c::]:6789 socket error on write [ 270.897302][ T29] libceph: mon0 (1)[c::]:6789 socket error on write [ 270.903227][T13714] ceph: No mds server is up or the cluster is laggy [ 271.017132][T13733] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 271.022691][T13733] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 271.027541][T13733] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 271.033114][T13733] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 271.115885][ T10] usb 5-1: USB disconnect, device number 30 [ 271.182033][T13747] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 271.190079][T13745] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 271.275427][T13751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2598'. [ 271.350005][ T5746] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 271.491324][T13782] overlayfs: failed to clone upperpath [ 271.525714][T13787] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2608'. [ 271.625604][T13787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=13787 comm=syz.4.2608 [ 271.700814][T13798] netlink: 'syz.4.2611': attribute type 2 has an invalid length. [ 271.856358][T13802] syz.3.2613 (13802) used greatest stack depth: 18984 bytes left [ 272.145760][T13825] fuse: Unknown parameter 'fd0x0000000000000003' [ 272.585561][T13840] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 273.073494][T13865] hpfs: hpfs_map_sector(): read error [ 273.605800][ T40] kauditd_printk_skb: 235 callbacks suppressed [ 273.605812][ T40] audit: type=1400 audit(1777627633.981:31881): avc: denied { write } for pid=13892 comm="syz.0.2648" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 273.656816][ T40] audit: type=1400 audit(1777627634.031:31882): avc: denied { read write } for pid=13892 comm="syz.0.2648" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 273.669821][ T40] audit: type=1400 audit(1777627634.031:31883): avc: denied { open } for pid=13892 comm="syz.0.2648" path="/dev/dri/renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 273.679904][ T40] audit: type=1400 audit(1777627634.041:31884): avc: denied { ioctl } for pid=13892 comm="syz.0.2648" path="/dev/dri/renderD128" dev="devtmpfs" ino=634 ioctlcmd=0x640c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 273.690171][ T40] audit: type=1400 audit(1777627634.061:31885): avc: denied { audit_write } for pid=13904 comm="syz.4.2650" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 273.753785][ T40] audit: type=1400 audit(1777627634.121:31886): avc: denied { create } for pid=13906 comm="syz.4.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 273.762155][ T40] audit: type=1400 audit(1777627634.131:31887): avc: denied { write } for pid=13906 comm="syz.4.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 273.782984][ T40] audit: type=1400 audit(1777627634.151:31888): avc: denied { watch } for pid=13906 comm="syz.4.2651" path="/501" dev="tmpfs" ino=2672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 273.867238][ T40] audit: type=1400 audit(1777627634.241:31889): avc: denied { execute } for pid=13914 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 273.886416][ T40] audit: type=1400 audit(1777627634.241:31890): avc: denied { execute_no_trans } for pid=13914 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 273.992550][ T5736] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.002060][ T5736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.008242][ T5736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.013719][ T5736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.018414][ T5736] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.095469][T13927] __nla_validate_parse: 6 callbacks suppressed [ 274.095484][T13927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2657'. [ 274.109491][T13925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=13925 comm=syz.4.2657 [ 274.344982][T13939] overlayfs: conflicting options: nfs_export=on,index=off [ 274.632131][T13919] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.635631][T13919] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.638144][T13919] bridge_slave_0: entered allmulticast mode [ 274.640912][T13919] bridge_slave_0: entered promiscuous mode [ 274.644493][T13919] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.646842][T13919] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.650477][T13919] bridge_slave_1: entered allmulticast mode [ 274.655300][T13919] bridge_slave_1: entered promiscuous mode [ 274.671723][T13919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.678722][T13919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.679903][ T5746] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 274.694385][T13919] team0: Port device team_slave_0 added [ 274.695003][ T5746] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 274.697866][T13919] team0: Port device team_slave_1 added [ 274.714568][T13919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.716897][T13919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.726897][T13919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.731631][T13919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.734769][T13919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.743137][T13919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.772424][T13919] hsr_slave_0: entered promiscuous mode [ 274.774863][T13919] hsr_slave_1: entered promiscuous mode [ 274.777385][T13919] debugfs: 'hsr0' already exists in 'hsr' [ 274.779332][T13919] Cannot create hsr debugfs directory [ 274.878490][T13919] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.996064][T13919] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.109566][T13919] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.190137][T13919] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.229125][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2670'. [ 275.232266][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2670'. [ 275.249599][T13991] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 275.249812][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'. [ 275.337693][T14005] debugfs: Bad value for 'mode' [ 275.356010][T14008] gfs2: path_lookup on c::: returned error -2 [ 275.368097][T13919] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 275.372477][T13919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.383802][T14010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.386725][T13919] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 275.392369][T13919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.396081][T13919] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 275.400032][T13919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.402967][T13919] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 275.411962][T13919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 275.436676][T14018] Cannot find map_set index 3 as target [ 275.463235][T13919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.478819][T14026] netlink: 'syz.3.2679': attribute type 21 has an invalid length. [ 275.482107][T14026] netlink: 'syz.3.2679': attribute type 21 has an invalid length. [ 275.485023][T14026] IPv6: NLM_F_CREATE should be specified when creating new route [ 275.485358][T13919] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.497314][ T8988] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.500172][ T8988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.522357][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.525350][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.717299][T14047] 9p: Invalid uid '0x00000000ffffffff' [ 275.837355][T13919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.868035][T13919] veth0_vlan: entered promiscuous mode [ 275.884921][T13919] veth1_vlan: entered promiscuous mode [ 275.932469][T13919] veth0_macvtap: entered promiscuous mode [ 275.952782][T13919] veth1_macvtap: entered promiscuous mode [ 275.991651][T13919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.007607][T13919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.034460][ T5746] Bluetooth: hci4: command tx timeout [ 276.036338][T12462] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.044274][T12462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.060588][T12462] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.073807][T12462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.203709][ T8990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.214986][ T8990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.267828][ T8988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.270395][ T8988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.813814][T14067] trusted_key: encrypted_key: master key parameter 'defaut' is invalid [ 277.033511][T14084] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 277.454128][T14109] netlink: 'syz.0.2701': attribute type 1 has an invalid length. [ 277.466215][T14109] bpf: Bad value for 'gid' [ 277.551887][ T5746] Bluetooth: hci0: adv larger than maximum supported [ 277.551925][ T5746] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 277.556456][ T5746] Bluetooth: hci0: Malformed LE Event: 0x0d [ 277.672334][T14116] can: request_module (can-proto-4) failed. [ 277.681022][T14119] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 277.683544][T14119] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 277.687028][T14119] vhci_hcd vhci_hcd.0: Device attached [ 277.925681][ T24] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 277.928170][ T5824] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 278.098490][ T5824] usb 6-1: config index 0 descriptor too short (expected 247, got 96) [ 278.102668][ T5824] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.107817][ T5824] usb 6-1: config 0 has no interfaces? [ 278.112574][ T5824] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.119904][ T5746] Bluetooth: hci4: command tx timeout [ 278.122834][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.122857][ T5824] usb 6-1: Product: syz [ 278.122871][ T5824] usb 6-1: Manufacturer: syz [ 278.126299][ T5824] usb 6-1: config 0 descriptor?? [ 278.372713][ T5824] usb 6-1: USB disconnect, device number 39 [ 278.376496][T14120] vhci_hcd: connection reset by peer [ 278.384732][ T8988] vhci_hcd vhci_hcd.1: stop threads [ 278.386471][ T8988] vhci_hcd vhci_hcd.1: release socket [ 278.393130][ T8988] vhci_hcd vhci_hcd.1: disconnect device [ 278.686940][ T40] kauditd_printk_skb: 155 callbacks suppressed [ 278.686957][ T40] audit: type=1400 audit(1777627639.061:32046): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 278.706041][ T40] audit: type=1400 audit(1777627639.071:32047): avc: denied { execute } for pid=14145 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 278.723812][ T40] audit: type=1400 audit(1777627639.071:32048): avc: denied { execute_no_trans } for pid=14145 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 278.780149][ T40] audit: type=1400 audit(1777627639.151:32049): avc: denied { create } for pid=14146 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.804270][ T40] audit: type=1400 audit(1777627639.171:32050): avc: denied { ioctl } for pid=14146 comm="syz-executor" path="socket:[57914]" dev="sockfs" ino=57914 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.805260][ T5746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.831150][ T5746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.839116][ T5746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.843170][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.847249][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.860422][ T40] audit: type=1400 audit(1777627639.231:32051): avc: denied { mounton } for pid=14146 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 278.969954][ T40] audit: type=1400 audit(1777627639.341:32052): avc: denied { create } for pid=14150 comm="syz.1.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 278.987926][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 278.998379][T14151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2713'. [ 279.005572][T14151] netlink: 'syz.1.2713': attribute type 20 has an invalid length. [ 279.014422][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 279.017576][T14151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2713'. [ 279.020653][T14151] netlink: 'syz.1.2713': attribute type 20 has an invalid length. [ 279.034874][ T40] audit: type=1400 audit(1777627639.411:32053): avc: denied { read } for pid=14150 comm="syz.1.2713" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.044416][T14151] binder: 14150:14151 ioctl c0306201 0 returned -14 [ 279.052733][ T40] audit: type=1400 audit(1777627639.411:32054): avc: denied { open } for pid=14150 comm="syz.1.2713" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.073843][ T40] audit: type=1400 audit(1777627639.411:32055): avc: denied { ioctl } for pid=14150 comm="syz.1.2713" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.869692][T14146] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.872443][T14146] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.875962][T14146] bridge_slave_0: entered allmulticast mode [ 279.879191][T14146] bridge_slave_0: entered promiscuous mode [ 279.883644][T14146] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.887452][T14146] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.890118][T14146] bridge_slave_1: entered allmulticast mode [ 279.893638][T14146] bridge_slave_1: entered promiscuous mode [ 279.929887][T14146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.936766][T14146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.980087][T14146] team0: Port device team_slave_0 added [ 279.995948][T14146] team0: Port device team_slave_1 added [ 280.026660][T14146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.029477][T14146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.039523][T14146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.048939][T14146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.051872][T14146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.061727][T14146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.119709][T14146] hsr_slave_0: entered promiscuous mode [ 280.123548][T14146] hsr_slave_1: entered promiscuous mode [ 280.127780][T14146] debugfs: 'hsr0' already exists in 'hsr' [ 280.130520][T14146] Cannot create hsr debugfs directory [ 280.194066][ T5746] Bluetooth: hci4: command tx timeout [ 280.376047][T14146] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.545507][T14146] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.561361][ T5746] Bluetooth: hci4: Malformed Event: 0x13 [ 280.676450][T14146] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.839088][T14146] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.914870][ T5746] Bluetooth: hci1: command tx timeout [ 281.134407][T14146] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 281.140022][T14146] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 281.143668][T14146] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 281.150159][T14146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 281.153535][T14146] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 281.169342][T14146] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 281.172805][T14146] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 281.180033][T14146] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.228357][T14146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.236993][T14146] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.246603][T12462] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.248961][T12462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.256870][ T8988] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.259677][ T8988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.596631][T14146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.623844][T14146] veth0_vlan: entered promiscuous mode [ 281.636157][T14146] veth1_vlan: entered promiscuous mode [ 281.656823][T14146] veth0_macvtap: entered promiscuous mode [ 281.661107][T14146] veth1_macvtap: entered promiscuous mode [ 281.670832][T14146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.680484][T14146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.689463][ T1169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.696176][ T1169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.702196][ T1169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.708045][ T1169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.760630][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.765230][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.789039][ T8988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.794005][ T8988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.892126][T14225] x_tables: duplicate underflow at hook 1 [ 281.900035][T14144] netlink: 512 bytes leftover after parsing attributes in process `syz.4.2711'. [ 281.973173][T14227] netlink: 'syz.3.2725': attribute type 30 has an invalid length. [ 281.979686][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'. [ 281.995616][T14227] netlink: 'syz.3.2725': attribute type 30 has an invalid length. [ 281.998805][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'. [ 282.274391][ T5746] Bluetooth: hci4: command tx timeout [ 282.467408][T14241] overlayfs: failed to clone upperpath [ 282.552846][T14243] overlayfs: failed to clone upperpath [ 282.591828][T14245] netlink: 'syz.4.2732': attribute type 21 has an invalid length. [ 282.606074][T14245] tipc: Enabling of bearer rejected, failed to enable media [ 282.708059][T14248] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2732'. [ 282.938487][T14261] kAFS: unable to lookup cell '(,c' [ 282.970919][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 282.978172][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 282.986829][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 282.992535][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 282.996649][ T5746] Bluetooth: hci1: command tx timeout [ 283.007056][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 283.013595][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 283.084313][ T24] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 283.166706][T14272] program syz.1.2738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.170738][T14272] ata1.00: non-matching transfer count (32/0) [ 283.646537][ T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 283.650801][T14284] openvswitch: netlink: Flow key attr not present in new flow. [ 283.824098][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 283.829288][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 283.833090][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.837943][ T10] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 283.841121][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.843802][ T10] usb 6-1: Product: syz [ 283.845542][ T10] usb 6-1: Manufacturer: syz [ 283.847075][ T10] usb 6-1: SerialNumber: syz [ 283.944374][ T40] kauditd_printk_skb: 151 callbacks suppressed [ 283.944387][ T40] audit: type=1400 audit(1777627644.321:32207): avc: denied { unmount } for pid=13919 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 284.052789][ T40] audit: type=1400 audit(1777627644.421:32208): avc: denied { create } for pid=14290 comm="syz.0.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 284.064379][ T40] audit: type=1400 audit(1777627644.431:32209): avc: denied { setopt } for pid=14290 comm="syz.0.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 284.074117][ T40] audit: type=1400 audit(1777627644.431:32210): avc: denied { create } for pid=14290 comm="syz.0.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 284.103894][ T40] audit: type=1326 audit(1777627644.471:32211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14295 comm="syz.0.2745" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3038f9cdd9 code=0x0 [ 284.172892][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 284.175469][ T10] usb 6-1: MIDIStreaming interface descriptor not found [ 284.201141][ T10] usb 6-1: USB disconnect, device number 40 [ 284.216164][ T40] audit: type=1400 audit(1777627644.581:32212): avc: denied { read } for pid=14295 comm="syz.0.2745" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 284.228439][ T40] audit: type=1400 audit(1777627644.591:32213): avc: denied { open } for pid=14295 comm="syz.0.2745" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 284.338469][ T40] audit: type=1400 audit(1777627644.711:32214): avc: denied { read write } for pid=14298 comm="syz.3.2746" name="video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 284.347680][ T40] audit: type=1400 audit(1777627644.711:32215): avc: denied { open } for pid=14298 comm="syz.3.2746" path="/dev/video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 284.358602][ T40] audit: type=1400 audit(1777627644.711:32216): avc: denied { ioctl } for pid=14298 comm="syz.3.2746" path="/dev/video36" dev="devtmpfs" ino=1067 ioctlcmd=0x563a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 284.653203][T14316] macvtap1: entered promiscuous mode [ 284.656525][T14316] macvtap1: entered allmulticast mode [ 284.659465][T14316] batadv_slave_0: entered promiscuous mode [ 284.664728][T14316] batadv_slave_0: entered allmulticast mode [ 284.669552][T14316] team0: Device macvtap1 failed to register rx_handler [ 284.673126][T14316] batadv_slave_0: left allmulticast mode [ 284.679571][T14316] batadv_slave_0: left promiscuous mode [ 284.816029][T14325] netlink: zone id is out of range [ 284.891977][ T5736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 284.901685][ T5736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 284.915360][ T5736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 284.920237][ T5736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 284.925833][ T5736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.001482][T14334] IPVS: ip_vs_add_dest(): server weight less than zero [ 285.004458][ T5837] IPVS: starting estimator thread 0... [ 285.020010][T14334] IPVS: ip_vs_add_dest(): server weight less than zero [ 285.029767][T14337] IPVS: set_ctl: invalid protocol: 11612 224.0.0.2:32789 [ 285.074113][ T5746] Bluetooth: hci1: command tx timeout [ 285.094626][T14335] IPVS: using max 29 ests per chain, 69600 per kthread [ 285.253806][T14348] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14348 comm=syz.4.2761 [ 285.368451][T14360] netlink: 'syz.4.2763': attribute type 10 has an invalid length. [ 285.526124][T14328] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.528500][T14328] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.530864][T14328] bridge_slave_0: entered allmulticast mode [ 285.533482][T14328] bridge_slave_0: entered promiscuous mode [ 285.536751][T14328] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.539143][T14328] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.541581][T14328] bridge_slave_1: entered allmulticast mode [ 285.544249][T14328] bridge_slave_1: entered promiscuous mode [ 285.562447][T14328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.567447][T14328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.606399][T14328] team0: Port device team_slave_0 added [ 285.629545][T14328] team0: Port device team_slave_1 added [ 285.646832][T14328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.649212][T14328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.665067][T14328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.676843][T14328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.680760][T14328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.691759][T14328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.723733][T14328] hsr_slave_0: entered promiscuous mode [ 285.728117][T14328] hsr_slave_1: entered promiscuous mode [ 285.731298][T14328] debugfs: 'hsr0' already exists in 'hsr' [ 285.733764][T14328] Cannot create hsr debugfs directory [ 285.895741][T14403] netlink: 'syz.0.2774': attribute type 33 has an invalid length. [ 285.930023][T14328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.935317][T14328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.045588][T14328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.048980][T14328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.142461][T14328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.147838][T14328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.251312][T14328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.256118][T14328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.323808][T14425] fuse: fd is not a fuse device [ 286.450226][T14328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 286.461177][T14328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.463914][T14328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 286.470570][T14328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.474137][T14328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 286.480154][T14328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 286.483067][T14328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 286.488492][T14328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 286.535109][T14446] team_slave_1: entered promiscuous mode [ 286.539571][T14328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.553826][T14328] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.560957][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.563290][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.574306][T12461] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.577398][T12461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.600888][T14448] netlink: 'syz.3.2787': attribute type 11 has an invalid length. [ 286.603535][T14448] netlink: 'syz.3.2787': attribute type 7 has an invalid length. [ 286.682277][T14462] xfs: Unknown parameter 'rpquota' [ 286.828192][T14460] xt_hashlimit: size too large, truncated to 1048576 [ 286.868793][T14328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.930581][T14328] veth0_vlan: entered promiscuous mode [ 286.944980][T14328] veth1_vlan: entered promiscuous mode [ 286.972321][T14328] veth0_macvtap: entered promiscuous mode [ 286.979779][T14328] veth1_macvtap: entered promiscuous mode [ 287.000766][ T5746] Bluetooth: hci2: command tx timeout [ 287.022228][T14328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.052936][T14328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.072669][T12461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.078755][T12461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.092073][T12461] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.103366][T12461] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.118546][T14476] overlay: Unknown parameter 'pcr' [ 287.154502][ T5746] Bluetooth: hci1: command tx timeout [ 287.177112][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.183134][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.220195][ T5746] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 287.223075][ T8988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.226717][ T8988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.358520][T14445] team_slave_1: left promiscuous mode [ 287.416724][T14498] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 287.429499][T14498] __nla_validate_parse: 72 callbacks suppressed [ 287.429516][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2797'. [ 287.433408][T14502] overlayfs: failed to clone upperpath [ 287.436518][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2797'. [ 287.476525][ T29] IPVS: starting estimator thread 0... [ 287.480036][T14510] IPVS: ip_vs_add_dest(): server weight less than zero [ 287.507636][T14517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2803'. [ 287.584141][T14513] IPVS: using max 26 ests per chain, 62400 per kthread [ 287.598066][T14530] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 287.598405][T14529] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 287.725318][T14538] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 287.739116][T14534] input: syz1 as /devices/virtual/input/input20 [ 287.969214][T14561] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2818'. [ 288.047671][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 288.054591][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 288.058321][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 288.063073][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 288.067558][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 288.071594][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 288.260422][T14584] syz_tun: entered allmulticast mode [ 288.272425][T14584] dvmrp8: entered allmulticast mode [ 288.442286][T14600] netlink: 'syz.0.2829': attribute type 3 has an invalid length. [ 288.668895][T14620] overlayfs: failed to clone upperpath [ 288.671932][T14620] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 288.675209][T14620] overlayfs: missing 'lowerdir' [ 288.850620][T14641] netem: incorrect ge model size [ 288.857508][T14641] netem: change failed [ 289.075120][ T5746] Bluetooth: hci2: command tx timeout [ 289.077541][ T40] kauditd_printk_skb: 226 callbacks suppressed [ 289.077550][ T40] audit: type=1400 audit(1777627649.451:32443): avc: denied { create } for pid=14647 comm="syz.1.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 289.088449][ T40] audit: type=1400 audit(1777627649.451:32444): avc: denied { write } for pid=14647 comm="syz.1.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 289.133819][ T40] audit: type=1400 audit(1777627649.501:32445): avc: denied { create } for pid=14649 comm="syz.1.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 289.143300][T14588] syz_tun: left allmulticast mode [ 289.146071][ T40] audit: type=1326 audit(1777627649.521:32446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.1.2845" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb808b9cdd9 code=0x7ffc0000 [ 289.157689][ T40] audit: type=1326 audit(1777627649.521:32447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.1.2845" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb808b9cdd9 code=0x7ffc0000 [ 289.167830][ T40] audit: type=1326 audit(1777627649.521:32448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.1.2845" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fb808b9cdd9 code=0x7ffc0000 [ 289.170760][T14651] netlink: 'syz.1.2845': attribute type 10 has an invalid length. [ 289.177560][ T40] audit: type=1326 audit(1777627649.521:32449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.1.2845" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb808b9cdd9 code=0x7ffc0000 [ 289.177607][ T40] audit: type=1326 audit(1777627649.521:32450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.1.2845" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb808b9cdd9 code=0x7ffc0000 [ 289.177646][ T40] audit: type=1326 audit(1777627649.531:32451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.1.2845" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb808b9cdd9 code=0x7ffc0000 [ 289.178966][ T40] audit: type=1326 audit(1777627649.551:32452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.1.2845" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb808b9cdd9 code=0x7ffc0000 [ 289.187337][T14651] team0: entered promiscuous mode [ 289.217127][T14651] team_slave_0: entered promiscuous mode [ 289.219491][T14651] team_slave_1: entered promiscuous mode [ 289.221652][T14651] team0: entered allmulticast mode [ 289.223444][T14651] team_slave_0: entered allmulticast mode [ 289.225483][T14651] team_slave_1: entered allmulticast mode [ 289.228025][T14651] bridge0: port 3(team0) entered blocking state [ 289.230234][T14651] bridge0: port 3(team0) entered disabled state [ 289.237464][T14651] bridge0: port 3(team0) entered blocking state [ 289.240258][T14651] bridge0: port 3(team0) entered forwarding state [ 289.405899][T14660] fuse: fd is not a fuse device [ 289.637690][T14671] tipc: Failed to obtain node identity [ 289.640111][T14671] tipc: Enabling of bearer rejected, failed to enable media [ 289.915966][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 289.920292][T14679] netlink: 'syz.4.2854': attribute type 15 has an invalid length. [ 290.086168][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.090566][ T10] usb 6-1: config 0 has no interfaces? [ 290.092888][ T10] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 290.099774][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.105616][ T10] usb 6-1: config 0 descriptor?? [ 290.663452][T14686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.666799][T14686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.930406][T14693] vlan1: entered promiscuous mode [ 290.932383][T14693] vlan1: entered allmulticast mode [ 290.935918][T14693] veth0_vlan: entered allmulticast mode [ 290.966195][T14693] veth3: entered allmulticast mode [ 291.069131][T14705] nftables ruleset with unbound chain [ 291.154185][ T5746] Bluetooth: hci2: command tx timeout [ 291.301740][T14728] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 291.303853][T14728] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 291.307724][T14728] vhci_hcd vhci_hcd.0: Device attached [ 291.311349][T14729] usbip_core: unknown command [ 291.313169][T14729] vhci_hcd: unknown pdu 0 [ 291.316722][T14729] usbip_core: unknown command [ 291.322598][ T8988] vhci_hcd vhci_hcd.3: stop threads [ 291.326110][ T8988] vhci_hcd vhci_hcd.3: release socket [ 291.328561][ T8988] vhci_hcd vhci_hcd.3: disconnect device [ 291.868398][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026574800: rx timeout, send abort [ 291.973282][ T5746] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 291.977334][T14744] overlayfs: missing 'workdir' [ 291.981185][T14744] netlink: 'syz.3.2874': attribute type 1 has an invalid length. [ 292.071396][T14752] netlink: 'syz.3.2877': attribute type 7 has an invalid length. [ 292.075370][T14752] netlink: 'syz.3.2877': attribute type 8 has an invalid length. [ 292.148250][ T5736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 292.157252][ T5736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 292.162539][ T5736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 292.169647][ T5736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 292.172412][ T5736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.376050][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026574800: abort rx timeout. Force session deactivation [ 292.679878][ T5824] usb 6-1: USB disconnect, device number 41 [ 292.683743][T14777] new mount options do not match the existing superblock, will be ignored [ 292.698184][T14777] cgroup: Unknown subsys name '' [ 292.723626][T14785] __nla_validate_parse: 36 callbacks suppressed [ 292.723639][T14785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2881'. [ 292.729652][T14785] netem: incorrect gi model size [ 292.733111][T14785] netem: change failed [ 292.741747][T14756] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.744531][T14756] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.747084][T14756] bridge_slave_0: entered allmulticast mode [ 292.750821][T14756] bridge_slave_0: entered promiscuous mode [ 292.754882][T14756] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.757559][T14756] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.760010][T14756] bridge_slave_1: entered allmulticast mode [ 292.762742][T14756] bridge_slave_1: entered promiscuous mode [ 292.779178][T14756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.788788][T14756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.806744][T14794] netlink: 'syz.0.2884': attribute type 9 has an invalid length. [ 292.823660][T14756] team0: Port device team_slave_0 added [ 292.891452][T14756] team0: Port device team_slave_1 added [ 292.915209][T14756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.917996][T14756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.928387][T14756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.933864][T14756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.936287][T14756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.945411][T14756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.988922][T14756] hsr_slave_0: entered promiscuous mode [ 292.993767][T14756] hsr_slave_1: entered promiscuous mode [ 292.998333][T14756] debugfs: 'hsr0' already exists in 'hsr' [ 293.000281][T14756] Cannot create hsr debugfs directory [ 293.081564][T14756] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 293.085115][T14756] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 293.088523][T14756] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.190678][T14756] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 293.194082][T14756] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 293.199497][T14756] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.234219][ T5746] Bluetooth: hci2: command tx timeout [ 293.254284][ T5824] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 293.340760][T14756] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 293.345392][T14756] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 293.349612][T14756] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.406252][ T5824] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.410738][ T5824] usb 6-1: config 0 has no interfaces? [ 293.413324][ T5824] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 293.417844][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.425709][ T5824] usb 6-1: config 0 descriptor?? [ 293.436876][T14756] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 293.441517][T14756] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 293.446253][T14756] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.652209][T14756] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 293.660127][T14756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 293.663850][T14756] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 293.667848][T14756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 293.670669][T14756] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 293.676948][T14756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 293.679879][T14756] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 293.684127][T14756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 293.744664][T14756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.755738][T14756] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.761283][T12461] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.765160][T12461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.778358][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.781465][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.984387][ T5824] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 293.992431][T14825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.995595][T14825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.084708][T14756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.134130][ T5824] usb 5-1: Using ep0 maxpacket: 16 [ 294.138083][ T5824] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.142505][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.148580][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 294.152779][ T5824] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 294.160329][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.167772][ T5824] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 294.171815][ T5824] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 294.175885][ T5824] usb 5-1: Manufacturer: syz [ 294.180465][ T5824] usb 5-1: config 0 descriptor?? [ 294.194131][ T5746] Bluetooth: hci3: command tx timeout [ 294.261833][T14756] veth0_vlan: entered promiscuous mode [ 294.270671][T14756] veth1_vlan: entered promiscuous mode [ 294.303627][T14756] veth0_macvtap: entered promiscuous mode [ 294.309651][T14756] veth1_macvtap: entered promiscuous mode [ 294.323263][T14756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.339846][T14756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.356829][ T1169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.362639][ T1169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.366658][ T1169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.371243][ T1169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.454701][ T5824] rc_core: IR keymap rc-hauppauge not found [ 294.458881][ T5824] Registered IR keymap rc-empty [ 294.463655][ T5824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.494170][ T5824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.498092][ T8988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.501796][ T8988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.517870][ T5824] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 294.528453][ T5824] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 294.532415][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.535130][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.540119][ T40] kauditd_printk_skb: 144 callbacks suppressed [ 294.540129][ T40] audit: type=1400 audit(294.477:32597): avc: denied { read } for pid=5125 comm="acpid" name="event3" dev="devtmpfs" ino=3138 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.549917][ T40] audit: type=1400 audit(294.477:32598): avc: denied { read open } for pid=5125 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3138 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.557448][ T5824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.560026][ T40] audit: type=1400 audit(294.477:32599): avc: denied { ioctl } for pid=5125 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3138 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.570614][ T40] audit: type=1400 audit(294.487:32600): avc: denied { mounton } for pid=14756 comm="syz-executor" path="/syzkaller.EUySxK/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 294.580438][ T5824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.580585][ T40] audit: type=1400 audit(294.487:32601): avc: denied { mount } for pid=14756 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 294.593390][ T40] audit: type=1400 audit(294.487:32602): avc: denied { mounton } for pid=14756 comm="syz-executor" path="/syzkaller.EUySxK/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 294.606671][ T40] audit: type=1400 audit(294.487:32603): avc: denied { mount } for pid=14756 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 294.607840][ T5824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.616666][ T40] audit: type=1400 audit(294.497:32604): avc: denied { mounton } for pid=14756 comm="syz-executor" path="/syzkaller.EUySxK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 294.628811][ T40] audit: type=1400 audit(294.497:32605): avc: denied { mounton } for pid=14756 comm="syz-executor" path="/syzkaller.EUySxK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=59354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 294.637707][ T40] audit: type=1400 audit(294.507:32606): avc: denied { mounton } for pid=14756 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 294.664186][ T5824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.685140][ T5824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.714246][ T5824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.734129][ T5824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.754396][ T5824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.784753][ T5824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.806169][ T5824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 294.825975][ T5824] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 294.829565][ T5824] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 295.149087][T14858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2895'. [ 295.153735][T14858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2895'. [ 295.153738][ T58] usb 5-1: USB disconnect, device number 31 [ 295.812877][T14878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2900'. [ 296.183511][ T5810] usb 6-1: USB disconnect, device number 42 [ 296.275434][ T5746] Bluetooth: hci3: command tx timeout [ 296.285575][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2902'. [ 296.293550][T14891] geneve2: entered promiscuous mode [ 296.295998][T14891] geneve2: entered allmulticast mode [ 296.338363][T14895] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 296.523045][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2908'. [ 296.605988][T14912] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 296.750721][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 296.758402][T14916] bond0: entered promiscuous mode [ 296.760294][T14916] bond_slave_0: entered promiscuous mode [ 296.761572][T14927] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 296.763001][T14916] bond_slave_1: entered promiscuous mode [ 296.766595][T14927] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 296.771568][T14916] batadv_slave_0: entered promiscuous mode [ 296.772301][T14927] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 296.776431][T14916] batadv_slave_0: left promiscuous mode [ 296.779036][T14927] UDF-fs: Scanning with blocksize 1024 failed [ 296.782647][T14916] bond0: left promiscuous mode [ 296.783417][T14927] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 296.784778][T14916] bond_slave_0: left promiscuous mode [ 296.787484][T14927] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 296.789333][T14916] bond_slave_1: left promiscuous mode [ 296.792282][T14927] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 296.797296][T14927] UDF-fs: Scanning with blocksize 2048 failed [ 296.807258][T14927] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 296.811291][T14927] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 296.815822][T14927] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 296.818385][T14927] UDF-fs: Scanning with blocksize 4096 failed [ 296.828218][T14927] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 296.850035][T14927] FAT-fs (nullb0): bogus number of reserved sectors [ 296.854285][T14927] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 296.924330][ T5837] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 296.960646][T14933] openvswitch: netlink: Key type 1033 is out of range max 32 [ 297.077244][ T5837] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.081715][ T5837] usb 9-1: config 0 has no interfaces? [ 297.083492][ T5837] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 297.090728][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.099825][ T5837] usb 9-1: config 0 descriptor?? [ 297.165974][T14942] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 297.170256][T14942] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 297.173191][T14942] netlink: zone id is out of range [ 297.177308][T14942] netlink: zone id is out of range [ 297.179116][T14942] netlink: set zone limit has 8 unknown bytes [ 297.445422][T14950] tmpfs: User quota block hardlimit too large. [ 297.628652][T14974] program syz.3.2926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.662542][T14975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.669810][T14975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.698554][T14970] netlink: 'syz.0.2925': attribute type 2 has an invalid length. [ 297.882399][T14988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.900786][T14988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.912616][T14988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.927090][T14992] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 297.936821][T14997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.942756][T14997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.958824][T14986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.257276][T15008] xt_hashlimit: size too large, truncated to 1048576 [ 298.319134][T15010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15010 comm=syz.1.2935 [ 298.354757][ T5746] Bluetooth: hci3: command tx timeout [ 298.485895][T15014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2937'. [ 298.520348][T15014] netlink: 'syz.1.2937': attribute type 1 has an invalid length. [ 298.540786][T15014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.555816][T15014] bond1: (slave batadv1): Opening slave failed [ 298.833041][T15022] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2938'. [ 299.110385][T15034] loop5: detected capacity change from 0 to 7 [ 299.362198][T15045] tc action pedit 'at' offset 6 out of bounds [ 299.471237][T15034] Dev loop5: unable to read RDB block 7 [ 299.476069][ C0] blk_print_req_error: 95 callbacks suppressed [ 299.476083][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 299.477510][T15034] loop5: unable to read partition table [ 299.478036][ C0] buffer_io_error: 4 callbacks suppressed [ 299.478044][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 299.489740][T15034] loop5: partition table beyond EOD, truncated [ 299.492544][T15034] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 299.552890][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'. [ 299.559646][T15049] tipc: Started in network mode [ 299.561576][T15049] tipc: Node identity 9, cluster identity 4711 [ 299.564746][T15049] tipc: Node number set to 9 [ 299.624389][ T40] kauditd_printk_skb: 187 callbacks suppressed [ 299.624401][ T40] audit: type=1400 audit(299.567:32794): avc: denied { node_bind } for pid=15053 comm="syz.0.2947" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 299.699507][ T40] audit: type=1400 audit(299.637:32795): avc: denied { name_bind } for pid=15062 comm="syz.0.2950" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 299.711729][ T40] audit: type=1400 audit(299.647:32796): avc: denied { read write } for pid=14146 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.723026][T15065] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 299.723127][T15065] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 299.725775][T15065] overlay: filesystem on ./bus not supported as upperdir [ 299.733888][ T40] audit: type=1400 audit(299.647:32797): avc: denied { open } for pid=14146 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.748997][T15059] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2948'. [ 299.753472][ T40] audit: type=1400 audit(299.647:32798): avc: denied { ioctl } for pid=14146 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.768346][ T40] audit: type=1400 audit(299.657:32799): avc: denied { mounton } for pid=15064 comm="syz.3.2951" path="/37/bus" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 299.790797][ T40] audit: type=1400 audit(299.657:32800): avc: denied { mount } for pid=15064 comm="syz.3.2951" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 299.808880][ T40] audit: type=1400 audit(299.667:32801): avc: denied { create } for pid=15058 comm="syz.1.2948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.823218][ T40] audit: type=1400 audit(299.687:32802): avc: denied { connect } for pid=15058 comm="syz.1.2948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.834389][T15071] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000000: 0000 [#1] SMP KASAN NOPTI [ 299.838388][T15071] KASAN: maybe wild-memory-access in range [0xdead4ead00000000-0xdead4ead00000007] [ 299.839439][ T24] usb 9-1: USB disconnect, device number 2 [ 299.841706][T15071] CPU: 3 UID: 0 PID: 15071 Comm: syz.3.2952 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.841727][T15071] Tainted: [L]=SOFTLOCKUP [ 299.841732][T15071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.841740][T15071] RIP: 0010:dvb_device_open+0x111/0x3b0 [ 299.841779][T15071] Code: 00 0f 85 4c 02 00 00 4c 8b 6d 18 4d 85 ed 0f 84 0e 02 00 00 e8 10 ff 16 fa 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 75 02 00 00 49 8b 7d 00 e8 9c 93 ff f9 31 ff 89 [ 299.841794][T15071] RSP: 0018:ffffc900037478d0 EFLAGS: 00010a06 [ 299.841805][T15071] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900290d9000 [ 299.841814][T15071] RDX: 1bd5a9d5a0000000 RSI: ffffffff87f18c90 RDI: ffff888030883c18 [ 299.841824][T15071] RBP: ffff888030883c00 R08: 0000000000000001 R09: fffffbfff1fdc3c9 [ 299.841832][T15071] R10: ffffffff8fee1e4f R11: 0000000000000000 R12: ffff888022b08380 [ 299.841840][T15071] R13: dead4ead00000000 R14: ffff88802fb91960 R15: ffff888022b083c8 [ 299.841849][T15071] FS: 00007fd1cc6fd6c0(0000) GS:ffff8880d6676000(0000) knlGS:0000000000000000 [ 299.841875][T15071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.841885][T15071] CR2: 00007fd1cba17dac CR3: 0000000021fa9000 CR4: 0000000000352ef0 [ 299.841893][T15071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 299.841911][T15071] DR3: 0000000000000250 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 299.841920][T15071] Call Trace: [ 299.841991][T15071] [ 299.841998][T15071] ? __pfx_dvb_device_open+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 299.842016][T15071] chrdev_open+0x234/0x6a0 [ 299.842078][T15071] ? __pfx_chrdev_open+0x10/0x10 [ 299.842093][T15071] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 299.842157][T15071] do_dentry_open+0x6d8/0x1660 [ 299.842173][T15071] ? __pfx_chrdev_open+0x10/0x10 [ 299.842188][T15071] vfs_open+0x82/0x3f0 [ 299.842203][T15071] path_openat+0x208c/0x31a0 [ 299.842219][T15071] ? __pfx_path_openat+0x10/0x10 [ 299.842235][T15071] do_file_open+0x20e/0x430 [ 299.842249][T15071] ? __pfx_do_file_open+0x10/0x10 [ 299.842267][T15071] ? alloc_fd+0x476/0x790 [ 299.842282][T15071] ? do_getname+0x191/0x390 [ 299.842299][T15071] do_sys_openat2+0x10d/0x1e0 [ 299.842315][T15071] ? __pfx_do_sys_openat2+0x10/0x10 [ 299.842333][T15071] __x64_sys_openat+0x12d/0x210 [ 299.842354][T15071] ? __pfx___x64_sys_openat+0x10/0x10 [ 299.842377][T15071] ? rcu_is_watching+0x12/0xc0 [ 299.842443][T15071] do_syscall_64+0x10b/0xf80 [ 299.842465][T15071] ? clear_bhb_loop+0x40/0x90 [ 299.842481][T15071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.842494][T15071] RIP: 0033:0x7fd1cb75d60e [ 299.842505][T15071] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 299.842517][T15071] RSP: 002b:00007fd1cc6fcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 299.842530][T15071] RAX: ffffffffffffffda RBX: 00007fd1cc6fd6c0 RCX: 00007fd1cb75d60e [ 299.842538][T15071] RDX: 0000000000000002 RSI: 00007fd1cc6fcc00 RDI: ffffffffffffff9c [ 299.842546][T15071] RBP: 00007fd1cc6fcc00 R08: 0000000000000000 R09: 0000000000000000 [ 299.842553][T15071] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 299.842560][T15071] R13: 00007fd1cba16038 R14: 00007fd1cba15fa0 R15: 00007ffda03a67b8 [ 299.842571][T15071] [ 299.842574][T15071] Modules linked in: [ 299.842633][T15071] ---[ end trace 0000000000000000 ]--- [ 299.854795][ T40] audit: type=1400 audit(299.687:32803): avc: denied { ioctl } for pid=15058 comm="syz.1.2948" path="socket:[64915]" dev="sockfs" ino=64915 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 299.860706][T15071] RIP: 0010:dvb_device_open+0x111/0x3b0 [ 299.982177][T15071] Code: 00 0f 85 4c 02 00 00 4c 8b 6d 18 4d 85 ed 0f 84 0e 02 00 00 e8 10 ff 16 fa 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 75 02 00 00 49 8b 7d 00 e8 9c 93 ff f9 31 ff 89 [ 299.994042][T15071] RSP: 0018:ffffc900037478d0 EFLAGS: 00010a06 [ 299.999979][T15071] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900290d9000 [ 300.008672][T15071] RDX: 1bd5a9d5a0000000 RSI: ffffffff87f18c90 RDI: ffff888030883c18 [ 300.013923][T15071] RBP: ffff888030883c00 R08: 0000000000000001 R09: fffffbfff1fdc3c9 [ 300.036459][T15071] R10: ffffffff8fee1e4f R11: 0000000000000000 R12: ffff888022b08380 [ 300.044217][T15071] R13: dead4ead00000000 R14: ffff88802fb91960 R15: ffff888022b083c8 [ 300.050275][T15071] FS: 00007fd1cc6fd6c0(0000) GS:ffff8880d6376000(0000) knlGS:0000000000000000 [ 300.059055][T15071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.064310][T15071] CR2: 00007f6ee21ea4c0 CR3: 0000000021fa9000 CR4: 0000000000352ef0 [ 300.074280][T15071] Kernel panic - not syncing: Fatal exception [ 300.077529][T15071] Kernel Offset: disabled [ 300.079403][T15071] Rebooting in 86400 seconds..