last executing test programs: 2m0.637257556s ago: executing program 0 (id=288): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) write$selinux_user(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f00000001c0)='ta\x00\x00\x00\x00\x00\x00') r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) 1m55.549815401s ago: executing program 0 (id=356): r0 = socket(0xa, 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x100) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_access\x00') (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xc0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES32=r2, @ANYRESDEC=r1]) (async) read$FUSE(r3, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r5, 0x10, 0x400000000000460e, 0x7) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000600080000000100000080000000d635836d8a396409239bbcd7dd450c4dac8667cf83c013210e7e4dccc5ab9e16e2283c13c9a02411531d87ee58d4f12d49ea87d9effb9ee1dd8b40ee1186f2e39544932d1d041b8b1193a1af544c6f737bb57f4332bd69f60520921458141f7dc89b5fbd460cd5939bab7a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x2}, 0x94) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701fefeffff00a20ba8a87c0000040042801400018006000600800a000006000b00800a000004000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="40001002"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) (async) shutdown(r10, 0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 1m55.548806101s ago: executing program 0 (id=358): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip_vti0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @dev}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x808e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x11, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip_vti0\x00'}) (async) bind$packet(r3, &(0x7f0000000180)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @dev}, 0x14) (async) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @dev}, 0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x808e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) (async) 1m55.479397667s ago: executing program 0 (id=360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x189002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffe0}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) madvise(&(0x7f0000040000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000480)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x6c, 0x9, 0x9, 0x81, 0x10001, 0x8, "8b6e27dd211eea1860fc44a803701ae55a0d22ffe86bca72fa18599eb7b69278b4b335a146f8e2d0681673c9e7f11faca207495bee8c0cfeb1c0e56f4b7f509cd8b4bac19bd1114846c64cfecfbb833f447dcda08cef80c0ba4690ee763677dcbd9a7fd90e5f94a507b81dbc"}}, 0x184) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x973, &(0x7f0000000380)=0x0) r7 = eventfd2(0x0, 0x0) io_submit(r6, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}]) io_getevents(r6, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x3, r7}]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x0, 0x2, 0x6, 0x1, 0xfff}, 0x20) timer_create(0x4, &(0x7f0000000280)={0x0, 0x11, 0x0, @thr={&(0x7f0000000740)="7eeef79d5208d19e053f6d3da62c1583a9fa1d1cb79d8a327ece3a5fb0188344bf508761dcd6c204479f828a0fe752468927b2d05f8f164f4ee25af121d41c9252c5626bd47bb53fbc5ead5052e291524b5f2111c2739a1986b1b22c9b1c8fa1f39e6dbe3ade4b13ed9c653e72fedcfe49d300370d9306f1d7367aeedfe4ad9b4d00ff60792ac079810ef3bb5a1b895de0d1ac33a3c0fe0c3fa1000644c71972948385bb3c9aab7aada51c88ffdf9f79603c23e564047cc58aaf364efa7404aa733cc624b03d0b", &(0x7f0000000640)="2a5e0999ae4549f3faeac0b2a7a4e0625d8a92eda8c0b8dd227d96053014add3fc7b6d58361513c0ef032d908d158243f40367717001a9039b75693ad6bbef26b735ae226fbded60ea32c6c771f5fb6a231f31133bfae85ce337f98663ab20f6620fc1432ad61c230655"}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r8 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r8, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7}) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m55.298867819s ago: executing program 0 (id=365): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) preadv(r1, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000000)=""/43, 0x2b}], 0x2, 0x3, 0x29) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x53, 0x0, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="948d7acda0b77e65d205000000000000", 0x0, 0x0, 0x14, 0x0, 0x0}) openat$cgroup_ro(r1, &(0x7f00000019c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="edc08818", 0x4}, {0x0, 0x13}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000001900)=[{&(0x7f0000001800)=""/59, 0x3b}, {&(0x7f0000001840)=""/129, 0x81}], 0x2, 0x5, 0x2) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001940), 0x101000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@getneightbl={0x14, 0x42, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80005) preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000480)=""/59, 0x3b}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/184, 0xb8}, {&(0x7f0000000600)=""/32, 0x20}], 0x8, 0x1, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2a00001}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040000}, 0x4000000) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000001980)) 1m55.129746876s ago: executing program 0 (id=370): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 1m55.058165594s ago: executing program 32 (id=370): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 1m39.967721917s ago: executing program 4 (id=606): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x2, 0x800000}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000740)=@ethtool_drvinfo={0x3, "3f669e76f4a4cb63b8bed51f0d192ac64013bf7ce86e341c3c4023ab0284c750", "7a6419e195178434853a3e9b1a944eaa61a5241fa8ecdbefd94b3b70919cb924", "046fed1109542c0adf35ad7318fc6dc1d4212ea4e435b8f7b89db292aa416b43", "16892c77c7349da2ee9172d62169e4b2f530a4bf4fbd158b6ec757f84da86657", "509dce72017823ba712dae662e4a38488ef40b0cff0ee40e4b1ef8bb86a2b9e3", "44dfa4c216a462b788788b70", 0x1, 0x1, 0xbe5d, 0x8, 0x80000000}}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x28, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x6c, r4, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x21}}}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xb7}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x9c}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x6c}}, 0x0) 1m39.917402617s ago: executing program 4 (id=608): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r0}, 0x50) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r1, &(0x7f0000002140)=""/17, 0x11, 0x0) 1m39.915211944s ago: executing program 4 (id=609): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x4200031, r0, 0xffffd000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) listen(r1, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='ocfs2\x00', 0x200800, 0x0) 1m39.830588707s ago: executing program 4 (id=612): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000001000/0x1000)=nil) dup3(r0, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x14}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m39.739243214s ago: executing program 4 (id=613): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x9) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) close_range(r3, r3, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x334e8b}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m39.419172532s ago: executing program 4 (id=617): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18070000000000000000000000000000711095000000000095"], 0x0, 0x6}, 0x94) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xf5}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000540)=ANY=[@ANYBLOB="030000001000000000000000000000200000000000000000"]) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x20004000) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502ffffff0700000000000200"], 0xfd6c) 1m39.394875004s ago: executing program 33 (id=617): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18070000000000000000000000000000711095000000000095"], 0x0, 0x6}, 0x94) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xf5}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000540)=ANY=[@ANYBLOB="030000001000000000000000000000200000000000000000"]) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x20004000) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502ffffff0700000000000200"], 0xfd6c) 1m33.00664287s ago: executing program 1 (id=733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x8, 0x4, 0x0, 0x3e, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp={0x44, 0xc, 0x67, 0x0, 0x0, [0x4, 0x3]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @eol, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mount$afs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800000, 0x0) 1m32.878146955s ago: executing program 1 (id=737): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xe99, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x7, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133dce", 0x0, 0x0, 0x0, 0x0, 0x0}) 1m32.875571961s ago: executing program 1 (id=739): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x3) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4c0f, 0x400, 0x3, 0x288, 0x0, r0}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x2, 0x3, 0x0, 0xfff, 0x3, 0x2, {0x0, r5}}) io_uring_enter(r2, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 1m32.788693919s ago: executing program 1 (id=741): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000002100)={0x802, 0x0, 0x0, 0x7fffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f6, 0x400, 0x70bd2c, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40041}, 0x84) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4040840) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0) r4 = fanotify_init(0x1, 0x101801) r5 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r5, r6, r5}, &(0x7f0000000440)=""/183, 0xb7, &(0x7f00000003c0)={&(0x7f0000000340)={'ghash-generic\x00'}}) syz_emit_ethernet(0x46, &(0x7f0000000280)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0x4}, @window={0x3, 0x3, 0x3}, @mss={0x2, 0x4, 0x9}, @mss={0x2, 0x4}]}}}}}}}, 0x0) fanotify_mark(r4, 0x105, 0x40001032, r1, 0x0) fcntl$setlease(r1, 0x400, 0x0) read$FUSE(r4, &(0x7f0000000b00)={0x2020}, 0x2020) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='-[-%&,[\x00', &(0x7f0000000380)='./file0/file0\x00', r3) socket$l2tp6(0xa, 0x2, 0x73) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) 1m32.738116413s ago: executing program 1 (id=747): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) setuid(0xee00) mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/133) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='dax\x00', 0x2042004, &(0x7f0000000300)='autofs\x00') 1m32.687985065s ago: executing program 1 (id=749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0xc880) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0xc880) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x8c, r1, 0x5, 0x3, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac=@broadcast}, 0x200000000, @random=0x5, 0x0, @void, @void, @val={0x3, 0x1, 0xb9}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x2, 0xc0}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x8c}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x8c, r1, 0x5, 0x3, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac=@broadcast}, 0x200000000, @random=0x5, 0x0, @void, @void, @val={0x3, 0x1, 0xb9}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x2, 0xc0}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x8c}}, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000040)={0x0, 0x3}) 1m17.108844748s ago: executing program 34 (id=749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0xc880) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0xc880) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x8c, r1, 0x5, 0x3, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac=@broadcast}, 0x200000000, @random=0x5, 0x0, @void, @void, @val={0x3, 0x1, 0xb9}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x2, 0xc0}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x8c}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x8c, r1, 0x5, 0x3, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac=@broadcast}, 0x200000000, @random=0x5, 0x0, @void, @void, @val={0x3, 0x1, 0xb9}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x2, 0xc0}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x8c}}, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000040)={0x0, 0x3}) 1m14.268031062s ago: executing program 5 (id=966): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="13", 0x1}], 0x1}, 0x4051) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x37}], 0x1}, 0x2080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x41) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="540000000206010200000000000000000000000005000400000000000900020073797a3042071a290500010007000000050005000a0000008c00078008001140000000010d000300686173683a6e657400000000"], 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x0) recvmsg(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x20) r5 = socket(0xa, 0x80000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba0200"}, 0x28) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x0, 0x2, 0x12, 0x2}) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r9, 0xc0884123, &(0x7f0000000240)={0x0, "fe4bc2070c8230d64a620097e2e1ba0f1a42e3cdf62cae9e6917621a41f878718cb22ae0bbb7e638ac26b457037d91397c1455e56b87562a90ae102a79d4d8bf", {0xff, 0xfffffffffffffffd}}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000200)={'geneve0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "02c7eafb2c0caca8b02a09a29bc39f97117e2ab9091a9ba307985452b442a278", "2ca066fb2fe381377267e10df925ab3d10e073ee5f5e0da362680a3468ccec4d", "7508a49563f98a48b65a92f0edacff5df5c106980c2dc8cbd7b99269d38dc31e", "1634ca397b134b9410c32e04e2e2e149ef7e72e382ac4eff98f1b35a90e6bbb1", "c3ffbfbd751386b7ca0142b3e8f626e310587aa17c3c7b9f5d2b7c735073d7af", "c1ea5b85854c5b3cd4c7514b", 0x3, 0x1, 0x0, 0x7, 0x2}}) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x6, 0xfffffff9, 0x41595556, 0x7, 0xb, [{0x2}, {0x4, 0x9}, {0x2, 0x21}, {0x6, 0x3}, {0x3, 0xecbd}, {0x9, 0x3}, {0xc0, 0x8}, {0x10001, 0x7}], 0x2, 0x4, 0x7, 0x0, 0x4}}) 1m13.389552714s ago: executing program 5 (id=979): r0 = socket$alg(0x26, 0x5, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0xf) (async) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async) r3 = accept$alg(r0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006100), 0x49f, 0x0, 0x0) 1m13.389395746s ago: executing program 5 (id=980): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x13, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a8d25"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 1m13.279353745s ago: executing program 5 (id=981): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'wlan1\x00', 0x200}) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000300)=0x9, 0x4) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x200000, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r3 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="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", 0xca1}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777d", 0xb2}, {&(0x7f00000007c0)="1da19d23fdff85b98167af7726547120df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132d115fd9988c00b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b651ec19cedc69367ba0093c404d4ac7409ae7f612cd45bc475f1f4b47ba45ec376c3a98a06da61124f2650b53b15c87c3e6ea7734e44835fcd6d23a0d7e", 0xdd}, {&(0x7f00000009c0)="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", 0x130}], 0x5}, 0x8bb3a321efc09a) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x8}}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0x1, 0x5}, {0x8, 0x5}, {0x1, 0x4}, {0x8, 0x1}]}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0x3, 0x810000}, {0xd, 0x3}, {0xe, 0x4}]}, @const={0x2, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x5f, 0x2e, 0x30, 0x30, 0x30, 0x0, 0x2e]}}, &(0x7f0000000200), 0x9d, 0x0, 0x1, 0x3, 0x10000}, 0x28) r7 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x8) r9 = openat$cgroup(r8, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000004000)={0x2020}, 0x2020) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x63, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x4b}], &(0x7f00000001c0)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41000, 0x66, '\x00', r5, 0x25, r6, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xa, 0x800, 0x800}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000480)=[r10, r11], &(0x7f00000004c0)=[{0x0, 0x2, 0x6, 0xf}, {0x4, 0x2, 0x0, 0x9}, {0x4, 0x1, 0x8, 0xa}, {0x2, 0x5, 0xf, 0xb}, {0x0, 0x3, 0xe}, {0x5, 0x4, 0x8, 0x4}, {0x3, 0x1, 0x3, 0x8}], 0x10, 0xfffffa7c}, 0x94) 1m13.210274778s ago: executing program 5 (id=984): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffffffffffff0000000000010000000000000200000000000000"], 0x48) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000000)=0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x901891cbff212725, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) r4 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r5, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r4, &(0x7f0000000080), 0x1a1, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) recvmmsg(r3, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="100000000000000000000000070000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="00000000ac1b00deff00ed0075916f4a3567dd254d6c03367f6869359003cb58d94a5581f665f0a86d4acc5110825793d2224a8ede03b8"], 0x30}}], 0x1, 0xc0) 1m12.904851877s ago: executing program 5 (id=988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@dev}, {}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) 1m12.882531919s ago: executing program 35 (id=988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@dev}, {}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) 10.17959574s ago: executing program 3 (id=1873): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0xff, 0x4}, 0xfd}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_elf64(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1659], 0x67b) listen(r2, 0xc) r7 = socket$inet6(0xa, 0x2, 0x80000000) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) accept(0xffffffffffffffff, &(0x7f0000000440)=@alg, &(0x7f0000000080)=0x80) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r7, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r7, &(0x7f0000000040), 0x0, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb0000000000000000020000000000000058b94b5efacb394e8a86a20fdf970ecd42dc9e5904e9ee86adf3edaee5e430fb5ec9d238cd8bbfb7d2cf9e49c7bba76b98b95c4ff22f4473e132f0c4ade5dcf7bb3c4951c4d745e08299b94a5b201f2ac1368019fb8fa94d2cfd3b27857998cf9436ad4a922ede0012896395148a34696a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e22, @multicast2}, 0x10) 10.083734806s ago: executing program 3 (id=1874): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) move_pages(0x0, 0x3, &(0x7f00000000c0)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f00002fa000/0x1000)=nil, &(0x7f00005d5000/0x1000)=nil], 0xffffffffffffffff, &(0x7f0000000100)=[0x0], 0x6) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mmap(&(0x7f000056d000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, 0x0) (async) r1 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x2000, 0x7, 0x2}) (async, rerun: 64) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) (async) r4 = memfd_create(&(0x7f00000001c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb8x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\x00\x00\x00\x00\x00\x00\x00\a\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`\x1e\x0e\xf6\x80\x86\xd4\x003?Dji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x99\xb1\x03\x8am\xb8\xaa\x1f\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x00\x00\x00\x00\xe4\xc2MR\xaf\a\x14j\x1aX\xd7\x19)mx>\xc2\xe3\xe8\xca\x88\xdb\xbf\x9b%\xf25Ha\xd6\x12\t.dGnV\xd6\x8c89.\xc9\xb1\xc7\xda\xb1\xea7\r\xf2u!\xad\xdbCVn\xd2\f0\xae\x88\x9e4D!\xc1nq\xda@\x16\x00\xb4\x99I\xcf\x8abK\xdc )\x19\xb3\xda\x8c\x15\x1d\xc1\xf7\x98\xdeO@Y8-\xe5\xa3LLl', 0x2) ftruncate(r4, 0xffff) (async) fcntl$addseals(r4, 0x409, 0x7) (async) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000002000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ']) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74", 0xc7}], 0x1}}], 0x1, 0x2090) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x60040) (async) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) (async) sendto$inet(r2, &(0x7f0000000380)="73b828ca0b49667f74c1b953b1de1331ddafdcffd054bee7471cb2a573a3393aa35c964f656d2fc537dbd5f898215febfc496171f26bf8aa0bf1a2e741b810b1531af5370923196908e13f0c6d3ae44aa47a4f5692a1598e2c5300da3d6d1228416be16e307d75caf510e650effc81700ed2e567682df4fef30586b6d2820ffcb29dfa4222bb2535f4452ecf53a4b30000b0d8ab310cbfae4f21b1", 0x9b, 0x10000095, 0x0, 0x64) (async) close(0x3) setrlimit(0x40000000000008, &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 9.973906668s ago: executing program 3 (id=1875): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 9.973618368s ago: executing program 3 (id=1876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x27800000000, 0x0, 0x1, r2, 0x5}) 9.496259406s ago: executing program 3 (id=1881): clock_getres(0x2, &(0x7f0000000380)) (async) clock_getres(0x2, &(0x7f0000000380)) r0 = fanotify_init(0x8, 0x40000) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r0, 0x1, 0x100018, r1, 0x0) 2.108420726s ago: executing program 3 (id=1881): clock_getres(0x2, &(0x7f0000000380)) (async) clock_getres(0x2, &(0x7f0000000380)) r0 = fanotify_init(0x8, 0x40000) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r0, 0x1, 0x100018, r1, 0x0) 1.323143952s ago: executing program 2 (id=1996): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x6b67, 0x0, 0x5218ec783268a6b9}, 0x18, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x8) 396.110413ms ago: executing program 6 (id=1999): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0x5}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0x5}]}) (async) 391.956244ms ago: executing program 2 (id=2002): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) close(r1) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 164.56741ms ago: executing program 2 (id=2005): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1e}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000804) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000400000008"], 0x1c}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0xffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x80000) ioctl$int_in(r5, 0x5452, &(0x7f0000000140)=0x9) recvmsg$can_j1939(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)=""/4095, 0xfff}], 0x1}, 0x10000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f00000001c0)='l', 0x1, 0x4000000, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000300), &(0x7f0000000180)=0x8) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 164.485432ms ago: executing program 6 (id=2006): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0xc800, 0x80, 0x4}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000140)=0xc) 163.974297ms ago: executing program 7 (id=2007): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0xe, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) close_range(r1, 0xffffffffffffffff, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0040, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r5, 0x7c81, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000000)={0xc, r7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000140)={0x18, r7, 0x5, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) syz_clone(0x40000600, 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)="d2ea6ae91191894bca1913ea8a1e46b971b846afd62be056930c5a70937a8067c2c4189a2460b71d4adfab6cb236a237d5f9ee9acca6add40fe1e638efdd10c54cf79efe5efc77913ae259ace1662230fc5440b25fdcecf68614d4d747a0f7f761a36bfc3897de5310dec3a75f65f04a498a052c9911dc5ed8c3bfc20ad2b9a69023ec35f55efa29879bc370a807c5") sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="d400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="038000000000000008000a00", @ANYRES32=r11, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 163.514353ms ago: executing program 6 (id=2008): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0xff, 0x4}, 0xfd}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_elf64(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1659], 0x67b) r7 = socket$inet6(0xa, 0x2, 0x80000000) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept(0xffffffffffffffff, &(0x7f0000000440)=@alg, &(0x7f0000000080)=0x80) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r7, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r7, &(0x7f0000000040), 0x0, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb0000000000000000020000000000000058b94b5efacb394e8a86a20fdf970ecd42dc9e5904e9ee86adf3edaee5e430fb5ec9d238cd8bbfb7d2cf9e49c7bba76b98b95c4ff22f4473e132f0c4ade5dcf7bb3c4951c4d745e08299b94a5b201f2ac1368019fb8fa94d2cfd3b27857998cf9436ad4a922ede0012896395148a34696a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e22, @multicast2}, 0x10) 163.28315ms ago: executing program 7 (id=2009): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)=':!\xbe\x00', 0x424000, &(0x7f0000000040)={@_ha_fsid={[0xfc, 0x3a1920c7]}, {0x7, 0x4, 0x8, 0xf9}}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0xe9f4}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x5e, @rand_addr=0x64010101, 0x4e23, 0x4, 'fo\x00', 0x30, 0x6001c84f, 0x68}, 0x2c) accept4$ax25(r0, &(0x7f0000000180)={{0x3, @null}, [@rose, @bcast, @default, @null, @remote, @default, @null, @null]}, &(0x7f0000000200)=0x48, 0x1800) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x140e, 0x300, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48840}, 0x40004) bind$ax25(r0, &(0x7f0000000340)={{0x3, @null, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x48) write$P9_RXATTRWALK(r0, &(0x7f00000003c0)={0xf, 0x1f, 0x1, 0xd}, 0xf) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000400)={'virt_wifi0\x00', @multicast}) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x2, 0x7, 0x0, 0x3, 0x2, 0x0, [{0xb, 0x10001, 0x7}, {0x2, 0x1, 0x3, '\x00', 0x980}]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000500)={0x8, 'veth0_to_batadv\x00', {'ipvlan1\x00'}, 0x7f}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x9, 0x81, 0x0, 0xc088, r0, 0x6, '\x00', 0x0, r0, 0x2, 0x5, 0x0, 0x0, @value=r0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x13}}, './file0\x00'}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000600)=0x1) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000640)) r3 = syz_open_dev$vcsa(&(0x7f0000000680), 0x8, 0x8940) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000006c0)=0x9e) io_uring_enter(r3, 0x1607, 0x1104, 0x1, &(0x7f0000000700)={[0x3]}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000900)={'batadv_slave_1\x00', 0x0}) getpeername$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000980)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd4, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x739ffe2b19aab55}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x810) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b80), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x8c, r9, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x200}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf9}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8000}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) prlimit64(0xffffffffffffffff, 0x3, &(0x7f0000000d00)={0x0, 0xfef7}, &(0x7f0000000d40)) r10 = syz_open_dev$vcsn(&(0x7f0000000d80), 0x6bf, 0x200) signalfd4(r10, &(0x7f0000000dc0)={[0xccc5]}, 0x8, 0x0) 86.863063ms ago: executing program 7 (id=2010): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x39c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x36c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xa, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x39c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000002bc0)={0x1, [{0x2, 0x0, 0x5, 0x0}, {0x1, 0x0, 0xe, 0x0}, {0x6, 0x0, 0x6c2, 0x0}, {0x6, 0x0, 0x7000, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x80000001, 0x0}, {0x0, 0x0, 0x101, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x100, 0x0}, {0x5, 0x0, 0x5, 0x0}, {0x1, 0x2cb0, 0x6, &(0x7f0000000ac0)="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"}, {0x0, 0x0, 0xfffffffc, 0x0}, {0x1, 0x0, 0xc, 0x0}, {0x3, 0x0, 0x400, 0x0}, {0x0, 0x0, 0x6, 0x0}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a3100000000080003400000000109000100"], 0x34}}, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f00000001c0)={0x3, 0x0, @raw_data=[0x16, 0x2, 0x8000, 0x8, 0x4, 0x10001, 0xfff, 0xf, 0xfffffffd, 0xfb2, 0xffff7fff, 0x0, 0x100, 0x1, 0x1ff, 0x69]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 84.263639ms ago: executing program 2 (id=2011): mkdir(&(0x7f0000000500)='./file0\x00', 0x0) (async) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket(0x9, 0x2, 0x5e) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x7, 0x2}, {0xe, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 83.060054ms ago: executing program 6 (id=2012): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_io_uring_setup(0xb7f, &(0x7f0000000140)={0x0, 0x38ab, 0x10000, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000000307010300000000000000000500000d090001"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4044010) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r4, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x1}}) (async) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000340)='./file0\x00') (async) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000680)={0x0, 0x1}) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) r8 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090b, 0x2, '\x00', @value64=0x6}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r6, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000440)=[r7], 0x0, 0x1}) (async) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r9, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r10, r10], &(0x7f0000000280)=[0x8a, 0xceeb], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r9, 0xc02064cc, &(0x7f0000000000)={r10, r10, 0x1, 0x7}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000006c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000700)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000007c0)={0x0}) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(0xffffffffffffffff, 0xc0186443, &(0x7f0000000940)={0x0, 0x0, {0x30, 0x3, &(0x7f0000000880)=[{0x4, 0x0, 0x76c, 0x800, 0x84, {0x10, 0x8, &(0x7f0000000500)=[{0x1, 0x0, 0x4}, {0x0, 0x0, 0x5}, {0xff, 0x0, 0x5}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x5}, {0xff, 0x0, 0x7}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x8}]}}, {0x1, 0x0, 0x7ff, 0x11, 0x7fff, {0x10, 0x3, &(0x7f0000000640)=[{0x1, 0x0, 0x1}, {0x0, 0x0, 0x200}, {0x1}]}}, {0x0, 0x0, 0x1, 0xd240, 0x0, {0x10, 0x8, &(0x7f0000000800)=[{0x1, r5, 0x8001}, {0x0, r7, 0xffff}, {0x0, r10, 0x4}, {0xff, 0x0, 0x5}, {0x0, r11, 0xb}, {0x0, r12, 0x100000001}, {0x800000ff, 0x0, 0x5}, {0xff, r13, 0x13949bbc}]}}]}}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40005) (async) r14 = syz_open_dev$sg(&(0x7f0000000340), 0x3bd98cae, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r14, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB]) 82.91766ms ago: executing program 2 (id=2013): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84834}}], 0x7b, 0x404c040) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 27.63493ms ago: executing program 7 (id=2014): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x20400) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000340)={0x9, 0x0, '\x00', {0x0, @reserved}}) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002080)='fdinfo/3\x00') getpgrp(r1) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) 5.16279ms ago: executing program 7 (id=2015): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0xfffffffc, 0x0, 0x2080, 0x2080, 0x6adf}) 1.51238ms ago: executing program 6 (id=2016): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000003980)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x2, @loopback, 0xfb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="54abbbf221cb24fb2b892a6a99", 0xd}, {&(0x7f00000001c0)="0bf1ca3a", 0x4}], 0x2}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0x8, @local, 0xd}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}}], 0x2, 0x20000040) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'geneve0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "02c7eafb2c0caca8b02a09a29bc39f97117e2ab9091a9ba307985452b442a278", "2ca066fb2fe381377267e10df925ab3d10e073ee5f5e0da362680a3468ccec4d", "7508a49563f98a48b65a92f0edacff5df5c106980c2dc8cbd7b99269d38dc31e", "1634ca397b134b9410c32e04e2e2e149ef7e72e382ac4eff98f1b35a90e6bbb1", "c3ffbfbd751386b7ca0142b3e8f626e310587aa17c3c7b9f5d2b7c735073d7af", "c1ea5b85854c5b3cd4c7514b", 0x3, 0x1, 0x0, 0x7, 0x2}}) 788.473µs ago: executing program 2 (id=2017): mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x204001, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000040)="1d", 0x1, 0xfffffffffffffffe) (async) r0 = open$dir(&(0x7f0000000140)='./bus\x00', 0x244100, 0xc) openat(r0, &(0x7f0000000180)='./file0\x00', 0x400800, 0x2) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x2) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000701, 0x0, 0x0) (async) mkdirat(r2, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x200010, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@index_off}, {@xino_auto}]}) 450.108µs ago: executing program 7 (id=2018): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @loopback}}}], 0x20}}], 0x1, 0x0) r4 = socket(0xa, 0x3, 0x3a) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r5, &(0x7f0000000140)={0x50}, 0xffd3) (async) r6 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x64}) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async) read$FUSE(r5, &(0x7f00000079c0)={0x2020}, 0x2020) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r9}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x0, r9, 0x267a4e37}, 0xc) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYBLOB="d20aad64b860194e1277571a175293aaf784e675078cffeb860f3331944b7fac259da0e701b51de233a451f5210053659d98382dca639f3becc67943eb83508c9c781cc2402cb6174f6dcb9e7287a1d17e2e1dda5155681e96bd74c552c8086bab7adde875210f74c758279a1af92ca9f65c2269e3d9a0ae96c883f1d76612179ec39a304ab4384e02d498ccc3f3cadf81d6adaae28e30cc5c063cf9d728bb46f38c2d4625b4611695d864e6f052f1b5328e84eeef2851c1fbce998b259f3425cccf112075bd06a834a0016946c504020eda2c909fc1458bf9a7721c185054d051fd1624d3da1e5e8237aa90d1f03b854f99549808"], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xf4, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_DF={0x5, 0xd, 0x9}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0xc}, @IFLA_PORT_SELF={0x4c, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'geneve\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "82701dd55b6bb09b9123678b562f1631"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffffa}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xdf}]}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x34, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}, @IFLA_VTI_OKEY={0x8, 0x3, 0x400}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x7}, @IFLA_VTI_LINK={0x8, 0x1, r9}]]}}}]}, 0xf4}}, 0x0) (rerun: 64) 0s ago: executing program 6 (id=2019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa000000000000095000000000000001f495ff727520cccddfad6fab92a770b445d050000006edc1b5613c5e35079725d19e88b662c2596b2f0b40aa9de45cf931a7ddaae7bdd97a9787684a5a6bbe879d6561715a194eb15d509b1837f6d317d12dd2c98f05e43aa14b3655a78009367bac65148a671b0ffd1c946b31202b7c73e0f1c5df29d57ed708602599a04fde318753c358d42ba7c52b4e20bc5c0e91fbc96da558c38891cd5bc38b6db9863a1273811976d15ba39fe2700"/218], &(0x7f00000002c0)='GPL\x00', 0x5, 0x9e, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe21}, 0x2a) r2 = socket(0xa, 0x5, 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000280)={0x0, 0x0, 0x400, 0x1, 0x199}, 0x0, 0x0) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x2}, 0x8) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) ioctl$FE_GET_PROPERTY(r10, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x9}, &(0x7f0000000500)=0x8) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r8, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r9, r9], &(0x7f0000000280)=[0x8a, 0xceeb], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r8, 0xc02064cc, &(0x7f0000000000)={r9, r9, 0x1, 0x7}) capget(&(0x7f0000000440)={0x19980330, r7}, &(0x7f0000000480)={0x7, 0x400, 0x3, 0x8, 0x4, 0x9}) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f00000001c0)=""/50, 0x20000, 0x1000, 0x200, 0x3}, 0x20) kernel console output (not intermixed with test programs): pcmuio96 [ 115.582594][ T9138] comedi: valid board names for pcmmio driver are: [ 115.584672][ T9138] pcmmio [ 115.585703][ T9138] comedi: valid board names for pcmda12 driver are: [ 115.587937][ T9138] pcmda12 [ 115.589115][ T9138] comedi: valid board names for pcmad driver are: [ 115.591209][ T9138] pcmad12 [ 115.592453][ T9138] pcmad16 [ 115.593481][ T9138] comedi: valid board names for ni_labpc driver are: [ 115.595649][ T9138] lab-pc-1200 [ 115.596793][ T9138] lab-pc-1200ai [ 115.598072][ T9138] lab-pc+ [ 115.599080][ T9138] comedi: valid board names for atmio16 driver are: [ 115.601160][ T9138] atmio16 [ 115.602724][ T9138] atmio16d [ 115.603914][ T9138] comedi: valid board names for ni_at_ao driver are: [ 115.606055][ T9138] at-ao-6 [ 115.607058][ T9138] at-ao-10 [ 115.608136][ T9138] comedi: valid board names for ni_at_a2150 driver are: [ 115.610319][ T9138] ni_at_a2150 [ 115.611627][ T9138] comedi: valid board names for adq12b driver are: [ 115.613843][ T9138] adq12b [ 115.614830][ T9138] comedi: valid board names for mpc624 driver are: [ 115.616996][ T9138] mpc624 [ 115.618009][ T9138] comedi: valid board names for c6xdigio driver are: [ 115.620172][ T9138] c6xdigio [ 115.621254][ T9138] comedi: valid board names for aio_iiro_16 driver are: [ 115.623703][ T9138] aio_iiro_16 [ 115.624825][ T9138] comedi: valid board names for aio_aio12_8 driver are: [ 115.627029][ T9138] aio_aio12_8 [ 115.628178][ T9138] aio_ai12_8 [ 115.629283][ T9138] aio_ao12_4 [ 115.630340][ T9138] comedi: valid board names for fl512 driver are: [ 115.632491][ T9138] fl512 [ 115.633453][ T9138] comedi: valid board names for dmm32at driver are: [ 115.635740][ T9138] dmm32at [ 115.636809][ T9138] comedi: valid board names for dt282x driver are: [ 115.638981][ T9138] dt2821 [ 115.639977][ T9138] dt2821-f [ 115.641048][ T9138] dt2821-g [ 115.642204][ T9138] dt2823 [ 115.643087][ T9138] dt2824-pgh [ 115.644141][ T9138] dt2824-pgl [ 115.645265][ T9138] dt2825 [ 115.646264][ T9138] dt2827 [ 115.647330][ T9138] dt2828 [ 115.648665][ T9138] dt2829 [ 115.649989][ T9138] dt21-ez [ 115.651358][ T9138] dt23-ez [ 115.652831][ T9138] dt24-ez [ 115.654205][ T9138] dt24-ez-pgl [ 115.655693][ T9138] comedi: valid board names for dt2817 driver are: [ 115.658454][ T9138] dt2817 [ 115.659725][ T9138] comedi: valid board names for dt2815 driver are: [ 115.662825][ T9138] dt2815 [ 115.664140][ T9138] comedi: valid board names for dt2814 driver are: [ 115.666955][ T9138] dt2814 [ 115.668301][ T9138] comedi: valid board names for dt2811 driver are: [ 115.671168][ T9138] dt2811-pgh [ 115.672793][ T9138] dt2811-pgl [ 115.674323][ T9138] comedi: valid board names for dt2801 driver are: [ 115.677073][ T9138] dt2801 [ 115.678388][ T9138] comedi: valid board names for das6402 driver are: [ 115.681195][ T9138] das6402-12 [ 115.683166][ T9138] das6402-16 [ 115.684626][ T9138] comedi: valid board names for das1800 driver are: [ 115.687456][ T9138] das-1701st [ 115.688965][ T9138] das-1701st-da [ 115.690587][ T9138] das-1702st [ 115.692194][ T9138] das-1702st-da [ 115.693812][ T9138] das-1702hr [ 115.695325][ T9138] das-1702hr-da [ 115.696925][ T9138] das-1701ao [ 115.698427][ T9138] das-1702ao [ 115.699904][ T9138] das-1801st [ 115.701383][ T9138] das-1801st-da [ 115.703081][ T9138] das-1802st [ 115.704543][ T9138] das-1802st-da [ 115.706058][ T9138] das-1802hr [ 115.707461][ T9138] das-1802hr-da [ 115.709027][ T9138] das-1801hc [ 115.710526][ T9138] das-1802hc [ 115.712105][ T9138] das-1801ao [ 115.713582][ T9138] das-1802ao [ 115.715045][ T9138] comedi: valid board names for das800 driver are: [ 115.717805][ T9138] das-800 [ 115.719169][ T9138] cio-das800 [ 115.720636][ T9138] das-801 [ 115.722120][ T9138] cio-das801 [ 115.723623][ T9138] das-802 [ 115.724938][ T9138] cio-das802 [ 115.726362][ T9138] cio-das802/16 [ 115.727847][ T9138] comedi: valid board names for isa-das08 driver are: [ 115.730765][ T9138] isa-das08 [ 115.732510][ T9138] das08-pgm [ 115.733900][ T9138] das08-pgh [ 115.734986][ T9138] das08-pgl [ 115.736077][ T9138] das08-aoh [ 115.737163][ T9138] das08-aol [ 115.738271][ T9138] das08-aom [ 115.739356][ T9138] das08/jr-ao [ 115.740490][ T9138] das08jr-16-ao [ 115.741685][ T9138] pc104-das08 [ 115.742902][ T9138] das08jr/16 [ 115.744036][ T9138] comedi: valid board names for das16m1 driver are: [ 115.746167][ T9138] das16m1 [ 115.747208][ T9138] comedi: valid board names for dac02 driver are: [ 115.749306][ T9138] dac02 [ 115.750255][ T9138] comedi: valid board names for rti802 driver are: [ 115.752404][ T9138] rti802 [ 115.753374][ T9138] comedi: valid board names for rti800 driver are: [ 115.755474][ T9138] rti800 [ 115.756455][ T9138] rti815 [ 115.757421][ T9138] comedi: valid board names for pcm3724 driver are: [ 115.759558][ T9138] pcm3724 [ 115.760611][ T9138] comedi: valid board names for pcl818 driver are: [ 115.762801][ T9138] pcl818l [ 115.763837][ T9138] pcl818h [ 115.764869][ T9138] pcl818hd [ 115.765932][ T9138] pcl818hg [ 115.766995][ T9138] pcl818 [ 115.767989][ T9138] pcl718 [ 115.768975][ T9138] pcm3718 [ 115.770027][ T9138] comedi: valid board names for pcl816 driver are: [ 115.772292][ T9138] pcl816 [ 115.773281][ T9138] pcl814b [ 115.774314][ T9138] comedi: valid board names for pcl812 driver are: [ 115.776401][ T9138] pcl812 [ 115.777390][ T9138] pcl812pg [ 115.778471][ T9138] acl8112pg [ 115.779556][ T9138] acl8112dg [ 115.780661][ T9138] acl8112hg [ 115.781757][ T9138] a821pgl [ 115.782881][ T9138] a821pglnda [ 115.783988][ T9138] a821pgh [ 115.785020][ T9138] a822pgl [ 115.786053][ T9138] a822pgh [ 115.786971][ T9138] a823pgl [ 115.788019][ T9138] a823pgh [ 115.789053][ T9138] pcl813 [ 115.790056][ T9138] pcl813b [ 115.791105][ T9138] acl8113 [ 115.792295][ T9138] iso813 [ 115.793295][ T9138] acl8216 [ 115.794329][ T9138] a826pg [ 115.795326][ T9138] comedi: valid board names for pcl730 driver are: [ 115.797442][ T9138] pcl730 [ 115.798448][ T9138] iso730 [ 115.799445][ T9138] acl7130 [ 115.800475][ T9138] pcm3730 [ 115.801498][ T9138] pcl725 [ 115.802536][ T9138] p8r8dio [ 115.803507][ T9138] acl7225b [ 115.804526][ T9138] p16r16dio [ 115.805621][ T9138] pcl733 [ 115.806587][ T9138] pcl734 [ 115.807556][ T9138] opmm-1616-xt [ 115.808697][ T9138] pearl-mm-p [ 115.809813][ T9138] ir104-pbf [ 115.810917][ T9138] comedi: valid board names for pcl726 driver are: [ 115.813093][ T9138] pcl726 [ 115.814085][ T9138] pcl727 [ 115.815072][ T9138] pcl728 [ 115.816057][ T9138] acl6126 [ 115.817089][ T9138] acl6128 [ 115.818103][ T9138] comedi: valid board names for pcl724 driver are: [ 115.820132][ T9138] pcl724 [ 115.821097][ T9138] pcl722 [ 115.822233][ T9138] pcl731 [ 115.823219][ T9138] acl7122 [ 115.824269][ T9138] acl7124 [ 115.825296][ T9138] pet48dio [ 115.826360][ T9138] pcmio48 [ 115.827386][ T9138] onyx-mm-dio [ 115.828531][ T9138] comedi: valid board names for pcl711 driver are: [ 115.830649][ T9138] pcl711 [ 115.831644][ T9138] pcl711b [ 115.832742][ T9138] acl8112hg [ 115.833841][ T9138] acl8112dg [ 115.834921][ T9138] comedi: valid board names for amplc_pc263 driver are: [ 115.837153][ T9138] pc263 [ 115.838118][ T9138] comedi: valid board names for amplc_pc236 driver are: [ 115.840345][ T9138] pc36at [ 115.841343][ T9138] comedi: valid board names for amplc_dio200 driver are: [ 115.843761][ T9138] pc212e [ 115.844745][ T9138] pc214e [ 115.845722][ T9138] pc215e [ 115.846711][ T9138] pc218e [ 115.847699][ T9138] pc272e [ 115.848684][ T9138] comedi: valid board names for comedi_parport driver are: [ 115.850998][ T9138] comedi_parport [ 115.852289][ T9138] comedi: valid board names for comedi_test driver are: [ 115.854536][ T9138] comedi_test [ 115.856104][ T9138] comedi: valid board names for comedi_bond driver are: [ 115.858356][ T9138] comedi_bond [ 116.029212][ T9156] netlink: 56 bytes leftover after parsing attributes in process `syz.2.878'. [ 116.034841][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 116.038801][ T9157] binder: 9155:9157 ioctl c0306201 0 returned -14 [ 116.078230][ T40] audit: type=1400 audit(1773445132.378:673): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 116.306183][ T9175] ip6gre1: entered promiscuous mode [ 116.307980][ T9175] ip6gre1: entered allmulticast mode [ 116.412098][ T3248] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 116.531740][ T40] audit: type=1400 audit(1773445132.828:674): avc: denied { map } for pid=9185 comm="syz.5.886" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.541010][ T40] audit: type=1400 audit(1773445132.838:675): avc: denied { create } for pid=9185 comm="syz.5.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 116.574282][ T3248] usb 7-1: Using ep0 maxpacket: 32 [ 116.577174][ T3248] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 116.583081][ T3248] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 116.586020][ T3248] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 116.588643][ T3248] usb 7-1: Product: syz [ 116.590035][ T3248] usb 7-1: Manufacturer: syz [ 116.592461][ T3248] usb 7-1: SerialNumber: syz [ 116.595442][ T3248] usb 7-1: config 0 descriptor?? [ 116.597490][ T9169] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.612735][ T9188] usb usb8: usbfs: process 9188 (syz.5.887) did not claim interface 0 before use [ 116.619025][ T9188] netlink: 204108 bytes leftover after parsing attributes in process `syz.5.887'. [ 116.693033][ T9192] ip6t_REJECT: ECHOREPLY is not supported [ 116.697380][ T40] audit: type=1400 audit(1773445132.998:676): avc: denied { getopt } for pid=9191 comm="syz.5.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 116.741394][ T40] audit: type=1400 audit(1773445133.038:677): avc: denied { setopt } for pid=9193 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 116.749700][ T40] audit: type=1400 audit(1773445133.048:678): avc: denied { accept } for pid=9193 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 116.757704][ T40] audit: type=1400 audit(1773445133.048:679): avc: denied { write } for pid=9193 comm="syz.3.891" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 116.798216][ T9194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9194 comm=syz.3.891 [ 116.805606][ T9] usb 7-1: USB disconnect, device number 14 [ 117.090470][ T9223] CUSE: unknown device info "" [ 117.092745][ T9223] CUSE: zero length info key specified [ 117.203664][ T5979] IPVS: starting estimator thread 0... [ 117.269651][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.904'. [ 117.292104][ T9232] IPVS: using max 45 ests per chain, 108000 per kthread [ 117.325628][ T9241] IPVS: sh: FWM 3 0x00000003 - no destination available [ 117.406551][ T9246] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.429575][ T9250] overlayfs: failed to resolve './file2': -2 [ 117.433909][ T9250] overlayfs: missing 'lowerdir' [ 117.435869][ T9250] netlink: 393 bytes leftover after parsing attributes in process `syz.5.909'. [ 117.441340][ T9250] No source specified [ 118.005510][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.918'. [ 118.008851][ T9283] hsr_slave_0: left promiscuous mode [ 118.011300][ T9283] hsr_slave_1: left promiscuous mode [ 118.168729][ T9288] loop5: detected capacity change from 0 to 7 [ 118.170468][ T9287] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 118.174493][ T9287] overlayfs: failed to set xattr on upper [ 118.176740][ T9287] overlayfs: ...falling back to redirect_dir=nofollow. [ 118.178996][ T9287] overlayfs: ...falling back to index=off. [ 118.180948][ T9287] overlayfs: ...falling back to uuid=null. [ 118.231404][ T9291] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.921'. [ 118.280303][ T5930] Dev loop5: unable to read RDB block 7 [ 118.282437][ T5930] loop5: unable to read partition table [ 118.284401][ T5930] loop5: partition table beyond EOD, truncated [ 118.405883][ T9288] Dev loop5: unable to read RDB block 7 [ 118.408004][ T9288] loop5: unable to read partition table [ 118.409829][ T9288] loop5: partition table beyond EOD, truncated [ 118.414772][ T9288] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 118.432102][ T6018] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 118.512163][ T5979] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 118.602095][ T6018] usb 10-1: Using ep0 maxpacket: 32 [ 118.604978][ T6018] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 118.607641][ T6018] usb 10-1: config 0 has no interface number 0 [ 118.608744][ T9297] geneve2: entered promiscuous mode [ 118.609748][ T6018] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.609765][ T6018] usb 10-1: config 0 interface 85 has no altsetting 0 [ 118.611277][ T6018] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 118.623978][ T6018] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.626996][ T6018] usb 10-1: Product: syz [ 118.628560][ T6018] usb 10-1: Manufacturer: syz [ 118.630340][ T6018] usb 10-1: SerialNumber: syz [ 118.634517][ T6018] usb 10-1: config 0 descriptor?? [ 118.673510][ T5979] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 118.676260][ T5979] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.679507][ T5979] usb 7-1: config 0 has no interfaces? [ 118.681322][ T5979] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 118.684220][ T5979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.688059][ T5979] usb 7-1: config 0 descriptor?? [ 119.007897][ T1165] usb 7-1: USB disconnect, device number 15 [ 119.614555][ T9305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.926'. [ 119.645095][ T5932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.648926][ T5932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.651914][ T5932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.656806][ T5932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.660815][ T5932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.769371][ T9314] binder: BINDER_SET_CONTEXT_MGR already set [ 119.771688][ T9314] binder: 9312:9314 ioctl 4018620d 200000000100 returned -16 [ 119.775603][ T9314] binder: 9312:9314 ioctl c0306201 200000000640 returned -22 [ 119.778698][ T9315] binder: 9312:9315 ioctl c0306201 200000000640 returned -22 [ 119.828885][ T9306] chnl_net:caif_netlink_parms(): no params data found [ 119.846246][ T1152] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.931870][ T1152] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.944227][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.947419][ T9306] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.950758][ T9306] bridge_slave_0: entered allmulticast mode [ 119.954873][ T9306] bridge_slave_0: entered promiscuous mode [ 119.959509][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.962539][ T9306] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.964994][ T9306] bridge_slave_1: entered allmulticast mode [ 119.967901][ T9306] bridge_slave_1: entered promiscuous mode [ 119.985734][ T9306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.990337][ T9306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.008993][ T9306] team0: Port device team_slave_0 added [ 120.013080][ T9306] team0: Port device team_slave_1 added [ 120.027700][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.029951][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.038524][ T9306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.043112][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.045459][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.054327][ T9306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.064012][ T1152] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.097779][ T9306] hsr_slave_0: entered promiscuous mode [ 120.101064][ T9306] hsr_slave_1: entered promiscuous mode [ 120.104326][ T9306] debugfs: 'hsr0' already exists in 'hsr' [ 120.106607][ T9306] Cannot create hsr debugfs directory [ 120.164242][ T9323] fuse: Unknown parameter 'group_i<' [ 120.190366][ T1152] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.211348][ T9325] netlink: 'syz.3.929': attribute type 13 has an invalid length. [ 120.264614][ T9306] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 120.279017][ T9306] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 120.284583][ T9306] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 120.289388][ T9306] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 120.350292][ T1152] bridge_slave_1: left allmulticast mode [ 120.353075][ T1152] bridge_slave_1: left promiscuous mode [ 120.355685][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.364185][ T1152] bridge_slave_0: left allmulticast mode [ 120.366469][ T1152] bridge_slave_0: left promiscuous mode [ 120.368889][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.533698][ T9342] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 120.548277][ T1152] bond3 (unregistering): (slave geneve2): Releasing active interface [ 120.736438][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.741481][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.746821][ T1152] bond0 (unregistering): Released all slaves [ 120.754336][ T1152] bond1 (unregistering): Released all slaves [ 120.766358][ T1152] bond2 (unregistering): Released all slaves [ 120.777199][ T1152] bond3 (unregistering): Released all slaves [ 120.860391][ T9306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.884223][ T9306] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.889217][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.891726][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.898478][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.900834][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.930256][ T9306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.934192][ T9306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.006122][ T9354] syz.2.936 (9354): drop_caches: 2 [ 121.098506][ T9306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.217360][ T6018] appletouch 10-1:0.85: Failed to read mode from device. [ 121.228251][ T6018] appletouch 10-1:0.85: probe with driver appletouch failed with error -5 [ 121.241274][ T6018] usb 10-1: USB disconnect, device number 8 [ 121.270672][ T40] kauditd_printk_skb: 94 callbacks suppressed [ 121.270682][ T40] audit: type=1400 audit(1773445137.568:774): avc: denied { getopt } for pid=9373 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 121.318770][ T40] audit: type=1400 audit(1773445137.618:775): avc: denied { setopt } for pid=9389 comm="syz.3.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 121.334734][ T9376] x_tables: duplicate underflow at hook 2 [ 121.337040][ T9376] x_tables: duplicate underflow at hook 3 [ 121.350054][ T9306] veth0_vlan: entered promiscuous mode [ 121.359989][ T9306] veth1_vlan: entered promiscuous mode [ 121.423077][ T9407] program syz.2.947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.426272][ T1152] hsr_slave_0: left promiscuous mode [ 121.426327][ T9407] ata1.00: non-matching transfer count (0/2304) [ 121.431132][ T1152] hsr_slave_1: left promiscuous mode [ 121.440236][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.442869][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.448405][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.450933][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.456594][ T1152] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 121.458833][ T1152] batman_adv: batadv0: Removing interface: ipvlan2 [ 121.464326][ T40] audit: type=1400 audit(1773445137.768:776): avc: denied { ioctl } for pid=9416 comm="syz.3.949" path="socket:[31973]" dev="sockfs" ino=31973 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 121.473101][ T1152] team_slave_0: left promiscuous mode [ 121.475028][ T1152] team_slave_1: left promiscuous mode [ 121.476879][ T1152] veth1_macvtap: left promiscuous mode [ 121.478667][ T1152] veth0_macvtap: left promiscuous mode [ 121.480510][ T1152] veth1_vlan: left promiscuous mode [ 121.483441][ T1152] veth0_vlan: left promiscuous mode [ 121.602156][ T5291] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.641288][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 121.657785][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 121.682185][ T5944] Bluetooth: hci3: command tx timeout [ 121.750535][ T9417] ip6gre1: entered promiscuous mode [ 121.755376][ T9417] ip6gre1: entered allmulticast mode [ 121.777476][ T9306] veth0_macvtap: entered promiscuous mode [ 121.784297][ T9306] veth1_macvtap: entered promiscuous mode [ 121.796339][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.810641][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.820906][ T340] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.820934][ T340] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.820951][ T340] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.820968][ T340] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.836668][ T9432] netlink: 'syz.3.953': attribute type 1 has an invalid length. [ 121.912334][ T9432] bond3: entered promiscuous mode [ 121.914671][ T9432] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.950978][ T9438] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.954130][ T9438] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 121.957425][ T9438] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 121.962691][ T9438] bond3: (slave vxcan3): making interface the new active one [ 121.965218][ T9438] vxcan3: entered promiscuous mode [ 121.966901][ T9442] IPv6: Can't replace route, no match found [ 121.967490][ T9438] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 122.036622][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.039208][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.090481][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.095017][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.105377][ T40] audit: type=1400 audit(1773445138.408:777): avc: denied { mounton } for pid=9306 comm="syz-executor" path="/syzkaller.jfxz9W/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 122.167837][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.959'. [ 122.219925][ T1152] IPVS: stop unused estimator thread 0... [ 122.366832][ T40] audit: type=1400 audit(1773445138.668:778): avc: denied { read } for pid=9482 comm="syz.6.965" path="socket:[31520]" dev="sockfs" ino=31520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 122.498186][ T40] audit: type=1400 audit(1773445138.798:779): avc: denied { getopt } for pid=9493 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.555832][ T9504] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 122.584826][ T9507] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 122.754582][ T9529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.789643][ T40] audit: type=1400 audit(1773445139.088:780): avc: denied { mounton } for pid=9527 comm="syz.3.977" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.821651][ T40] audit: type=1400 audit(1773445139.118:781): avc: denied { ioctl } for pid=9524 comm="syz.2.975" path="socket:[32309]" dev="sockfs" ino=32309 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 122.837598][ T9529] kvm: pic: non byte write [ 122.989362][ T40] audit: type=1326 audit(1773445139.288:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.3.978" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55aad9c799 code=0x0 [ 123.043531][ T5944] Bluetooth: hci2: command 0x0401 tx timeout [ 123.046305][ T5932] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 123.268877][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.980'. [ 123.356536][ T40] audit: type=1400 audit(1773445139.658:783): avc: denied { mounton } for pid=9545 comm="syz.5.981" path="/80/file0" dev="configfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.609648][ T9564] netlink: 16 bytes leftover after parsing attributes in process `syz.6.986'. [ 123.623068][ T9564] bond1: entered promiscuous mode [ 123.624941][ T9564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.665248][ T9571] block nbd6: not configured, cannot reconfigure [ 123.746766][ T340] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.762305][ T5932] Bluetooth: hci3: command tx timeout [ 123.775727][ T9574] netlink: 80 bytes leftover after parsing attributes in process `syz.6.989'. [ 123.847450][ T340] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.852649][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.858388][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.863878][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.868369][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.872186][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.936098][ T340] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.986737][ T9579] chnl_net:caif_netlink_parms(): no params data found [ 123.999139][ T340] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.051131][ T9579] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.053572][ T9579] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.055981][ T9579] bridge_slave_0: entered allmulticast mode [ 124.058680][ T9579] bridge_slave_0: entered promiscuous mode [ 124.061897][ T9579] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.064434][ T9579] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.067028][ T9579] bridge_slave_1: entered allmulticast mode [ 124.069684][ T9579] bridge_slave_1: entered promiscuous mode [ 124.084564][ T9579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.105782][ T9579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.134682][ T9579] team0: Port device team_slave_0 added [ 124.138885][ T9579] team0: Port device team_slave_1 added [ 124.167029][ T340] bridge_slave_1: left allmulticast mode [ 124.168865][ T340] bridge_slave_1: left promiscuous mode [ 124.170881][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.174781][ T340] bridge_slave_0: left allmulticast mode [ 124.176630][ T340] bridge_slave_0: left promiscuous mode [ 124.178539][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.448999][ T340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.455179][ T340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.459821][ T340] bond0 (unregistering): Released all slaves [ 124.484213][ T9579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.486482][ T9579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.495048][ T9579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.499473][ T9579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.501764][ T9579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.510978][ T9579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.534502][ T9579] hsr_slave_0: entered promiscuous mode [ 124.536804][ T9579] hsr_slave_1: entered promiscuous mode [ 124.676934][ T9579] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 124.681641][ T9579] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 124.695243][ T9579] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 124.707352][ T9579] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 124.708499][ T9602] netlink: 24 bytes leftover after parsing attributes in process `syz.6.995'. [ 124.739208][ T9582] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 124.759692][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.995'. [ 124.776377][ T9602] hsr_slave_0 (unregistering): left promiscuous mode [ 124.793825][ T9579] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.797067][ T9579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.800608][ T9579] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.803824][ T9579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.831883][ T340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.835395][ T340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.838100][ T340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.840503][ T340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.847585][ T340] veth1_to_batadv: left promiscuous mode [ 124.849569][ T340] veth1_macvtap: left promiscuous mode [ 124.851391][ T340] veth0_macvtap: left promiscuous mode [ 124.855138][ T340] veth1_vlan: left promiscuous mode [ 124.857539][ T340] veth0_vlan: left promiscuous mode [ 125.050476][ T340] team0 (unregistering): Port device team_slave_1 removed [ 125.059209][ T340] team0 (unregistering): Port device team_slave_0 removed [ 125.149100][ T9615] ip6gre1: entered promiscuous mode [ 125.151470][ T9615] ip6gre1: entered allmulticast mode [ 125.164855][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.172201][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.222580][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'. [ 125.243759][ T9579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.258643][ T9579] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.266413][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.269339][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.277361][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.280552][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.304556][ T9579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.337160][ T9636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1001'. [ 125.401632][ T9642] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 125.413663][ T9642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.435664][ T9642] bond2: (slave bridge2): making interface the new active one [ 125.438988][ T9642] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 125.447096][ T9579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.521636][ T340] IPVS: stop unused estimator thread 0... [ 125.645687][ T9579] veth0_vlan: entered promiscuous mode [ 125.656590][ T9579] veth1_vlan: entered promiscuous mode [ 125.722202][ T9579] veth0_macvtap: entered promiscuous mode [ 125.729236][ T9579] veth1_macvtap: entered promiscuous mode [ 125.737657][ T9579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.747006][ T9579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.756036][ T100] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.759249][ T100] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.768806][ T100] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.780818][ T100] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.823705][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 125.843540][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'. [ 125.852389][ T5932] Bluetooth: hci3: command tx timeout [ 125.890919][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.894377][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.918555][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.924649][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.934431][ T5932] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.934559][ T5944] Bluetooth: hci0: command tx timeout [ 125.936934][ T9687] overlayfs: failed lookup in lower (/, name='file1', err=-40): overlapping layers [ 126.037458][ T9699] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 126.518274][ T9725] netlink: 'syz.7.1017': attribute type 1 has an invalid length. [ 126.785252][ T9734] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 126.915692][ T9742] openvswitch: netlink: Duplicate key (type 6). [ 127.094611][ T9752] Process accounting resumed [ 127.310145][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 127.310155][ T40] audit: type=1400 audit(1773445143.608:786): avc: denied { getattr } for pid=9780 comm="syz.2.1035" name="/" dev="nsfs" ino=4026532887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 127.325548][ T40] audit: type=1400 audit(1773445143.628:787): avc: denied { ioctl } for pid=9789 comm="syz.6.1037" path="socket:[36017]" dev="sockfs" ino=36017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 127.508102][ T9802] overlayfs: failed to resolve './file0': -2 [ 127.606571][ T9807] kvm: MWAIT instruction emulated as NOP! [ 127.790753][ T9817] netlink: 'syz.2.1042': attribute type 1 has an invalid length. [ 127.794230][ T9817] netlink: 'syz.2.1042': attribute type 2 has an invalid length. [ 127.832125][ T6610] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 127.922485][ T5944] Bluetooth: hci3: command tx timeout [ 127.993423][ T6610] usb 11-1: config 0 has no interfaces? [ 128.002376][ T5944] Bluetooth: hci0: command tx timeout [ 128.005461][ T6610] usb 11-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.3e [ 128.012066][ T6610] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.014717][ T6610] usb 11-1: Product: syz [ 128.016104][ T6610] usb 11-1: Manufacturer: syz [ 128.017656][ T6610] usb 11-1: SerialNumber: syz [ 128.030822][ T6610] usb 11-1: config 0 descriptor?? [ 128.191276][ T9835] Bluetooth: MGMT ver 1.23 [ 128.235595][ T7548] usb 11-1: USB disconnect, device number 2 [ 128.245308][ T9840] __nla_validate_parse: 3 callbacks suppressed [ 128.245322][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1047'. [ 128.355980][ T40] audit: type=1400 audit(1773445144.658:788): avc: denied { watch watch_reads } for pid=9857 comm="syz.7.1052" path="pipe:[31673]" dev="pipefs" ino=31673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 128.363705][ T9858] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1052'. [ 128.426157][ T40] audit: type=1400 audit(1773445144.728:789): avc: denied { setopt } for pid=9862 comm="syz.7.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 128.614875][ T40] audit: type=1400 audit(1773445144.918:790): avc: denied { setopt } for pid=9881 comm="syz.7.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 128.846571][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1067'. [ 128.849818][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1067'. [ 128.945414][ T9929] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:21 [ 129.270850][ T9947] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.273752][ T9947] bridge_slave_1: left allmulticast mode [ 129.275598][ T9947] bridge_slave_1: left promiscuous mode [ 129.277524][ T9947] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.318448][ T40] audit: type=1400 audit(1773445145.618:791): avc: denied { ioctl } for pid=9949 comm="syz.6.1079" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 129.331536][ T40] audit: type=1400 audit(1773445145.628:792): avc: denied { write } for pid=9949 comm="syz.6.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.428360][ T9964] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1084'. [ 129.428366][ T9962] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1084'. [ 129.433957][ T9964] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1084'. [ 129.433988][ T9968] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1084'. [ 129.434008][ T9968] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 129.445010][ T9964] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 129.514671][ T9978] /dev/nullb0: Can't open blockdev [ 129.689496][ T9989] input: syz0 as /devices/virtual/input/input25 [ 129.703017][ T40] audit: type=1400 audit(1773445146.008:793): avc: denied { ioctl } for pid=9988 comm="syz.2.1092" path="socket:[33672]" dev="sockfs" ino=33672 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 129.714131][ T40] audit: type=1400 audit(1773445146.018:794): avc: denied { map } for pid=9988 comm="syz.2.1092" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 129.750085][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1092'. [ 129.754038][ T9989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.756535][ T9989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.854087][ T9988] delete_channel: no stack [ 130.082106][ T5944] Bluetooth: hci0: command tx timeout [ 130.154353][T10002] CUSE: unknown device info "" [ 130.156645][T10002] CUSE: zero length info key specified [ 130.454823][T10015] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 130.460901][T10015] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 130.495466][T10015] random: crng reseeded on system resumption [ 130.497541][ T40] audit: type=1400 audit(1773445146.798:795): avc: denied { append } for pid=10014 comm="syz.6.1100" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.507341][T10015] Restarting kernel threads ... [ 130.511054][T10015] Done restarting kernel threads. [ 130.587176][T10019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10019 comm=syz.7.1102 [ 131.138242][T10047] usb usb8: usbfs: process 10047 (syz.2.1112) did not claim interface 0 before use [ 131.154813][T10049] bond0: Error: Cannot enslave bond to itself. [ 131.334539][T10068] overlay: ./file0 is not a directory [ 131.620287][T10085] netlink: 'syz.7.1123': attribute type 21 has an invalid length. [ 131.664290][T10090] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1124'. [ 131.731603][T10092] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.762295][ T5944] Bluetooth: hci2: command 0x0401 tx timeout [ 131.762624][ T1165] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 131.770165][ T1165] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 131.980788][T10129] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 132.095537][T10137] xt_cluster: node mask cannot exceed total number of nodes [ 132.172070][ T5944] Bluetooth: hci0: command tx timeout [ 132.232117][ T24] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 132.393616][ T24] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 132.397271][ T24] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 132.400580][ T24] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 133.158277][T10181] trusted_key: encrypted_key: insufficient parameters specified [ 133.323445][T10185] __nla_validate_parse: 4 callbacks suppressed [ 133.323461][T10185] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1153'. [ 133.628343][T10218] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1160'. [ 133.633338][T10218] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 133.842488][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.843032][ T1165] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 133.861129][ T1165] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 133.880574][T10237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10237 comm=syz.7.1163 [ 133.890997][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 133.891013][ T40] audit: type=1400 audit(1773445150.188:800): avc: denied { connect } for pid=10236 comm="syz.7.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 133.947767][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1163'. [ 133.951043][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1163'. [ 133.952308][ T40] audit: type=1400 audit(1773445150.248:801): avc: denied { write } for pid=10236 comm="syz.7.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 133.955280][T10242] netlink: 'syz.7.1163': attribute type 13 has an invalid length. [ 134.157506][T10252] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.177582][ T40] audit: type=1400 audit(1773445150.478:802): avc: denied { mounton } for pid=10253 comm="syz.2.1166" path="/proc/1019/task" dev="proc" ino=37033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 134.179776][T10254] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20001 [ 134.192698][ T7548] IPVS: starting estimator thread 0... [ 134.201903][T10257] IPv4: Oversized IP packet from 172.20.20.24 [ 134.204719][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 134.207199][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 134.282096][T10255] IPVS: using max 45 ests per chain, 108000 per kthread [ 134.304208][ T40] audit: type=1400 audit(1773445150.608:803): avc: denied { create } for pid=10265 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 134.997068][ T24] usb 11-1: string descriptor 0 read error: -71 [ 135.002155][ T24] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.008821][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.018505][ T24] usb 11-1: can't set config #1, error -71 [ 135.021261][ T24] usb 11-1: USB disconnect, device number 3 [ 135.044416][ T40] audit: type=1400 audit(1773445151.348:804): avc: denied { transfer } for pid=10287 comm="syz.3.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 135.052195][T10288] binder: 10287:10288 ioctl c0306201 200000000240 returned -22 [ 135.065786][T10288] pimreg: entered allmulticast mode [ 135.458260][T10324] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 135.460023][T10324] dvmrp1: ignored: set checksum disabled [ 135.462728][T10324] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1179'. [ 135.466890][ T40] audit: type=1400 audit(1773445151.768:805): avc: denied { connect } for pid=10320 comm="syz.3.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.475376][ T40] audit: type=1400 audit(1773445151.768:806): avc: denied { shutdown } for pid=10320 comm="syz.3.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.922090][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.922210][ T1165] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 135.927486][ T1165] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 137.686003][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.002119][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.002285][ T1165] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 138.006156][ T1165] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 138.067300][T10365] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 138.070219][T10364] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 138.071809][T10367] netlink: 'syz.6.1180': attribute type 11 has an invalid length. [ 138.205955][T10390] block nbd6: NBD_DISCONNECT [ 138.258750][ T40] audit: type=1400 audit(1773445154.558:807): avc: denied { setattr } for pid=10393 comm="syz.6.1190" name="NFC_LLCP" dev="sockfs" ino=36785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.317037][T10396] : entered promiscuous mode [ 138.432266][T10402] netlink: 'syz.2.1193': attribute type 1 has an invalid length. [ 138.486553][T10402] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 138.491012][T10402] bond3: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 138.497592][T10402] bond3: (slave vxcan1): making interface the new active one [ 138.501351][T10402] bond3: (slave vxcan1): Enslaving as an active interface with an up link [ 138.514239][T10402] /dev/sr0: Can't open blockdev [ 138.612572][T10407] sctp: [Deprecated]: syz.2.1194 (pid 10407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.612572][T10407] Use struct sctp_sack_info instead [ 139.084030][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1196'. [ 139.141257][T10413] /dev/sr0: Can't open blockdev [ 139.564987][T10426] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 139.737302][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1202'. [ 139.740556][T10430] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1202'. [ 139.750510][ T1152] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.750530][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1202'. [ 139.750549][T10430] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1202'. [ 139.754460][ T1152] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.764141][ T1152] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.768318][ T1152] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.882968][ T5987] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 139.894248][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1203'. [ 140.032127][ T5987] usb 7-1: Using ep0 maxpacket: 8 [ 140.037769][ T5987] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 140.042456][ T5987] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 140.045899][ T5987] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.049087][ T5987] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.054156][ T5987] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.057231][ T5987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.266430][ T5987] usb 7-1: usb_control_msg returned -32 [ 140.268282][ T5987] usbtmc 7-1:16.0: can't read capabilities [ 140.622284][ T40] audit: type=1400 audit(1773445156.928:808): avc: denied { listen } for pid=10427 comm="syz.2.1201" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 141.191825][T10446] tipc: Started in network mode [ 141.194013][T10446] tipc: Node identity bee5c4aac098, cluster identity 3865 [ 141.197652][T10446] tipc: Enabled bearer , priority 0 [ 141.201557][T10446] syzkaller0: MTU too low for tipc bearer [ 141.203808][T10446] tipc: Disabling bearer [ 141.315559][ T40] audit: type=1400 audit(1773445157.618:809): avc: denied { write } for pid=10450 comm="syz.7.1208" path="socket:[36826]" dev="sockfs" ino=36826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 141.405049][T10464] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1211'. [ 141.411279][T10466] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 141.414441][T10464] netlink: 190972 bytes leftover after parsing attributes in process `syz.7.1211'. [ 141.485196][T10473] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1214'. [ 141.593690][T10486] bond1: option downdelay: invalid value (18446744073709551615) [ 141.596198][T10486] bond1: option downdelay: allowed values 0 - 2147483647 [ 141.599660][T10486] bond1 (unregistering): Released all slaves [ 141.688729][T10486] bond1: option downdelay: invalid value (18446744073709551615) [ 141.691297][T10486] bond1: option downdelay: allowed values 0 - 2147483647 [ 141.695704][T10486] bond1 (unregistering): Released all slaves [ 141.733239][T10497] syzkaller1: entered promiscuous mode [ 141.735507][T10497] syzkaller1: entered allmulticast mode [ 141.781465][T10486] bond1: option downdelay: invalid value (18446744073709551615) [ 141.785249][T10486] bond1: option downdelay: allowed values 0 - 2147483647 [ 141.789066][T10486] bond1 (unregistering): Released all slaves [ 141.845334][T10486] bond1: option downdelay: invalid value (18446744073709551615) [ 141.848099][T10486] bond1: option downdelay: allowed values 0 - 2147483647 [ 141.851582][T10486] bond1 (unregistering): Released all slaves [ 141.938731][T10486] bond1: option downdelay: invalid value (18446744073709551615) [ 141.941284][T10486] bond1: option downdelay: allowed values 0 - 2147483647 [ 141.945375][T10486] bond1 (unregistering): Released all slaves [ 142.057290][T10486] bond1: option downdelay: invalid value (18446744073709551615) [ 142.060536][T10486] bond1: option downdelay: allowed values 0 - 2147483647 [ 142.065970][T10486] bond1 (unregistering): Released all slaves [ 142.177548][T10486] bond1: option downdelay: invalid value (18446744073709551615) [ 142.180395][T10486] bond1: option downdelay: allowed values 0 - 2147483647 [ 142.185458][T10486] bond1 (unregistering): Released all slaves [ 142.276734][T10486] bond1: option downdelay: invalid value (18446744073709551615) [ 142.279336][T10486] bond1: option downdelay: allowed values 0 - 2147483647 [ 142.283076][T10486] bond1 (unregistering): Released all slaves [ 142.351641][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1226'. [ 142.366924][T10486] bond1: option downdelay: invalid value (18446744073709551615) [ 142.369530][T10486] bond1: option downdelay: allowed values 0 - 2147483647 [ 142.372657][T10486] bond1 (unregistering): Released all slaves [ 142.494587][T10531] loop1: detected capacity change from 0 to 4 [ 142.499464][T10531] Dev loop1: unable to read RDB block 4 [ 142.502529][T10531] loop1: unable to read partition table [ 142.505035][T10531] loop1: partition table beyond EOD, truncated [ 142.507736][T10531] loop_reread_partitions: partition scan of loop1 (被x ) failed (rc=-5) [ 142.512723][T10531] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 142.585786][T10541] x_tables: duplicate underflow at hook 2 [ 142.648188][ T39] usb 7-1: USB disconnect, device number 16 [ 142.683654][T10547] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.811525][ T40] audit: type=1400 audit(1773445159.108:810): avc: denied { name_connect } for pid=10548 comm="syz.2.1232" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 142.876112][ T40] audit: type=1400 audit(1773445159.178:811): avc: denied { mounton } for pid=10553 comm="syz.6.1233" path="/71/file0" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 143.623046][T10573] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 143.987774][T10592] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 144.073092][T10605] fuse: Bad value for 'fd' [ 144.190521][T10616] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 144.376642][T10623] __nla_validate_parse: 3 callbacks suppressed [ 144.376659][T10623] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1254'. [ 144.382357][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1254'. [ 144.406486][T10633] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.1257'. [ 144.488407][T10637] fuse: Bad value for 'fd' [ 144.661341][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1261'. [ 144.665539][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1261'. [ 144.693812][T10648] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1262'. [ 144.696970][T10648] openvswitch: netlink: Key type 286 is out of range max 32 [ 144.730201][ T40] audit: type=1400 audit(1773445161.028:812): avc: denied { bind } for pid=10650 comm="syz.7.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 145.088897][T10668] x_tables: duplicate underflow at hook 2 [ 145.302335][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1270'. [ 145.319589][T10649] overlayfs: statfs failed on './file0' [ 145.368746][T10683] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 145.389402][T10683] bond4: entered promiscuous mode [ 145.391286][T10683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.396554][T10682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1272'. [ 145.400490][T10682] bond4: entered allmulticast mode [ 145.434334][T10691] loop5: detected capacity change from 0 to 7 [ 145.438897][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.442158][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 145.445786][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.448988][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 145.453064][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.456162][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 145.458878][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.461942][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 145.465296][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.468718][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 145.471477][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.474617][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 145.477907][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.481057][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 145.484416][T10691] ldm_validate_partition_table(): Disk read failed. [ 145.487392][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.491461][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 145.496878][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.500904][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 145.506525][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.510582][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 145.514363][T10691] Dev loop5: unable to read RDB block 0 [ 145.517243][T10691] loop5: unable to read partition table [ 145.519787][T10691] loop5: partition table beyond EOD, truncated [ 145.529731][T10691] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 145.593175][T10691] Invalid logical block size (2) [ 145.669042][T10710] qnx4: unable to read the superblock [ 145.753443][T10721] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1279'. [ 145.756520][T10721] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1279'. [ 145.812640][T10729] overlayfs: failed to clone upperpath [ 146.103637][T10760] netlink: 'syz.3.1289': attribute type 3 has an invalid length. [ 146.320177][T10793] ip6gre1: entered promiscuous mode [ 146.322894][T10793] ip6gre1: entered allmulticast mode [ 146.325792][ T53] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.345954][ T53] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.350382][T10793] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.359400][T10798] binder: 10787:10798 ioctl c0306201 2000000003c0 returned -14 [ 146.362256][ T6610] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.364692][T10797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10797 comm=syz.7.1291 [ 146.393494][T10798] binder: BINDER_SET_CONTEXT_MGR already set [ 146.395455][T10798] binder: 10787:10798 ioctl 40046207 0 returned -16 [ 146.651032][T10815] sp0: Synchronizing with TNC [ 147.121178][T10827] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 147.202268][ T6610] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.206999][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.364106][T10839] cgroup: subsys name conflicts with all [ 147.653801][ T40] audit: type=1400 audit(1773445163.958:813): avc: denied { read } for pid=10865 comm="syz.6.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 147.706115][T10869] netlink: 'syz.6.1320': attribute type 1 has an invalid length. [ 147.734264][T10869] bond2: entered promiscuous mode [ 147.736136][T10869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.800579][T10869] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 147.805263][T10869] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 147.809538][T10869] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 148.013050][T10880] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 148.333187][T10894] kAFS: No cell specified [ 148.351812][T10896] ip6gre1: entered promiscuous mode [ 148.354554][T10896] ip6gre1: entered allmulticast mode [ 148.919404][T10932] netlink: 'syz.6.1339': attribute type 11 has an invalid length. [ 149.024327][T10943] Bluetooth: MGMT ver 1.23 [ 149.031803][T10943] QAT: Device 2 not found [ 149.038091][T10944] QAT: Device 2 not found [ 149.055003][T10947] netlink: 'syz.2.1342': attribute type 1 has an invalid length. [ 149.967729][T10972] netlink: 'syz.6.1351': attribute type 13 has an invalid length. [ 150.041371][T10976] __nla_validate_parse: 11 callbacks suppressed [ 150.041383][T10976] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1352'. [ 150.148500][T10985] tmpfs: Cannot disable swap on remount [ 150.152698][T10986] netlink: 'syz.6.1354': attribute type 8 has an invalid length. [ 150.156185][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1354'. [ 150.252181][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.192400][T11018] binder: BINDER_SET_CONTEXT_MGR already set [ 151.194646][T11018] binder: 11017:11018 ioctl 4018620d 200000000040 returned -16 [ 151.197493][T11018] binder: 11017:11018 ioctl c0306201 2000000003c0 returned -14 [ 151.273428][T11030] bond3 (unregistering): Released all slaves [ 151.287991][T11033] syzkaller0: entered promiscuous mode [ 151.289942][T11033] syzkaller0: entered allmulticast mode [ 151.348608][T11038] sctp: [Deprecated]: syz.6.1377 (pid 11038) Use of int in max_burst socket option. [ 151.348608][T11038] Use struct sctp_assoc_value instead [ 151.445501][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1376'. [ 151.704069][ T40] audit: type=1400 audit(1773445168.008:814): avc: denied { getopt } for pid=11047 comm="syz.7.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.861973][T11058] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1381'. [ 151.865715][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1382'. [ 152.151844][ T40] audit: type=1400 audit(1773445168.448:815): avc: denied { mount } for pid=11064 comm="syz.3.1384" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 152.182074][ T40] audit: type=1400 audit(1773445168.458:816): avc: denied { remount } for pid=11064 comm="syz.3.1384" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 152.188457][ T40] audit: type=1400 audit(1773445168.468:817): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 152.211857][ T40] audit: type=1400 audit(1773445168.508:818): avc: denied { getopt } for pid=11069 comm="syz.3.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.219340][ T40] audit: type=1400 audit(1773445168.518:819): avc: denied { ioctl } for pid=11069 comm="syz.3.1385" path="socket:[42499]" dev="sockfs" ino=42499 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.266509][ T40] audit: type=1400 audit(1773445168.568:820): avc: denied { accept } for pid=11069 comm="syz.3.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.282560][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'. [ 152.411246][T11078] bond0: (slave nr0): Error: Device can not be enslaved while up [ 152.771291][T11089] overlayfs: failed to clone upperpath [ 152.937019][T11042] delete_channel: no stack [ 153.054583][T11094] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 153.057732][T11094] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 153.145278][T11100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1394'. [ 153.180165][ T40] audit: type=1400 audit(1773445169.478:821): avc: denied { append } for pid=11104 comm="syz.2.1395" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 153.382822][T11120] ucma_write: process 360 (syz.6.1400) changed security contexts after opening file descriptor, this is not allowed. [ 154.145390][T11129] program syz.2.1404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.150480][ T40] audit: type=1400 audit(1773445170.448:822): avc: denied { mounton } for pid=11128 comm="syz.2.1404" path="/proc/1233/cgroup" dev="proc" ino=43386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 154.159019][ T40] audit: type=1400 audit(1773445170.458:823): avc: denied { remount } for pid=11128 comm="syz.2.1404" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 154.184233][T11133] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1403'. [ 154.219690][ T40] audit: type=1400 audit(1773445170.518:824): avc: denied { ioctl } for pid=11131 comm="syz.2.1405" path="socket:[42638]" dev="sockfs" ino=42638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.311398][ T40] audit: type=1400 audit(1773445170.608:825): avc: denied { audit_write } for pid=11136 comm="syz.2.1407" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 154.325222][T11145] autofs4:pid:11145:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 155.053909][ T40] audit: type=1326 audit(1773445171.358:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11157 comm="syz.6.1412" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efea699c799 code=0x0 [ 155.150924][T11163] tmpfs: Too few inodes for current use [ 155.174577][T11166] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1414'. [ 155.403126][T11200] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1427'. [ 155.434359][T11203] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 155.436195][T11200] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1427'. [ 155.436680][T11203] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 155.445888][T11203] vhci_hcd vhci_hcd.0: Device attached [ 155.478492][T11211] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1431'. [ 155.489450][T11212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.498898][T11212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.507654][T11212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.563737][T11220] netlink: 'syz.2.1432': attribute type 30 has an invalid length. [ 155.723929][T11235] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1549 sclass=netlink_tcpdiag_socket pid=11235 comm=syz.7.1438 [ 155.731692][T11234] delete_channel: no stack [ 155.732627][ T9] usb 44-1: SetAddress Request (2) to port 0 [ 155.736942][ T9] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 155.962446][T11247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.967082][T11247] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1442'. [ 155.997485][T11206] vhci_hcd: connection reset by peer [ 155.998810][ T13] vhci_hcd vhci_hcd.3: stop threads [ 155.998833][ T13] vhci_hcd vhci_hcd.3: release socket [ 155.999427][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 156.292128][ T34] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 156.482453][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 156.485549][ T34] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 156.488351][ T34] usb 7-1: config 0 has no interface number 0 [ 156.490467][ T34] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.494422][ T34] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 156.498740][ T34] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.503203][ T34] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 156.514147][ T34] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 156.517061][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.523741][ T34] usb 7-1: config 0 descriptor?? [ 156.535639][ T34] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 156.790507][ T34] usb 7-1: USB disconnect, device number 17 [ 156.795211][ T34] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 156.978806][T11281] netlink: 71 bytes leftover after parsing attributes in process `syz.7.1451'. [ 157.278244][T11302] Failed to initialize the IGMP autojoin socket (err -2) [ 157.645961][ T6610] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 157.813537][ T6610] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.817345][ T6610] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.821475][ T6610] usb 7-1: config 0 interface 0 has no altsetting 0 [ 157.824758][ T6610] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 157.831946][ T6610] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.839489][ T6610] usb 7-1: config 0 descriptor?? [ 157.956393][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1477'. [ 157.963007][T11364] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1477'. [ 158.162165][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.241238][T11386] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 158.251215][T11386] CIFS mount error: No usable UNC path provided in device string! [ 158.251215][T11386] [ 158.254644][T11386] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 158.258900][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1480'. [ 158.261858][T11387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1480'. [ 158.275871][ T6610] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 158.278431][ T6610] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 158.284343][ T6610] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 158.286698][ T6610] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 158.288984][ T6610] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 158.291701][ T6610] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 158.476657][T11307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.483530][T11307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.490638][T11307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.496893][T11307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.502445][ T40] audit: type=1400 audit(1773445174.808:827): avc: denied { ioctl } for pid=11306 comm="syz.2.1460" path="socket:[40873]" dev="sockfs" ino=40873 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 158.516804][ T5987] usb 7-1: USB disconnect, device number 18 [ 159.765818][ T40] audit: type=1400 audit(1773445176.068:828): avc: denied { accept } for pid=11451 comm="syz.6.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.994085][T11473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.998795][T11473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.002158][T11472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.041599][ T40] audit: type=1400 audit(1773445176.338:829): avc: denied { getopt } for pid=11474 comm="syz.6.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 160.217067][T11482] __nla_validate_parse: 8 callbacks suppressed [ 160.217084][T11482] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1518'. [ 160.222161][ T1025] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 160.310979][T11487] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 160.376012][T11455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.380202][T11455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.385835][ T1025] usb 7-1: unable to get BOS descriptor or descriptor too short [ 160.388552][ T1025] usb 7-1: no configurations [ 160.390108][ T1025] usb 7-1: can't read configurations, error -22 [ 160.427557][T11491] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 160.430748][T11491] overlayfs: missing 'lowerdir' [ 160.482540][T11496] netlink: 'syz.6.1522': attribute type 1 has an invalid length. [ 160.518359][T11496] nvme_fabrics: missing parameter 'transport=%s' [ 160.521876][T11496] nvme_fabrics: missing parameter 'nqn=%s' [ 160.529186][T11496] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 160.532099][ T40] audit: type=1400 audit(1773445176.828:830): avc: denied { load_policy } for pid=11495 comm="syz.6.1522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 160.534630][T11496] SELinux: failed to load policy [ 160.543114][ T40] audit: type=1400 audit(1773445176.848:831): avc: denied { create } for pid=11498 comm="syz.7.1523" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 160.560369][ T40] audit: type=1400 audit(1773445176.858:832): avc: denied { unlink } for pid=9579 comm="syz-executor" name="file0" dev="tmpfs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 160.802214][ T9] usb 44-1: device descriptor read/8, error -110 [ 161.015766][T11517] /dev/sr0: Can't open blockdev [ 161.192977][ T9] usb usb44-port1: attempt power cycle [ 161.294867][T11534] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 161.617880][T11564] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1541'. [ 161.650368][ T40] audit: type=1400 audit(1773445177.948:833): avc: denied { relabelfrom } for pid=11566 comm="syz.3.1542" name="NETLINK" dev="sockfs" ino=42954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 161.650754][T11567] SELinux: Context system_u:object_r:getty_exec_t:s0 is not valid (left unmapped). [ 161.663816][ T40] audit: type=1400 audit(1773445177.968:834): avc: denied { relabelto } for pid=11566 comm="syz.3.1542" name="NETLINK" dev="sockfs" ino=42954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:getty_exec_t:s0" [ 161.752997][ T9] usb usb44-port1: unable to enumerate USB device [ 161.827372][T11579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=11579 comm=syz.6.1544 [ 161.908595][T11583] SQUASHFS error: Failed to read block 0x0: -5 [ 161.911640][T11583] unable to read squashfs_super_block [ 161.917123][T11583] loop5: detected capacity change from 0 to 7 [ 161.922619][T11583] Dev loop5: unable to read RDB block 7 [ 161.925165][T11583] loop5: AHDI p1 [ 161.927141][T11583] loop5: partition table partially beyond EOD, truncated [ 161.950651][T11583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=11583 comm=syz.6.1546 [ 161.967685][T11585] ref_ctr_offset mismatch. inode: 0x765 offset: 0x0 ref_ctr_offset(old): 0x16 ref_ctr_offset(new): 0x0 [ 161.997423][T11587] block nbd6: NBD_DISCONNECT [ 162.008696][ T40] audit: type=1400 audit(1773445178.308:835): avc: denied { map } for pid=11588 comm="syz.2.1549" path="pipe:[46246]" dev="pipefs" ino=46246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 162.081740][T11596] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1552'. [ 162.279338][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1560'. [ 162.282837][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1560'. [ 162.372752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 162.527384][T11647] fuse: Unknown parameter 'td' [ 162.527388][T11648] fuse: Unknown parameter 'td' [ 162.533086][T11647] netlink: 'syz.2.1564': attribute type 3 has an invalid length. [ 162.536697][T11648] netlink: 'syz.2.1564': attribute type 3 has an invalid length. [ 162.750186][T11655] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 162.852392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 162.935743][T11660] libceph: secret too big 289 [ 163.152387][T11668] Failed to initialize the IGMP autojoin socket (err -2) [ 163.171464][T11672] overlayfs: failed to clone upperpath [ 163.397341][T11677] ./bus: Can't lookup blockdev [ 163.397341][T11678] ./bus: Can't lookup blockdev [ 163.507096][ T40] audit: type=1400 audit(1773445179.808:836): avc: denied { map } for pid=11686 comm="syz.2.1577" path="socket:[47208]" dev="sockfs" ino=47208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.516100][ T40] audit: type=1400 audit(1773445179.808:837): avc: denied { read accept } for pid=11686 comm="syz.2.1577" path="socket:[47208]" dev="sockfs" ino=47208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.604372][T11697] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 163.613129][T11697] random: crng reseeded on system resumption [ 163.652698][ T40] audit: type=1400 audit(1773445179.958:838): avc: denied { listen } for pid=11691 comm="syz.2.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.807430][ T40] audit: type=1326 audit(1773445180.108:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11704 comm="syz.7.1583" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9566d9c799 code=0x0 [ 163.902090][ T1165] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 163.922324][ T1025] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 164.052092][ T1025] usb 11-1: device descriptor read/64, error -71 [ 164.063471][ T1165] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.067052][ T1165] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 164.070383][ T1165] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.073421][ T1165] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.078013][T11698] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.084265][ T1165] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.302154][ T1025] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 164.333748][ T34] usb 7-1: USB disconnect, device number 21 [ 164.434338][ T1025] usb 11-1: device descriptor read/64, error -71 [ 164.518660][T11719] tipc: Enabled bearer , priority 0 [ 164.522230][T11719] syzkaller0: entered promiscuous mode [ 164.524604][T11719] syzkaller0: entered allmulticast mode [ 164.537991][T11719] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1586'. [ 164.545461][T11719] tipc: Resetting bearer [ 164.552639][ T1025] usb usb11-port1: attempt power cycle [ 164.565673][T11722] tipc: Resetting bearer [ 164.578192][T11722] tipc: Disabling bearer [ 164.758347][T11737] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1590'. [ 164.814897][T11739] cgroup: Name too long [ 164.865192][ T40] audit: type=1800 audit(1773445181.162:840): pid=11739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.1591" name="nullb0" dev="tmpfs" ino=898 res=0 errno=0 [ 164.909578][T11748] netlink: 3660 bytes leftover after parsing attributes in process `syz.3.1594'. [ 164.912864][ T1025] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 164.919588][ T40] audit: type=1400 audit(1773445181.200:841): avc: denied { ioctl } for pid=11749 comm="syz.7.1595" path="socket:[47252]" dev="sockfs" ino=47252 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.944328][ T1025] usb 11-1: device descriptor read/8, error -71 [ 165.119791][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1598'. [ 165.123312][T11755] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1598'. [ 165.155737][ T40] audit: type=1400 audit(1773445181.434:842): avc: denied { block_suspend } for pid=11764 comm="syz.7.1599" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.221088][ T1025] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 165.242693][ T1025] usb 11-1: device descriptor read/8, error -71 [ 165.361547][ T1025] usb usb11-port1: unable to enumerate USB device [ 165.465357][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ea0e400: rx timeout, send abort [ 165.477940][ T40] audit: type=1400 audit(1773445181.744:843): avc: denied { read } for pid=5322 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 165.487720][ T40] audit: type=1400 audit(1773445181.744:844): avc: denied { search } for pid=5322 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.496756][ T40] audit: type=1400 audit(1773445181.744:845): avc: denied { search } for pid=5322 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.505929][ T40] audit: type=1400 audit(1773445181.744:846): avc: denied { add_name } for pid=5322 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.998353][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ea0e800: rx timeout, send abort [ 166.002529][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ea0e400: abort rx timeout. Force session deactivation [ 166.073210][T11773] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 166.117885][T11775] netlink: 'syz.7.1603': attribute type 4 has an invalid length. [ 166.128838][T11775] netlink: 'syz.7.1603': attribute type 4 has an invalid length. [ 166.533972][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ea0e800: abort rx timeout. Force session deactivation [ 167.058171][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'. [ 167.090116][T11813] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 167.840881][T11883] 9p: Bad value for 'wfdno' [ 167.904565][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1638'. [ 168.302081][T11911] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1643'. [ 168.670531][T11932] overlayfs: failed to clone lowerpath [ 168.815426][T11935] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1652'. [ 168.938210][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1653'. [ 168.945634][T11939] netlink: 'syz.7.1653': attribute type 12 has an invalid length. [ 168.948783][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1653'. [ 168.953662][T11939] netlink: 'syz.7.1653': attribute type 12 has an invalid length. [ 168.956834][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1653'. [ 168.960913][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1653'. [ 169.277673][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 169.277685][ T40] audit: type=1400 audit(1773445185.300:854): avc: denied { mount } for pid=11958 comm="syz.3.1659" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 169.381074][T11966] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1662'. [ 169.532238][T11974] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 169.552600][T11974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1666'. [ 169.560209][T11974] 9p: Bad value for 'wfdno' [ 169.778723][T11979] macvlan1: mtu greater than device maximum [ 169.781733][T11980] netlink: 'syz.3.1668': attribute type 1 has an invalid length. [ 169.784964][T11979] netlink: 'syz.3.1668': attribute type 1 has an invalid length. [ 169.793503][T11991] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 169.853261][T12000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65531 sclass=netlink_route_socket pid=12000 comm=syz.2.1673 [ 169.868566][ T40] audit: type=1326 audit(1773445185.863:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11984 comm="syz.7.1670" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9566d9c799 code=0x0 [ 169.938540][T12003] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 169.946818][T12002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.960114][ T40] audit: type=1400 audit(1773445185.938:856): avc: denied { attach_queue } for pid=12004 comm="syz.6.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 170.243615][T12012] Invalid logical block size (536872960) [ 170.301797][T12016] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 170.340367][T12018] Failed to initialize the IGMP autojoin socket (err -2) [ 170.448151][T12016] IPVS: Scheduler module ip_vs_sip not found [ 170.698429][T12056] vcan0: entered allmulticast mode [ 170.713705][T12049] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 170.763483][ T40] audit: type=1400 audit(1773445186.698:857): avc: denied { unmount } for pid=9306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 170.885131][ T40] audit: type=1400 audit(1773445186.811:858): avc: denied { getopt } for pid=12079 comm="syz.3.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 171.359544][T12104] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 171.483043][ T40] audit: type=1400 audit(1773445187.374:859): avc: denied { append } for pid=12117 comm="syz.3.1711" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 171.528062][ T40] audit: type=1400 audit(1773445187.411:860): avc: denied { getopt } for pid=12122 comm="syz.2.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.685342][T12133] chnl_net:caif_netlink_parms(): no params data found [ 171.830955][T12137] RDS: rds_bind could not find a transport for fe88::107, load rds_tcp or rds_rdma? [ 171.839983][T12137] binder: BC_ACQUIRE_RESULT not supported [ 171.841939][T12137] binder: 12136:12137 ioctl c0306201 2000000001c0 returned -22 [ 172.195092][T12155] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 172.258026][T12164] netlink: 'syz.7.1729': attribute type 1 has an invalid length. [ 172.269684][T12166] netlink: 'syz.6.1726': attribute type 1 has an invalid length. [ 172.281583][T12166] bond3: entered promiscuous mode [ 172.283878][T12166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.299145][ T40] audit: type=1800 audit(1773445188.143:861): pid=12164 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.7.1729" name="/newroot/209/file0" dev="tmpfs" ino=1136 res=0 errno=0 [ 172.568352][T12181] loop4: detected capacity change from 0 to 7 [ 172.571102][T12181] buffer_io_error: 10 callbacks suppressed [ 172.571111][T12181] Buffer I/O error on dev loop4, logical block 0, async page read [ 172.576334][T12181] Buffer I/O error on dev loop4, logical block 0, async page read [ 172.578954][T12181] Buffer I/O error on dev loop4, logical block 0, async page read [ 172.581590][T12181] Buffer I/O error on dev loop4, logical block 0, async page read [ 172.584124][T12181] Buffer I/O error on dev loop4, logical block 0, async page read [ 172.589161][T12181] Buffer I/O error on dev loop4, logical block 0, async page read [ 172.591795][T12181] Buffer I/O error on dev loop4, logical block 0, async page read [ 172.594712][T12181] ldm_validate_partition_table(): Disk read failed. [ 172.597258][T12181] Buffer I/O error on dev loop4, logical block 0, async page read [ 172.599864][T12181] Buffer I/O error on dev loop4, logical block 0, async page read [ 172.602597][T12181] Buffer I/O error on dev loop4, logical block 0, async page read [ 172.605155][T12181] Dev loop4: unable to read RDB block 0 [ 172.607099][T12181] loop4: unable to read partition table [ 172.609022][T12181] loop4: partition table beyond EOD, truncated [ 172.611173][T12181] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 172.887493][T12191] program syz.3.1737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.959764][T12201] __nla_validate_parse: 7 callbacks suppressed [ 172.959776][T12201] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1739'. [ 173.301261][T12211] kvm: user requested TSC rate below hardware speed [ 173.305794][T12211] "syz.3.1742" (12211) uses obsolete ecb(arc4) skcipher [ 174.780906][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.378197][T12155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.429814][T12219] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1743'. [ 175.430895][T12220] program syz.3.1744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.453562][T12218] netlink: 'syz.6.1745': attribute type 1 has an invalid length. [ 175.456042][T12218] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1745'. [ 175.468169][T12230] qrtr: Invalid version 0 [ 175.550081][T12247] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1754'. [ 175.552034][T12248] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1755'. [ 175.653688][T12263] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.656444][T12263] IPv6: NLM_F_CREATE should be set when creating new route [ 175.659120][T12263] IPv6: NLM_F_CREATE should be set when creating new route [ 175.660160][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1755'. [ 175.662317][T12263] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.664850][T12248] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1755'. [ 175.671686][T12248] netlink: 'syz.7.1755': attribute type 8 has an invalid length. [ 175.974127][ T1025] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 176.152942][ T1025] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.157798][ T1025] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 176.161820][ T1025] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 176.166412][ T1025] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 176.169692][ T1025] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.176275][T12271] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 176.180238][ T1025] hub 7-1:1.0: bad descriptor, ignoring hub [ 176.183408][ T1025] hub 7-1:1.0: probe with driver hub failed with error -5 [ 176.186743][ T1025] cdc_wdm 7-1:1.0: skipping garbage [ 176.189506][ T1025] cdc_wdm 7-1:1.0: skipping garbage [ 176.193499][ T1025] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 176.196041][ T1025] cdc_wdm 7-1:1.0: Unknown control protocol [ 176.414119][T12279] fuse: Bad value for 'user_id' [ 176.416125][T12279] fuse: Bad value for 'user_id' [ 176.450967][T12284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1765'. [ 176.451002][T12287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1765'. [ 176.457308][T12284] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 176.460913][T12284] gretap1: entered promiscuous mode [ 176.462643][T12284] gretap1: entered allmulticast mode [ 176.515382][T12298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58897 sclass=netlink_route_socket pid=12298 comm=syz.3.1768 [ 176.521993][ T9] usb 7-1: USB disconnect, device number 22 [ 176.714745][T12306] sockfs: Unknown parameter 'acl' [ 176.716593][T12306] sockfs: Unknown parameter 'acl' [ 176.720111][ T1165] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 176.911997][ T1165] usb 11-1: Using ep0 maxpacket: 8 [ 176.915746][ T1165] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.919314][ T1165] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 176.922268][ T1165] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.926318][ T1165] usb 11-1: config 0 descriptor?? [ 177.135699][ T34] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 177.143588][ T1165] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 177.159445][T12317] tmpfs: Group quota inode hardlimit too large. [ 177.160331][ T40] audit: type=1400 audit(1773445192.704:862): avc: denied { mounton } for pid=12316 comm="syz.3.1776" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 177.170752][T12324] ptrace attach of "/syz-executor exec"[12326] was attempted by "/syz-executor exec"[12324] [ 177.174273][T12324] ptrace attach of "/syz-executor exec"[12326] was attempted by "/syz-executor exec"[12324] [ 177.177664][T12324] ptrace attach of "/syz-executor exec"[12326] was attempted by "/syz-executor exec"[12324] [ 177.181677][T12324] ptrace attach of "/syz-executor exec"[12326] was attempted by "/syz-executor exec"[12324] [ 177.184981][T12324] ptrace attach of "/syz-executor exec"[12326] was attempted by "/syz-executor exec"[12324] [ 177.188272][T12324] ptrace attach of "/syz-executor exec"[12326] was attempted by "/syz-executor exec"[12324] [ 177.193164][T12324] ptrace attach of "/syz-executor exec"[12326] was attempted by "/syz-executor exec"[12324] [ 177.198036][T12324] ptrace attach of "/syz-executor exec"[12326] was attempted by "/syz-executor exec"[12324] [ 177.202649][T12324] ptrace attach of "/syz-executor exec"[12326] was attempted by "/syz-executor exec"[12324] [ 177.207212][T12324] ptrace attach of "/syz-executor exec"[12326] was attempted by "/syz-executor exec"[12324] [ 177.295782][ T34] usb 7-1: device descriptor read/64, error -71 [ 177.379833][T12344] netlink: 'syz.3.1784': attribute type 1 has an invalid length. [ 177.396671][T12344] bond4: entered promiscuous mode [ 177.398562][T12344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.423586][T12286] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1766'. [ 177.562110][ T34] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 177.575258][ T9] usb 11-1: USB disconnect, device number 8 [ 177.644581][ T40] audit: type=1326 audit(1773445193.154:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12355 comm="syz.6.1786" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efea699c799 code=0x0 [ 177.721913][ T34] usb 7-1: device descriptor read/64, error -71 [ 177.843915][ T34] usb usb7-port1: attempt power cycle [ 178.212099][ T34] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 178.244760][ T34] usb 7-1: device descriptor read/8, error -71 [ 178.511202][ T34] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 178.532228][ T34] usb 7-1: device descriptor read/8, error -71 [ 178.649269][ T34] usb usb7-port1: unable to enumerate USB device [ 178.874976][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 178.982024][T12385] __nla_validate_parse: 1 callbacks suppressed [ 178.982039][T12385] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1794'. [ 179.076983][T12387] dlm: non-version read from control device 194 [ 179.079442][T12387] dlm: Unknown command passed to DLM device : 34 [ 179.079442][T12387] [ 179.828725][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1793'. [ 181.413238][T12402] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1800'. [ 181.591048][T12420] syzkaller0: entered promiscuous mode [ 181.592875][T12420] syzkaller0: entered allmulticast mode [ 181.611643][T12424] NILFS (nullb0): couldn't find nilfs on the device [ 181.662389][T12422] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1805'. [ 181.747332][T12429] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 181.750300][ T40] audit: type=1400 audit(1773445197.001:864): avc: denied { mounton } for pid=12428 comm="syz.3.1807" path="/430/file0/file0" dev="9p" ino=73662593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 182.070128][ T1025] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 182.219450][ T1025] usb 11-1: device descriptor read/64, error -71 [ 182.486301][ T1025] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 182.570607][T12459] comedi comedi2: comedi_config --init_data is deprecated [ 182.582369][T12461] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1816'. [ 182.635196][ T1025] usb 11-1: device descriptor read/64, error -71 [ 182.716764][T12466] netlink: 'syz.3.1818': attribute type 9 has an invalid length. [ 182.726039][T12466] netlink: 'syz.3.1818': attribute type 11 has an invalid length. [ 182.731862][T12466] netlink: 'syz.3.1818': attribute type 12 has an invalid length. [ 182.735387][T12466] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.1818'. [ 182.752648][ T1025] usb usb11-port1: attempt power cycle [ 182.847126][ C2] vcan0: j1939_tp_rxtimer: 0xffff888055f13000: rx timeout, send abort [ 182.871313][T12473] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1820'. [ 182.985601][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1821'. [ 183.125289][ T1025] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 183.147001][ T1025] usb 11-1: device descriptor read/8, error -71 [ 183.215337][T12478] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 183.221475][T12478] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 183.380080][ C2] vcan0: j1939_tp_rxtimer: 0xffff888055f12400: rx timeout, send abort [ 183.383576][ C2] vcan0: j1939_tp_rxtimer: 0xffff888055f13000: abort rx timeout. Force session deactivation [ 183.402233][ T1025] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 183.424254][ T1025] usb 11-1: device descriptor read/8, error -71 [ 183.474146][T12500] syzkaller0: entered promiscuous mode [ 183.475950][T12500] syzkaller0: entered allmulticast mode [ 183.552812][ T1025] usb usb11-port1: unable to enumerate USB device [ 183.915731][ C2] vcan0: j1939_tp_rxtimer: 0xffff888055f12400: abort rx timeout. Force session deactivation [ 184.440746][T12564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=12564 comm=syz.7.1835 [ 184.616067][T12571] macsec0: entered promiscuous mode [ 184.619617][T12571] macsec0: entered allmulticast mode [ 184.621863][T12571] veth1_macvtap: entered allmulticast mode [ 184.625041][ T40] audit: type=1400 audit(1773445199.703:865): avc: denied { create } for pid=12570 comm="syz.2.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 185.048600][ T40] audit: type=1400 audit(1773445200.098:866): avc: denied { setopt } for pid=12581 comm="syz.6.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 185.055953][ T40] audit: type=1400 audit(1773445200.107:867): avc: denied { ioctl } for pid=12581 comm="syz.6.1842" path="socket:[51720]" dev="sockfs" ino=51720 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 185.099236][ T40] audit: type=1400 audit(1773445200.154:868): avc: denied { mounton } for pid=12579 comm="syz.2.1841" path="/502/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 185.235349][T12598] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1847'. [ 185.274596][T12600] unsupported nla_type 4111 [ 185.773030][T12631] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1861'. [ 185.804578][T12633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12633 comm=syz.7.1862 [ 185.850373][T12639] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1863'. [ 185.854907][T12639] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1863'. [ 185.857962][T12639] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1863'. [ 185.968418][T12649] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1867'. [ 186.141247][ T6610] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 186.151918][T12656] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1870'. [ 186.212683][T12658] netlink: 'syz.3.1871': attribute type 4 has an invalid length. [ 186.216395][T12658] netlink: 'syz.3.1871': attribute type 1 has an invalid length. [ 186.219771][T12658] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1871'. [ 186.324374][ T6610] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.328597][ T6610] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.332798][ T6610] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.336556][ T6610] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.341306][ T6610] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.345074][ T6610] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.353322][ T6610] usb 11-1: config 0 descriptor?? [ 186.432902][T12666] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1873'. [ 186.797924][ T6610] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x98000) [ 186.933746][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 186.935987][ T1115] ata1: failed to read log page 10h (errno=-5) [ 186.938152][ T1115] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 186.941407][ T1115] ata1.00: irq_stat 0x41000008 [ 186.943004][ T1115] ata1.00: failed command: READ FPDMA QUEUED [ 186.944983][ T1115] ata1.00: cmd 60/c0:70:76:91:03/04:00:00:00:00/40 tag 14 ncq dma 622592 in [ 186.944983][ T1115] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 186.950564][ T1115] ata1.00: status: { DRDY } [ 186.953097][ T1115] ata1.00: error: { ABRT } [ 186.955275][ T1115] ata1.00: configured for UDMA/100 [ 186.957398][ T1115] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 186.960583][ T1115] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 186.963662][ T1115] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 186.966368][ T1115] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 03 91 76 00 04 c0 00 [ 186.969021][ T1115] blk_print_req_error: 10 callbacks suppressed [ 186.969029][ T1115] I/O error, dev sda, sector 233846 op 0x0:(READ) flags 0x80700 phys_seg 137 prio class 2 [ 186.974708][ T1115] ata1: EH complete [ 187.045664][ T9815] usb 11-1: USB disconnect, device number 13 [ 187.078375][T12678] fido_id[12678]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb11/report_descriptor': No such file or directory [ 187.274917][T12693] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 187.339829][T12695] bridge6: entered promiscuous mode [ 187.342171][T12695] bridge6: entered allmulticast mode [ 187.367562][ T5932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.374568][ T5932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.379803][ T5932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.388867][ T5932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.392574][ T5932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.406172][T12696] Failed to initialize the IGMP autojoin socket (err -2) [ 187.580170][ T40] audit: type=1400 audit(1773445202.462:869): avc: denied { append } for pid=12703 comm="syz.6.1885" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 187.597302][T12696] chnl_net:caif_netlink_parms(): no params data found [ 187.620097][T12704] program syz.6.1885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.735404][T12696] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.737834][T12696] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.740583][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1887'. [ 187.744777][T12696] bridge_slave_0: entered allmulticast mode [ 187.747814][T12696] bridge_slave_0: entered promiscuous mode [ 187.758065][T12696] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.761856][T12696] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.766188][T12696] bridge_slave_1: entered allmulticast mode [ 187.769816][T12696] bridge_slave_1: entered promiscuous mode [ 187.854417][T12696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.873699][T12696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.939911][T12696] team0: Port device team_slave_0 added [ 187.953783][T12696] team0: Port device team_slave_1 added [ 187.985695][T12696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.991395][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.004359][T12696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.012571][T12696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.015619][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.026798][T12696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.100744][T12696] hsr_slave_0: entered promiscuous mode [ 188.103466][T12696] hsr_slave_1: entered promiscuous mode [ 188.105633][T12696] debugfs: 'hsr0' already exists in 'hsr' [ 188.107569][T12696] Cannot create hsr debugfs directory [ 188.312708][T12696] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.392392][T12746] netlink: 'syz.6.1898': attribute type 3 has an invalid length. [ 188.424269][T12696] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.530273][T12696] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.591398][T12774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.600846][T12696] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.658363][T12778] overlayfs: failed to resolve './file1': -2 [ 188.743022][ T40] audit: type=1400 audit(1773445203.569:870): avc: denied { setcurrent } for pid=12779 comm="syz.6.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 188.751835][ T40] audit: type=1401 audit(1773445203.569:871): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 188.767823][T12696] netdevsim netdevsim3 netdevsim0: renamed from eth18 [ 188.780342][T12696] netdevsim netdevsim3 netdevsim1: renamed from eth19 [ 188.788812][T12696] netdevsim netdevsim3 netdevsim2: renamed from eth20 [ 188.794355][T12696] netdevsim netdevsim3 netdevsim3: renamed from eth21 [ 188.853065][ T40] audit: type=1400 audit(1773445203.673:872): avc: denied { mount } for pid=12793 comm="syz.7.1910" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 188.901442][ T3248] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 188.915685][T12798] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 188.994027][T12696] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.013101][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.016178][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.040924][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.043232][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.045386][T12806] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 189.078886][ T3248] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 189.081392][ T3248] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 189.086872][ T3248] usb 7-1: config 0 interface 0 has no altsetting 0 [ 189.099735][ T3248] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 189.102594][ T3248] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 189.106603][ T3248] usb 7-1: Product: syz [ 189.108003][ T3248] usb 7-1: Manufacturer: syz [ 189.109608][ T3248] usb 7-1: SerialNumber: syz [ 189.112660][ T40] audit: type=1400 audit(1773445203.907:873): avc: denied { create } for pid=12811 comm="syz.7.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 189.113955][ T3248] usb 7-1: config 0 descriptor?? [ 189.132335][ T3248] hub 7-1:0.0: bad descriptor, ignoring hub [ 189.134335][ T3248] hub 7-1:0.0: probe with driver hub failed with error -5 [ 189.147792][ T3248] usb 7-1: selecting invalid altsetting 0 [ 189.324956][T12696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.350118][T12820] nbd6: detected capacity change from 0 to 63 [ 189.354038][T12828] block nbd6: NBD_DISCONNECT [ 189.358665][T12828] block nbd6: Disconnected due to user request. [ 189.362484][T12828] block nbd6: shutting down sockets [ 189.367780][ T8410] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.373443][ T8410] buffer_io_error: 14 callbacks suppressed [ 189.373452][ T8410] Buffer I/O error on dev nbd6, logical block 2, async page read [ 189.417306][ C1] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.421438][ C1] Buffer I/O error on dev nbd6, logical block 0, async page read [ 189.430308][ C1] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.434419][ C1] Buffer I/O error on dev nbd6, logical block 1, async page read [ 189.438941][ T2120] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.443553][ T2120] Buffer I/O error on dev nbd6, logical block 3, async page read [ 189.449329][ T8410] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.452820][ T8410] Buffer I/O error on dev nbd6, logical block 0, async page read [ 189.455400][ T8410] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.461274][ T8410] Buffer I/O error on dev nbd6, logical block 1, async page read [ 189.463817][ T8410] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.467923][ T8410] Buffer I/O error on dev nbd6, logical block 2, async page read [ 189.470944][ T8410] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.474034][ T8410] Buffer I/O error on dev nbd6, logical block 3, async page read [ 189.476580][ T8410] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.483010][T12696] veth0_vlan: entered promiscuous mode [ 189.483209][ T8410] Buffer I/O error on dev nbd6, logical block 0, async page read [ 189.490864][T12696] veth1_vlan: entered promiscuous mode [ 189.491014][ T8410] Buffer I/O error on dev nbd6, logical block 1, async page read [ 189.496283][ T8410] ldm_validate_partition_table(): Disk read failed. [ 189.499551][ T8410] Dev nbd6: unable to read RDB block 0 [ 189.501744][ T8410] nbd6: unable to read partition table [ 189.512435][ T8410] ldm_validate_partition_table(): Disk read failed. [ 189.514825][ T8410] Dev nbd6: unable to read RDB block 0 [ 189.518309][ T8410] nbd6: unable to read partition table [ 189.580017][T12696] veth0_macvtap: entered promiscuous mode [ 189.598110][T12696] veth1_macvtap: entered promiscuous mode [ 189.628224][ T5932] Bluetooth: hci2: command tx timeout [ 189.665708][T12696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.687074][T12696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.693498][T12696] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 189.701944][T12696] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 189.709692][T12696] wireguard: wg0: Could not create IPv4 socket [ 189.722935][T12696] wireguard: wg1: Could not create IPv4 socket [ 189.728133][T12696] wireguard: wg2: Could not create IPv4 socket [ 189.798796][T12776] usb 7-1: reset high-speed USB device number 27 using dummy_hcd [ 189.993836][T12776] usb 7-1: device firmware changed [ 190.000131][ T6610] usb 7-1: USB disconnect, device number 27 [ 190.148313][ T6610] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 190.313745][ T6610] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 190.316503][ T6610] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 190.316591][T12873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5805 sclass=netlink_route_socket pid=12873 comm=syz.7.1932 [ 190.319922][ T6610] usb 7-1: config 0 interface 0 has no altsetting 0 [ 190.330262][ T6610] usb 7-1: string descriptor 0 read error: -22 [ 190.332391][ T6610] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 190.335303][ T6610] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 190.339289][ T6610] usb 7-1: config 0 descriptor?? [ 190.343984][ T6610] hub 7-1:0.0: bad descriptor, ignoring hub [ 190.346002][ T6610] hub 7-1:0.0: probe with driver hub failed with error -5 [ 190.349845][ T6610] usb 7-1: selecting invalid altsetting 0 [ 190.443146][T12885] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 190.448656][T12885] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.523590][T12903] netlink: 'syz.6.1938': attribute type 7 has an invalid length. [ 190.528253][T12903] tmpfs: Unknown parameter 'E˶j~4(&.ԿzBt?2r\i3+U@O*?+M%x.q֙a:k*ovԆMD*TU9P3W-Dܾ9ViR/B k!e}^g'污9d5u`Hmݛȁ#$v [ 190.528253][T12903] ;Ϻ?6vCfʆ5>e"i3r' [ 190.689171][T12917] /dev/sr0: Can't open blockdev [ 190.798593][ T1025] usb 7-1: USB disconnect, device number 28 [ 191.674100][ T40] audit: type=1400 audit(1773445206.309:874): avc: denied { mounton } for pid=12972 comm="syz.2.1948" path="/511/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 191.678267][T12973] __nla_validate_parse: 4 callbacks suppressed [ 191.678283][T12973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1948'. [ 191.716405][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1945'. [ 191.920806][T12996] ipvlan2: entered allmulticast mode [ 191.922775][T12996] batadv_slave_1: entered allmulticast mode [ 192.127813][T13009] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 192.429278][T12813] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 192.494037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 192.589002][T12813] usb 7-1: Using ep0 maxpacket: 32 [ 192.592415][T12813] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 192.595924][T12813] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 192.601157][T12813] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.604755][T12813] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 192.611050][T12813] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 192.613965][T12813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.616528][T12813] usb 7-1: Product: syz [ 192.617870][T12813] usb 7-1: Manufacturer: syz [ 192.619378][T12813] usb 7-1: SerialNumber: syz [ 192.625897][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 192.629290][T12813] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input30 [ 192.802534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 192.842228][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1956'. [ 192.852747][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1956'. [ 192.855266][T12813] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 192.858289][T12813] (id 0x00) [ 192.863802][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1956'. [ 192.868931][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1956'. [ 192.908711][T12813] rc_core: IR keymap rc-imon-pad not found [ 192.919490][T12813] Registered IR keymap rc-empty [ 192.921681][T12813] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 192.926501][T13043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.929898][T12813] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 192.934431][T13043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.090461][T12813] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 193.097273][T12813] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input31 [ 193.104011][T12813] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:29> initialized [ 193.291568][ T34] usb 7-1: USB disconnect, device number 29 [ 193.512327][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1955'. [ 193.515355][T13012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1955'. [ 193.674410][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1960'. [ 193.679537][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1960'. [ 193.994127][T13111] input: syz1 as /devices/virtual/input/input32 [ 193.997917][T13111] input: failed to attach handler leds to device input32, error: -6 [ 194.139549][T13131] netlink: 'syz.2.1970': attribute type 3 has an invalid length. [ 194.239095][T13141] bridge0: entered promiscuous mode [ 194.243970][T13141] macvlan5: entered promiscuous mode [ 194.296249][ T40] audit: type=1400 audit(1773445208.768:875): avc: denied { setattr } for pid=13143 comm="syz.2.1974" name="" dev="pipefs" ino=52923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 194.416161][T13153] bond7: (slave gre0): Device is not bonding slave [ 194.418515][T13153] bond7: option active_slave: invalid value (gre0) [ 194.422107][T13153] bond7 (unregistering): Released all slaves [ 194.729185][T13188] overlayfs: failed to clone lowerpath [ 194.746966][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.750554][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.754796][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.759048][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.767783][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.818242][T13191] Failed to initialize the IGMP autojoin socket (err -2) [ 195.333677][T13260] overlayfs: failed to clone upperpath [ 195.655980][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802721ac00: rx timeout, send abort [ 196.188903][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802721b800: rx timeout, send abort [ 196.192590][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802721ac00: abort rx timeout. Force session deactivation [ 196.280155][ T40] audit: type=1400 audit(1773445210.644:876): avc: denied { watch_with_perm } for pid=13324 comm="syz.7.2003" path="/303/bus" dev="tmpfs" ino=1635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 196.337186][ T40] audit: type=1400 audit(1773445210.691:877): avc: denied { create } for pid=13334 comm="syz.2.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 196.380071][T13342] Failed to initialize the IGMP autojoin socket (err -2) [ 196.586179][ T40] audit: type=1400 audit(1773445210.926:878): avc: denied { mount } for pid=13374 comm="syz.2.2013" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 196.616395][ T40] audit: type=1400 audit(1773445210.954:879): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 196.652339][T13389] /dev/sr0: Can't open blockdev [ 196.690252][T13191] [ 196.691093][T13191] ====================================================== [ 196.693344][T13191] WARNING: possible circular locking dependency detected [ 196.695556][T13191] syzkaller #0 Tainted: G L [ 196.697781][T13191] ------------------------------------------------------ [ 196.700095][T13191] syz-executor/13191 is trying to acquire lock: [ 196.702518][T13191] ffffffff8e9aafc0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x4b/0x6f0 [ 196.705774][T13191] [ 196.705774][T13191] but task is already holding lock: [ 196.708569][T13191] ffff88805646c538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x53/0xbc0 [ 196.712306][T13191] [ 196.712306][T13191] which lock already depends on the new lock. [ 196.712306][T13191] [ 196.715912][T13191] [ 196.715912][T13191] the existing dependency chain (in reverse order) is: [ 196.717209][ T40] audit: type=1400 audit(1773445211.020:880): avc: denied { getopt } for pid=13395 comm="syz.6.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 196.719418][T13191] [ 196.719418][T13191] -> #7 (&idev->mc_lock [ 196.725351][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802721b800: abort rx timeout. Force session deactivation [ 196.734322][T13191] ){+.+.}-{4:4}: [ 196.735761][T13191] __mutex_lock+0x1a2/0x1b90 [ 196.737525][T13191] __ipv6_dev_mc_inc+0x53/0xbc0 [ 196.739234][T13191] addrconf_join_solict+0x109/0x160 [ 196.741103][T13191] __ipv6_dev_ac_inc+0x938/0xdc0 [ 196.742997][T13191] ipv6_sock_ac_join+0x929/0x10d0 [ 196.744804][T13191] do_ipv6_setsockopt+0x37b4/0x4510 [ 196.746693][T13191] ipv6_setsockopt+0xcb/0x170 [ 196.748610][T13191] sctp_setsockopt+0x161/0xb370 [ 196.750850][T13191] do_sock_setsockopt+0xf3/0x1d0 [ 196.753019][T13191] __sys_setsockopt+0x195/0x220 [ 196.755190][T13191] __x64_sys_setsockopt+0xbd/0x160 [ 196.757488][T13191] do_syscall_64+0x106/0xf80 [ 196.759469][T13191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.761621][T13191] [ 196.761621][T13191] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 196.764054][T13191] lock_sock_nested+0x41/0xf0 [ 196.765747][T13191] inet_shutdown+0x67/0x410 [ 196.767392][T13191] nbd_mark_nsock_dead+0xae/0x5c0 [ 196.769170][T13191] recv_work+0x5fb/0x8c0 [ 196.770717][T13191] process_one_work+0x9d7/0x1920 [ 196.772461][T13191] worker_thread+0x5da/0xe40 [ 196.774120][T13191] kthread+0x370/0x450 [ 196.775633][T13191] ret_from_fork+0x754/0xd80 [ 196.777295][T13191] ret_from_fork_asm+0x1a/0x30 [ 196.779011][T13191] [ 196.779011][T13191] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 196.781491][T13191] __mutex_lock+0x1a2/0x1b90 [ 196.783156][T13191] nbd_queue_rq+0x428/0x1080 [ 196.784794][T13191] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 196.786759][T13191] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 196.788944][T13191] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 196.791018][T13191] blk_mq_run_hw_queue+0x23c/0x670 [ 196.792818][T13191] blk_mq_dispatch_list+0x51d/0x1360 [ 196.794667][T13191] blk_mq_flush_plug_list+0x130/0x600 [ 196.796547][T13191] __blk_flush_plug+0x2c4/0x4b0 [ 196.798273][T13191] __submit_bio+0x584/0x6c0 [ 196.799888][T13191] submit_bio_noacct_nocheck+0x562/0xc10 [ 196.802244][T13191] submit_bio_noacct+0xd17/0x2010 [ 196.804464][T13191] submit_bh_wbc+0x59c/0x770 [ 196.806186][T13191] block_read_full_folio+0x264/0x8e0 [ 196.808304][T13191] filemap_read_folio+0xfc/0x3b0 [ 196.810132][T13191] do_read_cache_folio+0x2d7/0x6b0 [ 196.812008][T13191] read_part_sector+0xd1/0x370 [ 196.813746][T13191] adfspart_check_ICS+0x93/0x910 [ 196.815521][T13191] bdev_disk_changed+0x7f8/0xc80 [ 196.817286][T13191] blkdev_get_whole+0x187/0x290 [ 196.819026][T13191] bdev_open+0x2c7/0xe40 [ 196.820589][T13191] blkdev_open+0x34e/0x4f0 [ 196.822224][T13191] do_dentry_open+0x6d8/0x1660 [ 196.823948][T13191] vfs_open+0x82/0x3f0 [ 196.825469][T13191] path_openat+0x208c/0x31a0 [ 196.827141][T13191] do_file_open+0x20e/0x430 [ 196.828775][T13191] do_sys_openat2+0x10d/0x1e0 [ 196.830470][T13191] __x64_sys_openat+0x12d/0x210 [ 196.832213][T13191] do_syscall_64+0x106/0xf80 [ 196.833897][T13191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.835966][T13191] [ 196.835966][T13191] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 196.838346][T13191] __mutex_lock+0x1a2/0x1b90 [ 196.840072][T13191] nbd_queue_rq+0xba/0x1080 [ 196.841736][T13191] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 196.843750][T13191] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 196.845969][T13191] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 196.848159][T13191] blk_mq_run_hw_queue+0x23c/0x670 [ 196.850035][T13191] blk_mq_dispatch_list+0x51d/0x1360 [ 196.851937][T13191] blk_mq_flush_plug_list+0x130/0x600 [ 196.853857][T13191] __blk_flush_plug+0x2c4/0x4b0 [ 196.855597][T13191] __submit_bio+0x584/0x6c0 [ 196.857321][T13191] submit_bio_noacct_nocheck+0x562/0xc10 [ 196.859282][T13191] submit_bio_noacct+0xd17/0x2010 [ 196.861139][T13191] submit_bh_wbc+0x59c/0x770 [ 196.862797][T13191] block_read_full_folio+0x264/0x8e0 [ 196.864629][T13191] filemap_read_folio+0xfc/0x3b0 [ 196.866321][T13191] do_read_cache_folio+0x2d7/0x6b0 [ 196.868125][T13191] read_part_sector+0xd1/0x370 [ 196.869778][T13191] adfspart_check_ICS+0x93/0x910 [ 196.871489][T13191] bdev_disk_changed+0x7f8/0xc80 [ 196.873212][T13191] blkdev_get_whole+0x187/0x290 [ 196.874907][T13191] bdev_open+0x2c7/0xe40 [ 196.876438][T13191] blkdev_open+0x34e/0x4f0 [ 196.878045][T13191] do_dentry_open+0x6d8/0x1660 [ 196.879720][T13191] vfs_open+0x82/0x3f0 [ 196.881226][T13191] path_openat+0x208c/0x31a0 [ 196.882895][T13191] do_file_open+0x20e/0x430 [ 196.884532][T13191] do_sys_openat2+0x10d/0x1e0 [ 196.886202][T13191] __x64_sys_openat+0x12d/0x210 [ 196.887903][T13191] do_syscall_64+0x106/0xf80 [ 196.889531][T13191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.891500][T13191] [ 196.891500][T13191] -> #3 (set->srcu){.+.+}-{0:0}: [ 196.893839][T13191] __synchronize_srcu+0xa1/0x2a0 [ 196.895686][T13191] blk_mq_quiesce_queue+0x149/0x1c0 [ 196.898001][T13191] elevator_switch+0x17b/0x7e0 [ 196.900015][T13191] elevator_change+0x352/0x530 [ 196.902124][T13191] elevator_set_default+0x29e/0x360 [ 196.904088][T13191] blk_register_queue+0x412/0x590 [ 196.906186][T13191] __add_disk+0x73f/0xe40 [ 196.908188][T13191] add_disk_fwnode+0x118/0x5c0 [ 196.910117][T13191] nbd_dev_add+0x77a/0xb10 [ 196.911833][T13191] nbd_init+0x291/0x2b0 [ 196.913472][T13191] do_one_initcall+0x11d/0x760 [ 196.915195][T13191] kernel_init_freeable+0x6e5/0x7a0 [ 196.917245][T13191] kernel_init+0x1f/0x1e0 [ 196.918892][T13191] ret_from_fork+0x754/0xd80 [ 196.920881][T13191] ret_from_fork_asm+0x1a/0x30 [ 196.922837][T13191] [ 196.922837][T13191] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 196.925352][T13191] __mutex_lock+0x1a2/0x1b90 [ 196.926981][T13191] elevator_change+0x1bc/0x530 [ 196.928817][T13191] elevator_set_none+0x92/0xf0 [ 196.930931][T13191] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 196.933528][T13191] nbd_start_device+0x1a6/0xbd0 [ 196.935631][T13191] nbd_ioctl+0x4a6/0xd30 [ 196.937510][T13191] blkdev_ioctl+0x5ad/0x6f0 [ 196.939265][T13191] __x64_sys_ioctl+0x18e/0x210 [ 196.941048][T13191] do_syscall_64+0x106/0xf80 [ 196.942722][T13191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.944768][T13191] [ 196.944768][T13191] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 196.947549][T13191] blk_alloc_queue+0x610/0x790 [ 196.949071][T13191] blk_mq_alloc_queue+0x174/0x290 [ 196.951193][T13191] __blk_mq_alloc_disk+0x29/0x120 [ 196.953472][T13191] nbd_dev_add+0x492/0xb10 [ 196.955283][T13191] nbd_init+0x291/0x2b0 [ 196.956868][T13191] do_one_initcall+0x11d/0x760 [ 196.958908][T13191] kernel_init_freeable+0x6e5/0x7a0 [ 196.960753][T13191] kernel_init+0x1f/0x1e0 [ 196.962298][T13191] ret_from_fork+0x754/0xd80 [ 196.964037][T13191] ret_from_fork_asm+0x1a/0x30 [ 196.966205][T13191] [ 196.966205][T13191] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 196.968662][T13191] __lock_acquire+0x14b8/0x2630 [ 196.970626][T13191] lock_acquire+0x1cf/0x380 [ 196.972446][T13191] fs_reclaim_acquire+0xc4/0x100 [ 196.974211][T13191] __kmalloc_cache_noprof+0x4b/0x6f0 [ 196.976077][T13191] __ipv6_dev_mc_inc+0x2f1/0xbc0 [ 196.977834][T13191] ipv6_add_dev+0xb78/0x1520 [ 196.979725][T13191] addrconf_notify+0x563/0x19c0 [ 196.981547][T13191] notifier_call_chain+0x99/0x420 [ 196.983739][T13191] call_netdevice_notifiers_info+0xbe/0x110 [ 196.986017][T13191] register_netdevice+0x16e6/0x2210 [ 196.988056][T13191] nsim_create+0xc27/0x1370 [ 196.990062][T13191] __nsim_dev_port_add+0x2f4/0x790 [ 196.991998][T13191] nsim_drv_probe+0xeb7/0x14b0 [ 196.993743][T13191] really_probe+0x241/0xa60 [ 196.995375][T13191] __driver_probe_device+0x1de/0x400 [ 196.997276][T13191] driver_probe_device+0x4c/0x1b0 [ 196.999075][T13191] __device_attach_driver+0x1df/0x340 [ 197.000995][T13191] bus_for_each_drv+0x159/0x1e0 [ 197.002756][T13191] __device_attach+0x1e4/0x4d0 [ 197.004474][T13191] device_initial_probe+0xaf/0xd0 [ 197.006289][T13191] bus_probe_device+0x64/0x160 [ 197.008011][T13191] device_add+0x11d9/0x1950 [ 197.009652][T13191] new_device_store+0x40b/0x700 [ 197.011421][T13191] bus_attr_store+0x74/0xb0 [ 197.013070][T13191] sysfs_kf_write+0xf2/0x150 [ 197.014737][T13191] kernfs_fop_write_iter+0x3e0/0x5f0 [ 197.016637][T13191] vfs_write+0x6ac/0x1070 [ 197.018231][T13191] ksys_write+0x12a/0x250 [ 197.019830][T13191] do_syscall_64+0x106/0xf80 [ 197.021526][T13191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.023587][T13191] [ 197.023587][T13191] other info that might help us debug this: [ 197.023587][T13191] [ 197.026833][T13191] Chain exists of: [ 197.026833][T13191] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 197.026833][T13191] [ 197.031517][T13191] Possible unsafe locking scenario: [ 197.031517][T13191] [ 197.034291][T13191] CPU0 CPU1 [ 197.036537][T13191] ---- ---- [ 197.038607][T13191] lock(&idev->mc_lock); [ 197.040447][T13191] lock(sk_lock-AF_INET6); [ 197.043301][T13191] lock(&idev->mc_lock); [ 197.046018][T13191] lock(fs_reclaim); [ 197.047732][T13191] [ 197.047732][T13191] *** DEADLOCK *** [ 197.047732][T13191] [ 197.050871][T13191] 9 locks held by syz-executor/13191: [ 197.053024][T13191] #0: ffff88802e03e420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 197.056728][T13191] #1: ffff88805bdce888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 197.060206][T13191] #2: ffff88802a681c38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 197.063423][T13191] #3: ffffffff8fb69a08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0xfe/0x700 [ 197.066700][T13191] #4: ffff888055b440e8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 197.069724][T13191] #5: ffff888055c1e250 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_probe+0xd4/0x14b0 [ 197.073277][T13191] #6: ffffffff906112e8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x936/0x1370 [ 197.076879][T13191] #7: ffff8880280c4d40 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: register_netdevice+0x16c6/0x2210 [ 197.080444][T13191] #8: ffff88805646c538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x53/0xbc0 [ 197.083861][T13191] [ 197.083861][T13191] stack backtrace: [ 197.085741][T13191] CPU: 2 UID: 0 PID: 13191 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 197.085757][T13191] Tainted: [L]=SOFTLOCKUP [ 197.085761][T13191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.085767][T13191] Call Trace: [ 197.085772][T13191] [ 197.085778][T13191] dump_stack_lvl+0x100/0x190 [ 197.085795][T13191] print_circular_bug.cold+0x178/0x1c7 [ 197.085812][T13191] check_noncircular+0x146/0x160 [ 197.085830][T13191] __lock_acquire+0x14b8/0x2630 [ 197.085848][T13191] ? __ipv6_dev_mc_inc+0x53/0xbc0 [ 197.085859][T13191] lock_acquire+0x1cf/0x380 [ 197.085875][T13191] ? __kmalloc_cache_noprof+0x4b/0x6f0 [ 197.085893][T13191] fs_reclaim_acquire+0xc4/0x100 [ 197.085908][T13191] ? __kmalloc_cache_noprof+0x4b/0x6f0 [ 197.085926][T13191] __kmalloc_cache_noprof+0x4b/0x6f0 [ 197.085945][T13191] ? __ipv6_dev_mc_inc+0x2f1/0xbc0 [ 197.085963][T13191] __ipv6_dev_mc_inc+0x2f1/0xbc0 [ 197.085980][T13191] ipv6_add_dev+0xb78/0x1520 [ 197.085993][T13191] addrconf_notify+0x563/0x19c0 [ 197.086009][T13191] ? ip6mr_device_event+0x1bc/0x230 [ 197.086019][T13191] notifier_call_chain+0x99/0x420 [ 197.086030][T13191] call_netdevice_notifiers_info+0xbe/0x110 [ 197.086046][T13191] register_netdevice+0x16e6/0x2210 [ 197.086060][T13191] ? __pfx_register_netdevice+0x10/0x10 [ 197.086077][T13191] ? debugfs_create_file_full+0x41/0x60 [ 197.086098][T13191] nsim_create+0xc27/0x1370 [ 197.086116][T13191] __nsim_dev_port_add+0x2f4/0x790 [ 197.086134][T13191] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 197.086152][T13191] ? nsim_dev_hwstats_init+0xf5/0x4f0 [ 197.086171][T13191] nsim_drv_probe+0xeb7/0x14b0 [ 197.086185][T13191] ? __pfx_nsim_drv_probe+0x10/0x10 [ 197.086199][T13191] ? kernfs_put+0x3f/0x60 [ 197.086209][T13191] ? sysfs_create_link+0x68/0xc0 [ 197.086225][T13191] ? __pfx_nsim_bus_probe+0x10/0x10 [ 197.086243][T13191] really_probe+0x241/0xa60 [ 197.086261][T13191] __driver_probe_device+0x1de/0x400 [ 197.086282][T13191] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 197.086302][T13191] driver_probe_device+0x4c/0x1b0 [ 197.086324][T13191] __device_attach_driver+0x1df/0x340 [ 197.086340][T13191] ? __pfx___device_attach_driver+0x10/0x10 [ 197.086355][T13191] bus_for_each_drv+0x159/0x1e0 [ 197.086366][T13191] ? __pfx_bus_for_each_drv+0x10/0x10 [ 197.086379][T13191] __device_attach+0x1e4/0x4d0 [ 197.086394][T13191] ? __pfx___device_attach+0x10/0x10 [ 197.086408][T13191] ? do_raw_spin_unlock+0x145/0x1e0 [ 197.086420][T13191] device_initial_probe+0xaf/0xd0 [ 197.086440][T13191] bus_probe_device+0x64/0x160 [ 197.086459][T13191] device_add+0x11d9/0x1950 [ 197.086474][T13191] ? __pfx_device_add+0x10/0x10 [ 197.086487][T13191] ? lockdep_init_map_type+0x5c/0x250 [ 197.086502][T13191] ? __init_waitqueue_head+0xca/0x150 [ 197.086521][T13191] new_device_store+0x40b/0x700 [ 197.086536][T13191] ? __pfx_new_device_store+0x10/0x10 [ 197.086552][T13191] ? find_held_lock+0x2b/0x80 [ 197.086565][T13191] ? sysfs_file_kobj+0xe4/0x290 [ 197.086578][T13191] ? sysfs_file_kobj+0xe4/0x290 [ 197.086591][T13191] ? __pfx_new_device_store+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 197.086606][T13191] bus_attr_store+0x74/0xb0 [ 197.086616][T13191] ? __pfx_bus_attr_store+0x10/0x10 [ 197.086626][T13191] sysfs_kf_write+0xf2/0x150 [ 197.086640][T13191] kernfs_fop_write_iter+0x3e0/0x5f0 [ 197.086652][T13191] ? __pfx_sysfs_kf_write+0x10/0x10 [ 197.086666][T13191] vfs_write+0x6ac/0x1070 [ 197.086682][T13191] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 197.086694][T13191] ? __pfx_vfs_write+0x10/0x10 [ 197.086710][T13191] ? __pfx_do_sys_openat2+0x10/0x10 [ 197.086725][T13191] ksys_write+0x12a/0x250 [ 197.086740][T13191] ? __pfx_ksys_write+0x10/0x10 [ 197.086757][T13191] do_syscall_64+0x106/0xf80 [ 197.086769][T13191] ? clear_bhb_loop+0x40/0x90 [ 197.086781][T13191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.086791][T13191] RIP: 0033:0x7f49db15cfce [ 197.086800][T13191] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 197.086810][T13191] RSP: 002b:00007fffec1b0248 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.086820][T13191] RAX: ffffffffffffffda RBX: 0000555583d93500 RCX: 00007f49db15cfce [ 197.086827][T13191] RDX: 0000000000000003 RSI: 00007fffec1b02d0 RDI: 0000000000000005 [ 197.086833][T13191] RBP: 00007f49db233540 R08: 0000000000000000 R09: 0000000000000000 [ 197.086838][T13191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 197.086844][T13191] R13: 00007fffec1b02d0 R14: 00007f49dbf44620 R15: 0000000000000003 [ 197.086853][T13191] [ 197.088159][ T5944] Bluetooth: hci2: command tx timeout [ 197.131829][T13402] __nla_validate_parse: 12 callbacks suppressed [ 197.131840][T13402] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2020'. [ 197.163457][T13191] netdevsim netdevsim3 netdevsim0: renamed from eth18 [ 197.171485][ T40] audit: type=1400 audit(1773445211.461:881): avc: denied { write } for pid=5867 comm="syz-executor" path="pipe:[6423]" dev="pipefs" ino=6423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 197.410937][ T1152] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.414177][ T1152] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.542022][ T1152] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.545959][ T1152] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.695408][ T1152] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.699161][ T1152] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.797212][ T1152] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.800925][ T1152] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.947437][ T1152] bridge_slave_0: left allmulticast mode [ 197.949360][ T1152] bridge_slave_0: left promiscuous mode [ 197.951253][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.852837][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.857029][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.860437][ T1152] bond0 (unregistering): Released all slaves [ 198.863737][ T1152] bond1 (unregistering): Released all slaves [ 198.869077][ T1152] bond2 (unregistering): Released all slaves [ 198.874283][ T1152] bond3 (unregistering): Released all slaves [ 198.879988][ T1152] bond4 (unregistering): Released all slaves [ 199.195709][ T1152] hsr_slave_1: left promiscuous mode [ 199.197943][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.200392][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.202893][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.205271][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.209896][ T1152] veth1_macvtap: left promiscuous mode [ 199.211714][ T1152] veth0_macvtap: left promiscuous mode [ 199.213508][ T1152] veth1_vlan: left promiscuous mode [ 199.215214][ T1152] veth0_vlan: left promiscuous mode [ 199.274101][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 199.278795][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 201.384690][ T1419] ieee802154 phy0 wpan0: encryption failed: -22