last executing test programs: 3m43.493067066s ago: executing program 1 (id=462): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bfd000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@cpuid={0x64, 0x18, {0x280, 0x1}}], 0x18}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000080)={'rose0\x00'}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r11, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008000) 3m43.222869702s ago: executing program 1 (id=471): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000080)=""/235, 0xeb, &(0x7f0000000180)=""/39, 0x1, 0x3}}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {0x10, 0xfff1}, {0xd, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x41005) 3m43.222552778s ago: executing program 1 (id=472): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x421}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x10d840) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x7, 0xff]) r2 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x4) 3m43.15288745s ago: executing program 1 (id=473): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000010}, 0x4) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000040)={0x80000001, 0x7f, 0x8, 0x0, 0x0, 0x2, "77afcd484bbeb37fc22331a9d74d92c1", 0x4, 0x3, 0x5, 0x3, 0x10, 0x7, 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 3m42.252824275s ago: executing program 1 (id=481): r0 = fanotify_init(0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) lseek(r0, 0x4000000000000002, 0x3) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xf) read(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xda) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@report={0xd8, 0x20, 0x300, 0x70bd26, 0x25dfdbfb, {0x27, {@in=@rand_addr=0x64010101, @in=@multicast1, 0x4e24, 0x0, 0x4e24, 0x5, 0x2, 0xa0}}, [@extra_flags={0x8, 0x18, 0x4}, @tmpl={0x84, 0x5, [{{@in=@local, 0x4d5, 0xff}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x3500, 0x2, 0x3, 0x3, 0x48a20c8b, 0x800, 0x40}, {{@in6=@local, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3505, 0x0, 0x3, 0x2, 0x4, 0x80000001, 0x80000000}]}]}, 0xd8}}, 0x24000058) ioperm(0x0, 0x7fff, 0x15f9) r4 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x100) listen(r5, 0x7fff) accept(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ptrace$getregset(0x4204, r4, 0x201, &(0x7f0000000740)={0x0, 0x96}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) 3m42.016382052s ago: executing program 1 (id=486): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000340)=0x7, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, 0x0, 0x0}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r3, 0x540b, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/llc/socket\x00') getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x3cf, 0x10}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={r6, 0x5, 0x4, 0x32a1, 0x4, 0x5, 0x9, 0x200, {r7, @in6={{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2}}, 0x1000, 0x7fff, 0x8, 0x3, 0x2}}, &(0x7f0000000500)=0xb0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0xf9}]}, 0x41) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r8, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x80, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040810) 3m27.012670757s ago: executing program 32 (id=486): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000340)=0x7, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, 0x0, 0x0}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r3, 0x540b, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/llc/socket\x00') getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x3cf, 0x10}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={r6, 0x5, 0x4, 0x32a1, 0x4, 0x5, 0x9, 0x200, {r7, @in6={{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2}}, 0x1000, 0x7fff, 0x8, 0x3, 0x2}}, &(0x7f0000000500)=0xb0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0xf9}]}, 0x41) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r8, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x80, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040810) 2m43.450850947s ago: executing program 4 (id=1179): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x800) sendmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="48d5da3b79d238acaab4f4f550734ee131", 0x11}], 0x1, &(0x7f0000001480)}}], 0x1, 0x20004010) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x7, 0x0, r3, &(0x7f0000000340), 0x0, 0xfffffffffffffffe}]) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8048802) 2m43.162333227s ago: executing program 4 (id=1180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0xd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002340)=ANY=[@ANYBLOB="e001000000000000", @ANYRES64=r2, @ANYBLOB="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"], 0x1e0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002240)={&(0x7f0000002180)=@deltfilter={0x8c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff2}, {0xa}, {0xd, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0xce4f}, @filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x7, 0x4}}, @TCA_U32_INDEV={0x14, 0x8, 'syzkaller0\x00'}, @TCA_U32_MARK={0x10, 0xa, {0x2, 0xe6a}}, @TCA_U32_HASH={0x8, 0x2, 0xffffff50}, @TCA_U32_LINK={0x8, 0x3, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0x31, 0x6}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000001) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0xd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020) (async) write$FUSE_DIRENT(r1, &(0x7f0000002340)=ANY=[@ANYBLOB="e001000000000000", @ANYRES64=r2, @ANYBLOB="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"], 0x1e0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002240)={&(0x7f0000002180)=@deltfilter={0x8c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff2}, {0xa}, {0xd, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0xce4f}, @filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x7, 0x4}}, @TCA_U32_INDEV={0x14, 0x8, 'syzkaller0\x00'}, @TCA_U32_MARK={0x10, 0xa, {0x2, 0xe6a}}, @TCA_U32_HASH={0x8, 0x2, 0xffffff50}, @TCA_U32_LINK={0x8, 0x3, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0x31, 0x6}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000001) (async) 2m42.862390628s ago: executing program 4 (id=1181): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x28, r1, 0x0, 0x70bd24, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x80) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x8082, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0xa000006, 0x0, 0x0, 0x0, 0x4000007}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x3, 0x7, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xc, 0x9}) r4 = syz_open_procfs$pagemap(r3, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000080)={0x60, 0x1, &(0x7f00006e5000/0x2000)=nil, &(0x7f000079a000/0x4000)=nil, 0x6, &(0x7f0000000100)=[{0x9, 0x101, 0x8}], 0x1, 0x7f, 0x20, 0x5, 0x1c, 0x50}) 2m40.81056507s ago: executing program 4 (id=1185): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000140)='./bus\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r2, 0x0, 0xb, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) unlink(&(0x7f00000002c0)='./file0\x00') 2m40.73098706s ago: executing program 4 (id=1188): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000), 0x4) open$dir(&(0x7f0000000080)='./file0\x00', 0x719900, 0x8c) syz_io_uring_setup(0x336d, &(0x7f0000000240)={0x0, 0x4ef2, 0x400, 0x1, 0x35}, &(0x7f0000000140), &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="7b87f20f", @ANYBLOB="01", @ANYBLOB="507d99302282fa15b0ed89081a25b83a9f455e77662a"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m40.589049194s ago: executing program 4 (id=1193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000180), 0x0}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f00000000c0)=[{r3, 0x200}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = userfaultfd(0x1) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x4, 0x7c, 0x4}, {0x663d, 0x88, 0xfb, 0xb}, {0xb1, 0x84, 0x5}]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x103001, &(0x7f00000000c0)={@align=0xc13b, {0x1000, 0x5, 0x6, 0xf67d}}, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) write$nci(r8, &(0x7f0000000240)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x3, @f={0x54, 0x1, 0x6, 0x2, 0xf, 0x80, 0x5, {0x6, 0x3, "cc0390"}, 0xb3, 0x5, 0x8, 0x5}}, 0x14) poll(&(0x7f00000001c0)=[{r0, 0x1600}, {r1, 0xd026}, {r4, 0x201}, {r5, 0x2}, {r6, 0x82}, {r7, 0x80}, {r8, 0x4621}], 0x7, 0xc1a) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m40.526866806s ago: executing program 33 (id=1193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000180), 0x0}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f00000000c0)=[{r3, 0x200}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = userfaultfd(0x1) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x4, 0x7c, 0x4}, {0x663d, 0x88, 0xfb, 0xb}, {0xb1, 0x84, 0x5}]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x103001, &(0x7f00000000c0)={@align=0xc13b, {0x1000, 0x5, 0x6, 0xf67d}}, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) write$nci(r8, &(0x7f0000000240)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x3, @f={0x54, 0x1, 0x6, 0x2, 0xf, 0x80, 0x5, {0x6, 0x3, "cc0390"}, 0xb3, 0x5, 0x8, 0x5}}, 0x14) poll(&(0x7f00000001c0)=[{r0, 0x1600}, {r1, 0xd026}, {r4, 0x201}, {r5, 0x2}, {r6, 0x82}, {r7, 0x80}, {r8, 0x4621}], 0x7, 0xc1a) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m40.114544418s ago: executing program 5 (id=2013): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006ab000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900", 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0xde2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, 0x0}) timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x2, @tid=r1}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1) (async) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xfffffffc, 0x13580}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) write(r5, &(0x7f00000000c0)="1b0000001e005f0214f6fffffffffff80700"/27, 0x1b) (async) write(r5, &(0x7f00000000c0)="1b0000001e005f0214f6fffffffffff80700"/27, 0x1b) r6 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f0000000000)={0x21, &(0x7f00000001c0)=[{0x3c, '\x00', @buffer={"38912e14b96acbb942644cd1944750bafecc30dc6f1f636f0e7ece59a75ceef1", 0x20}, 0x9}]}) (async) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f0000000000)={0x21, &(0x7f00000001c0)=[{0x3c, '\x00', @buffer={"38912e14b96acbb942644cd1944750bafecc30dc6f1f636f0e7ece59a75ceef1", 0x20}, 0x9}]}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 1m39.959821411s ago: executing program 5 (id=2018): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000040000100fcff0700fedbdf250100000004004780100001800c00108008000100", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="eff05514b57bbd73cb898bf042f439a2836c9ccf6b6b130189d79e250f06e6753398d36b9e06943906108e884995f1eb99a67afc2ffd7f7fd50dda58dd531fd2e6d1d200b0643cb8129d07b9dd44da4d22d9cd2587983aeee5b61ac8"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) r7 = gettid() r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) syz_open_procfs(r7, &(0x7f0000000380)='attr\x00') recvmsg(r4, &(0x7f0000000b40)={&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000540)=""/136, 0x88}, {&(0x7f0000000600)=""/248, 0xf8}, {&(0x7f0000000700)=""/94, 0x5e}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/97, 0x61}, {&(0x7f0000000880)=""/207, 0xcf}, {&(0x7f0000000980)=""/120, 0x78}, {&(0x7f0000000a00)=""/59, 0x3b}], 0x8, &(0x7f0000000ac0)=""/98, 0x62}, 0x2002) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_trace', 0x41c3, 0x0) sendfile(r10, r10, 0x0, 0xa) write$tun(r10, &(0x7f0000000400)={@val, @val={0x0, 0x1, 0x4, 0xf34b, 0x2, 0x80}, @arp=@generic={0x0, 0xe8f5, 0x6, 0x8, 0xa, @remote, "90d4f469b500027e", @local, "14ee321696af88ea13a32d8717c54d"}}, 0x39) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="2000000014002101a600000000000000000200b000", @ANYRES32=r13, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)=ANY=[@ANYBLOB="dd000000", @ANYRES16=r1, @ANYBLOB="000229bd7000fbdbdf25070000000400cc001c00e700a53dd8cb891c23d6d0fac4968e2c48654370bdee8ee6ab0b0a00e800ffffffffffff00000a00e80008021100000000001c00e7001306938b5064c0dfb3cab4fe24743bf51b4f25ec1cd32a041c00e700d154a23b0e3598a169ba9ceb300aa416a541ff55c002c65b0a00e80008021100000100002400178004000600040004000400050004000600040005000400020004000100040004001c00178004000600adff0300040001000400060004000300040001000800050009000000"], 0xd8}, 0x1, 0x0, 0x0, 0x48c0}, 0x20048000) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getvlan={0x38, 0x72, 0x4, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r13}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 1m39.017222331s ago: executing program 5 (id=2043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000300)="644ee8", 0x3}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x1], 0x0, 0x0, 0x1}}, 0x40) mount(&(0x7f0000000b40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x20000a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000000c0)={0x0, 'batadv_slave_1\x00', {0x4}, 0xbfa}) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000180a05000000000000000000020000001c0003801800038014000100776732000000000000000000000000000900020073797a30000000000900010073797a30"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1m38.953680333s ago: executing program 5 (id=2045): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) (rerun: 64) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) (async, rerun: 64) umount2(&(0x7f0000000140)='./file0\x00', 0x2) (async, rerun: 64) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m38.878535776s ago: executing program 5 (id=2049): setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000000)=0x8117, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000003c0)={0x1, 0x0, 0xb, 0xb03}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000300)={0x8, r0, 0x2}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0xf, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x39}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0xf, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x39}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000db0200000000000004000000ff250600ffff0000012701000700000095000000000000002d99040008000000183a000005000000000000000000000085200000040000000baa0600f0ffffffb7080000000000007b8af8ff00000000b7080000712300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000000000001d"], &(0x7f00000004c0)='syzkaller\x00', 0xfffffffe, 0xbf, &(0x7f0000000500)=""/191, 0x0, 0x40, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000640)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x1, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000ec0)=[r3, r4, r5, r6, r7], &(0x7f0000000f00)=[{0x3, 0x4, 0x5, 0x6}, {0x5, 0x2, 0x7, 0x5}, {0x0, 0x5, 0x8, 0x4}], 0x10, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) r12 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x121000, 0x4}, 0x18) getdents(r12, &(0x7f00000000c0)=""/167, 0xa7) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r11, 0xc040aed5, &(0x7f0000000240)={0x1000, 0x315000}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r13 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000200)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_LM(r13, 0x6, 0x3, &(0x7f00000002c0)=0x22, 0x4) 1m38.506482017s ago: executing program 5 (id=2052): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r1) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x40000000, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xe60dceaedab677a4, 0x10e) 1m38.44541989s ago: executing program 34 (id=2052): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r1) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x40000000, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xe60dceaedab677a4, 0x10e) 4.374317029s ago: executing program 3 (id=3254): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$key(0xf, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x3, 0x1, 0x7, 0x0, 0x3}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000010c0), 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES64=r1, @ANYRESDEC=0x0]) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1403, 0x10, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d3ca830e94f353}, 0xc802) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_fuse_handle_req(r3, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000040)=0x8000) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400, 0x40}, 0x18) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r8, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r6, 0xc040564b, &(0x7f0000000080)={0xadd8, 0x0, 0x201f, 0x2db6, 0x9, {0x7, 0x80}}) 4.354875895s ago: executing program 3 (id=3257): r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r4, @ANYBLOB="0872cb5c", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r5) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d1a2b6c, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_GETOSPACE(r7, 0x8010500c, &(0x7f0000000280)) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 4.226900822s ago: executing program 3 (id=3262): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00b2843ca120746759088500001000030425bd", @ANYRES32=0x0, @ANYBLOB="018c0000075005001c0012800b00010062726964676500000c0002800500170000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000040)={0x2, 0x7f}, 0x2) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01220d000000a45b455018218109009e3ce0b2ba2e64c917f4b23f2912b3b1e89e6fc7c752464c34ad1fd0c56465b342ff8f1050f0968ed5562b36bf470420be7e28587b20859728f6752739753060ea209e63358d08cd7448f990e4750bcf29431ac4823d922de16af5881027f0e97ee54e435140de2ba8612cbcebc61358f25e1e93d3bf5d09da58debafd4f50191bb9c82169132a831385f41c857369605d56f11492e2615ecb0c39931d7cff497c60f29bc74e0c79337137ac51ff27008d4a714166ae2532acc94172708ca0acc16e5e83a08194a8779aa66f1fd9ab2120a3890b55e219767be2dcff6f7bb8f0781f63ccd3ba43"], 0x0}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0x3000c0c0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10020) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000040)=0x3) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000080)) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000001740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @local}}}}}}, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.415936s ago: executing program 6 (id=3295): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00@'], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff0026}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="280100005f105e1bb5815f22a867153e97a3fa72d1bdc3410590b60af2ae343da3131f805d32a3c24825feb5b5f3ccd533cb64508069a2ccf2fa1da79f729a79561d0742bff2ac518a41", @ANYRES16=r11, @ANYBLOB="27092bbd7000ffdbdf25030000000c0008004d0000000000000008000100000040"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x840) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000280)={0x3, r9, 0x7ffffff5, 0x8000ffff, 0xa, 0x1ff, 0x1}) clock_gettime(0x0, &(0x7f0000002000)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001f00)=[{{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/56, 0x38}], 0x1, &(0x7f0000000640)=""/15, 0xf}, 0x5}, {{&(0x7f0000000680)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/131, 0x83}, {&(0x7f0000000a00)=""/247, 0xf7}, {&(0x7f0000000b00)=""/204, 0xcc}], 0x4}}, {{&(0x7f0000000c00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000c80)=""/189, 0xbd}], 0x1, &(0x7f0000000d40)=""/28, 0x1c}, 0xc58}, {{&(0x7f0000000d80)=@ax25={{}, [@bcast, @rose, @rose, @bcast, @netrom, @default, @default, @default]}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/174, 0xae}], 0x2}, 0x401}], 0x4, 0x40002041, &(0x7f0000002040)={r12, r13+10000000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r9, 0x0, 0x4d, 0x7, 0x800, 0x0, {0x80000001, 0xfff, 0x0, 0x6, 0x9, 0x9, 0x5, 0x100, 0xb, 0x80, 0x0, 0x40c, 0x5, 0x6, "4e80de46358e7f255a5d3f52e16f724fd04ef0eb3e6202d127cf9208f8a3226c"}}) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='F', 0x1, 0xff) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r14, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r14, &(0x7f0000000000), 0xd) socket$kcm(0x29, 0x5, 0x0) 2.310742734s ago: executing program 6 (id=3297): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000002c0)="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", 0x193}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) syz_clone(0x21000011, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 2.076422385s ago: executing program 6 (id=3302): r0 = open(&(0x7f0000000300)='.\x00', 0x1500, 0x0) flock(r0, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) syz_clone3(&(0x7f0000000340)={0x103480, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x15}, &(0x7f0000000100)=""/110, 0x6e, &(0x7f0000000180)=""/234, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000580)="1c0000001d005f0214ffff11000000f9070000000d00000000d432ee", 0x1c) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) write(r3, 0x0, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x9, r1}) open(&(0x7f0000000300)='.\x00', 0x1500, 0x0) (async) flock(r0, 0x1) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) (async) syz_clone3(&(0x7f0000000340)={0x103480, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x15}, &(0x7f0000000100)=""/110, 0x6e, &(0x7f0000000180)=""/234, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58) (async) socket(0x10, 0x3, 0x0) (async) write(r2, &(0x7f0000000580)="1c0000001d005f0214ffff11000000f9070000000d00000000d432ee", 0x1c) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) (async) write(r3, 0x0, 0x0) (async) fcntl$lock(r3, 0x25, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x9, r1}) (async) 2.023500004s ago: executing program 0 (id=3303): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x2, 0x1}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000080)=[0x138d, 0x400b, 0x2a17438e, 0x899e, 0x3, 0xffffdffb, 0x47, 0x9, 0xfffffe01, 0x5, 0x4, 0x2, 0x6, 0x880e, 0x0], 0x0, 0x4000007}) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x40, 0x3a, 0x1, @empty, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x24a4, {0x7, 0x6, "b1ce39", 0x200, 0x33, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x27}, [@srh={0x4, 0x0, 0x4, 0x0, 0x0, 0x50, 0x9}], "e7dee9204a281be3"}}}}}}}, 0x0) 2.023303092s ago: executing program 6 (id=3304): r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0xffffffff80000000, 0x0, 0x121, 0x2, 0x1}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x300000d, 0x3) write$FUSE_CREATE_OPEN(r3, &(0x7f00000002c0)={0xa0, 0x0, 0x0, {{0x2, 0x0, 0xffff, 0x8, 0x2, 0x6, {0x6, 0xffffffffffffff42, 0xffffffffffffffff, 0x4922, 0x0, 0x40, 0x3, 0x401, 0x10, 0x4000, 0x9, 0x0, 0x0, 0xfffffffb, 0x8}}, {0x0, 0xd}}}, 0xa0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000300), &(0x7f0000000100)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0xffffffff80000000, 0x0, 0x121, 0x2, 0x1}) (async) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x300000d, 0x3) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f00000002c0)={0xa0, 0x0, 0x0, {{0x2, 0x0, 0xffff, 0x8, 0x2, 0x6, {0x6, 0xffffffffffffff42, 0xffffffffffffffff, 0x4922, 0x0, 0x40, 0x3, 0x401, 0x10, 0x4000, 0x9, 0x0, 0x0, 0xfffffffb, 0x8}}, {0x0, 0xd}}}, 0xa0) (async) 2.022242693s ago: executing program 0 (id=3305): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) getdents(r2, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) r3 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000080)=0x1000, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) userfaultfd(0x80801) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) (async) getdents(r2, 0x0, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) (async) socket$netlink(0x10, 0x3, 0x9) (async) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000080)=0x1000, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) (async) 1.94617484s ago: executing program 0 (id=3306): connect$can_bcm(0xffffffffffffffff, &(0x7f0000019080), 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x31, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000190c0)='syscall\x00') read(r0, &(0x7f0000019100)=""/255, 0xff) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 1.945718811s ago: executing program 6 (id=3307): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) syz_open_dev$hidraw(&(0x7f0000000380), 0xa, 0x6000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) set_mempolicy(0x2002, &(0x7f0000000080)=0x9, 0x9) fsmount(r3, 0x0, 0x3) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x2061, &(0x7f0000000040)={0x0, 0x124a, 0x1c080, 0xa, 0x20002f7}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000000)=0x4000) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) 1.362525949s ago: executing program 2 (id=3312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x58}}, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000280)={0x3, 0x0, 0x12, 0x0, 0x1c0, &(0x7f0000000440)}) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r4 = socket(0x40000000015, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e23, 0x20005, @dev={0xfe, 0x80, '\x00', 0xe}, 0xff}, 0x1c) bind$l2tp6(r4, &(0x7f0000001540)={0xa, 0x0, 0xc2da, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8001, 0x4}, 0x20) r5 = epoll_create(0x4) r6 = epoll_create(0x7) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) dup2(r7, r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x60000000}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$unix(r2, &(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r8, 0x6, 0x6, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x6a0, 0xec000000, 0x2}]}) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400260000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044804) r14 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000001c0)={@rand_addr=' \x01\x00', 0x36, r9}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="00000061112c0000000000c60000000000014195000000000000001314836ae5ae84332afb0d1be491e79cf5cb5fc13ab516d1bdb59e80a27ace35774c33bf8a13fcec64238fd8bc0b8dbea4e6ccffdba22d034710d86f248b743f6f0698201bbd4ff7d30e359888b6210408d511c72eb09f799acbe927b10bf188e6d38301c84fd430f6f8e344c41650716c9e17a7c672c6fc067f960077ca3f6cc342e1112686f9f12139e9b46492a7fed0c807a931111d6fe3224410d2b151604c449fd40507"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1.127997932s ago: executing program 2 (id=3313): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="4681e49f8020f10900000045e1750000f1009f1dfde861c3a6c131fd89fa48ca10394dbc26cecb57bf4e048ea1e48c03bca03f42d51f2a9a8aee01000080e4b5c808e917e907ee6849"], 0x14}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88001, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff, 0x4b1a6fcf005002a6}) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_clone(0x2800400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r7, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)={0x1, 0x0, [{0x30000, 0x0, 0x0}]}) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x6, 0x0, r0}) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x8fb9, 0x8280, 0x1]}, &(0x7f0000000080)=0x44) 1.003716551s ago: executing program 0 (id=3314): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x2, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xfffffffffffffe4b, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x181, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ptrace(0x11, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r3, 0x400}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000080)={0x7, 'rose0\x00', {0x5}, 0x62cc}) 1.003344501s ago: executing program 3 (id=3315): pipe2(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) waitid$P_PIDFD(0x2, r0, 0x0, 0x4, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x20001f, 0x0) (async) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x20001f, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x1, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x80, {[@window={0x3, 0x3, 0xda}]}}}}}}}}, 0x0) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1}) 935.957447ms ago: executing program 2 (id=3316): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffe, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000050000000000000000000000000000d900", [0x80000000008, 0x2]}}) futex(&(0x7f0000000000)=0x2, 0x7, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x0) 934.874463ms ago: executing program 3 (id=3317): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socket(0xa, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000600)={0x7, 'vlan1\x00', {0xe}, 0xd0}) syz_open_procfs(0x0, &(0x7f0000000900)='stat\x00') socket(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x80003, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r5 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x8, 0xffe0}}, @TCA_U32_LINK={0x8, 0x3, 0x400}, @TCA_U32_SEL={0x94, 0x5, {0x8, 0x40, 0x8, 0x166, 0xe401, 0x0, 0x4, 0x4, [{0x0, 0x7, 0x9, 0xfffffff8}, {0x5, 0xbbe0, 0x24, 0x3e2}, {0x3, 0x7fff, 0x9, 0x7}, {0x7, 0xffffffff, 0x0, 0x8}, {0x8, 0x1ff, 0x5}, {0x5, 0x2, 0x0, 0x6}, {0xb, 0xfffffc3f, 0xda1, 0x10001}, {0x1000, 0xec1c, 0x8001, 0x401}]}}]}}]}, 0xd4}}, 0x0) r9 = accept4(r5, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000040)={{0x8, 0x5, &(0x7f0000000000)=[{0xfc, 0x0, 0x5a56}, {0x55}, {0x50, 0x0, 0xa}, {0x7, 0x0, 0x4}, {0xe, 0x0, 0x1}]}, 0x81, 0xf6, 0xb4, 0x3, 0x0, 0xa, 0xb, 0x800, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f00000000c0)={r10}) sendmmsg$inet(r9, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000780)="89d6db083f31b3ac1938d6cef4ebfb5018", 0x11}, {&(0x7f00000007c0)="0bd935edec47ea58ac42907e1fc57e92120212a6296736952b965d80202ab81a9d972202ae494f42", 0x28}, {&(0x7f0000000800)="935f838f45cadc641977a3d30550c3d019f73e3cc7ac849615142ef279d5affa7b625b03744787525fd577c17f9d24e68342e582636c8ad97e3c5421cd676d07091fcf75450585ee773f621affa0372e27163c35de64603fa3452f4c3729cc1148bc92e06edfa39bd8078c1f5c36f337b36d5054ad7e50a22916b8f7ebdef4b6ea4a2695fb7090319b567b5f153702702f6e7f46352a26fc4554ed0293f9b53790b6bf117a7f6aed4876294b1b2428fb8dda6565b851b3b100"/200, 0xc8}, {&(0x7f0000000900)="3e46f54004a63aa05b725d769ac8f2536c4022444ca26cdf8f5a2ecb4c04376fb1663b9bccf6d0374a", 0x29}, {&(0x7f0000000940)="ed087fdbf233cd97958ccf12cc22", 0xe}], 0x5}}], 0x1, 0x20040004) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 808.248905ms ago: executing program 2 (id=3320): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) mkdir(&(0x7f0000000000)='./bus\x00', 0x84) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000200)='./bus\x00', &(0x7f0000000340), &(0x7f0000000380)=@v2={0x2000000, [{0x9, 0xffff}, {0x2, 0x1}]}, 0x14, 0x3) mknodat$loop(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x30ca148c6b7d82ed, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./bus\x00', r3, &(0x7f0000000240)='./file0\x00', 0x3000) r4 = userfaultfd(0x1) ioctl$UFFDIO_ZEROPAGE(r4, 0x40049409, 0x0) unlink(&(0x7f00000001c0)='./file1\x00') r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r5, 0xe503, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005480000000c0a0101000000d4b04505002a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100582e00000800034000000001140000001100010000000000000000000300000a000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x8054) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038035000006000100d1030000080003400000000114000000110001000000000001582100000a0000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_clone(0x21000011, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000003c0), 0x0) 441.681005ms ago: executing program 2 (id=3321): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000000000000000000100000000000000c40000d210ca427ee4097f609ff5d8bf6e115e990bfcdc6e9b48f93207b17ac301efbc23d28c7d03fea003079f0825d5dcf4b8192330797f11e50599b809ae3565332e2631daccc0"], 0x0, 0x2a, 0x0, 0x1}, 0x20) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)={0x64, r1, 0x200, 0x0, 0x0, {{0x5}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x42, 0xe, {{{0x0, 0x2}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3"}, 0xffffffffffffffa1, @random=0x4, 0x0, @void, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x64}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 64) close(0x3) 83.45391ms ago: executing program 0 (id=3322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x3, 0x6, 0xa, 0x237b}, {0x7, 0xe7, 0x5, 0x8}, {0x9, 0x40, 0x2, 0x8}, {0x1a, 0x1, 0x9, 0x1000}, {0x7, 0x24, 0x0, 0x1}]}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000340), &(0x7f0000000200)=0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xe, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xd7, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 503.076µs ago: executing program 0 (id=3323): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r5, 0xe503, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x80) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x71d4, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0xe, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x2, 0x3c, 0x91, 0x8001, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x2, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x0, 0x8, 0x129432e3, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffe, 0xff, 0x1005, 0x7f, 0x5f33, 0x4, 0x4, 0x6, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x2000009, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xd, 0x5, 0x2, 0x40, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x4, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0xfffffbfe, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0x400c8, 0x3, 0x3, 0xfffe, 0x3, 0x9, 0xfd, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x8c, 0x200, 0xffff3441, 0xff]}, 0x45c) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={@rand_addr=' \x01\x00', @multicast1, 0xc, 0x18}}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xfff3, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0xfffe, 0x9, 0xffff629f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x2, 0xffffffd}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x3d, 0x3}}], 0x18}, 0x0) bind$tipc(r0, 0x0, 0x0) 0s ago: executing program 6 (id=3324): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl711\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x0, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xa, 0x800, 0x4, 0x2, 0x0, 0x7, 0xb, 0x4, 0x5, 0x800]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendto$inet(r2, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) socket(0x1d, 0x2, 0x6) (async) r3 = socket(0x1d, 0x2, 0x6) bind$inet(r3, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)={0x79, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x0, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x0, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fedbdf2503000000140006007465616d5f736c6176655f30000000001400030000000000000000000000ffff640101002900070073797374656d5f753a6f626a6563745f723a68616c645f61636c5f657865635f743a733000000000"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fedbdf2503000000140006007465616d5f736c6176655f30000000001400030000000000000000000000ffff640101002900070073797374656d5f753a6f626a6563745f723a68616c645f61636c5f657865635f743a733000000000"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): nset [0, 0] type 1 family 0 port 8472 - 0 [ 226.898436][ T9098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.975776][T14515] raw_sendmsg: syz.6.2347 forgot to set AF_INET. Fix it! [ 227.047588][T14517] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2348'. [ 227.085132][T14521] netlink: 328 bytes leftover after parsing attributes in process `syz.6.2350'. [ 227.086876][T14519] netlink: 'syz.0.2349': attribute type 3 has an invalid length. [ 227.144548][T14527] fuse: Unknown parameter 'ž¿–l½|%™' [ 227.169321][T14526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.320974][T14539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14539 comm=syz.3.2355 [ 227.384198][ T9098] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 227.393894][T14543] netlink: 'syz.3.2355': attribute type 11 has an invalid length. [ 227.702654][ T9098] bond1 (unregistering): Released all slaves [ 227.712325][ T9098] bond2 (unregistering): Released all slaves [ 227.719446][ T9098] bond3 (unregistering): Released all slaves [ 227.726069][ T9098] bond4 (unregistering): Released all slaves [ 227.732832][ T9098] smc: removing net device bond0 with user defined pnetid SYZ2 [ 227.735744][ T9098] bond0 (unregistering): Released all slaves [ 227.743766][ T9098] bond5 (unregistering): Released all slaves [ 227.755105][ T9098] bond6 (unregistering): Released all slaves [ 227.766916][ T9098] bond7 (unregistering): Released all slaves [ 227.778017][ T9098] bond8 (unregistering): Released all slaves [ 227.877403][T14548] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2357'. [ 227.916444][ T9098] : left promiscuous mode [ 227.955633][ T5933] Bluetooth: hci4: command 0x0419 tx timeout [ 228.044037][T14558] fuse: Bad value for 'group_id' [ 228.047188][T14558] fuse: Bad value for 'group_id' [ 228.052272][ T9098] tipc: Disabling bearer [ 228.054250][ T9098] tipc: Disabling bearer [ 228.058346][ T9098] tipc: Left network mode [ 228.065843][T14570] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2362'. [ 228.078748][T14570] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2362'. [ 228.131318][T14581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.195704][T14588] fuse: Unknown parameter 'ž¿–l½|%™' [ 228.205977][T14581] bond2: (slave veth3): Enslaving as an active interface with a down link [ 228.225466][T14587] bond2: (slave dummy0): making interface the new active one [ 228.228554][T14587] dummy0: entered promiscuous mode [ 228.230893][T14587] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 228.238606][T14581] bond2: (slave dummy0): Releasing active interface [ 228.282932][T14591] binder: BINDER_SET_CONTEXT_MGR already set [ 228.288514][T14591] binder: 14590:14591 ioctl 4018620d 200000004a80 returned -16 [ 228.347423][ T9098] hsr_slave_0: left promiscuous mode [ 228.353190][ T9098] hsr_slave_1: left promiscuous mode [ 228.364228][ T9098] veth1_macvtap: left allmulticast mode [ 228.366199][ T9098] veth1_macvtap: left promiscuous mode [ 228.368003][ T9098] veth0_macvtap: left promiscuous mode [ 228.369781][ T9098] veth1_vlan: left promiscuous mode [ 228.375580][ T9098] veth0_vlan: left promiscuous mode [ 228.469965][ T9098] pim6reg (unregistering): left allmulticast mode [ 228.563121][ T5933] Bluetooth: hci3: command tx timeout [ 228.639989][T14606] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 228.650618][T14608] wlan1: mtu less than device minimum [ 228.690038][T14623] overlayfs: maximum fs stacking depth exceeded [ 228.711981][ T6161] hid_parser_main: 183 callbacks suppressed [ 228.711994][ T6161] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 228.716630][ T6161] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 228.719076][ T6161] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 228.721420][ T6161] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 228.725440][ T6161] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 228.728164][ T6161] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 228.730850][ T6161] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 228.739986][ T6161] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 228.742288][ T6161] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 228.743268][T14485] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.744900][ T6161] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 228.768786][T14485] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.778675][T14485] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.789355][T14485] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.793474][ T6161] hid-generic 0005:00B6:0009.0004: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 228.880936][ T29] Process accounting resumed [ 228.905258][T14629] fido_id[14629]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 228.946776][T14485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.959868][T14485] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.966447][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.969964][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.987790][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.990128][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.000218][ T40] kauditd_printk_skb: 309 callbacks suppressed [ 229.000233][ T40] audit: type=1400 audit(1772191417.538:41174): avc: denied { create } for pid=14646 comm="syz.3.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.014180][ T40] audit: type=1400 audit(1772191417.547:41175): avc: denied { write } for pid=14646 comm="syz.3.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.026340][ T40] audit: type=1400 audit(1772191417.547:41176): avc: denied { read } for pid=14646 comm="syz.3.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.043449][ T40] audit: type=1400 audit(1772191417.547:41177): avc: denied { read } for pid=14648 comm="syz.6.2378" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 229.063247][ T40] audit: type=1400 audit(1772191417.547:41178): avc: denied { open } for pid=14648 comm="syz.6.2378" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 229.074053][ T40] audit: type=1400 audit(1772191417.547:41179): avc: denied { ioctl } for pid=14648 comm="syz.6.2378" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 229.085714][ T40] audit: type=1400 audit(1772191417.547:41180): avc: denied { write } for pid=14648 comm="syz.6.2378" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 229.089928][T14654] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.093784][ T40] audit: type=1400 audit(1772191417.547:41181): avc: denied { write } for pid=14648 comm="syz.6.2378" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 229.093812][ T40] audit: type=1400 audit(1772191417.547:41182): avc: denied { open } for pid=14648 comm="syz.6.2378" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 229.093839][ T40] audit: type=1400 audit(1772191417.632:41183): avc: denied { read } for pid=14651 comm="syz.6.2379" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 229.166210][T14485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.228651][T14485] veth0_vlan: entered promiscuous mode [ 229.244296][T14485] veth1_vlan: entered promiscuous mode [ 229.265233][T14485] veth0_macvtap: entered promiscuous mode [ 229.273980][T14485] veth1_macvtap: entered promiscuous mode [ 229.286238][T14485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.293903][T14485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.303814][ T9097] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.307785][ T9097] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.312566][ T9097] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.315962][ T9097] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.375607][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.378823][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.403295][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.406211][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.461811][T14692] FAULT_INJECTION: forcing a failure. [ 229.461811][T14692] name failslab, interval 1, probability 0, space 0, times 0 [ 229.467003][T14692] CPU: 2 UID: 0 PID: 14692 Comm: syz.2.2340 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.467032][T14692] Tainted: [L]=SOFTLOCKUP [ 229.467038][T14692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.467047][T14692] Call Trace: [ 229.467051][T14692] [ 229.467056][T14692] dump_stack_lvl+0x100/0x190 [ 229.467076][T14692] should_fail_ex.cold+0x5/0xa [ 229.467090][T14692] should_failslab+0xc2/0x120 [ 229.467107][T14692] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 229.467122][T14692] ? __alloc_skb+0x140/0x710 [ 229.467140][T14692] __alloc_skb+0x140/0x710 [ 229.467155][T14692] ? __alloc_skb+0x5b7/0x710 [ 229.467170][T14692] ? __pfx___alloc_skb+0x10/0x10 [ 229.467185][T14692] ? genl_rcv_msg+0x4be/0x800 [ 229.467202][T14692] netlink_ack+0x117/0xb80 [ 229.467218][T14692] netlink_rcv_skb+0x333/0x420 [ 229.467230][T14692] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.467244][T14692] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.467261][T14692] ? netlink_deliver_tap+0x1ae/0xcc0 [ 229.467274][T14692] genl_rcv+0x28/0x40 [ 229.467285][T14692] netlink_unicast+0x5aa/0x870 [ 229.467299][T14692] ? __pfx_netlink_unicast+0x10/0x10 [ 229.467316][T14692] netlink_sendmsg+0x8b0/0xda0 [ 229.467336][T14692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.467352][T14692] ? PageHuge+0x170/0x180 [ 229.467384][T14692] ____sys_sendmsg+0xa54/0xc30 [ 229.467409][T14692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.467442][T14692] ___sys_sendmsg+0x190/0x1e0 [ 229.467466][T14692] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.467511][T14692] __sys_sendmsg+0x170/0x220 [ 229.467522][T14692] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.467541][T14692] do_syscall_64+0x106/0xf80 [ 229.467552][T14692] ? clear_bhb_loop+0x40/0x90 [ 229.467570][T14692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.467581][T14692] RIP: 0033:0x7f08e379c799 [ 229.467591][T14692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.467602][T14692] RSP: 002b:00007f08e4694028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.467612][T14692] RAX: ffffffffffffffda RBX: 00007f08e3a15fa0 RCX: 00007f08e379c799 [ 229.467619][T14692] RDX: 0000000000028000 RSI: 0000200000000080 RDI: 0000000000000004 [ 229.467625][T14692] RBP: 00007f08e4694090 R08: 0000000000000000 R09: 0000000000000000 [ 229.467631][T14692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.467637][T14692] R13: 00007f08e3a16038 R14: 00007f08e3a15fa0 R15: 00007ffed4725588 [ 229.467650][T14692] [ 229.470260][T13618] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 229.509595][T14694] fuse: Unknown parameter 'ž¿–l½|%™' [ 229.535776][T14697] binder: BINDER_SET_CONTEXT_MGR already set [ 229.577949][T14697] binder: 14695:14697 ioctl 4018620d 200000004a80 returned -16 [ 229.692729][T13618] usb 11-1: Using ep0 maxpacket: 8 [ 229.696205][T13618] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 229.699649][T13618] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.703861][T13618] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.707980][T13618] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.712332][T13618] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.717973][T13618] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.721694][T13618] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.761603][T14704] team_slave_1: Caught tx_queue_len zero misconfig [ 229.942465][T13618] usb 11-1: usb_control_msg returned -32 [ 229.944590][T13618] usbtmc 11-1:16.0: can't read capabilities [ 230.277780][T14721] validate_nla: 10 callbacks suppressed [ 230.277795][T14721] netlink: 'syz.3.2394': attribute type 3 has an invalid length. [ 230.282965][T14721] FAULT_INJECTION: forcing a failure. [ 230.282965][T14721] name failslab, interval 1, probability 0, space 0, times 0 [ 230.286784][T14721] CPU: 2 UID: 0 PID: 14721 Comm: syz.3.2394 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.286800][T14721] Tainted: [L]=SOFTLOCKUP [ 230.286804][T14721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.286810][T14721] Call Trace: [ 230.286814][T14721] [ 230.286818][T14721] dump_stack_lvl+0x100/0x190 [ 230.286839][T14721] should_fail_ex.cold+0x5/0xa [ 230.286852][T14721] should_failslab+0xc2/0x120 [ 230.286869][T14721] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 230.286884][T14721] ? __alloc_skb+0x140/0x710 [ 230.286910][T14721] __alloc_skb+0x140/0x710 [ 230.286933][T14721] ? __alloc_skb+0x5b7/0x710 [ 230.286958][T14721] ? __pfx___alloc_skb+0x10/0x10 [ 230.286980][T14721] ? genl_rcv_msg+0x4be/0x800 [ 230.287006][T14721] netlink_ack+0x117/0xb80 [ 230.287031][T14721] netlink_rcv_skb+0x333/0x420 [ 230.287050][T14721] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.287071][T14721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.287095][T14721] ? netlink_deliver_tap+0x1ae/0xcc0 [ 230.287113][T14721] genl_rcv+0x28/0x40 [ 230.287129][T14721] netlink_unicast+0x5aa/0x870 [ 230.287149][T14721] ? __pfx_netlink_unicast+0x10/0x10 [ 230.287176][T14721] netlink_sendmsg+0x8b0/0xda0 [ 230.287196][T14721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.287213][T14721] ? PageHuge+0x170/0x180 [ 230.287240][T14721] ____sys_sendmsg+0xa54/0xc30 [ 230.287263][T14721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.287296][T14721] ___sys_sendmsg+0x190/0x1e0 [ 230.287320][T14721] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.287369][T14721] __sys_sendmsg+0x170/0x220 [ 230.287386][T14721] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.287418][T14721] do_syscall_64+0x106/0xf80 [ 230.287438][T14721] ? clear_bhb_loop+0x40/0x90 [ 230.287457][T14721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.287474][T14721] RIP: 0033:0x7f0fb359c799 [ 230.287489][T14721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.287505][T14721] RSP: 002b:00007f0fb4529028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.287522][T14721] RAX: ffffffffffffffda RBX: 00007f0fb3815fa0 RCX: 00007f0fb359c799 [ 230.287531][T14721] RDX: 0000000000028000 RSI: 0000200000000080 RDI: 0000000000000004 [ 230.287540][T14721] RBP: 00007f0fb4529090 R08: 0000000000000000 R09: 0000000000000000 [ 230.287549][T14721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.287560][T14721] R13: 00007f0fb3816038 R14: 00007f0fb3815fa0 R15: 00007ffc8ea71708 [ 230.287583][T14721] [ 230.339730][ T29] usb 11-1: USB disconnect, device number 9 [ 230.723072][T14758] fuse: Unknown parameter 'ž¿–l½|%™' [ 230.770028][ T5933] Bluetooth: hci3: command tx timeout [ 230.796767][T14762] netlink: 'syz.6.2406': attribute type 3 has an invalid length. [ 230.800182][T14762] FAULT_INJECTION: forcing a failure. [ 230.800182][T14762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.806964][T14762] CPU: 3 UID: 0 PID: 14762 Comm: syz.6.2406 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.806991][T14762] Tainted: [L]=SOFTLOCKUP [ 230.806997][T14762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.807007][T14762] Call Trace: [ 230.807024][T14762] [ 230.807031][T14762] dump_stack_lvl+0x100/0x190 [ 230.807069][T14762] should_fail_ex.cold+0x5/0xa [ 230.807093][T14762] _copy_to_user+0x32/0xd0 [ 230.807125][T14762] simple_read_from_buffer+0xcb/0x170 [ 230.807155][T14762] proc_fail_nth_read+0x1af/0x230 [ 230.807179][T14762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.807204][T14762] ? rw_verify_area+0xce/0x6d0 [ 230.807226][T14762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.807249][T14762] vfs_read+0x1e4/0xb30 [ 230.807277][T14762] ? __pfx_vfs_read+0x10/0x10 [ 230.807301][T14762] ? __fget_files+0x215/0x3d0 [ 230.807324][T14762] ? __fget_files+0x21f/0x3d0 [ 230.807348][T14762] ksys_read+0x12a/0x250 [ 230.807373][T14762] ? __pfx_ksys_read+0x10/0x10 [ 230.807405][T14762] do_syscall_64+0x106/0xf80 [ 230.807429][T14762] ? clear_bhb_loop+0x40/0x90 [ 230.807450][T14762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.807469][T14762] RIP: 0033:0x7f3f30d5cfce [ 230.807484][T14762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.807501][T14762] RSP: 002b:00007f3f31c0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.807518][T14762] RAX: ffffffffffffffda RBX: 00007f3f31c0c6c0 RCX: 00007f3f30d5cfce [ 230.807529][T14762] RDX: 000000000000000f RSI: 00007f3f31c0c0a0 RDI: 0000000000000007 [ 230.807539][T14762] RBP: 00007f3f31c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 230.807549][T14762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.807559][T14762] R13: 00007f3f31016038 R14: 00007f3f31015fa0 R15: 00007ffd78098ca8 [ 230.807584][T14762] [ 230.931151][T14764] xfrm0 speed is unknown, defaulting to 1000 [ 230.935366][T14764] lo speed is unknown, defaulting to 1000 [ 231.086365][T14774] netlink: 'syz.6.2409': attribute type 3 has an invalid length. [ 231.746957][T14799] netlink: 'syz.3.2418': attribute type 3 has an invalid length. [ 231.754457][T14800] geneve2: entered promiscuous mode [ 231.833362][T14806] fuse: Unknown parameter 'æ' [ 231.913450][T14820] fuse: Unknown parameter 'ž¿–l½|%™' [ 232.133633][T13618] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 232.294919][T13618] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.299542][T13618] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 232.303437][T13618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.310813][T13618] usb 7-1: config 0 descriptor?? [ 232.402661][T14822] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 232.529278][T13618] usbhid 7-1:0.0: can't add hid device: -71 [ 232.531914][T13618] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 232.540531][T13618] usb 7-1: USB disconnect, device number 39 [ 232.697279][T14828] netlink: 'syz.2.2428': attribute type 3 has an invalid length. [ 232.847742][T14835] sit0: Caught tx_queue_len zero misconfig [ 232.902991][ T5933] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 232.942036][T14839] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=14839 comm=syz.3.2433 [ 232.998171][ T5933] Bluetooth: hci3: command tx timeout [ 233.295021][T14856] fuse: Unknown parameter 'ž¿–l½|%™' [ 233.315163][T14858] __nla_validate_parse: 11 callbacks suppressed [ 233.315178][T14858] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2440'. [ 233.385065][T14864] netlink: 'syz.2.2443': attribute type 32 has an invalid length. [ 233.550085][T14865] netlink: 'syz.2.2443': attribute type 32 has an invalid length. [ 233.565029][T14880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2446'. [ 233.607018][T14880] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14880 comm=syz.0.2446 [ 233.662566][T14886] netlink: 'syz.0.2447': attribute type 3 has an invalid length. [ 233.881479][ T3251] e1000 0000:00:06.0 eth0: Reset adapter [ 233.887322][T14902] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14902 comm=syz.2.2452 [ 233.994152][T14909] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 234.015537][T14909] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 234.019899][T14909] overlayfs: failed to look up (tracing) for ino (-66) [ 234.030526][ T3251] e1000 0000:00:06.0 eth0: Reset adapter [ 234.710913][ T40] kauditd_printk_skb: 275 callbacks suppressed [ 234.710931][ T40] audit: type=1400 audit(1772191422.896:41459): avc: denied { search } for pid=14914 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.723135][ T40] audit: type=1400 audit(1772191422.896:41460): avc: denied { search } for pid=14914 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.731641][ T40] audit: type=1400 audit(1772191422.896:41461): avc: denied { search } for pid=14914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.741567][ T40] audit: type=1400 audit(1772191422.896:41462): avc: denied { search } for pid=14914 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.751152][ T40] audit: type=1400 audit(1772191422.905:41463): avc: denied { search } for pid=14915 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.761292][ T40] audit: type=1400 audit(1772191422.905:41464): avc: denied { search } for pid=14915 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.771618][ T40] audit: type=1400 audit(1772191422.905:41465): avc: denied { search } for pid=14915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.782996][ T40] audit: type=1400 audit(1772191422.905:41466): avc: denied { read open } for pid=14915 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.795416][ T40] audit: type=1400 audit(1772191422.905:41467): avc: denied { getattr } for pid=14915 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.805084][ T40] audit: type=1400 audit(1772191422.915:41468): avc: denied { add_name } for pid=14914 comm="dhcpcd-run-hook" name="resolv.conf.eth0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.202536][ T5933] Bluetooth: hci3: command tx timeout [ 236.312107][ T3337] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 246.758264][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 246.758280][ T40] audit: type=1400 audit(1772191434.212:41476): avc: denied { create } for pid=14943 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.765443][T14948] netlink: 'syz.0.2457': attribute type 3 has an invalid length. [ 246.769297][T14950] input: syz1 as /devices/virtual/input/input25 [ 246.778538][ T40] audit: type=1400 audit(1772191434.212:41477): avc: denied { read write } for pid=14949 comm="syz.3.2460" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 246.788289][ T40] audit: type=1400 audit(1772191434.212:41478): avc: denied { open } for pid=14949 comm="syz.3.2460" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 246.798134][ T40] audit: type=1400 audit(1772191434.212:41479): avc: denied { create } for pid=14947 comm="syz.0.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 246.804557][ T40] audit: type=1400 audit(1772191434.212:41480): avc: denied { ioctl } for pid=14949 comm="syz.3.2460" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 246.812927][ T40] audit: type=1400 audit(1772191434.221:41481): avc: denied { setopt } for pid=14943 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.819344][ T40] audit: type=1400 audit(1772191434.221:41482): avc: denied { write } for pid=14943 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.820705][T14955] block nbd0: Unsupported socket: should be TCP or UNIX. [ 246.826241][ T40] audit: type=1400 audit(1772191434.221:41483): avc: denied { connect } for pid=14943 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.836501][T14955] netlink: 'syz.0.2462': attribute type 3 has an invalid length. [ 246.839020][ T40] audit: type=1400 audit(1772191434.221:41484): avc: denied { name_connect } for pid=14943 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 246.846807][ T40] audit: type=1400 audit(1772191434.231:41485): avc: denied { read } for pid=5325 comm="acpid" name="event4" dev="devtmpfs" ino=3270 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.857518][T14957] team0 (unregistering): Port device team_slave_0 removed [ 246.862125][T14953] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.864007][T14957] team0 (unregistering): Port device team_slave_1 removed [ 246.864616][T14953] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 246.870172][T14953] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 246.873000][T14953] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.875570][T14953] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 246.897564][T14953] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 246.912466][T14962] netlink: zone id is out of range [ 246.914225][T14962] netlink: zone id is out of range [ 246.917499][T14962] netlink: zone id is out of range [ 246.919308][T14962] netlink: zone id is out of range [ 246.921040][T14962] netlink: zone id is out of range [ 246.922789][T14962] netlink: zone id is out of range [ 246.924535][T14962] netlink: zone id is out of range [ 246.926679][T14962] netlink: zone id is out of range [ 246.940742][T14962] netlink: zone id is out of range [ 246.947461][T14962] netlink: zone id is out of range [ 246.975698][T14967] bridge1: entered promiscuous mode [ 246.977439][T14967] bridge1: entered allmulticast mode [ 247.080686][T14977] fuse: Unknown parameter 'ž¿–l½|%™' [ 247.087547][T14980] Bluetooth: MGMT ver 1.23 [ 247.092616][ T5933] Bluetooth: hci3: unexpected cc 0x202d length: 9 > 1 [ 247.095344][ T5933] Bluetooth: hci3: unexpected event for opcode 0x202d [ 247.162583][T14985] netlink: 'syz.3.2470': attribute type 3 has an invalid length. [ 247.218704][T14989] 8021q: VLANs not supported on sit0 [ 247.223376][T14989] netlink: 'syz.3.2472': attribute type 3 has an invalid length. [ 247.313511][ T5933] Bluetooth: hci4: Malformed LE Event: 0x0b [ 247.318739][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2475'. [ 247.746768][T15007] netlink: 'syz.3.2479': attribute type 3 has an invalid length. [ 247.827199][T15013] netlink: 'syz.0.2482': attribute type 5 has an invalid length. [ 247.833074][T15011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2481'. [ 247.965804][T15020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.983052][T15011] netlink: 'syz.3.2481': attribute type 3 has an invalid length. [ 248.037495][T15039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2487'. [ 248.083138][T15042] netlink: 'syz.2.2488': attribute type 3 has an invalid length. [ 248.108921][ T6106] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 248.190081][T15049] bond1 (unregistering): Released all slaves [ 248.272759][T15053] fuse: Unknown parameter 'ž¿–l½|%™' [ 248.279178][ T6106] usb 11-1: Using ep0 maxpacket: 8 [ 248.283280][ T6106] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 248.287573][ T6106] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 248.291405][ T6106] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 248.294670][ T6106] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.298820][ T6106] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 248.301826][ T6106] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.521536][ T6106] usb 11-1: GET_CAPABILITIES returned 0 [ 248.522407][T15016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.523454][ T6106] usbtmc 11-1:16.0: can't read capabilities [ 248.528319][T15016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.545761][ T24] usb 11-1: USB disconnect, device number 10 [ 248.836758][ T5933] Bluetooth: hci4: unexpected cc 0x2024 length: 0 < 1 [ 248.838984][ T5933] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 248.841331][T15060] CUSE: info not properly terminated [ 249.024689][T15086] netlink: 'syz.3.2500': attribute type 3 has an invalid length. [ 249.027485][ T5933] Bluetooth: hci0: command 0x0c1a tx timeout [ 249.029434][ T5933] Bluetooth: hci2: command 0x040f tx timeout [ 249.058613][T15090] ªªªªªª: renamed from wg2 (while UP) [ 249.131754][T15091] Device name cannot be null; rc = [-22] [ 249.155728][T15100] support for the xor transformation has been removed. [ 249.231362][T15109] fuse: Unknown parameter 'ž¿–l½|%™' [ 249.299772][T15113] netlink: 'syz.6.2510': attribute type 3 has an invalid length. [ 249.433892][T15119] fuse: Bad value for 'user_id' [ 249.435177][T15120] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 249.436006][T15119] fuse: Bad value for 'user_id' [ 250.048361][ T10] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 250.106218][T15166] Cannot find add_set index 1 as target [ 250.126628][T15111] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 250.180471][T15174] fuse: Unknown parameter 'ž¿–l½|%™' [ 250.219164][ T10] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 250.222450][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.225230][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.230050][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 250.233401][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.236317][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.239868][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 250.243191][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.246256][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.249865][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 250.253037][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.256040][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.259686][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 250.263440][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.266581][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.270114][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 250.273587][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.276818][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.280305][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 250.283414][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.286299][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.289819][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 250.292728][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.296029][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.299593][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 250.303364][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 250.306641][ T10] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 250.309252][ T10] usb 7-1: Product: syz [ 250.310661][ T10] usb 7-1: Manufacturer: syz [ 250.312132][ T10] usb 7-1: SerialNumber: syz [ 250.315380][ T10] usb 7-1: config 0 descriptor?? [ 250.323585][ T10] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 250.469574][T15191] binder: Bad value for 'max' [ 250.478012][T15191] mkiss: ax0: crc mode is auto. [ 250.616491][ T10] usb 7-1: USB disconnect, device number 40 [ 250.624238][ T10] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 250.716463][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2534'. [ 250.723018][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2534'. [ 250.882894][T15199] dvmrp0: entered allmulticast mode [ 250.887687][T15199] xt_hashlimit: size too large, truncated to 1048576 [ 250.956558][T15206] Cannot find add_set index 46338 as target [ 250.982778][T15208] random: crng reseeded on system resumption [ 250.989730][T15208] Restarting kernel threads ... [ 250.992219][T15208] Done restarting kernel threads. [ 250.994416][T15208] Restarting kernel threads ... [ 250.997071][T15208] Done restarting kernel threads. [ 251.401738][ T5940] Bluetooth: hci4: command 0x0419 tx timeout [ 251.518794][T15229] fuse: Unknown parameter 'ž¿–l½|%™' [ 251.562030][ T6106] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 251.742215][T15232] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 251.746781][ T6106] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 251.751517][ T6106] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.755232][ T6106] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.759479][ T6106] usb 11-1: config 0 interface 0 has no altsetting 0 [ 251.760992][ T6106] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.761032][ T6106] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.761054][ T6106] usb 11-1: config 0 interface 0 has no altsetting 0 [ 251.763883][ T6106] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.763920][ T6106] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.764012][ T6106] usb 11-1: config 0 interface 0 has no altsetting 0 [ 251.769419][ T6106] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.773502][T15232] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2545'. [ 251.774843][ T6106] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.798009][ T6106] usb 11-1: config 0 interface 0 has no altsetting 0 [ 251.801766][ T6106] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.805652][ T6106] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.810365][ T6106] usb 11-1: config 0 interface 0 has no altsetting 0 [ 251.810375][T15232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.813185][ T6106] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.818378][ T6106] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.822942][ T6106] usb 11-1: config 0 interface 0 has no altsetting 0 [ 251.823301][T15232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.826705][ T6106] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.832530][ T6106] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.836816][ T6106] usb 11-1: config 0 interface 0 has no altsetting 0 [ 251.837306][T15232] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 251.839972][ T6106] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.845876][ T6106] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.850574][ T6106] usb 11-1: config 0 interface 0 has no altsetting 0 [ 251.854404][T15232] bond0 (unregistering): Released all slaves [ 251.855083][ T6106] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 251.859532][ T6106] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 251.862394][ T6106] usb 11-1: Product: syz [ 251.864054][ T6106] usb 11-1: Manufacturer: syz [ 251.866199][ T6106] usb 11-1: SerialNumber: syz [ 251.870686][ T6106] usb 11-1: config 0 descriptor?? [ 251.878334][ T6106] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 252.117369][ T40] kauditd_printk_skb: 316 callbacks suppressed [ 252.117397][ T40] audit: type=1400 audit(1772191439.241:41802): avc: denied { unmount } for pid=14485 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 252.131691][ T40] audit: type=1400 audit(1772191439.251:41803): avc: denied { execmem } for pid=15235 comm="syz.2.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 252.139635][ T40] audit: type=1400 audit(1772191439.260:41804): avc: denied { read } for pid=15235 comm="syz.2.2547" dev="nsfs" ino=4026534211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 252.144281][ C3] usb 11-1: yurex_control_callback - control failed: -71 [ 252.148410][ T40] audit: type=1400 audit(1772191439.260:41805): avc: denied { open } for pid=15235 comm="syz.2.2547" path="net:[4026534211]" dev="nsfs" ino=4026534211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 252.154960][ T6106] usb 11-1: USB disconnect, device number 11 [ 252.160169][ T40] audit: type=1400 audit(1772191439.260:41806): avc: denied { create } for pid=15235 comm="syz.2.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 252.163186][ T6106] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 252.169273][ T40] audit: type=1400 audit(1772191439.260:41807): avc: denied { setopt } for pid=15235 comm="syz.2.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 252.169306][ T40] audit: type=1400 audit(1772191439.260:41808): avc: denied { module_request } for pid=15235 comm="syz.2.2547" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 252.196123][ T40] audit: type=1400 audit(1772191439.307:41809): avc: denied { sys_module } for pid=15235 comm="syz.2.2547" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 252.234472][ T40] audit: type=1400 audit(1772191439.345:41810): avc: denied { read write } for pid=14485 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 252.246427][ T40] audit: type=1400 audit(1772191439.345:41811): avc: denied { open } for pid=14485 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 252.279912][T15244] net_ratelimit: 273 callbacks suppressed [ 252.279930][T15244] openvswitch: netlink: Multiple metadata blocks provided [ 252.328064][T15246] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2550'. [ 252.403074][T15252] xt_hashlimit: size too large, truncated to 1048576 [ 252.536493][T15259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15259 comm=syz.0.2554 [ 252.703385][T15272] xt_l2tp: missing protocol rule (udp|l2tpip) [ 252.748719][T15274] fuse: Unknown parameter 'ž¿–l½|%™' [ 252.812219][T15277] can0: slcan on pty24. [ 252.961290][T15284] netlink: 'syz.6.2559': attribute type 11 has an invalid length. [ 253.043606][T15287] __report_access: 1 callbacks suppressed [ 253.043620][T15287] ptrace attach of "/syz-executor exec"[13400] was attempted by "/syz-executor exec"[15287] [ 253.052604][T15289] overlayfs: statfs failed on './file0' [ 253.685276][T15269] can0 (unregistered): slcan off pty24. [ 253.722282][T15324] xfrm0 speed is unknown, defaulting to 1000 [ 253.733833][T15324] lo speed is unknown, defaulting to 1000 [ 253.983668][T15347] fuse: Unknown parameter 'ž¿–l½|%™' [ 254.017990][T15349] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 254.175346][T15354] IPv6: syztnl0: Disabled Multicast RS [ 254.345534][T15361] validate_nla: 6 callbacks suppressed [ 254.345546][T15361] netlink: 'syz.2.2580': attribute type 3 has an invalid length. [ 254.414146][T15363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.419192][T15363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15363 comm=syz.2.2581 [ 254.465042][T15366] xfrm0 speed is unknown, defaulting to 1000 [ 254.467882][T15366] lo speed is unknown, defaulting to 1000 [ 254.638419][T15373] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 254.767662][T15376] netlink: 'syz.6.2584': attribute type 21 has an invalid length. [ 254.771290][T15376] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2584'. [ 254.956808][T15395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2590'. [ 254.959855][T15396] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 255.089259][T15410] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 255.764954][T15440] QAT: failed to copy from user cfg_data. [ 255.967149][T15449] netlink: 'syz.2.2603': attribute type 3 has an invalid length. [ 256.018413][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2605'. [ 256.021650][T15455] chnl_net:caif_netlink_parms(): no params data found [ 256.071044][T15459] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2607'. [ 256.149443][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2609'. [ 256.207464][T15463] syzkaller1: entered promiscuous mode [ 256.210100][T15463] syzkaller1: entered allmulticast mode [ 256.255318][T15475] : entered promiscuous mode [ 256.291063][T15479] netlink: 'syz.0.2612': attribute type 3 has an invalid length. [ 256.533119][T15496] efs: device does not support 512 byte blocks [ 256.536297][T15496] device does not support 512 byte blocks [ 256.536297][T15496] [ 256.581248][ T6153] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 256.656440][T15513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2622'. [ 256.741347][ T6153] usb 5-1: Using ep0 maxpacket: 8 [ 256.744798][ T6153] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.747774][ T6153] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 256.751706][ T6153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.756221][ T6153] usb 5-1: config 0 descriptor?? [ 256.851496][T15525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2625'. [ 256.854545][T15525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2625'. [ 257.196652][ T6153] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 257.422551][ T6153] usb 5-1: USB disconnect, device number 22 [ 257.456150][ T40] kauditd_printk_skb: 366 callbacks suppressed [ 257.456161][ T40] audit: type=1400 audit(1772191444.243:42178): avc: denied { setopt } for pid=15544 comm="syz.2.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.472123][T15551] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 257.473817][ T40] audit: type=1400 audit(1772191444.261:42179): avc: denied { bpf } for pid=15544 comm="syz.2.2630" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 257.484842][ T40] audit: type=1400 audit(1772191444.261:42180): avc: denied { perfmon } for pid=15544 comm="syz.2.2630" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 257.493054][ T40] audit: type=1400 audit(1772191444.261:42181): avc: denied { read write } for pid=15550 comm="syz.0.2631" name="nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.502343][ T40] audit: type=1400 audit(1772191444.261:42182): avc: denied { prog_run } for pid=15544 comm="syz.2.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 257.509994][ T40] audit: type=1400 audit(1772191444.261:42183): avc: denied { open } for pid=15550 comm="syz.0.2631" path="/dev/nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.519266][ T40] audit: type=1400 audit(1772191444.261:42184): avc: denied { module_request } for pid=15550 comm="syz.0.2631" kmod="net-pf-2-proto-2-type-6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 257.532510][T15551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2631'. [ 257.615080][ T40] audit: type=1400 audit(1772191444.393:42185): avc: denied { read write } for pid=11941 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.631888][ T40] audit: type=1400 audit(1772191444.393:42186): avc: denied { open } for pid=11941 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.648540][ T40] audit: type=1400 audit(1772191444.393:42187): avc: denied { ioctl } for pid=11941 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.663143][T15565] 9p: Bad value for 'msize' [ 257.833299][T15570] netlink: 'syz.2.2635': attribute type 3 has an invalid length. [ 257.839943][T15568] netlink: 'syz.0.2636': attribute type 3 has an invalid length. [ 257.897824][T15574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=15574 comm=syz.6.2639 [ 257.907217][T15574] overlay: Bad value for 'redirect_dir' [ 257.910398][T15574] netlink: 'syz.6.2639': attribute type 1 has an invalid length. [ 257.922258][T15574] bond2: entered promiscuous mode [ 257.924219][T15574] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.924442][T15575] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2637'. [ 258.209269][T15603] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 258.216118][T15605] Unknown options in mask b7f2 [ 258.233072][ T24] usb 11-1: new low-speed USB device number 12 using dummy_hcd [ 258.405129][ T24] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 258.408487][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 258.424867][ T24] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.429685][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 258.434193][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 258.457857][ T24] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 258.460751][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 258.465410][ T24] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.468732][ T6153] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 258.478147][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 258.482547][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 258.491502][T15608] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2048 sclass=netlink_tcpdiag_socket pid=15608 comm=syz.2.2649 [ 258.500007][ T24] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 258.503110][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 258.507602][ T24] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.520761][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 258.525132][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 258.530905][T15613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15613 comm=syz.2.2650 [ 258.543323][T15613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=15613 comm=syz.2.2650 [ 258.544511][ T24] usb 11-1: string descriptor 0 read error: -22 [ 258.551376][ T24] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 258.563543][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.580910][T15615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15615 comm=syz.2.2651 [ 258.585324][ T24] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 258.587071][T15615] netlink: 'syz.2.2651': attribute type 1 has an invalid length. [ 258.603812][T15615] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.615303][T15615] bond2: (slave veth0_to_bond): making interface the new active one [ 258.619956][T15615] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 258.631181][ T6153] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 258.634980][ T6153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.640603][ T6153] usb 5-1: Product: syz [ 258.642440][ T6153] usb 5-1: Manufacturer: syz [ 258.644919][ T6153] usb 5-1: SerialNumber: syz [ 259.088723][T15605] openvswitch: netlink: Message has 4 unknown bytes. [ 259.091528][T15605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.106549][ T6153] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 259.113323][ T6153] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 259.118794][ T6153] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 259.123616][ T6153] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 259.130157][ T6153] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 259.137716][ T6153] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 259.143679][ T6153] usb 5-1: USB disconnect, device number 23 [ 259.330195][T15627] fuse: Unknown parameter 'ž¿–l½|%™' [ 259.686770][T15635] input: syz0 as /devices/virtual/input/input26 [ 259.710443][T10652] udevd[10652]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 259.725139][T10652] udevd[10652]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 259.769984][T15645] macsec1: entered promiscuous mode [ 259.924469][T15652] netlink: 'syz.3.2662': attribute type 3 has an invalid length. [ 259.963211][T15655] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 260.059986][T15663] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20001 [ 260.069847][T15656] kvm: kvm [15654]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 260.176851][T15667] __nla_validate_parse: 3 callbacks suppressed [ 260.176862][T15667] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2668'. [ 260.185689][T15667] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.188108][T15667] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.194511][T15667] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2668'. [ 260.194541][T15668] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2668'. [ 260.197569][T15667] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.202542][T15667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.204927][T15667] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.207381][T15667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.202459][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2676'. [ 261.269393][T15698] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 261.275551][T15698] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 261.283018][T15698] tmpfs: Cannot change global quota limit on remount [ 261.286161][T15698] netlink: 'syz.3.2678': attribute type 1 has an invalid length. [ 261.299079][T15698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.320206][T15698] bond0: (slave veth5): Enslaving as an active interface with a down link [ 261.333287][T15698] vlan2: entered allmulticast mode [ 261.335505][T15698] bond0: entered allmulticast mode [ 261.401776][T15701] i2c i2c-1: Invalid block write size 34 [ 261.437399][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2680'. [ 261.441819][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2680'. [ 261.450749][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2680'. [ 261.454655][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2680'. [ 261.459005][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2680'. [ 261.463991][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2680'. [ 261.529924][T15707] netlink: 'syz.0.2681': attribute type 1 has an invalid length. [ 261.532351][T15707] netlink: 'syz.0.2681': attribute type 2 has an invalid length. [ 261.691153][T15717] PID 15717 killed due to inadequate hugepage pool [ 261.735254][T15723] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 261.937410][T15731] netlink: 'syz.0.2687': attribute type 1 has an invalid length. [ 261.940525][T15732] netlink: 'syz.0.2687': attribute type 1 has an invalid length. [ 262.110532][T15739] netlink: 'syz.0.2689': attribute type 3 has an invalid length. [ 262.282420][T15747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.285207][T15747] IPv6: NLM_F_CREATE should be set when creating new route [ 262.542850][T15763] tmpfs: Bad value for 'mpol' [ 262.707731][T15793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15793 comm=syz.2.2702 [ 262.763585][T15803] xfrm1: entered promiscuous mode [ 262.765238][T15803] xfrm1: entered allmulticast mode [ 262.767392][T15801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15801 comm=syz.2.2704 [ 262.818246][ T40] kauditd_printk_skb: 269 callbacks suppressed [ 262.818261][ T40] audit: type=1400 audit(1772191449.281:42457): avc: denied { create } for pid=15805 comm="syz.2.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.842651][ T40] audit: type=1400 audit(1772191449.281:42458): avc: denied { remove_name } for pid=15804 comm="rm" name="resolv.conf.lapb2.link" dev="tmpfs" ino=8957 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.852922][ T40] audit: type=1400 audit(1772191449.281:42459): avc: denied { unlink } for pid=15804 comm="rm" name="resolv.conf.lapb2.link" dev="tmpfs" ino=8957 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.863899][ T40] audit: type=1400 audit(1772191449.291:42460): avc: denied { bind } for pid=15805 comm="syz.2.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.875249][ T40] audit: type=1400 audit(1772191449.300:42461): avc: denied { write } for pid=15805 comm="syz.2.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.891281][ T40] audit: type=1400 audit(1772191449.300:42462): avc: denied { create } for pid=15805 comm="syz.2.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 262.899134][ T40] audit: type=1400 audit(1772191449.300:42463): avc: denied { create } for pid=15808 comm="syz.3.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.909663][ T40] audit: type=1400 audit(1772191449.310:42464): avc: denied { bind } for pid=15808 comm="syz.3.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.921820][ T40] audit: type=1400 audit(1772191449.310:42465): avc: denied { node_bind } for pid=15808 comm="syz.3.2706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 262.931183][ T40] audit: type=1400 audit(1772191449.328:42466): avc: denied { read write } for pid=14485 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.944453][T15817] fuse: Unknown parameter 'ž¿–l½|%™' [ 263.016912][T15827] netlink: 'syz.2.2710': attribute type 3 has an invalid length. [ 263.174849][ T3251] usb 11-1: USB disconnect, device number 12 [ 263.244245][T15839] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 263.429808][T15857] netlink: 'syz.0.2716': attribute type 16 has an invalid length. [ 263.432562][T15857] netlink: 'syz.0.2716': attribute type 17 has an invalid length. [ 263.583830][T15868] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.587189][T15868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.590254][T15868] IPv6: NLM_F_CREATE should be set when creating new route [ 263.593665][T15868] IPv6: NLM_F_CREATE should be set when creating new route [ 263.650088][T15874] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 263.652207][T15874] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 263.654712][T15874] vhci_hcd vhci_hcd.0: Device attached [ 263.663173][T15876] usbip_core: unknown command [ 263.665266][T15876] vhci_hcd: unknown pdu 939786240 [ 263.667392][T15876] usbip_core: unknown command [ 263.670813][ T76] vhci_hcd vhci_hcd.0: stop threads [ 263.673056][ T76] vhci_hcd vhci_hcd.0: release socket [ 263.675357][ T76] vhci_hcd vhci_hcd.0: disconnect device [ 263.857239][T15886] tc_dump_action: action bad kind [ 264.256202][T15894] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 264.629611][T15905] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 264.684974][T15907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=15907 comm=syz.0.2730 [ 264.931894][ T5940] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 264.943707][T15914] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 265.049234][T15917] bond3: entered promiscuous mode [ 265.054023][T15917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.070563][T15917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.073066][T15917] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 265.076670][T15917] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 265.082173][T15917] bond3: (slave vxcan3): making interface the new active one [ 265.084529][T15917] vxcan3: entered promiscuous mode [ 265.087775][T15917] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 265.286127][T15942] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 265.323268][T15945] openvswitch: netlink: Flow key attr not present in new flow. [ 265.389722][T15951] 9pnet_fd: p9_fd_create_tcp (15951): problem binding to privport [ 265.434815][T15956] validate_nla: 4 callbacks suppressed [ 265.434830][T15956] netlink: 'syz.6.2746': attribute type 3 has an invalid length. [ 265.540016][T15962] __nla_validate_parse: 164 callbacks suppressed [ 265.540034][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2748'. [ 265.628634][T15969] nbd: must specify an index to disconnect [ 265.862892][T15979] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.867210][T15979] bond0: (slave bond3): Enslaving as an active interface with an up link [ 265.944726][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2756'. [ 265.948649][T15987] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2756'. [ 265.953104][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2756'. [ 265.956024][T15987] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2756'. [ 266.052543][T15991] fuse: blksize only supported for fuseblk [ 266.506141][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.995654][T16018] netlink: 'syz.6.2765': attribute type 3 has an invalid length. [ 267.050673][T16020] fuse: Unknown parameter 'ž¿–l½|%™' [ 267.528355][T16032] QAT: Device 6 not found [ 267.533214][T16032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2770'. [ 267.536106][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2770'. [ 267.586409][T16032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=248 sclass=netlink_route_socket pid=16032 comm=syz.2.2770 [ 267.593334][T16032] QAT: Device 2 not found [ 267.744936][T16042] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 267.747881][T16042] veth0: entered promiscuous mode [ 267.754713][T16041] veth0: left promiscuous mode [ 268.170502][ T40] kauditd_printk_skb: 315 callbacks suppressed [ 268.170519][ T40] audit: type=1400 audit(1772191454.301:42782): avc: denied { create } for pid=16061 comm="syz.0.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.305773][ T40] audit: type=1400 audit(1772191454.433:42783): avc: denied { create } for pid=16071 comm="syz.0.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.315704][ T40] audit: type=1400 audit(1772191454.442:42784): avc: denied { ioctl } for pid=16071 comm="syz.0.2780" path="socket:[71341]" dev="sockfs" ino=71341 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.337091][ T40] audit: type=1400 audit(1772191454.452:42785): avc: denied { setopt } for pid=16071 comm="syz.0.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.344749][ T40] audit: type=1400 audit(1772191454.452:42786): avc: denied { bind } for pid=16071 comm="syz.0.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.405275][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 268.459756][T16079] uprobe: syz.0.2783:16079 failed to unregister, leaking uprobe [ 268.465795][ T40] audit: type=1400 audit(1772191454.583:42787): avc: denied { create } for pid=16082 comm="syz.6.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 268.473250][ T40] audit: type=1400 audit(1772191454.583:42788): avc: denied { setopt } for pid=16082 comm="syz.6.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 268.483591][ T40] audit: type=1400 audit(1772191454.592:42789): avc: denied { mount } for pid=16082 comm="syz.6.2784" name="/" dev="gadgetfs" ino=9649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 268.500374][ T40] audit: type=1400 audit(1772191454.592:42790): avc: denied { execmem } for pid=16082 comm="syz.6.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 268.510154][ T40] audit: type=1400 audit(1772191454.592:42791): avc: denied { execute } for pid=16082 comm="syz.6.2784" path="/159/cpuacct.usage_percpu" dev="tmpfs" ino=877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 268.584693][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2787'. [ 268.809227][T16103] netlink: 'syz.6.2790': attribute type 3 has an invalid length. [ 268.982168][T16113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16113 comm=syz.6.2794 [ 268.986790][ T34] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 269.171764][ T34] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 269.174728][ T34] usb 5-1: config 0 has no interface number 0 [ 269.176828][ T34] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.182348][ T34] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 269.185346][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.187933][ T34] usb 5-1: Product: syz [ 269.189780][ T34] usb 5-1: Manufacturer: syz [ 269.191350][ T34] usb 5-1: SerialNumber: syz [ 269.199238][ T34] usb 5-1: config 0 descriptor?? [ 269.204620][ T34] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 269.855204][T16132] netlink: 'syz.3.2798': attribute type 3 has an invalid length. [ 269.940984][T16136] loop2: detected capacity change from 0 to 7 [ 269.950140][ T5940] Bluetooth: hci0: unexpected event for opcode 0x201b [ 269.953045][ T5940] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 269.955818][T16136] Dev loop2: unable to read RDB block 7 [ 269.972504][T16136] loop2: unable to read partition table [ 269.993317][T16136] loop2: partition table beyond EOD, truncated [ 269.995358][T16136] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 270.097636][T16149] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 270.136004][T16152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=16152 comm=syz.6.2806 [ 270.141562][T16152] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2806'. [ 270.187580][T16156] netlink: 'syz.3.2808': attribute type 3 has an invalid length. [ 270.197442][T16154] xt_hashlimit: size too large, truncated to 1048576 [ 270.376431][T16164] o2cb: This node has not been configured. [ 270.378424][T16164] o2cb: Cluster check failed. Fix errors before retrying. [ 270.380689][T16164] (syz.6.2810,16164,3):user_dlm_register:674 ERROR: status = -22 [ 270.383368][T16164] (syz.6.2810,16164,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 271.342537][T16224] qnx4: no qnx4 filesystem (no root dir). [ 271.493921][T16237] lo: Caught tx_queue_len zero misconfig [ 271.495837][T16237] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 271.528182][T16239] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2834'. [ 271.608595][ C3] usb 5-1: yurex_control_callback - control failed: -2 [ 271.739729][T16249] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 271.843219][T16259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2840'. [ 272.196287][T16269] netlink: 'syz.3.2844': attribute type 3 has an invalid length. [ 272.276153][T16273] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2846'. [ 272.279834][T16273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2846'. [ 272.307411][T16277] netlink: 'syz.2.2847': attribute type 3 has an invalid length. [ 272.351964][T16283] netlink: 'syz.6.2849': attribute type 21 has an invalid length. [ 272.359739][T16283] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2849'. [ 272.405396][T16286] xfrm0 speed is unknown, defaulting to 1000 [ 272.420065][T16286] lo speed is unknown, defaulting to 1000 [ 272.688282][ T6161] usb 5-1: USB disconnect, device number 24 [ 272.692535][ T6161] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 272.725384][T16320] netlink: 312 bytes leftover after parsing attributes in process `syz.6.2860'. [ 272.754592][T16322] netlink: 'syz.6.2861': attribute type 3 has an invalid length. [ 272.842928][T16328] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2863'. [ 272.876951][T16332] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2864'. [ 272.943482][T16339] netlink: 'syz.2.2867': attribute type 83 has an invalid length. [ 272.947515][T16339] loop5: detected capacity change from 0 to 2640 [ 272.951970][T16339] buffer_io_error: 43 callbacks suppressed [ 272.951980][T16339] Buffer I/O error on dev loop5, logical block 0, async page read [ 272.957903][T16339] Buffer I/O error on dev loop5, logical block 0, async page read [ 272.960443][T16339] Buffer I/O error on dev loop5, logical block 0, async page read [ 272.963125][T16339] Buffer I/O error on dev loop5, logical block 0, async page read [ 272.965791][T16339] Buffer I/O error on dev loop5, logical block 0, async page read [ 272.968439][T16339] Buffer I/O error on dev loop5, logical block 0, async page read [ 272.971100][T16336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.971271][T16339] Buffer I/O error on dev loop5, logical block 0, async page read [ 272.979915][T16339] Buffer I/O error on dev loop5, logical block 0, async page read [ 272.983155][T16339] ldm_validate_partition_table(): Disk read failed. [ 272.986056][T16339] Buffer I/O error on dev loop5, logical block 0, async page read [ 272.989347][T16339] Buffer I/O error on dev loop5, logical block 0, async page read [ 272.991862][T16339] Dev loop5: unable to read RDB block 0 [ 272.994011][T16339] loop5: unable to read partition table [ 273.000075][T16339] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 273.008112][T16339] syz.2.2867 uses old SIOCAX25GETINFO [ 273.121553][T16336] No source specified [ 273.162024][T16347] netlink: 'syz.2.2870': attribute type 3 has an invalid length. [ 273.374694][T16370] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.413360][T16373] overlayfs: failed lookup in lower (newroot/142, name='file0', err=-40): overlapping layers [ 273.458556][T16380] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 273.465260][T16380] netlink: 'syz.2.2879': attribute type 5 has an invalid length. [ 273.518813][ T40] kauditd_printk_skb: 309 callbacks suppressed [ 273.518826][ T40] audit: type=1400 audit(1772191459.321:43101): avc: denied { write } for pid=16383 comm="syz.2.2880" name="rt_cache" dev="proc" ino=4026534227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 273.522176][T16386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2881'. [ 273.529110][ T40] audit: type=1400 audit(1772191459.321:43102): avc: denied { mount } for pid=16383 comm="syz.2.2880" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 273.535301][T16386] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2881'. [ 273.565434][ T40] audit: type=1400 audit(1772191459.359:43103): avc: denied { read } for pid=16387 comm="syz.2.2882" name="0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 273.573058][ T40] audit: type=1400 audit(1772191459.359:43104): avc: denied { open } for pid=16387 comm="syz.2.2882" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 273.581176][ T40] audit: type=1400 audit(1772191459.359:43105): avc: denied { ioctl } for pid=16387 comm="syz.2.2882" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=723 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 273.589522][ T40] audit: type=1400 audit(1772191459.359:43106): avc: denied { connect } for pid=16389 comm="syz.0.2883" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.596252][ T40] audit: type=1400 audit(1772191459.359:43107): avc: denied { write } for pid=16389 comm="syz.0.2883" path="socket:[71605]" dev="sockfs" ino=71605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.604747][ T40] audit: type=1400 audit(1772191459.359:43108): avc: denied { name_bind } for pid=16389 comm="syz.0.2883" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 273.612921][ T40] audit: type=1400 audit(1772191459.359:43109): avc: denied { node_bind } for pid=16389 comm="syz.0.2883" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 273.619490][ T40] audit: type=1400 audit(1772191459.396:43110): avc: denied { mount } for pid=16393 comm="syz.2.2884" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 273.969782][T16419] trusted_key: encrypted_key: insufficient parameters specified [ 274.000760][T16424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59936 sclass=netlink_route_socket pid=16424 comm=syz.6.2894 [ 274.048172][T16417] ( [ 275.021307][T16501] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3596000302 (14384001208 ns) > initial count (4696682236 ns). Using initial count to start timer. [ 275.085348][T16511] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000) [ 275.127499][T16514] netlink: 'syz.6.2913': attribute type 1 has an invalid length. [ 275.130071][T16514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.191317][T16518] hugetlbfs: Bad value '$' for mount option 'size' [ 275.191317][T16518] [ 275.421475][T16544] Bluetooth: hci0: load_link_keys: too big key_count value 9472 [ 275.780674][T16570] netlink: 'syz.3.2935': attribute type 3 has an invalid length. [ 275.796594][T16568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.803602][T16568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.811394][T16568] bond0 (unregistering): (slave bond3): Releasing backup interface [ 275.819263][T16568] bond0 (unregistering): Released all slaves [ 275.888220][T16572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16572 comm=syz.2.2936 [ 275.952958][T16589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16589 comm=syz.2.2936 [ 276.119951][T16601] xt_hashlimit: size too large, truncated to 1048576 [ 276.175245][T16612] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 276.334809][T16625] Cannot find del_set index 4 as target [ 276.338597][T16625] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16625 comm=syz.6.2951 [ 276.477716][T16638] bond4: Invalid ad_actor_system MAC address. [ 276.483581][T16638] bond4: option ad_actor_system: invalid value (255) [ 276.490234][T16638] bond4 (unregistering): Released all slaves [ 276.669455][T16647] fuse: Bad value for 'fd' [ 276.803137][T16663] xfrm0 speed is unknown, defaulting to 1000 [ 276.805927][T16663] lo speed is unknown, defaulting to 1000 [ 277.320400][ T34] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 277.481904][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.490843][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.493851][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.497791][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.500574][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.514224][ T34] usb 7-1: config 0 descriptor?? [ 277.646999][T16741] __nla_validate_parse: 12 callbacks suppressed [ 277.647020][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2982'. [ 277.655123][T16741] netlink: 'syz.0.2982': attribute type 3 has an invalid length. [ 277.858939][T16753] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 277.954891][ T34] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 277.988990][ T34] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 278.221264][ T6161] usb 7-1: USB disconnect, device number 41 [ 278.551923][T16764] kvm: kvm [16763]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 278.556301][T16764] kvm: kvm [16763]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 278.790197][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2990'. [ 278.794233][T16768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2990'. [ 278.808232][ T9095] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.808345][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2990'. [ 278.812129][ T9095] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.815777][T16768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2990'. [ 278.819606][ T9095] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.828956][ T9095] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.867748][ T40] kauditd_printk_skb: 354 callbacks suppressed [ 278.867760][ T40] audit: type=1400 audit(1772191464.341:43465): avc: denied { allowed } for pid=16769 comm="syz.0.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 278.896404][ T40] audit: type=1400 audit(1772191464.360:43466): avc: denied { execute } for pid=16769 comm="syz.0.2991" path="/288/blkio.bfq.io_service_bytes" dev="tmpfs" ino=1543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 279.056087][ T40] audit: type=1400 audit(1772191464.510:43467): avc: denied { create } for pid=16772 comm="syz.6.2992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 279.065094][ T40] audit: type=1400 audit(1772191464.520:43468): avc: denied { getopt } for pid=16772 comm="syz.6.2992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 279.074676][ T40] audit: type=1400 audit(1772191464.529:43469): avc: denied { write } for pid=16772 comm="syz.6.2992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 279.113263][ T40] audit: type=1400 audit(1772191464.567:43470): avc: denied { read write } for pid=16774 comm="syz.6.2993" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 279.121135][ T40] audit: type=1400 audit(1772191464.567:43471): avc: denied { open } for pid=16774 comm="syz.6.2993" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 279.174981][ T40] audit: type=1400 audit(1772191464.632:43472): avc: denied { read write } for pid=16776 comm="syz.6.2994" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 279.185002][ T40] audit: type=1400 audit(1772191464.632:43473): avc: denied { open } for pid=16776 comm="syz.6.2994" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 279.441264][ T6106] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 279.611914][ T6106] usb 11-1: Using ep0 maxpacket: 8 [ 279.615658][ T6106] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.619279][ T6106] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.623165][ T6106] usb 11-1: config 0 interface 0 has no altsetting 0 [ 279.625668][ T6106] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 279.628587][ T6106] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.633852][ T6106] usb 11-1: config 0 descriptor?? [ 279.778352][ T40] audit: type=1400 audit(1772191465.186:43474): avc: denied { mounton } for pid=16781 comm="syz.2.2996" path="/176" dev="tmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 279.902189][T16785] netlink: 'syz.3.2997': attribute type 3 has an invalid length. [ 280.069996][ T3337] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 280.075460][ T5940] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 280.078800][ T6106] usbhid 11-1:0.0: can't add hid device: -71 [ 280.080909][ T6106] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 280.084575][ T6106] usb 11-1: USB disconnect, device number 13 [ 280.148967][T16791] x_tables: ip_tables: osf match: only valid for protocol 6 [ 280.156330][T16793] x_tables: ip_tables: osf match: only valid for protocol 6 [ 280.230026][ T3337] usb 7-1: Using ep0 maxpacket: 16 [ 280.233839][ T3337] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 280.237785][ T3337] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 280.242914][ T3337] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 280.245885][ T3337] usb 7-1: config 0 interface 0 has no altsetting 0 [ 280.249755][ T3337] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 280.253446][ T3337] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.256067][ T3337] usb 7-1: Product: syz [ 280.257435][ T3337] usb 7-1: Manufacturer: syz [ 280.258951][ T3337] usb 7-1: SerialNumber: syz [ 280.264069][ T3337] usb 7-1: config 0 descriptor?? [ 280.458349][T16815] netlink: 'syz.0.3007': attribute type 3 has an invalid length. [ 280.493715][ T3337] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input28 [ 280.499536][ T5325] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 280.503788][ T5325] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 280.509437][ T5325] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 280.513503][ T5325] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 280.543697][T10652] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 280.549130][ T5325] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 280.553786][ T5325] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 280.557807][ T5325] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 280.562176][ T5325] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 280.724491][T16823] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.728054][T16823] bridge0: port 1(1¾x9ÿ) entered disabled state [ 280.773373][T16782] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 280.823876][T16823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.837158][T16823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.948642][ T6161] usb 7-1: USB disconnect, device number 42 [ 281.029350][T16823] bond2: left promiscuous mode [ 281.038882][ T9095] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.049392][ T9095] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.054234][ T9095] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.063907][ T9095] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.099223][T16832] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 281.101980][T16832] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 281.109802][T16832] vhci_hcd vhci_hcd.0: Device attached [ 281.359598][ T39] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 281.647269][T16826] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 281.819272][T16826] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 281.823381][T16826] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 281.827106][T16826] usb 7-1: config 220 interface 0 has no altsetting 0 [ 281.831389][T16826] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 281.834944][T16826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.838030][T16826] usb 7-1: Product: syz [ 281.840342][T16826] usb 7-1: Manufacturer: syz [ 281.842128][T16826] usb 7-1: SerialNumber: syz [ 282.073919][T16838] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 282.082515][T16838] romfs: unable to set blocksize [ 282.082515][T16838] [ 282.096181][T16826] uvcvideo 7-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 282.099391][T16826] uvcvideo 7-1:220.0: No valid video chain found. [ 282.108845][T16826] usb 7-1: USB disconnect, device number 43 [ 282.715430][T16847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3018'. [ 282.718725][T16847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3018'. [ 282.722736][T16848] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16848 comm=syz.2.3018 [ 282.784611][T16853] xt_connbytes: Forcing CT accounting to be enabled [ 283.454831][T16865] netlink: 'syz.2.3025': attribute type 1 has an invalid length. [ 283.581110][T16881] xt_hashlimit: size too large, truncated to 1048576 [ 283.758988][T16887] netlink: 'syz.0.3031': attribute type 3 has an invalid length. [ 283.852338][T16895] netlink: 'syz.6.3033': attribute type 2 has an invalid length. [ 283.864046][T16895] netlink: 'syz.6.3033': attribute type 1 has an invalid length. [ 283.870551][T16895] netlink: 'syz.6.3033': attribute type 1 has an invalid length. [ 283.908804][T16898] netlink: 'syz.2.3028': attribute type 2 has an invalid length. [ 283.912362][T16898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3028'. [ 284.074106][T16914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3039'. [ 284.082431][T16914] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 284.087110][T16914] fuse: Bad value for 'user_id' [ 284.089680][T16914] fuse: Bad value for 'user_id' [ 284.196992][T16926] fuse: Bad value for 'group_id' [ 284.199104][T16926] fuse: Bad value for 'group_id' [ 284.217116][ T40] kauditd_printk_skb: 153 callbacks suppressed [ 284.217133][ T40] audit: type=1400 audit(1772191469.361:43628): avc: denied { create } for pid=16925 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 284.230322][ T40] audit: type=1400 audit(1772191469.361:43629): avc: denied { name_bind } for pid=16925 comm="syz.0.3042" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 284.238443][ T40] audit: type=1400 audit(1772191469.361:43630): avc: denied { node_bind } for pid=16925 comm="syz.0.3042" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 284.247232][ T40] audit: type=1400 audit(1772191469.361:43631): avc: denied { mount } for pid=16925 comm="syz.0.3042" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 284.256781][ T40] audit: type=1400 audit(1772191469.361:43632): avc: denied { shutdown } for pid=16925 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 284.309394][T16833] vhci_hcd: connection reset by peer [ 284.311280][ T9108] vhci_hcd vhci_hcd.3: stop threads [ 284.314761][ T9108] vhci_hcd vhci_hcd.3: release socket [ 284.316955][ T9108] vhci_hcd vhci_hcd.3: disconnect device [ 284.342459][T16928] netlink: 'syz.3.3043': attribute type 21 has an invalid length. [ 284.421828][ T40] audit: type=1400 audit(1772191469.549:43633): avc: denied { write } for pid=16930 comm="syz.6.3044" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 284.431741][ T40] audit: type=1400 audit(1772191469.549:43634): avc: denied { open } for pid=16930 comm="syz.6.3044" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 284.442004][ T40] audit: type=1400 audit(1772191469.549:43635): avc: denied { read } for pid=16930 comm="syz.6.3044" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 284.452768][ T40] audit: type=1400 audit(1772191469.549:43636): avc: denied { open } for pid=16930 comm="syz.6.3044" path="net:[4026532884]" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 284.478532][T16936] IPVS: Unknown mcast interface: bridge_slave_0 [ 284.523635][T16941] SELinux: unknown common  [ 284.525454][ T40] audit: type=1400 audit(1772191469.643:43637): avc: denied { load_policy } for pid=16940 comm="syz.6.3046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 284.529375][T16941] SELinux: failed to load policy [ 284.646426][T16944] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16944 comm=syz.6.3047 [ 284.743161][T16946] netlink: 'syz.6.3048': attribute type 3 has an invalid length. [ 284.868075][T16955] program syz.6.3052 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.963598][T16960] syzkaller0: entered promiscuous mode [ 284.965491][T16960] syzkaller0: entered allmulticast mode [ 285.086839][T16970] hub 8-0:1.0: USB hub found [ 285.088799][T16970] hub 8-0:1.0: 1 port detected [ 285.301163][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3064'. [ 285.305449][T16989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3064'. [ 286.788609][ T39] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 286.898258][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3064'. [ 286.900867][T16989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3064'. [ 286.904310][T16998] ip6tnl0: Caught tx_queue_len zero misconfig [ 287.053191][T17008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.075919][T17025] --map-set only usable from mangle table [ 287.128098][T17038] nilfs2: Unknown parameter 'norecoveryiband/rdma_cm' [ 287.131761][T17040] nilfs2: Unknown parameter 'norecoveryiband/rdma_cm' [ 287.169826][T17044] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3079'. [ 287.245916][T17049] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3081'. [ 287.412874][ T6161] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 287.453912][T17055] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 287.548308][T17069] 8021q: adding VLAN 0 to HW filter on device bond4 [ 287.630850][ T6161] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.635577][ T6161] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 287.639970][ T6161] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.643809][ T6161] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.651676][T17026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 287.654920][T17074] netem: unknown loss type 0 [ 287.656945][T17074] netem: change failed [ 287.658210][ T6161] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.867439][T17089] input: syz1 as /devices/virtual/input/input29 [ 287.869954][T17089] input: failed to attach handler leds to device input29, error: -6 [ 287.886369][T17089] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3095'. [ 287.924123][ T6106] usb 8-1: USB disconnect, device number 27 [ 287.970679][T17089] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.975189][T17089] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.026261][T17107] netlink: 'syz.6.3100': attribute type 3 has an invalid length. [ 288.089179][T17109] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3101'. [ 288.114804][T17089] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.119224][T17089] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.133711][T17109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.144589][T17109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.152884][T17109] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 288.174156][T17109] bond0 (unregistering): Released all slaves [ 288.223523][T17089] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.226823][T17089] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.295690][ T5940] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 288.343945][T17089] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.347430][T17089] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.450838][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.454487][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.465192][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.469180][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.491735][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.495540][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.505643][T17140] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 288.517296][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.521041][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.582489][T17147] No buffer was provided with the request [ 288.648175][T17157] netlink: 'syz.3.3115': attribute type 9 has an invalid length. [ 288.665817][T17157] hfs: can't find a HFS filesystem on dev sr0 [ 288.735060][T17169] erspan1: entered promiscuous mode [ 288.737458][T17169] erspan1: entered allmulticast mode [ 288.959164][T17177] validate_nla: 2 callbacks suppressed [ 288.959175][T17177] netlink: 'syz.2.3120': attribute type 1 has an invalid length. [ 288.963295][T17177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.004729][T17188] overlayfs: failed to clone upperpath [ 289.559625][T17216] overlayfs: conflicting options: nfs_export=on,index=off [ 289.597922][ T40] kauditd_printk_skb: 298 callbacks suppressed [ 289.597939][ T40] audit: type=1400 audit(2000000001.379:43936): avc: denied { setopt } for pid=17218 comm="syz.6.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 289.627222][ T40] audit: type=1400 audit(2000000001.397:43937): avc: denied { egress } for pid=39 comm="kworker/2:1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 289.635746][ T40] audit: type=1400 audit(2000000001.397:43938): avc: denied { sendto } for pid=39 comm="kworker/2:1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 289.643725][ T40] audit: type=1400 audit(2000000001.397:43939): avc: denied { create } for pid=17220 comm="syz.6.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 289.644227][T17223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.649915][ T40] audit: type=1400 audit(2000000001.397:43940): avc: denied { bind } for pid=17220 comm="syz.6.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 289.649941][ T40] audit: type=1400 audit(2000000001.397:43941): avc: denied { accept } for pid=17220 comm="syz.6.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 289.652327][T17223] IPv6: NLM_F_CREATE should be set when creating new route [ 289.656185][T17225] netlink: 'syz.2.3137': attribute type 3 has an invalid length. [ 289.659545][ T40] audit: type=1400 audit(2000000001.397:43942): avc: denied { write } for pid=17220 comm="syz.6.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 289.679621][ T40] audit: type=1400 audit(2000000001.397:43943): avc: denied { read } for pid=17220 comm="syz.6.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 289.687136][ T40] audit: type=1400 audit(2000000001.397:43944): avc: denied { read } for pid=17220 comm="syz.6.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 289.699609][T17223] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.702160][T17223] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.731866][T17223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.739701][T17223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.796120][ T9093] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.802005][ T9093] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.804896][ T9093] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.807858][ T9093] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.844314][ T40] audit: type=1400 audit(2000000001.623:43945): avc: denied { create } for pid=17227 comm="syz.3.3139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 290.117300][T17233] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 290.162843][ T839] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 290.208525][T17236] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.211694][T17236] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.307507][T17236] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.312330][T17236] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.324378][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.328484][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.332042][ T839] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.336489][ T839] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.340048][ T839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.344919][ T839] usb 8-1: config 0 descriptor?? [ 290.369217][T17236] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.372418][T17236] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.448109][T17236] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.451278][T17236] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.787341][ T839] usbhid 8-1:0.0: can't add hid device: -71 [ 290.789478][ T839] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 290.794302][ T839] usb 8-1: USB disconnect, device number 28 [ 290.899336][T17257] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 291.044790][T17264] Cannot find add_set index 65532 as target [ 291.089480][ T39] libceph: connect (1)[c::]:6789 error -101 [ 291.092554][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 291.150283][ T29] libceph: connect (1)[b::]:6789 error -101 [ 291.153033][ T29] libceph: mon0 (1)[b::]:6789 connect error [ 291.368008][ T39] libceph: connect (1)[c::]:6789 error -101 [ 291.377967][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 291.434218][ T29] libceph: connect (1)[b::]:6789 error -101 [ 291.436961][ T29] libceph: mon0 (1)[b::]:6789 connect error [ 291.450043][T17283] netlink: 'syz.0.3154': attribute type 21 has an invalid length. [ 291.454838][T17283] __nla_validate_parse: 8 callbacks suppressed [ 291.454848][T17283] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3154'. [ 291.668167][T17299] openvswitch: netlink: EtherType 50a is less than min 600 [ 291.718976][ T34] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 291.900238][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 291.903728][ T34] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 291.906480][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.910274][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 291.914626][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.917896][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.921874][ T839] libceph: connect (1)[c::]:6789 error -101 [ 291.922417][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 291.924198][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 291.927032][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.971923][T17266] ceph: No mds server is up or the cluster is laggy [ 291.971974][T17269] ceph: No mds server is up or the cluster is laggy [ 291.976719][ T3251] libceph: connect (1)[b::]:6789 error -101 [ 291.978707][ T3251] libceph: mon0 (1)[b::]:6789 connect error [ 292.159550][ T34] usb 8-1: usb_control_msg returned -32 [ 292.161531][ T34] usbtmc 8-1:16.0: can't read capabilities [ 292.225742][T17313] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3164'. [ 292.621267][T17324] FAULT_INJECTION: forcing a failure. [ 292.621267][T17324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.627446][T17324] CPU: 2 UID: 0 PID: 17324 Comm: syz.6.3168 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.627481][T17324] Tainted: [L]=SOFTLOCKUP [ 292.627486][T17324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 292.627496][T17324] Call Trace: [ 292.627503][T17324] [ 292.627509][T17324] dump_stack_lvl+0x100/0x190 [ 292.627549][T17324] should_fail_ex.cold+0x5/0xa [ 292.627570][T17324] _copy_from_user+0x2e/0xd0 [ 292.627600][T17324] restore_altstack+0x98/0x170 [ 292.627625][T17324] ? __pfx_restore_altstack+0x10/0x10 [ 292.627650][T17324] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.627680][T17324] ? lockdep_hardirqs_on+0x78/0x100 [ 292.627697][T17324] ? _raw_spin_unlock_irq+0x2e/0x50 [ 292.627722][T17324] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 292.627744][T17324] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 292.627772][T17324] do_syscall_64+0x106/0xf80 [ 292.627788][T17324] ? clear_bhb_loop+0x40/0x90 [ 292.627808][T17324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.627824][T17324] RIP: 0033:0x7f3f30d3db19 [ 292.627838][T17324] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 292.627853][T17324] RSP: 002b:00007f3f31c0b340 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 292.627870][T17324] RAX: ffffffffffffffda RBX: 00007f3f31015fa0 RCX: 00007f3f30d3db19 [ 292.627880][T17324] RDX: 00007f3f31c0b340 RSI: 00007f3f31c0b470 RDI: 0000000000000011 [ 292.627890][T17324] RBP: 00007f3f31c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 292.627899][T17324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.627908][T17324] R13: 00007f3f31016038 R14: 00007f3f31015fa0 R15: 00007ffd78098ca8 [ 292.627932][T17324] [ 292.633668][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.718164][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.731325][T17337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.765623][ T9093] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.768436][ T9093] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.789010][ T9108] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.792267][ T9108] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.814943][ T9108] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.818623][ T9108] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.828076][T17352] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3176'. [ 292.843654][T17358] netlink: 'syz.2.3177': attribute type 11 has an invalid length. [ 292.846843][T17357] netlink: 'syz.2.3177': attribute type 11 has an invalid length. [ 292.850405][T17358] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3177'. [ 292.855025][T17357] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3177'. [ 292.958621][T17371] netlink: 'syz.2.3181': attribute type 2 has an invalid length. [ 292.971627][T17366] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 292.979995][T17374] netlink: 'syz.6.3182': attribute type 3 has an invalid length. [ 293.005137][T17377] netlink: 'syz.2.3183': attribute type 1 has an invalid length. [ 293.009641][T17377] netlink: 'syz.2.3183': attribute type 1 has an invalid length. [ 293.013118][T17377] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.3183'. [ 293.187415][ T3251] usb 8-1: USB disconnect, device number 29 [ 293.340764][T17399] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3190'. [ 293.451142][ T12] bond0: (slave bond_slave_0): interface is now down [ 293.454461][ T12] bond0: (slave bond_slave_1): interface is now down [ 293.459126][T17405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=17405 comm=syz.2.3192 [ 293.465828][ T12] bond0: now running without any active interface! [ 293.524839][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'. [ 293.528851][T17409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3194'. [ 293.533644][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'. [ 293.539184][T17409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17409 comm=syz.2.3194 [ 293.593109][T17413] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 293.595815][T17413] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 293.598551][T17413] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 293.600957][T17413] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 293.832714][T17433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17433 comm=syz.6.3202 [ 293.882796][T17441] openvswitch: netlink: IP tunnel TTL not specified. [ 293.973978][T17453] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 293.991192][T17453] binder: 17452:17453 ioctl c0306201 0 returned -14 [ 293.994429][T17453] binder: 17452:17453 ioctl c0306201 0 returned -14 [ 294.081038][T17467] program syz.3.3213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.084422][T17468] netlink: 'syz.0.3210': attribute type 1 has an invalid length. [ 294.130041][T17468] 8021q: adding VLAN 0 to HW filter on device bond6 [ 294.172915][T17479] Invalid source name [ 294.174473][T17479] UBIFS error (pid: 17479): cannot open "ubifs", error -22 [ 294.198065][T17468] bond6: (slave veth7): Enslaving as an active interface with a down link [ 294.206742][T17481] vlan3: entered allmulticast mode [ 294.208323][T17481] bond6: entered allmulticast mode [ 294.210633][T17481] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 294.336064][T17492] netlink: 'syz.6.3219': attribute type 2 has an invalid length. [ 294.469668][T17516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17516 comm=syz.3.3223 [ 294.531691][ T6106] IPVS: starting estimator thread 0... [ 294.536612][T17522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14608 sclass=netlink_route_socket pid=17522 comm=syz.0.3228 [ 294.618095][T16827] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 294.641586][T17515] FAULT_INJECTION: forcing a failure. [ 294.641586][T17515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.648863][T17515] CPU: 0 UID: 0 PID: 17515 Comm: syz.6.3226 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.648894][T17515] Tainted: [L]=SOFTLOCKUP [ 294.648899][T17515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 294.648909][T17515] Call Trace: [ 294.648916][T17515] [ 294.648922][T17515] dump_stack_lvl+0x100/0x190 [ 294.648964][T17515] should_fail_ex.cold+0x5/0xa [ 294.648987][T17515] _copy_to_user+0x32/0xd0 [ 294.649019][T17515] simple_read_from_buffer+0xcb/0x170 [ 294.649067][T17515] proc_fail_nth_read+0x1af/0x230 [ 294.649094][T17515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.649118][T17515] ? rw_verify_area+0xce/0x6d0 [ 294.649140][T17515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.649163][T17515] vfs_read+0x1e4/0xb30 [ 294.649191][T17515] ? __pfx_vfs_read+0x10/0x10 [ 294.649214][T17515] ? __fget_files+0x215/0x3d0 [ 294.649237][T17515] ? __fget_files+0x21f/0x3d0 [ 294.649261][T17515] ksys_read+0x12a/0x250 [ 294.649290][T17515] ? __pfx_ksys_read+0x10/0x10 [ 294.649337][T17515] do_syscall_64+0x106/0xf80 [ 294.649362][T17515] ? clear_bhb_loop+0x40/0x90 [ 294.649384][T17515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.649402][T17515] RIP: 0033:0x7f3f30d5cfce [ 294.649416][T17515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.649433][T17515] RSP: 002b:00007f3f31c0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.649449][T17515] RAX: ffffffffffffffda RBX: 00007f3f31c0c6c0 RCX: 00007f3f30d5cfce [ 294.649460][T17515] RDX: 000000000000000f RSI: 00007f3f31c0c0a0 RDI: 0000000000000004 [ 294.649471][T17515] RBP: 00007f3f31c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 294.649481][T17515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.649491][T17515] R13: 00007f3f31016038 R14: 00007f3f31015fa0 R15: 00007ffd78098ca8 [ 294.649516][T17515] [ 294.650077][T17523] IPVS: using max 47 ests per chain, 112800 per kthread [ 294.779283][T16827] usb 7-1: Using ep0 maxpacket: 8 [ 294.782167][T16827] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 294.784745][T16827] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.787916][T16827] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.791729][T16827] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.794888][T16827] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.799036][T16827] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.802819][T16827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.025474][T16827] usb 7-1: usb_control_msg returned -32 [ 295.027287][T16827] usbtmc 7-1:16.0: can't read capabilities [ 295.062954][ T40] kauditd_printk_skb: 357 callbacks suppressed [ 295.062969][ T40] audit: type=1400 audit(2000000006.511:44303): avc: denied { prog_load } for pid=17562 comm="syz.6.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 295.074375][ T40] audit: type=1400 audit(2000000006.520:44304): avc: denied { bpf } for pid=17562 comm="syz.6.3235" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 295.081597][ T40] audit: type=1400 audit(2000000006.520:44305): avc: denied { allowed } for pid=17562 comm="syz.6.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 295.100172][ T40] audit: type=1400 audit(2000000006.548:44306): avc: denied { ioctl } for pid=17564 comm="syz.6.3236" path="socket:[81984]" dev="sockfs" ino=81984 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 295.109364][ T40] audit: type=1400 audit(2000000006.548:44307): avc: denied { write } for pid=17564 comm="syz.6.3236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 295.116494][ T40] audit: type=1400 audit(2000000006.548:44308): avc: denied { create } for pid=17564 comm="syz.6.3236" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 295.129842][ T40] audit: type=1400 audit(2000000006.548:44309): avc: denied { read } for pid=17564 comm="syz.6.3236" name="file0" dev="tmpfs" ino=1693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 295.138885][ T40] audit: type=1400 audit(2000000006.548:44310): avc: denied { open } for pid=17564 comm="syz.6.3236" path="/316/file0" dev="tmpfs" ino=1693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 295.158160][ T40] audit: type=1400 audit(2000000006.548:44311): avc: denied { ioctl } for pid=17564 comm="syz.6.3236" path="/316/file0" dev="tmpfs" ino=1693 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 295.168444][ T40] audit: type=1400 audit(2000000006.576:44312): avc: denied { unlink } for pid=13400 comm="syz-executor" name="file0" dev="tmpfs" ino=1693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 295.410421][T17584] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 295.419346][T16827] usb 7-1: USB disconnect, device number 44 [ 295.509627][T17590] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 295.992488][T17601] xfrm0 speed is unknown, defaulting to 1000 [ 295.995567][T17601] lo speed is unknown, defaulting to 1000 [ 296.107844][T17611] random: crng reseeded on system resumption [ 296.176573][T17617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.198203][T17622] qnx6: unable to set blocksize [ 296.250971][T17631] qrtr: Invalid version 0 [ 296.504249][T17648] fuse: Unknown parameter 'fd0x0000000000000006' [ 296.556952][ T839] IPVS: starting estimator thread 0... [ 296.595135][T17659] veth0_to_bridge: entered promiscuous mode [ 296.673441][T17654] IPVS: using max 47 ests per chain, 112800 per kthread [ 296.803780][T17665] veth0_to_bridge: left promiscuous mode [ 296.891254][T17691] __nla_validate_parse: 14 callbacks suppressed [ 296.891265][T17691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3266'. [ 296.994978][ T34] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 297.157418][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.165530][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.169431][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.186917][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.190092][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.195577][ T34] usb 8-1: config 0 descriptor?? [ 297.528958][T17739] openvswitch: netlink: Invalid VLAN frame [ 297.637817][T17673] misc userio: The device must be registered before sending interrupts [ 297.694648][T17741] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000007' [ 297.700701][T17744] afs: Unknown parameter 'dyn„<¡ tgY…' [ 297.709239][T17744] overlayfs: overlapping lowerdir path [ 297.771527][T17748] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=17748 comm=syz.0.3281 [ 297.906740][T17761] /dev/nullb0: Can't lookup blockdev [ 298.037263][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'. [ 298.053413][T17770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3288'. [ 298.147093][T17781] sit0: entered promiscuous mode [ 298.153912][T17781] netlink: 'syz.2.3290': attribute type 1 has an invalid length. [ 298.158178][T17781] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3290'. [ 298.449170][ T5940] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 298.624600][T17802] program syz.6.3297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.895009][T17832] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17832 comm=syz.0.3305 [ 299.556106][T17858] netlink: 'syz.2.3312': attribute type 4 has an invalid length. [ 299.558750][T17858] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3312'. [ 299.566184][T17858] `: renamed from bond0 (while UP) [ 299.872370][ T34] usbhid 8-1:0.0: can't add hid device: -71 [ 299.874444][ T34] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 299.884097][ T34] usb 8-1: USB disconnect, device number 30 [ 299.899753][T17866] FAT-fs (sr0): bogus number of reserved sectors [ 299.901902][T17866] FAT-fs (sr0): Can't find a valid FAT filesystem [ 299.919153][T17867] FAT-fs (sr0): bogus number of reserved sectors [ 299.921259][T17867] FAT-fs (sr0): Can't find a valid FAT filesystem [ 299.940129][T17869] loop4: detected capacity change from 0 to 7 [ 299.946563][T17869] Dev loop4: unable to read RDB block 7 [ 299.949483][T17869] loop4: AHDI p1 p2 p3 [ 299.951253][T17869] loop4: partition table partially beyond EOD, truncated [ 299.954624][T17869] loop4: p1 start 1601398130 is beyond EOD, truncated [ 299.957564][T17869] loop4: p2 start 1702059890 is beyond EOD, truncated [ 300.406109][ T34] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 300.436564][ T40] kauditd_printk_skb: 358 callbacks suppressed [ 300.436582][ T40] audit: type=1400 audit(2000000267.544:44671): avc: denied { unmount } for pid=14485 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 300.578650][ T34] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 300.581092][ T34] usb 8-1: can't read configurations, error -61 [ 300.736174][ T34] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 300.751162][ T40] audit: type=1400 audit(2000000267.854:44672): avc: denied { map_create } for pid=17847 comm="syz.6.3307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 300.758940][ T40] audit: type=1400 audit(2000000267.854:44673): avc: denied { map_read map_write } for pid=17847 comm="syz.6.3307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 300.790039][ T40] audit: type=1400 audit(2000000267.891:44674): avc: denied { allowed } for pid=17847 comm="syz.6.3307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 300.832076][ T40] audit: type=1400 audit(2000000267.919:44675): avc: denied { ioctl } for pid=17847 comm="syz.6.3307" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 300.861238][ T40] audit: type=1400 audit(2000000267.948:44676): avc: denied { mounton } for pid=17847 comm="syz.6.3307" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 300.873655][ T40] audit: type=1400 audit(2000000267.966:44677): avc: denied { create } for pid=17890 comm="syz.0.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 300.887964][ T40] audit: type=1400 audit(2000000267.985:44678): avc: denied { bind } for pid=17890 comm="syz.0.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 300.897787][ T34] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 300.900280][ T34] usb 8-1: can't read configurations, error -61 [ 300.900513][ T40] audit: type=1400 audit(2000000267.995:44679): avc: denied { mounton } for pid=17890 comm="syz.0.3323" path="/399/file0" dev="tmpfs" ino=2125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 300.902606][ T34] usb usb8-port1: attempt power cycle [ 300.926751][T17893] [ 300.927817][T17893] ============================================ [ 300.930381][T17893] WARNING: possible recursive locking detected [ 300.932883][T17893] syzkaller #0 Tainted: G L [ 300.935341][T17893] -------------------------------------------- [ 300.937588][T17893] syz.6.3324/17893 is trying to acquire lock: [ 300.939526][T17893] ffff88803477d8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 300.942312][T17893] [ 300.942312][T17893] but task is already holding lock: [ 300.944603][T17893] ffff88803477d0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 300.947747][T17893] [ 300.947747][T17893] other info that might help us debug this: [ 300.950275][T17893] Possible unsafe locking scenario: [ 300.950275][T17893] [ 300.952588][T17893] CPU0 [ 300.953661][T17893] ---- [ 300.954720][T17893] lock(&dev->mutex#4); [ 300.956062][T17893] lock(&dev->mutex#4); [ 300.957542][T17893] [ 300.957542][T17893] *** DEADLOCK *** [ 300.957542][T17893] [ 300.960109][T17893] May be due to missing lock nesting notation [ 300.960109][T17893] [ 300.962689][T17893] 1 lock held by syz.6.3324/17893: [ 300.964318][T17893] #0: ffff88803477d0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 300.967593][T17893] [ 300.967593][T17893] stack backtrace: [ 300.969629][T17893] CPU: 1 UID: 0 PID: 17893 Comm: syz.6.3324 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.969654][T17893] Tainted: [L]=SOFTLOCKUP [ 300.969660][T17893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 300.969671][T17893] Call Trace: [ 300.969677][T17893] [ 300.969684][T17893] dump_stack_lvl+0x100/0x190 [ 300.969712][T17893] print_deadlock_bug.cold+0xbd/0xca [ 300.969739][T17893] __lock_acquire+0x12bb/0x2630 [ 300.969771][T17893] lock_acquire+0x1cf/0x380 [ 300.969793][T17893] ? comedi_do_insn+0x2e/0x360 [ 300.969813][T17893] ? __pfx___might_resched+0x10/0x10 [ 300.969834][T17893] __mutex_lock+0x1a2/0x1b90 [ 300.969853][T17893] ? comedi_do_insn+0x2e/0x360 [ 300.969871][T17893] ? comedi_do_insn+0x2e/0x360 [ 300.969889][T17893] ? __pfx___mutex_lock+0x10/0x10 [ 300.969907][T17893] ? __pfx___might_resched+0x10/0x10 [ 300.969928][T17893] ? __up_read+0x2c5/0x700 [ 300.969946][T17893] ? comedi_do_insn+0x2e/0x360 [ 300.969964][T17893] comedi_do_insn+0x2e/0x360 [ 300.969982][T17893] comedi_dio_bitfield2+0x3c0/0x420 [ 300.970000][T17893] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 300.970022][T17893] ? do_insn_ioctl+0xda/0x4e0 [ 300.970043][T17893] ? stack_trace_save+0x8e/0xc0 [ 300.970066][T17893] ? __pfx_stack_trace_save+0x10/0x10 [ 300.970088][T17893] bonding_dio_insn_bits+0x2b9/0x570 [ 300.970112][T17893] ? kasan_save_track+0x14/0x30 [ 300.970135][T17893] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 300.970157][T17893] ? __x64_sys_ioctl+0x18e/0x210 [ 300.970180][T17893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.970198][T17893] insn_rw_emulate_bits+0x2a2/0x5e0 [ 300.970231][T17893] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 300.970259][T17893] ? comedi_check_chanlist+0x27e/0x300 [ 300.970285][T17893] parse_insn+0x83f/0x19f0 [ 300.970307][T17893] ? trace_kmalloc+0x101/0x130 [ 300.970333][T17893] ? __pfx_parse_insn+0x10/0x10 [ 300.970350][T17893] ? __kmalloc_noprof+0x320/0x850 [ 300.970370][T17893] do_insn_ioctl+0x152/0x4e0 [ 300.970389][T17893] comedi_unlocked_ioctl+0xf68/0x3310 [ 300.970410][T17893] ? tomoyo_path_number_perm+0x188/0x580 [ 300.970436][T17893] ? futex_wait+0x125/0x380 [ 300.970455][T17893] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 300.970478][T17893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 300.970500][T17893] ? do_vfs_ioctl+0x226/0x13e0 [ 300.970521][T17893] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 300.970542][T17893] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 300.970565][T17893] ? __fget_files+0x215/0x3d0 [ 300.970580][T17893] ? hook_file_ioctl_common+0x146/0x410 [ 300.970605][T17893] ? selinux_file_ioctl+0x139/0x290 [ 300.970622][T17893] ? selinux_file_ioctl+0xb4/0x290 [ 300.970640][T17893] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 300.970664][T17893] __x64_sys_ioctl+0x18e/0x210 [ 300.970684][T17893] do_syscall_64+0x106/0xf80 [ 300.970700][T17893] ? clear_bhb_loop+0x40/0x90 [ 300.970715][T17893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.970730][T17893] RIP: 0033:0x7f3f30d9c799 [ 300.970744][T17893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.970759][T17893] RSP: 002b:00007f3f31c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.970775][T17893] RAX: ffffffffffffffda RBX: 00007f3f31015fa0 RCX: 00007f3f30d9c799 [ 300.970786][T17893] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 300.970797][T17893] RBP: 00007f3f30e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 300.970807][T17893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.970817][T17893] R13: 00007f3f31016038 R14: 00007f3f31015fa0 R15: 00007ffd78098ca8 [ 300.970834][T17893] [ 300.981105][ T40] audit: type=1400 audit(2000000268.060:44680): avc: denied { read } for pid=17892 comm="syz.6.3324" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 301.018992][T17898] ipvlan3: entered allmulticast mode [ 301.113968][T17898] batadv_slave_1: entered allmulticast mode [ 301.118045][T17898] batman_adv: batadv0: Adding interface: ipvlan3 [ 301.121420][T17898] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.132190][T17898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.136564][T17898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.140789][T17898] batman_adv: batadv0: Interface activated: ipvlan3 [ 301.311728][ T34] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 301.356372][ T34] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 301.358858][ T34] usb 8-1: can't read configurations, error -61 [ 301.492932][ T34] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 301.537599][ T34] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 301.540054][ T34] usb 8-1: can't read configurations, error -61 [ 301.546308][ T34] usb usb8-port1: unable to enumerate USB device [ 301.560151][ T62] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.564363][ T62] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.707936][ T62] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.711125][ T62] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.781959][ T62] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.785073][ T62] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.825961][ T62] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.829384][ T62] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.910490][ T62] bridge_slave_1: left promiscuous mode [ 301.912660][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.916506][ T62] bridge_slave_0: left allmulticast mode [ 301.918438][ T62] bridge_slave_0: left promiscuous mode [ 301.922215][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.114922][ T62] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.118207][ T62] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.121361][ T62] ` (unregistering): Released all slaves [ 302.124529][ T62] bond1 (unregistering): Released all slaves [ 302.128576][ T62] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 302.132002][ T62] bond2 (unregistering): Released all slaves [ 302.136580][ T62] bond3 (unregistering): Released all slaves [ 302.140208][ T62] bond4 (unregistering): Released all slaves [ 302.144185][ T62] bond5 (unregistering): Released all slaves [ 302.426168][ T62] hsr_slave_0: left promiscuous mode [ 302.428217][ T62] hsr_slave_1: left promiscuous mode [ 302.430401][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.432958][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.435614][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.437959][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.442093][ T62] veth1_macvtap: left promiscuous mode [ 302.443842][ T62] veth0_macvtap: left promiscuous mode [ 302.445622][ T62] veth1_vlan: left promiscuous mode [ 302.447316][ T62] veth0_vlan: left promiscuous mode [ 302.830843][ T62] IPVS: stop unused estimator thread 0...