last executing test programs: 2m56.451078134s ago: executing program 1 (id=221): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xfffffffffffffff7, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000"], 0x48) r5 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) sendto$phonet(r5, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x0, 0x1}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x1, @sliced={0x7, [0x3d, 0x401, 0x0, 0x4, 0x435e, 0xc, 0x3, 0x0, 0x46a, 0xc1b9, 0x40, 0x9a, 0x3, 0x8, 0x5, 0x400, 0x6, 0xe565, 0x80, 0xd00, 0x7, 0x0, 0x0, 0x3ff, 0x40, 0x5, 0x7, 0x2, 0x3, 0xfffa, 0x7fff, 0x2, 0x3, 0x3, 0x80, 0x8001, 0x3ff, 0x2, 0xe, 0x9, 0x8, 0x3, 0x401, 0x0, 0x80, 0xe2, 0x0, 0x9], 0xfffffffc}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020603001b00000000000000070000030500040000000000050005000a0000ebc4000300686173683a69702c6d616300050001000700000009000223737900000c00078004a9efa1050015000700000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x800) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000440)={'wg1\x00', &(0x7f0000000480)=@ethtool_rxnfc={0x29, 0x10, 0x8000000000000001, {0x1, @tcp_ip4_spec={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3c}, 0x4e20, 0x4e20, 0x2}, {0x0, @empty, 0x1, 0x9, [0x2, 0xb]}, @ah_ip4_spec={@rand_addr=0x64010100, @multicast2, 0x9}, {0x0, @empty, 0x0, 0x5, [0x7, 0x652]}}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r9) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r10, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r11 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r11, r11, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r11, 0x1c, 0xe1}, &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'mcryptd(wp384)\x00'}}, &(0x7f0000000380)="714ebeda1084ae7145f68513c2e3a54c29fab96feec3782bebe5cf55", &(0x7f0000000540)="983b66189967b47fa523433540f71a4d3f9c2a3bf8417380651e994af6e601ee113b56c242d2e33f0fa33c0e450031c630fe3409191563f371d47c42ea824e38acec7c0417e318ca1a045337659ea4a84651ee38cc5e87f1624a8b8da732e11f33a5dfe9da0ea293786c1ccf9bc238f418d109abeff3c6792402ae8a3ffba5469e90acc44c8b637a38a6efd58057eeffad3ddc2abf78863200729cba6f2474db36733627feaa99dac118f870f75be848407742fd7beb14e55601b2482d93e4028cdc8e2467238ac2d70ba6920963e4b96bb53cc7e3723638c548c874becf1126ac") 2m56.202704188s ago: executing program 1 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xcbff21caaad33567) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) (async) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x200042, 0x1, 0x6}, 0x18) symlinkat(&(0x7f0000000100)='./file0\x00', r0, &(0x7f00000001c0)='./bus\x00') (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents64(r1, &(0x7f00000088c0)=""/48, 0x30) (async) getdents(r1, 0xffffffffffffffff, 0x5a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000000c0)={[], [{@euid_gt={'euid>', r2}}, {@subj_role={'subj_role', 0x3d, 'overlay\x00'}}]}) 2m56.202105713s ago: executing program 1 (id=227): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x38011, r0, 0x3ef6a000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async, rerun: 64) madvise(&(0x7f0000158000/0x1000)=nil, 0x1000, 0xe) (rerun: 64) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) shutdown(r2, 0x0) (async, rerun: 32) ppoll(&(0x7f00000000c0)=[{r2, 0x76}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo/3\x00') (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) 2m56.012378762s ago: executing program 1 (id=228): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000080), &(0x7f0000000000)="15", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x4db8, &(0x7f0000000280)={0x0, 0x4f9f, 0x10000, 0x1, 0x31c}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x0, 0x4810, r3, 0x30000000) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f00000000c0)={{}, 0x1, 0x0, 0x4d}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000e80)={'team_slave_0\x00', &(0x7f0000000dc0)=@ethtool_rxnfc={0x34, 0x3, 0x3, {0x12, @sctp_ip4_spec={@loopback, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e21, 0x4e20, 0x6}, {0x0, @empty, 0xff, 0x0, [0x7f, 0x5]}, @sctp_ip6_spec={@private1, @empty, 0x4e20, 0x4e21, 0xff}, {0x0, @random="736b266a38a2", 0x7, 0xfffd, [0x2, 0xfffffffc]}, 0x8000000000000001, 0x101}}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000001ec0)={0x2e, 0x20, 0x0, r2, 0xc0207512, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001e80)=@new_dev={0x2, 0xf4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffffff8}}}, 0xd) pipe(&(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f00000001c0)=0xb0000) 2m55.672621099s ago: executing program 1 (id=231): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff6a9}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x32, 0x1}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) 2m55.246359446s ago: executing program 1 (id=239): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) write$dsp(r0, &(0x7f00000004c0)="4bdbaec0", 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a000000205800034824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00030d0000000000000069e3289b6c17a118d9", 0x58}], 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) 2m39.987792658s ago: executing program 32 (id=239): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) write$dsp(r0, &(0x7f00000004c0)="4bdbaec0", 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a000000205800034824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00030d0000000000000069e3289b6c17a118d9", 0x58}], 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) 2m28.731103799s ago: executing program 4 (id=590): set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x6) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDENABIO(r1, 0x4b36) close(r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x23}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r3, 0x0, 0x0, 0x8000, 0x0, 0x0) fremovexattr(r3, &(0x7f0000000180)=@random={'security.', ']#)\xc1:\x00'}) sendmmsg$inet6(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prlimit64(r2, 0x7, &(0x7f0000000000)={0x80000000, 0x3}, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x6) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KDENABIO(r1, 0x4b36) (async) close(r1) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x23}, 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) (async) sendto$inet6(r3, 0x0, 0x0, 0x8000, 0x0, 0x0) (async) fremovexattr(r3, &(0x7f0000000180)=@random={'security.', ']#)\xc1:\x00'}) (async) sendmmsg$inet6(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) prlimit64(r2, 0x7, &(0x7f0000000000)={0x80000000, 0x3}, &(0x7f00000000c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) 2m28.598981815s ago: executing program 4 (id=592): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="74000000200002002abd7000ffdbdf250a04104a0200000700000000140001002001000000000000000000000000000214000100ff020000000000000000000000000001140001000000000000000000000000000000000014000100ff01000000000000000000000000000108000d00ffffff7ffd0c2cc218d329d4fd513718411541927aa2555b1c8f49d603564bbd84549e0a582e35d6f95f8b6b5e6589ba435f71966abbdac6ee864bb4bcfe55679266d60001855aeaee943adc0574ccea09c7a9b543b55a15c2aa3edb29da2f63580c7d"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) listen(r1, 0x3) (async, rerun: 32) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r2, 0x89f1, 0x20001116) accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) 2m28.100612255s ago: executing program 4 (id=599): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$9p_virtio(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=v']) r0 = socket$l2tp6(0xa, 0x2, 0x73) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x3c0, 0xffffffff, 0xd0, 0x1f0, 0xd0, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@tos={{0x28}, {0x5, 0xff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x3a}, [0xff000000, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 2m28.021959325s ago: executing program 4 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000000200)=""/18, 0x12}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f00000005c0)=""/169, 0xa9}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000001400)=""/84, 0x54}, {0x0}, {0x0}, {&(0x7f0000000400)=""/233, 0xe9}], 0x9}, 0x121) shutdown(r2, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000000)={@id={0x2, 0x0, @b}}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 2m27.88907951s ago: executing program 4 (id=605): prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x4) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x3) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x6) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x3) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x82000000) 2m27.591825131s ago: executing program 4 (id=614): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) (async) userfaultfd(0x80801) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) (async) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x8}, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4d1, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @mcast2, 0xfffffff7}, 0x1c) 2m27.541321444s ago: executing program 33 (id=614): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) (async) userfaultfd(0x80801) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) (async) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x8}, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4d1, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @mcast2, 0xfffffff7}, 0x1c) 2m25.071053303s ago: executing program 5 (id=639): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc3) r1 = fanotify_init(0x200, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) write$vhost_msg_v2(r3, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000002480)=0x1) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000000)={0xe, 0x7fff, 0xd, 0x1, 0x3ff, 0x3f, 0x2}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x408000, 0x80, 0x2}, 0x18) fchmodat(r4, &(0x7f00000000c0)='.\x00', 0x0) socket(0x10, 0x803, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r5) close(0xffffffffffffffff) write$cgroup_subtree(r5, &(0x7f00000006c0)=ANY=[], 0xcfa4) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r5, 0x80184153, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[&(0x7f0000000100)="affffade53eb998ca6045a3b64ef87ee7d62c1b3ac37030055642171f2e3fda83b4620d2a54017cff7fecce9924db369b0ec901720695f7e8b9d4d21e57b683be2a7b690f806656c87b983572406f9dcce5a54471623ed2260265759ba688451af8bf70fdaad669190c9aa1674", &(0x7f0000000180)="dab3dd3a90d7f19a67c5bbdf8973ad5c8d60086cc53e8f309bffc90937c30405b8c96f5b09bae65a93990cd30b54242f5487da0379d467b9ca25d18354d2162413d22a771c7abfc88b70f2a2e9", &(0x7f0000000200)="d7c32c1dceeb8c4b8e3520b54468191a27d7e569d69291d3e34d376a984c9ffbbe4445faaa17363fa5681685520afe012b58c85582915a71bb7e84a2e32176cfd236a08cadcea740faf0f813ab4bf90519042a47760bd670178c4d584ebbaf2e82c84e25693a8978cbf420677478d286cf170b1be92c7b51ae2c8a3e1b753002fecf84dcf850db3421690c75b10960429822769c53fc57c6d30f877000469b4b7047081d2a14b240b32a1000c0968b4ea0be8757399c332897ae0cbd0ab250"]}) 2m24.981960209s ago: executing program 5 (id=641): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_80211_inject_frame(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) readv(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r5, 0xee01) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000303, r5, 0x0) r7 = gettid() tkill(r7, 0x7) r8 = getgid() r9 = getpid() syz_pidfd_open(r9, 0x0) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000017c0), 0x40, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x88081, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000080)=0x2) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace$peekuser(0x3, r12, 0x380) r13 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) r14 = syz_open_dev$sndpcmc(&(0x7f0000001840), 0x4, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f0000000200)=@file={0x0, './file0/../file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f00000012c0)="e7bfa34a859b5451caf2847ccc9041077909e331516ae7fa669de0d6ab597859534155db988dddc6191218675200006acd393b4ea17ff6a21cdf601c3775ab78b59ed58c50730c49ed5131244fa8d75d70639483e64f42efc5149133a7a1ab05ed043abf0b06dbb74fdab9dc8418d3e82e51f5410bf274cb7c7916a1b6335b29eca40fe9d2782a49bbd3dcb62b94991e62717c3c341487db705b107bff11d8bed6a62cf31c37b9819a16658ddfe3d49e4dfd59402d0089fde1ff99a3d45940c4fe731bdc794d103d4d2d95f65435bf82c294df330f750f3e8b4d5cb1d13d639ec5127ec05d7d", 0xe6}, {&(0x7f0000001440)="badee74557d256e1ca56604a1065c150ee67b398d926debbfc0007c12a07dea49e9dd2d3782845a92a5781904d7c20c6602009059f796343594947c6b10dd0c2a930fc2eba2573cae426d9a1db1bbc01bd59012775b73c0242fd18f0786802864a84a25b4819a68c160fd68af33abccc9b288c616b326b9d0935", 0x7a}, {&(0x7f00000014c0)="7ca8bc4f60f5543a77de7e6f72ea667441cc104a53cb1700769059195362791810b12abc4c04dcbb36f313d8f22d4d01b3cab2c12c5ee3eda13548a68b9751", 0x3f}], 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="18000008000000000000000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x70}}, {{&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001640)="eda09477a0ba747b78d82d82072470257a6526588cf885eafd029ec20021ec3850a3b369e7abf792cfb17011d89348f5d45c9086e6b0a0da8d497fd2c2c4bf8ad4668c2c3d5ae4f93c22a5bba666b1d0716ee08faf72fcf787fda78169f2af4f905a3e54b11451e06855831110f9ae0305b8c3dce8c46431a501799ca85eedbb3ba4be5248a727ba7ba98db53e82372970eb2c33476e8fc81ed68cfb45918ac5a6301d64904be00b7b185d593e9c0e445227beefe2b16dfe0918d2eeaa9adc71b3560e98572fc91c51f7cd16f5dd86c273083e78aaa64cdbaeb2133b81f2fa908b24009a255abad119", 0xe9}, {&(0x7f0000001740)="3a8b82ccc6b057dc41a1d84cae12145e2b84b051ad00de2069bdfafd", 0x1c}, {0xffffffffffffffff}], 0x3, &(0x7f00000019c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="14000000000000000100000001000000debb728292349f4ba87db3e85738b3db181897c6f5c7fb91a8d9b39c96adf532ff67168dddf0586f7c0fbd3251483d6e1a08781ee2", @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0xee00, @ANYRES32=r6, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r13, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r14, @ANYRES32], 0x90, 0x20000880}}], 0x2, 0x1) 2m23.621891434s ago: executing program 5 (id=647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x1, 0x1a000, 0x2000, &(0x7f0000ff9000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x30f1d6e52e96e075, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000fb266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a73, 0x0, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ppoll(&(0x7f0000000240)=[{r5}], 0x1, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m23.382040345s ago: executing program 5 (id=648): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="03"], 0x4) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r1, 0x62c21a4ade68aba1, 0x70bd26, 0x25dfdbf8, {{0x32}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x240048d4}, 0x20040040) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x24008880) 2m21.070732515s ago: executing program 5 (id=652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54ddf, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x84}]}, 0x24}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000019c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x24048881) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000001f0061120000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236}, 0x80) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) (async) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r2, 0xc0085504, &(0x7f00000000c0)=0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) clock_getres(0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) 2m20.970581873s ago: executing program 5 (id=654): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x43d3, 0x40, 0x0, 0x235}) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x2, 0x1, 0x0, '\x00'}}, 0x2a) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) write$P9_RLERRORu(r5, &(0x7f0000000100)=ANY=[], 0xe) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000009000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000001f00000000000000000000000000000000000000004e0000fce3ffff0000000000000000000000000000000000000000000000000800000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 2m5.987226711s ago: executing program 34 (id=654): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x43d3, 0x40, 0x0, 0x235}) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x2, 0x1, 0x0, '\x00'}}, 0x2a) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) write$P9_RLERRORu(r5, &(0x7f0000000100)=ANY=[], 0xe) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000009000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000001f00000000000000000000000000000000000000004e0000fce3ffff0000000000000000000000000000000000000000000000000800000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 3.710041649s ago: executing program 0 (id=2060): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000140)={{@align=0x745d, {0xc9, 0x6, 0x1, 0x6}}, {{[0x3, 0x8000, 0xfffffffb, 0x9]}, 0x0, 0x1, 0x0, 0x0, &(0x7f0000000040)=[{{@align=0x2, {0xaeb, 0xe5e3, 0xa, 0x3a7}}, 0x9, 0x0, '\x00'}, {{@align=0x7748, {0xf, 0x9, 0x0, 0x401}}, 0x7, 0x0, '{#\'\x00'}, {{@_ha_fsid={[0xce9, 0x4]}, {0xfff8, 0x40, 0xffff8001, 0x8}}, 0x0, 0x0, '+%\x00'}, {{@_ha_fsid={[0xfffffff9, 0x9]}, {0x7, 0x5, 0x101, 0x1a44}}, 0x2, 0x0, '&\x00'}, {{@align=0x6, {0x7, 0x4, 0x0, 0x8000000000000001}}, 0x8, 0x0, '::\x00'}, {{@_ha_fsid={[0x5, 0xfffffffe]}, {0x21, 0x200, 0x8000, 0x7}}, 0x9, 0x0, '{k\\.$\x00'}, {{@_ha_fsid={[0x3, 0x8]}, {0x401, 0x4, 0x6, 0x8}}, 0x7d4, 0x0, '\\@,{\x00'}]}}) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000180)={0x2f, 0x6f}) setns(r0, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) (rerun: 32) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x110, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80d0) (async, rerun: 64) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x170, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2d5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4048814}, 0x4000) (async, rerun: 64) r4 = inotify_init() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000600)) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000640)={0x2, r4, 'id0\x00'}) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x40810) (async) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000840)={{0x7b, @loopback, 0x4e22, 0x2, 'nq\x00', 0x38, 0x82, 0x73}, {@multicast2, 0x4e22, 0x1, 0x0, 0x7, 0x7fff}}, 0x44) fsetxattr$security_evm(r0, &(0x7f00000008c0), &(0x7f0000000900)=@md5={0x1, "35e99b822e4a492e67ccb997e00f5b43"}, 0x11, 0x1) write$nci(r0, &(0x7f0000000940)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x8}, 0x4) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xb0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:dlm_control_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:lastlog_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000b00)) (async, rerun: 32) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x50, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000d00)={{r9}, "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"}) (async) r10 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001d00), 0x2e902, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0xc1) 3.629525503s ago: executing program 0 (id=2061): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8001, 0xa9, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, {0x0, 0xfffffffffffffbff, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x20000000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x5b, 0x5c}}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00001b00f8000000b702000014000000b703000000000000850000008b000000bf0900000000000055090100000000009500000000200000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4}, 0x10}, 0x94) syslog(0x3, &(0x7f0000000180)=""/176, 0xb0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xdffc, 0x0, 0x0, 0x2, 0xa}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@local, @in=@rand_addr=0x64010100, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000140)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000348aa35f126282d90000000000001c140014000f00"/32], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.490217684s ago: executing program 0 (id=2062): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000180)) 3.410174254s ago: executing program 0 (id=2064): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f00000000c0)=0xe0000000, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000040)=0x2108003, 0x4) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1, 0x0, 0x0, 0x4044}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000001040108000000000000e8678b7d00060500010004"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2880088, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c727e4bdbd9c491c4063030303030303030303030383030303030302c757365725f69503d57975d8294ae854275a4880000185abf690f6b5549edfb6e30e358a0f7698a65a25b48b56e49435cdad97682683c6586aadadca78ca825f3b68dbe4c108d3e6836237d717e92a5d113e0a017ea945fc0477b0d6ea51e584fcfa62aa7e69fa9e24592d2b81ebf380c12f0ab8f298fa3e3c6fd0fd7a4e2dfff28c69d7ce87906e5f915b92439ea65e940c02f6ac95843f862f23921000000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xfff, 0xffffffff, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x0, 0x4}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x48212b8952c3aff5, 0x70bd27, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0xfffffffffffffdfa, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_POISON(r0, 0xc020aa08, 0x0) 2.371837281s ago: executing program 2 (id=2077): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80000) ioctl$int_out(r0, 0x5460, &(0x7f00000000c0)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x4, 0x6) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {&(0x7f0000001680)}], 0x3}}], 0x1, 0x4000000) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0xfffffffffffffd9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.371564517s ago: executing program 0 (id=2078): syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="fffffffffffffffffffffcae55e9607f00ef00082f0000001200000000000000000000000000fe880000000000000000000000000001000088be00089078"], 0x0) 2.237950415s ago: executing program 0 (id=2080): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @mss={0x2, 0x6}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x20000052) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f0000000100)={0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r0], 0x0}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, 0x14, 0x800, 0x70bd2a, 0x25dfdbff, {0x11}, [@nested={0x5a, 0x53, 0x0, 0x1, [@nested={0x4, 0xe9}, @generic="4167fd919cbce045337482ca9def07dec8cad33e43d391ae46a9c3f81d71d3fc4d25f18a30d3053bd131c9ac7dd7b57dbe1e8b80a6084697ddfbbec13a72428ab9bfb08e66a332a90b91", @typed={0x8, 0x8f, 0x0, 0x0, @pid}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x48010}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) fcntl$getflags(r0, 0x40a) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x48212b8952c3aff5, 0x70bd27, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x11}, 0x1c) recvmmsg(r7, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000000840)}, 0xcf6b}], 0x1, 0x40000123, 0x0) 2.237157494s ago: executing program 2 (id=2081): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@getqdisc={0x30, 0x26, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xf}, {0xd, 0xfff1}, {0x2, 0xf}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x7, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x400, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000300)={0x77359400}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0), 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) sendmsg$inet(r0, &(0x7f00000034c0)={&(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000003180)=[{&(0x7f0000000440)="28676d053cc77955a15715f560b52aa32d12473bab7d937e4b1f40292d4a5bbda7d6a2fc5d3bc6d3866d35d1bb06f07d51632347079a92286647006d35e87e55ecff658c80e4925dbccb72d444143c3376807bb7b0b35d102fff6dde6e39dfbe4485b75847076d38eda9a9d06364c9ad1873d8285bfee0f505f1299f08ec3327790b3dd3e973a1afc45df5e47bfff06c587fde8a15b2c80bb6ff07f525827535d2ccbc3a29ee8c6db93e9cbd4d311f36808f136d25b24d65e8", 0xb9}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="4a358383d260eec81c0915eec6efbab6ce39fd427da38867bdbad2310b17ddee153abf747aa2ee23a13b2ec4932c39919078c060173167e03ffaedad6546ad4c101bcaa1f5a6084d38b94de762f003e309b2c3979f901ecf5ee968f098916b87ce2f7cc123ee88cb54b2211b701be1b192e8f6a9cb61666184c9a2e874872f9014829c2d68e624c1e9c67963b6f7ca257b9cfbcf35bd936065f2614d3b8395379820d3501118f0", 0xa7}, {&(0x7f0000001c00)="a23200918df83245105dc5f0461e9db2643d341246f1663d6d3d6f85b8dc5ac29e6ccb99479589d1d7880d859c962af86faec2694151b6e341ec34a0eeaa0576779f1126f1303bb485cad25de59707ca1583227480d060f9a80cfc43d4ddae74de1658b356e37073dc08738d417993", 0x6f}, {&(0x7f0000001c80)="ce279faa21fa8275e30d614d6c704824eab06f68dbbdf4bbbb530952cb640895ec4cb46172dc1b6ac902bab9996ba239294ebfb3a8a04e3026191ddcdb668da9a25a9e510cbc0e1209a87a36ae35243cddbedd6fab9c811bcc0cb43e06de247514f8da9e836b8b21eeee88e6e040d20e379d48f78101f533f3c40170cf454689d354fae2ddea350c9361ae31b6bfc9e345d612cef9192342d6777a6675f708c9fc9cc6a9597c2552020b11d51aa9e062bbb58c2d00438e695d33e732be5c066d22d9ca827dbeab29533a511094b858395019e47635a9a4ceabb7f5ffe0557a7283a0b916", 0xe4}, {&(0x7f0000002180)="c4c96fbcd56f25b634ec7eff858f2500414d8e21fa5c96704c5fc2a0d4ec4d9fc618b10a9a7fd129f2a609cc18c66b844be5c45a6019100f4e891810218aba34cc516501a7b3263caa8e5d3ed5a81e06d18e89d646291bd8727ca3f509e82b23219014e139e5f05454995d106c8b09fe8bb6910f37f080673053baacf3aa6a10fcbeba30567a35a2b8a14e8a6b1644cca35356cec8e1ceed3754e5e958124ba2ead9fc123a291c2ca879d6370394a181d59db1300c1b1fb06174b05de0fe75db47305f42cf18961379e5dd4e59914f25f0b4696d969ebd9155eaeb46a0b09c70f65082f4d0f838c0bd64ecff451e788ee1e6e69bb702f50594bde5517d9709fab5e69ce3286f83877b041198ec5c73cafdb5108d5988d363eb46327065c2fc6370c6066b7bbdfb023be6a75829a5c4d5ac4bb5473593ef80ec5be85b82fc0857b9ebd46e5fd790b020757a484cd51084072937fc0871c8aa5e1e0f2d9fce502a0214626685ba07323026d287667cc53497aed18d75e175d5237b390732670d7ee29818df7ca839a451e0c22288b09f26cb4fc70dfbba83ca8e0456affd4732af95a50d0f683383071686149892f9617bc804f7d9eda1b7c5cf02182843bfa2b48a7d17e8de423f5b8d1f5220087c8091a753e59e49ad3d0b2772c07cd1c51d7114df3c504dd670cbc8f232e3c7a2a5d064ba52f2c3163ec193115fcedc305485214294185277ccd94b6acfb44a97ba4bd02c61025820784d8317cabbf16881c6cd08c6e5a80268351ea0d25f71a85066c1a3ad3829d8c3682515b029d5e751ee29e79dc5dcedec28d005405f902ca0d70370e1d44fb4510334c02f90abb90dd44e76e50c6b2e28fc96dd1e94bcc5cf917891365dc31b2a5492f2c6a673b31c8b4d48b96c0c470b677b2d4852ce9deb5864a6f379f98cb7882e6af1e3ad43e46b7731506ec021f72d59eb432c571b4d043e1e7c5338840bf684ba7b1d81bd1c820cdde631bedef60b5e2d1384b34dbe2e6a1c8d4fd95faa6fae48cc46ca738c7c4f61833b187e4ff5ad76fc2b931691c1c46aae04311cc4a820addc8bf6124590aa60cd8d1bdf43e73a6a4963627eb12923d372a13471272d4efcc8afb2c072017b306f301aef33f1326166244c418e717a36755d846594be200ae6730f0e1847b743977e30629881cc1214f6484e7533d4108255c8d1f380e5b657bef6992656bd9f530a43d23bcc0745581cec1f840a8a5e043f943f921343c94e8357b9283f577efcb21abe1e663b394aef4c3889c8d70290eefffbc7f8c36489ca4ed7f5a444381453508a3dd8fea9b23db9bec7eb94ae2e59e089cb564c6819e2fba7465019a085020d40b63c1c5741e19a46f2b431de6b5c1234b41a87983445ebc0cca1c782fc09f71303fc50716b55f6699958cc176f7ef69b48defa0425fa72c5c52666d1791638b524db2e34466e84578d0e95a13aba2fd3a513e952928c2305323ca73abc51e474cdb54ca01cd12c3351195560ceb8dd58fa5b63f3dd38e96ab3a250b786c334f4305cb152edad16b5de7c020a355b946f232c922be1f1269cd497756928d4cc94ab3eebb56aa155b1e5f7821fa1ac2bbb20bfe4d2004a856de551135044ac42fd75b1b31629bf2ba820e9e205b6268add26447beb6220d79e26b2b074c86cdbeb2498fd03c319f7efaef815260c6307a28d71992e395ef7c79316627aba9a88088662346afdd6a7ca39bee14ffe481d3895492ee3fdb595b6d13ffdea4a78a31e9b3048cfea03e3d7183047bafbf696af9c326641551998dbd5108a1d862fa0eec8a2ca3d307d16c0ca0345e325b29b44aca895aa51c72ca1da99eb7bd2f99925de0440fdd745dae2349d59348995b08ee37cfd19e6e744b9b0a17bd89ce6362d4da8d1601e704e7a2b770dfebbb7e0f99d500a8ddde3c05b4588ddcf98513bd8565e96db8f446fd8c6f76ae80b5d46f3c1f93ab4641c62c8b36027f14fbc9b5eac53214bf64d8c14df608789aec812d6bc95bb9a8a39cd44efd82d7a84e789235ef3578fe2ab6e4dd1fbc332c9903ece6c0a4e55c1bab31d466c9769304f36436e95b7f24a267e7bd21d7566ba4fd91a1bc92c82ee5590d00a903dde0218063c9ed08279d24aed1e7fa8418dd94a746b165e94d19a39dad87c5d695c0d4c80d3879bdb187e0ed760c76abfb87666b96c44150ae3202b255c10e3a4cae533f25280c9ffd78ceb0d1e550b7757d7e52d4d40669c7542c305a683fb1f553d81a9b48a34ed696edd51de117cb8ea5793817f0c47acf75b913613a192498615f46d04d4cc8451fc623b4d6adb2a188ac724e0eb40b12968b24aa2146d322739efd113a90e9957859150b3e209c1f5aa2d1596ba1046fe83e0b73fb730170d4de2bd43336de8a848a0eeacc1f2e262d61857ac50f11f3881094843e44665ec079625e90d57c0b9f6176c9814c88b39155b0b56035368b73dcf9464cce56db912fd4d4ecbcfe0554219fdb0baed96f4058df62c8119bce599aae914d12f1d0afab4369803146257eb912988d1918375bf15ee0d4521c9157775d66a7629e47a52ff6f3fce788008b9c8f65e1bf233a212036b889bafacfd8c22a1df5e53f6c2cf7b03c97d88358778269b1ed6cab51b4bd43045e7f075428206b826ef9c993f1af7814a21d685dc7471510116e7766f38b03819ad6a76d618290315e75556fc1123ed03e52b3d896e42947e3f6ea2bbbcea7eb590a727803fca4a00555ee15edbe15b623e8c71646fd15be3b7c42fd3c52ddb5a933dfbc58c08fc34359fc17bb411f1ad0ae6cdae7df1e10e3a4f2f70494d8ae7e2470b24d659e01ff93bbadbf6b1bab7aa249e5f05c9e474c4536f1c8125d30ae4876a6a8f105eed89e7671adb8eb0551fd8a99f9008f7ba0f9461e69b3883a2a3526924119eae6ff569fab3c5f6595da3fc14143bf5f1a887ec8f9fca2c198b09fbfb6e5d499800ef58d135bb184009581d287f487a412087a0e0cf0c43e619281159d0c053ff177b3f26c367cca7b8e1c209f45159668090ae5410a5d363c5602cbaa50799cd62e4bbb15ba22b03b9e2ac4203c2264859205fad2ee23f712d6981a0804c74e817795fc3e03d669f08e97d10955d90a85c7c0e4938f15d6167a9eb84ccf6a6e5fd75004a44c73231b026188ef727c75666105fb74b42d8f2dceebc103660c793f67c6c7668601a6133f57c9f91b6260cc229ba3165080b4875c8f023213fbc089ba4db61bcfe3e680777cc2fb20a7dbc1fdf6c493e33333b00473e112aa8d94bdc017581687dc02190fa630b603c7d37c33880a3100fd14d5cb00bb351e4d059bd8ef5a5a29c177be55ae9503d885afa52ed854cd7c2b145c1231503c229318f124fa4aada8442dcea2d8b684561e9dcd1a8ffb5e6d955d9ecdaaad7806a27c3dda97529a70f1513323ee035736efef8e954185dc45f0db49e688eaace256305a6ac17217ca9e508eeb69f0818a7e893bfe22f7a0fb46dab86f85fc0929b16b797f8164d643072a8823e2fc7f93d48a7fbe4eb6f83f5004cde1b9defa7212bdd3dbc665cc86f30dbd8072c457e78f446d2641f283353decff1da1dfcde5b002662210a190c46646e8701395593f39aa0bf5fd3af27e9da99fc447292bcbb06b2f2bea1e7fd5024e146e714ec8e1b8ae8862c30e5cab607a804d80688e1b91c9d31fff35b99c1c989f7814f6ab81ac8441d11fd1126c770215f6cc553df4ee648833955a0286573076599cdb494ca21ec9fa7b18b451307e5803c96af7ae31058d13aa3b37bdc32b27de8eebf13755bd04ac93915f3d329a01c2d394f92bd07fee741264d19dd9f170dbc900df34966848d468de62dc08ffe3000106fc96ca6ff0fff08f3e2dc5b268c49025411eb029648464d26f238943708aff8d4cf930baa8cb7964711aff8b92e8b5da0b1ce6984fe9c69953e08e05d455aa7ac92f3610cbf3228ff6599f3e7b96feab2596f035ca3706a430a6aa7cc177286054b39d89715c0aa18775a1b8abf15d36aba84116cc25176ed2ad64300cf02f74a4d56af8064f2a39946e4173a9d8077973e08c6dfc6ec305864a50a3e51e7a471a9752363e9f972b910652f77992c9c785e5d0a0628f08394d35ba1744ea3aaf85d6d16feed14281a08063598dfe348f6ecf71bd49151ddb3c24c2a8e63889c3fa4e4ce195e3f6edbb10b4f0ffb067e77d7edb859ec6d8efd10ca23603b22c0523725d979d431f1686a709c7a2cbb6955d0b24877a70eb5efcc38b54800372082be39afe03fbd6ff436074bc675e8e56c43ce8bf4ffa4145aa61f639722bd362cc615d3103015bde63f2310cf13e463c0537a8621eeefac38b3d3457ae018307d4e70269b54b9bdce737c122a0a463a7f4293e1d47c01302d0d77a6f9a65d047b8be5614f2829ae3f5c5ab21b08fb4776c3419d82e5841bd6ed24b40914bb7c56f23e2e2800d1053d9ec91391408a3d37644415e3c3bca89aa3eafe2bbc0cbe59336410fcc5c9d781e4f83ce75b63903914e7559c2a1efaf3d010ae3970e66c2aaf09944cd384ad77758cd5210fb2f255596c29ec2a5b5195a2222daf7cc05a5ec5be363c93420db66383d288fa08d7541d5811782186bd367b72551cb6c26be338e10b1ab24ac130cbfeeb3331eef734f81a09faa978d263c860a868f4af37772a4acc723625f12e3846377054b2cb29752d9a6156befceba6cf2241cf23532c2cfa799520f6e28f140ef9d2c3e26c416951066fe2a1e0b00607b41ada031b0a124e3e6d8b124942dd0631d58503feb549f56a5feb92bfec473db7f775afa8d969254d5cb40e838170e00b6d78ff6dd6c6f69bd2986a140fa746952b03c69088713cdc2ba46dd51ff4be75be40907778dd44d1d34e3bb6025727f90ce953adde90c368ba8fcdb740d7e74a4cb9e87dab3275e85a3903dc121c7fcb2609b4239ccb7dd012e69d1561fbd299c6db1838b8bcd0c55e2c17d6e11204f7202ca50134c13356ff8c4aa0c63cb00a3500ffb958da54b59d6c8ffe837df68d4ebbce2d9b18c73467391854846e176fa36f72260f65e2a4b9dfc52202f95ba672931405024e4ea66e934826675c42494efd387824df757221a4d6e5afc7ca57f90ae4642b7b1831462c529617b852ce2a03bf6f5fd89d433d11a06df061419e5392bb2fc4cb1d059a75a978fe10570ccbdcd96ffc54f0463c4c61463654b65aec86a97cbc46ed92ef8c5539888bb9709f723e46d31c5211582dd49ae3979ab81b1b450c025e3f93fafdfd7b135c0a43010731c9711f2d454d3eaaa4a4658cf15f07363f70e9619ee92b3e417adb30100bb146eb88e1e16093cf8e37b94cfafd56d399716b1dcccd8a270498bbda4feb5384bdde151b16d0811d873d70d6ebea7b1b6c2969616fa188211907741052179d01ad23870841b35ec38baef6a69bc6ec63c9d1eccd9b1e37fced7c8585cbe3a17b6a68235b60c7c7f4507ea1d9b15f0011691cb105eb8f246c6506b1aeb2fd88e701185d468412dabfffb55f7760bac2d93b3799a9a510796203cea53698b1f2065ee5a5f1657f5c5871951ecd3399dcef2f059cf7cd8567322ff05a454d881ecef2ebe50d4d5c75916d063f9040d44ba28e4858215abf9c6b761678e9c8703d1f19fb56f8c89e7f8cbceac2501402b9b1b00b33966d8afa5bc12b158571f96a5e740d056785333653404de8c1705c14d242cf5dc4bd0c0401a4ae2c77c2b83ee64a124fb0eea01cc6de06f0e2d35bd5a6329b6fd984d15f4ed4c7", 0x1000}], 0x6, &(0x7f0000003400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}], 0xb0}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000007c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r2, r3, &(0x7f0000000100)=0x2, 0x10001) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r3, 0x24, &(0x7f00000003c0)={0x2, 0xa214ac8b5b72e090, '\x00', @zc_export={r0}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x8}, 0x2) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x24000094) 1.809711571s ago: executing program 6 (id=2084): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x2b) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x714, @empty}, {0xa, 0x4e20, 0x169f801f, @empty, 0x8}, r2, 0x4}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x3, 0x8, "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", 0x1, 0x1b, 0x9, 0xfd, 0x8, 0x52, 0x1}, r2}}, 0x128) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbc3, {}, [{0x40, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xad3, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x54}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) 1.719514925s ago: executing program 6 (id=2086): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000f40)="b68ebaacb33f721d05f00174785c650cad99bde02de27cfe48db7b7ce4ce926be96ad011c1e732c3a367d9c84dbedc3d98d0cd29c271e7acae9acf1dfe4ecbe0cf", 0x41) (async, rerun: 32) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r0, 0xc028644b, &(0x7f0000000100)={0x0, 0x19, 0x6c0000, 0xc35, 0xffffffff, 0x0, 0x0, 0x2}) (rerun: 32) 1.64823003s ago: executing program 6 (id=2088): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$nci(r1, &(0x7f0000000680)=""/88, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0xb, "34ad9987ffed3bbabd18cf501922de974a27000000000000000000f6ffffff00", 0xffffffffffffffff}) dup3(r3, r2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000a00)={0x2020}, 0x2020) mincore(&(0x7f00004ea000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/188) 1.379296638s ago: executing program 3 (id=2090): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 1.269544708s ago: executing program 3 (id=2091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) syz_emit_ethernet(0x76, &(0x7f00000005c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x40, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "bdd7c3", 0x0, 0x0, 0x0, @loopback, @empty, [@routing={0x6}], "df7d270b77aa81ed"}}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000400000010000001c0001800600010002000000080003"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 1.267723382s ago: executing program 2 (id=2092): r0 = socket$unix(0x1, 0x2, 0x0) io_uring_setup(0x1b7b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14, 0x80800) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000001c0)=""/34, 0x22}], 0x2) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x4606, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x143da}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0) 1.169634908s ago: executing program 3 (id=2093): r0 = socket(0x2b, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) 1.168512751s ago: executing program 6 (id=2094): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006506010100000000000000000100000005000100070000000900020073"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0xc051) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000200)={0x5000, 0xe000, 0x5, 0x6, 0xfc}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x810, r5, 0xed248000) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x1, '\x00', 0xc94}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 1.109237988s ago: executing program 3 (id=2095): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x980903, 0x8081, @value=0x7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dvb_dvr(0x0, 0xfffffffffffdffff, 0x501000) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x2d0e83, 0x0) ioctl$CDROMMULTISESSION(r2, 0x5310, &(0x7f0000000740)={@msf={0x7, 0xfe, 0x6}, 0x1, 0x3}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000600)={0x0, 'netdevsim0\x00', {0x2}, 0x4}) 989.739547ms ago: executing program 3 (id=2096): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x82802, 0x1ec541d9ca5bf1ef) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) splice(r0, &(0x7f00000001c0)=0x7, r1, &(0x7f0000000200)=0x3ff, 0x5, 0x0) ioperm(0x0, 0x7fff, 0x15f9) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x25dfdbf8, {0x0, 0x0, 0x0, r5, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000180)="05d936277c6f5422007f9f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c7168c7eb53b", 0x28, 0x408a1, &(0x7f0000000040)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) syz_clone(0x4d000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="29e0", 0x2}], 0x1) r6 = syz_usb_connect$cdc_ncm(0x6, 0x106, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0xf, 0x1, 0xf, 0x9f, 0x40}, 0x16, &(0x7f0000000400)={0x5, 0xf, 0x16, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x0, 0x101}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x7, 0x13a}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x407}}]}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUMAUDIO(r7, 0xc0345641, &(0x7f0000000140)={0x0, "5622d02e54e0090aa90108e267cd87ab932cf729f85c7bd8fa1cea70f891568c", 0x0, 0x1}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x40, 0x21, 0x6e, {0x6e, 0x3, "52e9a24ded9d10d0ad37391b89bbb909c70f2481c63be2004721a835ca057655410eebd6d33e34e39c98a808ca4c1b868e91b8c499c54786a82ce3fa9fa86a40ec38fc6d447f6ff67480b7b7ecd98391794c914c71865a976e945921e38db65afdc607b4860543b5c13d4278"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f0000000640)={0x40, 0x17, 0xfd, "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"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0xe, 0x7, 0x6, 0x1, 0x0, 0x401, 0x6, 0x9, 0x7, 0x7, 0x5, 0x200}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000880)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x5c}, &(0x7f0000000900)={0x20, 0x89, 0x2}}) 676.162487ms ago: executing program 2 (id=2097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x4004) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) timer_create(0x0, &(0x7f0000001440)={0x0, 0xa, 0x0, @thr={&(0x7f0000000340)="eb1201ad87340f8b5fea53338b48221474a849616b43c32e2b90cfef72d9b415a5fbc120831cbbfeca6df9a2aa5f49e499cc2f93bbe45e0553c7ab82fe260f25df8f7275dd8e108501e20eb3fd581aa0354bb8550be6468af359376f71f0783a85a459d644113abfc8ac10a9ac550b4edbcf512fb16c1c0ecb49ee5851afc070163d409bd37e6f4cfed0d5c85c2fa22396f8edb061ecf76e1d7c68b07b51094280becc7e23b2f3453729533344878d5d7a8a4463f7d7effa7f40ac020de7a5cb06b0009fcf493ac2a165b1a17a2ae7235d8ed7e945813b90729dcd619990c41df143bde2db48c24278d122452d3bfa9b6a35d5d35f8ca1a7108ec7977796abf2820b53c5ee8969e769a64de0a18658907d00c07b6fca56810c77091eaadccfddd247d7c00a357ca5ec4f870bb212f0ae438f1fbb2f41363c69779282bd3836c1b4b713883b187e026f3ecb46ff91d2702d24d88b3251b990943f79385352e0128dedbbec501beba3bace381d48296ccc1c5967587e4f5aca172a5a1d0f0601f59c57db80c95cb8f0e65e0e3597cc942a3b71b85b8036a007f829dddcb4c936d7d2dbf61828490a679c4ec6ea6cb2afea06ee024cd45f41dd44ada659ccc162c041e82a86276593774c4bec4c4b08e2f1cdc21046191a0cdb675a3da8df90e21e177322f6c50f20058d9e06bb25cab4a6ded04ac01813f5507f3f3835400cae8feefc2380ec7995df337e1521c6e839ad9f27b303f05cdd96c3991b25156bdb6a515c544076f742e50a1b338a605d8d3313908e8ff9f06c6fd4af0a1bf756240963928a1c81685fee5ca2e4f3b6bdfb94f7b8bceeb0ce02041c4756188edcd4be832fd160bf42dd197be8730580756655bbd64f272f144a163389bdabf6fc3e12c7de79eb75394d243710cd057d59ea9ac2ccea966428620bb791e00d5ca6f274b9aee695e991bca2e906ddda35cf696b238b3001fe6fd3fec1d3bd37dae5ec348e60c4475d0e1e098a545753afd7103e8f9217dcf244735fc13aa43dfc0c78f82e0e5de3c488670aab3c2399d881b37916052484e3bd7e3d82f54e810d2f0c3565ab4e6e720b582d7ad3737dbccd69281933601b57dc731420e08023096cb4405da0c7824c2b1e7ffb743b964ffd8e39f9284599c1b188b582d87ccd1a247a7f77d0736ad8bb32e441f6f53757f1f18e3e3866eaa922106f7c233a5c8a61af7d9f4a7dab781ab66caa6927f79fe66d51be43aa412a15c3e99084061ee15053399c92975a5cacb93665bb9570bee6ab82a1e799a82cab75b69cc9938a3db31a9f52d55526aee32ad14a83d8df9e2f171f98923a18e7a32151e2633f302d16e1f758de77811de9138dccfaf1056047b1098ef6b84296b7d83634e4726759b0cdac956a13e138aa345abdd0703b0a9036b469e769de1a65905f348818d8620e5986540d1d4dcded251a8c49dfbb34bc19122367f723ceb4e89dda202d3f3e1e8eaa1044b98880eb54c0600c2ccc2beb5e81026ee6e09c590785d9391d1a26321ba6ac1b1f0ba9e2b615548994a297cecb594fc2918b7dce0cb224792b35430680e08b62b952633e0244ee92440045c30f4ea5524e6e0756b07a05c68f3d637a51bfad128421386dfbce05c30e677b6e8366c92a22904ac81c8de66fd78cc7e2f00e142b031a118c9ad15981bd4947394712570fc405f5b1e84719a19c67bc72ed9a4f69f3fa5bc4bc9c395669bfa5946b9dcda805a79568ff46178aa5e7029f5979e707e12e7ce3dc104701eaefc0444b8f788000780a9ab6ecec9dddcde2fc05f0624f7d526fd7087a6512634ea7cc797c11850e1cbda0ece6ee4980baa021f0a873e7ae5531edbe72f13274dc174f5c1d3d2820abccf44a15fb054a28d8a4e38d8f6051ab690364b3c2fdd2f69bd9ab31abd0a002c82720390aa30ba1d1a30331049e300496d6fb878598f7e703ad2e9a13eb7d112fd75322246fb64e6df9036def6dd49a9a25d5acef405cdf3af2b44ae8f3ac46d2c0237ea68290288bf6eefb373c94fa4c7dad5d83dba72e7eb9712e477b16ad3d22fc16f593de48abf6b6e65dd5ba3c1fab1d93b141983b4d29c4abdefaab1d0f1eae4c2140744a10f9cd082f650262534f9f6501acfa63cead22fa6080b00ed9f19a79dada8b28a2dbe39d65cda7af5c346c0070c47d7cfcfa1b9d829d6864f59128eadda442906488c3d25b89072c05d02eb8e0df4ee101522a7e9e2b29450d0a23f3576399cd8de4fbf287500a5956014e08e66c4054b90e584d74f93e6b11f962993bdbd53504f45f003ec91e6df0ee41ac82ea5e3f5deab62699fcc1ffb97e73d5a8b2d7360691583fdecd74fefc8397b42f513be13acb7b06dbd64e71f4a1abafe50c5b83115598606608ff552889d577073b2427f7574f3dbdc8c711c8592fd2d7af10ea34ff99fd9100ce79eb4067eaa93a94230cbb455c38ab43c292cf252359407efcb69fe872be631be38b0bedb3102fa7f0b99360973351f64d2b6fdc85d4d839c246bebc3726649bc29b74c3f3fa9724d361eaee3aad29d29d60447c85a10c2b39eee9946b077697c328b22e62404764e825d026917b61309c950516464286c751815bcb1186805aa628e91a6af441535a11d873737388c814f40cee3aa6c3392350beffbb9cf14bae431973c8ab9f297c027e7171864de5db0edcd430f503a4ff604e92290e4851f3ec78f165081c8fee8563ae9568ff7941f2479992b9797913861d580b662c81b77558546dacb803f65cbd864431060bc87d48c2e01b12ddf5cbfa8853dbedcd5ee8c3e0b46bce9714986399ade90f12fd503f628c595f88011d0f2834c90d46dee7677b1464b61fb8ee6ae9d1656ba9eda4ae899335a05733e6a78e97d4c74c42cad9cc60607c07b87bb7ed03b23c11d8e4978ab887d9e0d0c918d04b106766f1487ed72dc63a487963b2957365b293a7e2d7fe4fa3b59274e1f2d856f77dc383eb346a18f33dea95fea3562b92368f3497c363f445806af636f576d9401b372449610d5eff233f361d6c5c82580556413f6b04516ced2f8d05c551ccfa8d7aebab3d95b50f44e4a6518acd3155388d5efd106b48c8a2e91cd3805535e67258cf42404f7ffff9cd3222de6acc04a59893b1d8f1904881ed07ebbcbec50d4f74fbb6bff445ca79513be0812122509ded86dd5b99886743059da5f0a3787b5d0d0e80e8f392dd9441c2cc9916030a177f3a7f93176121bf39310d87cb50d965c1d1767a2691cf5ac84f8a35e54b609cd9159cf9aca31071663cb715b57f0480b6fd194c8234f31bfcec8b0f7409f75329f8c16ea1306d4436ff184c2554d680961fb2cf8b0e7e4ba54b08418a0ba8edcaeff3c8b93ff12cff3054bada7c8f2df92aa85bb75d8c6953cce02430230313b89869c5e6ae6b2b5c2e20b2d764f8efc87ff36ece4498d1d5555e2b57cc2d2b2a0ff0c183d73bd79566011c9c54b1afdeb648187b608a1cfcfbf547f4c9bdaf874ddc307bf543391d1df1219a07be5054dbac25a09c2f72fdef865c2e4412f32a83d88befe9486e79b28a72ab306aa190d9ffcec0a1a5f6328a0054860b77f49e00561a7bac0b56a8c7e024a57d308ccff492d400c31924b696ee94ccfd57e42d3e19395a41a3ac4f944a1389c1392dfac2d87dae1772a786ffa051c29e8e167d073d7bd8dc937b1d1afcb4443e173e3211603d8306e78dfd256a021d8abf7f6e3ace3c63c1afd67e8cf396d85ed3f43095c8bf281abbf8e47ae841be8cb9a106dec233143e366c391de4b170408b6905011640f3ade8b3a4bfe1b6253c168c96ab56f2bd72fa2a46b64736814e4af1af16435bda7614256c930957482e8b41e37679ab0dc0e0f51233f06c2035e4f5d4d1aee98f7a19836f3a8a4ea3f30c14929347b0760d895fff03b5d72829d18dded5c16d40ff2e2d14ca3d58a40068f8008eea6a1789448e13050b568a6c7ed0c4e041a6997aa6d989caa64bf1a922c91f80cc84654945072ca153ac59da4ccce0e3fd0d7e24bbf5e72f166b36da5e26b4d71d7205165a77442cef43c93dfb9c25feef300eb571d53ee9b412b84e559778b1a4779ea5c520be0aad3553f6ef8050e5b5f5cd321b782509c1d9e239faad09cd8f7563388c22359c8f9dc0c20c709e1f2a4567075a3358c52c59ba6894b562c770b87160f21fb2bd0b060afcbdadab497ae1013cbd9f764ef8d142293c15e0a2defd9acba31456c14ee3d4d75b846b8bd23009992a34c1f258219023489d8d3d969597faa576b290ec61b29be3d593860216f50fde5fb45d2e0da45654fb9ccf9744457cd6c49315e7d9ac56af46ae48a665caa2a5418a094cff20481b051da011bc9cdcb3c4f77bec4053affa76a5cca56c2094bb42f7b2fe81f06ccd7750b86eedf7c79335a871a2c19ca07bef00b3a6de14ab0d8c024580764e4032999c7c186bdd190c199c1e0e598fe8db258b0b86a53bb8ca7cb7ad9f7932abda1dbf6a1e0f3671df6b0d6f1d4b9b1c67f46fe24a3e8cd6e01221d5ed523b4fd98a78db9b0221fb83774e54797098d2a6c6c6c304f3be58eeef451cc02991c97c2ce87985dda2b1123b2c6ae5d130161e6caaa961071855c4888f3e020c708d7861622ebee66e40066451a5a3c9611b8d4d9ea47d8a4280ad4a369346129ec9277a81e979bf88ef3a2416fc94b05bee470311e02a72bb5aa143589c6d2f07389792bd27f4b426ab97b8747b756d34053defd6cc89a137b56023fe81c98f3460c38c0aec7c1c7aaaf4bb46ad8a27aac2f9ac4d1126afec26f4a800e5c947c104997c7dea1ebd68583921920d9b0ae2cd11f67add22b1e584f395e4426a0003b2b2faa55890ebef80c0f61d0a5af8537f77bb01bd779d34f267c69b23db5325fa431ccc8d545054e74d243f1119b69036ebfe88670ca9b793d0c160036731bfed691f786b3aa3998479acfaf252131f814acd119d6e5310bd2a3844ee44c80a2ac32739391ec540a478fa241edbc3cf7dfe17808c7326eec8745f297dff5e31f5d0ef140e5cefea35a06008429a500f5c76d3c3fbca7afb458fb1730eced6da970328a5f0ddc43e5e6ff704a680410763bc021e8f58fd4d51e058aacc9c06917da2cb2c6d61219bdd2b12b3ebe27c2b183557130c03722c590aa91974ba2f7dffbd967be4556c2bc2ea88bde7bf769d704b47c42450e9600e99c42adf0dbb53fdd22f968c9abe8e9948ea11d083bdaffd2957c64bc4b180aac3b7a91c8b4b6520f6c7736faa6f65c8280f383de478f4a1e943d0726b68fb62734f69bf8768f7c2d0887aa1d2eac3c3ad6ce06f5cf61a9a13f52bfe10765c6300305a9a6b84befa9e0a3730ada5c4ef2937a86239dfe4711f33098378aa9b20b79ad012711713a80776f31c8f94217240c3b4a3ee9731d8bb97b219021b47d925e57dc86b2c1a8b885e4c49d96d2c0e81bb1b58dffeecf804aed207f7f61a02e7fe3607b3f0cf80c51f30dc76c63e54b531fe4e95fe211eca406faaf7a4a2492861a6f9fd81455392b7408ccc8b61677e20a6ad25151dc503cf76a55711c7cd0542252b17c6ae3403086fb9d97795f7c60e40a04c41c090eda9fb202dd274eebc476bda60b71d738a334443683f5b756609643443360d5ecc43d89a1f96955a7028f50284a57c8d1d672eee30d3c13583065d05ca6a3508b94a669d52b86eb65991af4b6f60a8cc95b84dbbeafff61c591e3ab492be0336b59fc7afcee2982cb6c45a84b55fd9278debc05ed4cc92e945f6abe9c8024efe", &(0x7f0000001340)="00c54728f233a1c61bd4ad859af83302edbc9b9fc18520d8cfdc8bad64599afcbb9de92b5646c5a95f20e929b01f3ee7f0cd379a92fd0c1d11cb826ecd9845aca402658fb2b3dfaffeacc7f4f20ddf4fcb9ae2da42aa30a340490dddbc2656b20b06c8d0f118f12e7484ffad21eea9bf5469957036c40ae9a56c1e2a6b372197c7b627c8754f70dadca6debe635c1a165d42c8b0a0016f324e578bcf53ca9d4047b59498661e7f7e1e63c036cbf448282e074a5980e22e10b4782216c7d4e28c7fd790e15af9ade56ac01d6707374fd6005be151b7a06a6132091f5ed124"}}, &(0x7f0000001480)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) 479.18262ms ago: executing program 2 (id=2098): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xdc, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0xb7, 0x48, 0x0, 0x1, [@typed={0x4, 0x6f}, @generic="aff840fff838bf58a00df13fe86b2253cdfe5770b75f6a91606b8942735a27d80015337b87f23c900e73367a257a044e983ed56a8f908b27521e81fba96ad5545d36c8b204043224a442c08f801a5992163e4ebee875c1bc463e662206bdeebacc9e8b17b1d5fabfe3c877dfc4bdd44deb1016bd26bfb510d60d0f5c7c127275a97eac0657e51261cc60532a878d753da2d448c35125da884db6c0d9ed74e34ea6829b40c6ba59337bc19c2cbe0805"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x20}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0xdc}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 397.773676ms ago: executing program 2 (id=2099): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = socket$xdp(0x2c, 0x3, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f00009da000/0x4000)=nil) (async) r2 = shmget(0x1, 0x4000, 0x200, &(0x7f00009da000/0x4000)=nil) shmat(r2, &(0x7f0000f55000/0x1000)=nil, 0x1000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='htcp', 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x0) 197.895422ms ago: executing program 3 (id=2101): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='vcan0\x00'}) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000500)={0x28, 0x6, r5, 0x0, 0x0, 0x8, 0xd}) ioctl$KVM_NMI(r3, 0xae9a) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000240)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080200000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r7], 0x24}}, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4000, 0x200}) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x7f, 0xaec4, 0x6, 0x4007, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1d, 0x0, 0x5, 0x1], 0x60000, 0x41981}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 136.562975ms ago: executing program 6 (id=2102): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000300)='./cgroup\x00', 0x0, 0x10}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010affff00000000000080090000"], 0x14}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003ac0)=@newtaction={0x6c, 0x30, 0x11, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4004010) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 6 (id=2103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x12) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r5, &(0x7f0000002600)=ANY=[], 0x1820) connect$bt_sco(r5, &(0x7f00000000c0), 0x8) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=@gettfilter={0x54, 0x2e, 0x409, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xa, 0xfff2}, {0xfff0}, {0xc}}, [{0x8, 0xb, 0x10000}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xfffffffe}]}, 0x54}, 0x1, 0x2b1e}, 0x4000800) kernel console output (not intermixed with test programs): dpoint 0x1 has invalid maxpacket 0 [ 200.961087][ T5814] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.969229][ T5814] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 200.973452][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 200.976866][ T5814] usb 5-1: Product: syz [ 200.978653][ T5814] usb 5-1: Manufacturer: syz [ 200.982405][ T5814] usb 5-1: SerialNumber: syz [ 201.012531][ T59] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 201.192294][ T5814] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 201.228018][ T848] usb 8-1: USB disconnect, device number 36 [ 201.236142][ T848] usblp0: removed [ 201.299896][ T64] Bluetooth: hci1: command 0x1003 tx timeout [ 201.303406][ T5744] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 201.403827][T11665] FAULT_INJECTION: forcing a failure. [ 201.403827][T11665] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 201.407839][T11665] CPU: 1 UID: 0 PID: 11665 Comm: syz.0.1518 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.407857][T11665] Tainted: [L]=SOFTLOCKUP [ 201.407860][T11665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.407867][T11665] Call Trace: [ 201.407871][T11665] [ 201.407876][T11665] dump_stack_lvl+0x100/0x190 [ 201.407911][T11665] should_fail_ex.cold+0x5/0xa [ 201.407933][T11665] copy_fpstate_to_sigframe+0x82d/0xae0 [ 201.407953][T11665] ? do_raw_spin_lock+0x128/0x260 [ 201.407982][T11665] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 201.408003][T11665] ? irqentry_exit+0x24d/0xa00 [ 201.408020][T11665] ? lockdep_hardirqs_on+0x78/0x100 [ 201.408031][T11665] ? x86_task_fpu+0x5f/0x90 [ 201.408043][T11665] get_sigframe+0x3fb/0x940 [ 201.408057][T11665] ? __pfx_get_sigframe+0x10/0x10 [ 201.408070][T11665] ? siginfo_layout+0x156/0x290 [ 201.408086][T11665] x64_setup_rt_frame+0x12f/0xce0 [ 201.408101][T11665] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 201.408121][T11665] arch_do_signal_or_restart+0x5ee/0x7e0 [ 201.408134][T11665] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 201.408150][T11665] ? fput+0x79/0x100 [ 201.408165][T11665] exit_to_user_mode_loop+0x139/0x6f0 [ 201.408180][T11665] ? rcu_is_watching+0x12/0xc0 [ 201.408198][T11665] do_syscall_64+0x666/0x870 [ 201.408209][T11665] ? clear_bhb_loop+0x40/0x90 [ 201.408222][T11665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.408233][T11665] RIP: 0033:0x7f360c15d68e [ 201.408243][T11665] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 201.408253][T11665] RSP: 002b:00007f360cfc9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 201.408264][T11665] RAX: 0000000000000001 RBX: 00007f360cfca6c0 RCX: 00007f360c15d68e [ 201.408271][T11665] RDX: 0000000000000001 RSI: 00007f360cfca090 RDI: 0000000000000006 [ 201.408276][T11665] RBP: 00007f360cfca090 R08: 0000000000000000 R09: 0000000000000000 [ 201.408283][T11665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.408289][T11665] R13: 00007f360c416038 R14: 00007f360c415fa0 R15: 00007ffc8185ef28 [ 201.408302][T11665] [ 201.509170][ T1046] usb 5-1: USB disconnect, device number 22 [ 201.519096][ T1046] usblp1: removed [ 201.679757][ T848] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 201.744535][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 201.744551][ T42] audit: type=1400 audit(1782421031.274:1114): avc: denied { append } for pid=11691 comm="syz.0.1527" name="0:0:0:0" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 201.748736][T11692] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 201.774985][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 201.852479][ T848] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.856966][ T848] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 201.863317][ T848] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.873225][ T848] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 201.889770][ T848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 201.893203][ T848] usb 8-1: Product: syz [ 201.894931][ T848] usb 8-1: Manufacturer: syz [ 201.896880][ T848] usb 8-1: SerialNumber: syz [ 202.010003][ T1046] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 202.106781][ T848] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 202.111286][ T34] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 202.171938][ T1046] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 202.175988][ T1046] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 202.181847][ T1046] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.189510][ T1046] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 202.193675][ T1046] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 202.197018][ T1046] usb 11-1: Product: syz [ 202.198861][ T1046] usb 11-1: Manufacturer: syz [ 202.200992][ T1046] usb 11-1: SerialNumber: syz [ 202.271312][ T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.275373][ T34] usb 7-1: config 0 has no interfaces? [ 202.277578][ T34] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.281318][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.287101][ T34] usb 7-1: config 0 descriptor?? [ 202.316194][T11668] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 202.332232][ T59] usb 8-1: USB disconnect, device number 37 [ 202.336924][ T59] usblp0: removed [ 202.417702][ T1046] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 202.497638][ T5814] usb 7-1: USB disconnect, device number 27 [ 202.554691][ T42] audit: type=1400 audit(1782421032.084:1115): avc: denied { accept } for pid=11708 comm="syz.3.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 202.639028][ T59] usb 11-1: USB disconnect, device number 10 [ 202.648003][ T59] usblp0: removed [ 202.690202][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1536'. [ 202.695818][T11714] veth1_to_team: entered promiscuous mode [ 202.703035][T11714] macvlan2: entered allmulticast mode [ 202.704750][T11714] veth1_to_team: entered allmulticast mode [ 202.768589][ T42] audit: type=1400 audit(1782421032.294:1116): avc: denied { connect } for pid=11719 comm="syz.2.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.779939][ T42] audit: type=1400 audit(1782421032.304:1117): avc: denied { name_bind 0x1000000 } for pid=11719 comm="syz.2.1538" path="socket:[44759]" dev="sockfs" ino=44759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 202.922388][T11726] netlink: 216 bytes leftover after parsing attributes in process `syz.6.1540'. [ 203.039762][ T34] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 203.169804][ T34] usb 7-1: device descriptor read/64, error -71 [ 203.418789][T11736] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1543'. [ 203.419758][ T34] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 203.427046][T11736] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1543'. [ 203.431779][T11736] netlink: 'syz.3.1543': attribute type 6 has an invalid length. [ 203.437304][T11736] netlink: 'syz.3.1543': attribute type 5 has an invalid length. [ 203.441174][T11736] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1543'. [ 203.569881][ T34] usb 7-1: device descriptor read/64, error -71 [ 203.680044][ T34] usb usb7-port1: attempt power cycle [ 203.779834][ T5499] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 203.931791][ T5499] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.935894][ T5499] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 203.940924][ T5499] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.948702][ T5499] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 203.953290][ T5499] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 203.956736][ T5499] usb 8-1: Product: syz [ 203.958582][ T5499] usb 8-1: Manufacturer: syz [ 203.961004][ T5499] usb 8-1: SerialNumber: syz [ 204.029807][ T34] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 204.050474][ T34] usb 7-1: device descriptor read/8, error -71 [ 204.174032][ T5499] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 204.289748][ T34] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 204.320474][ T34] usb 7-1: device descriptor read/8, error -71 [ 204.391522][ T5499] usb 8-1: USB disconnect, device number 38 [ 204.397140][ T5499] usblp0: removed [ 204.431219][ T34] usb usb7-port1: unable to enumerate USB device [ 204.809196][T11765] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1553'. [ 204.829336][T11765] overlayfs: failed to resolve './file0': -2 [ 205.089257][ T42] audit: type=1400 audit(1782421034.614:1118): avc: denied { listen } for pid=11768 comm="syz.3.1555" lport=42239 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.649617][T10322] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 205.674720][T11783] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1558'. [ 205.688776][T11783] syzkaller1: entered promiscuous mode [ 205.691782][T11783] syzkaller1: entered allmulticast mode [ 205.719367][T11785] ublk3: read batch cmd buffer failed [ 205.723753][T11785] ublk3: read batch cmd buffer failed [ 205.838623][T11796] SELinux: Context is not valid (left unmapped). [ 205.857236][T11799] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1563'. [ 205.857799][ T42] audit: type=1400 audit(1782421035.384:1119): avc: denied { relabelto } for pid=11795 comm="syz.3.1562" name="file0" dev="tmpfs" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="" threaded./file0/file1./file0[ 205.890015][ T42] audit: type=1400 audit(1782421035.384:1120): avc: denied { associate } for pid=11795 comm="syz.3.1562" name="file0" dev="tmpfs" ino=1942 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=""  @   /dev/fuse[ 205.912090][ T42] audit: type=1400 audit(1782421035.384:1121): avc: denied { mounton } for pid=11795 comm="syz.3.1562" path="/361/file0" dev="tmpfs" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="" fd=0x0000000000000005,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)̆@s[ 205.932656][ T42] audit: type=1400 audit(1782421035.424:1122): avc: denied { unlink } for pid=5742 comm="syz-executor" name="file0" dev="tmpfs" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="" [ 205.943436][T11806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1565'.  ./file0fuseh-s p%| .file1ރm#։!f۪y&jAcaAC|D9 ^瀘hyfH8fC2l%S`-$mRFZ|H7M[ >Q,EGXIQ5J?V9g4aS3% FhM^6)Q7:L]>]bHYv€r8`)5ݺŦ.=W&W!s.)#>01A'^䮅nȈgQR~UvCD/p%E:b& Zq`CJjM37`xl!Xۀv`6o{FН,gIKL,gPe[^++ǀ bQ=䌸+?0?Znv?60EFy#H5LⅯ unK"qYBfQdiq kxcK]۠y18_MQAİ"Ϸ RUZWlˌ[dtgvb-Bl\[;ΑŏqM?Xdr ]O "?]:n6Sq\R`V U]Q\@|ή)tP3H8dh.gjo9j|:5yX566 ڔX$ogX?q=w2H*xxBaubrx;21#[v#U~vv'1A T!kmzMxqFQe[ԙcS[K@|ZYŸ 'ĩÊU^B0Sd ;޻p) 5G~M(ylU ou&&3+ 1u䦗fCU-mΖQ0qD"^._g|t>ˊ6y#!rb6hԘki$әhN.v^wkXȔn; 6#< ޏ*t\^M9y [qU7f!:; Nѫ.a w*uU@m`K|0e)^ޔ8c~)$Kt^x,Q ;*5'e\ݖ~sq :,D)0RP=1HT{OM,᐀x(P6M4>s~z͡]y"inkP&;t(v>%`lOsZO6qԑ]8G\{E_Q;CLa M&Fn67I4W֘E-&xܥKJR[hCB:n 8ȿAr'J4-g qĕQQo!˱&]sLr])U;:y]-`Bxo rI?ǒvCfJ52 о j$l6Wƹ܃zCީH`cs̄"M3"Bȕ@uqg86ʹaUj`dfSEz֮"IFBxH`"s٠ϠڎrG^ND(7QI4G>ն>@HMUK?.x?L:5dPU:}"BWXYyTՌt*lv2knRsd$MC?ȁ? *$3Ij{ E* r=ڏem!{U4+\<|뻝OLf]EMҋ!~a1x^ڼH&q}ZX6;K9/PHto^FPByF FN9SM3Ke5)h* mF/.X{7.b!HqqW]Dž^zg1ZFhd`ڷjc̀&:IUkHz X_-LAFg|J,K^Jtk~oKqKp(I (wk¨|ao 2G?';[:@Ic}̼/ zfq|YlV h^ޖ{>拌YVL;k,X8~08,QE[ 206.661552][T11809] netlink: 'syz.6.1564': attribute type 1 has an invalid length. [ 206.664393][T11809] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1564'. [ 206.671092][T11809] netlink: 'syz.6.1564': attribute type 2 has an invalid length. [ 206.708099][ T42] audit: type=1400 audit(1782421036.234:1123): avc: denied { append } for pid=11812 comm="syz.0.1567" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 206.834736][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 206.835837][T11817] openvswitch: netlink: Multiple metadata blocks provided [ 206.870711][ T42] audit: type=1400 audit(1782421036.404:1124): avc: denied { getopt } for pid=11812 comm="syz.0.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 206.871172][T11815] fuse: Bad value for 'fd' [ 206.923591][T11819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11819 comm=syz.2.1569 [ 207.007556][ T42] audit: type=1400 audit(1782421036.534:1125): avc: denied { setattr } for pid=11820 comm="syz.2.1570" name="SCTPv6" dev="sockfs" ino=48264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.106222][T11834] xt_nat: multiple ranges no longer supported [ 207.110386][T11834] xt_nat: multiple ranges no longer supported [ 207.113299][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.115832][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.118289][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.122722][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.125336][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.127818][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.130684][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.133155][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.135573][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.138093][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.141614][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.144390][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.146916][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.149448][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.152192][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.154639][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.157124][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.159561][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.162293][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.164922][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.167477][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.170545][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.173251][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.175776][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7cbd0 returned -22 [ 207.178374][T11836] binder: 11833:11836 ioctl 4020ae46 7f689be7c8d0 returned -22 [ 207.290231][ T42] audit: type=1326 audit(1782421036.814:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11846 comm="syz.2.1578" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f689af9ce59 code=0x0 [ 207.318136][T11852] tmpfs: Bad value for 'huge' [ 207.319788][ T59] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 207.471013][ T59] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 207.474076][ T59] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 207.477013][ T59] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.482552][ T59] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 207.485529][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 207.488122][ T59] usb 8-1: Product: syz [ 207.489447][ T59] usb 8-1: Manufacturer: syz [ 207.490991][ T59] usb 8-1: SerialNumber: syz [ 207.569953][ T1046] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 207.730450][ T1046] usb 7-1: Using ep0 maxpacket: 32 [ 207.733379][ T1046] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 207.738921][ T1046] usb 7-1: config 0 has no interface number 0 [ 207.744648][ T1046] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 207.750205][ T59] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 207.750594][ T1046] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 207.756806][ T59] usb 8-1: USB disconnect, device number 39 [ 207.762787][ T1046] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 207.764679][ T59] usblp0: removed [ 207.767079][ T1046] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.782209][ T1046] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 207.785111][ T1046] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.790569][ T1046] usb 7-1: Product: syz [ 207.795206][ T1046] usb 7-1: Manufacturer: syz [ 207.796980][ T1046] usb 7-1: SerialNumber: syz [ 207.804089][ T1046] usb 7-1: config 0 descriptor?? [ 207.806333][T11852] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 207.812024][ T1046] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input21 [ 207.817123][ T5130] usb 7-1: BOGUS urb xfer, pipe 1 != type 3 [ 207.860423][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 207.931186][ C2] bcm5974 7-1:0.119: trackpad urb failed: -1 [ 207.972360][T11876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11876 comm=syz.3.1587 [ 208.028546][ T1046] usb 7-1: USB disconnect, device number 32 [ 208.074052][T11886] __nla_validate_parse: 1 callbacks suppressed [ 208.074069][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'. [ 208.121776][T11883] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.164486][T11889] /dev/nullb0: Can't open blockdev [ 208.172186][T11889] tmpfs: Unknown parameter 'nr_inodesb2\V' [ 208.304476][T11900] tipc: Enabled bearer , priority 0 [ 208.314063][T11900] syzkaller0: entered promiscuous mode [ 208.314077][T11900] syzkaller0: entered allmulticast mode [ 208.393758][T11898] tipc: Resetting bearer [ 208.407336][T11898] tipc: Disabling bearer [ 208.469795][ T5824] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 208.561402][T11908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11908 comm=syz.3.1597 [ 208.591707][T11917] Bluetooth: (null): Invalid header checksum [ 208.622469][ T5824] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 208.629705][ T5824] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 208.632775][ T5824] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.649300][ T5824] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 208.658656][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 208.661879][ T5824] usb 5-1: Product: syz [ 208.663179][ T5824] usb 5-1: Manufacturer: syz [ 208.665181][ T5824] usb 5-1: SerialNumber: syz [ 208.713632][T11922] netlink: 'syz.3.1601': attribute type 8 has an invalid length. [ 208.716818][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1601'. [ 208.758308][T11930] tipc: Started in network mode [ 208.760126][T11930] tipc: Node identity ac14140f, cluster identity 4711 [ 208.766107][T11930] tipc: New replicast peer: 255.255.255.255 [ 208.768589][T11930] tipc: Enabled bearer , priority 10 [ 208.881002][ T5824] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 208.902753][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 209.090981][T11942] kvm: kvm [11941]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 209.095879][T11942] kvm: kvm [11941]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 209.106030][ T9] usb 5-1: USB disconnect, device number 23 [ 209.113164][ T9] usblp0: removed [ 209.152925][T11946] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 209.233642][T11948] xfrm0 speed is unknown, defaulting to 1000 [ 209.237634][T11948] lo speed is unknown, defaulting to 1000 [ 209.550127][T11967] raw_sendmsg: syz.3.1613 forgot to set AF_INET. Fix it! [ 209.742407][T11978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1618'. [ 209.759824][ T5822] tipc: Node number set to 2886997007 [ 209.770684][ T42] audit: type=1400 audit(1782421039.304:1127): avc: denied { write } for pid=11979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.813395][ T42] audit: type=1400 audit(1782421039.344:1128): avc: denied { write } for pid=11982 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.889775][ T34] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 210.051259][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 29287, setting to 1024 [ 210.054708][ T34] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 210.057757][ T34] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.063198][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 210.066137][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 210.068656][ T34] usb 5-1: Product: syz [ 210.070016][ T34] usb 5-1: Manufacturer: syz [ 210.071528][ T34] usb 5-1: SerialNumber: syz [ 210.075003][T11973] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 210.280404][ T34] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 210.433225][T11995] fuse: Unknown parameter 'b' [ 210.435150][T11996] program syz.3.1621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.439431][T11996] program syz.3.1621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.483334][ T5824] usb 5-1: USB disconnect, device number 24 [ 210.489072][ T5824] usblp0: removed [ 210.546229][ T42] audit: type=1400 audit(1782421040.074:1129): avc: denied { getopt } for pid=12000 comm="syz.3.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.576009][ T42] audit: type=1400 audit(1782421040.104:1130): avc: denied { shutdown } for pid=12000 comm="syz.3.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.586106][ T42] audit: type=1400 audit(1782421040.124:1131): avc: denied { mounton } for pid=12000 comm="syz.3.1622" path="/file0" dev="ramfs" ino=47439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 210.597730][T12002] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 210.602543][T12002] overlayfs: failed to set xattr on upper [ 210.607769][T12002] overlayfs: ...falling back to redirect_dir=nofollow. [ 210.610573][T12002] overlayfs: ...falling back to metacopy=off. [ 210.613281][T12002] overlayfs: ...falling back to index=off. [ 210.615782][T12002] overlayfs: ...falling back to uuid=null. [ 210.681489][ T5499] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 210.686818][T12008] netlink: 'syz.2.1625': attribute type 1 has an invalid length. [ 210.690189][T12008] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1625'. [ 210.739979][T12011] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 210.773547][ T42] audit: type=1326 audit(1782421040.304:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12013 comm="syz.2.1626" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f689af9ce59 code=0x0 [ 210.831595][ T5499] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.835530][ T5499] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.838618][ T5499] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.843306][ T5499] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.846275][ T5499] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.850522][ T5499] usb 11-1: config 0 descriptor?? [ 210.899857][ T5824] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 211.050482][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 211.054465][ T5824] usb 5-1: unable to get BOS descriptor or descriptor too short [ 211.060849][ T5824] usb 5-1: string descriptor 0 read error: -22 [ 211.062930][ T5824] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 211.065697][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.073947][ T5824] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 211.077186][ T5824] dw2102: su3000_power_ctrl: 1, initialized 0 [ 211.079802][ T5824] dvb-usb: bulk message failed: -22 (2/0) [ 211.087565][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.092301][ T5824] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 211.095761][ T5824] usb 5-1: media controller created [ 211.097481][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 211.099336][ T5824] dw2102: i2c transfer failed. [ 211.101459][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 211.103563][ T5824] dw2102: i2c transfer failed. [ 211.105200][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 211.107070][ T5824] dw2102: i2c transfer failed. [ 211.108663][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 211.111139][ T5824] dw2102: i2c transfer failed. [ 211.116048][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 211.118656][ T5824] dw2102: i2c transfer failed. [ 211.120808][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 211.123531][ T5824] dw2102: i2c transfer failed. [ 211.125906][ T5824] dvb-usb: MAC address: 02:02:02:02:02:02 [ 211.127474][T12018] netlink: 'syz.2.1627': attribute type 39 has an invalid length. [ 211.145000][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.170071][ T5824] dvb-usb: bulk message failed: -22 (3/0) [ 211.172092][ T5824] dw2102: command 0x0e transfer failed. [ 211.174790][ T5824] dvb-usb: bulk message failed: -22 (3/0) [ 211.177410][ T5824] dw2102: command 0x0e transfer failed. [ 211.182296][T12019] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 211.277243][ T5499] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 211.289580][ T42] audit: type=1400 audit(1782421040.814:1133): avc: denied { write } for pid=12022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.318440][ T5499] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 211.480153][ T5824] dvb-usb: bulk message failed: -22 (3/0) [ 211.483318][ T5824] dw2102: command 0x0e transfer failed. [ 211.485451][ T5824] dvb-usb: bulk message failed: -22 (3/0) [ 211.487603][ T5824] dw2102: command 0x0e transfer failed. [ 211.491557][ T5824] dvb-usb: bulk message failed: -22 (1/0) [ 211.493685][ T5824] dw2102: command 0x51 transfer failed. [ 211.495527][T12006] dvb-usb: bulk message failed: -22 (4/0) [ 211.499106][T12006] dw2102: i2c transfer failed. [ 211.532815][T12034] binder: 12033:12034 ioctl 4018620d 0 returned -22 [ 211.557869][ T5824] DVB: Unable to find symbol ds3000_attach() [ 211.564337][ T5824] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 211.610172][ T9] usb 11-1: USB disconnect, device number 11 [ 211.630268][ T5824] rc_core: IR keymap rc-su3000 not found [ 211.632118][ T5824] Registered IR keymap rc-empty [ 211.638425][ T5824] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 211.647707][ T5824] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input23 [ 211.666793][ T5824] dvb-usb: schedule remote query interval to 150 msecs. [ 211.671854][ T5824] dw2102: su3000_power_ctrl: 0, initialized 1 [ 211.673908][ T5824] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 211.684957][ T5824] usb 5-1: USB disconnect, device number 25 [ 211.715993][ T5824] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 211.849780][ T59] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 212.012345][ T59] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 212.016591][ T59] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 212.021479][ T59] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.031346][ T59] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 212.035233][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 212.038502][ T59] usb 8-1: Product: syz [ 212.040950][ T59] usb 8-1: Manufacturer: syz [ 212.042574][ T59] usb 8-1: SerialNumber: syz [ 212.063926][T12051] /dev/sr0: Can't open blockdev [ 212.223458][T12063] netlink: 'syz.0.1637': attribute type 1 has an invalid length. [ 212.250757][T12063] 8021q: adding VLAN 0 to HW filter on device bond5 [ 212.258468][ T59] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 212.300972][T12063] bond5: (slave veth7): Enslaving as an active interface with a down link [ 212.324909][T12063] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 212.328027][T12063] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 212.329786][ T5499] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 212.460006][ T5499] usb 7-1: device descriptor read/64, error -71 [ 212.522644][ T5824] usb 8-1: USB disconnect, device number 40 [ 212.528351][ T5824] usblp0: removed [ 212.700013][ T5499] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 212.828069][T12083] 9pnet_fd: Insufficient options for proto=fd [ 212.829767][ T5499] usb 7-1: device descriptor read/64, error -71 [ 212.940426][ T5499] usb usb7-port1: attempt power cycle [ 212.949107][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1646'. [ 212.997142][T12100] /dev/sr0: Can't open blockdev [ 213.004404][T12102] /dev/sr0: Can't open blockdev [ 213.033680][T12103] netlink: 'syz.3.1647': attribute type 1 has an invalid length. [ 213.037086][T12103] netlink: 'syz.3.1647': attribute type 2 has an invalid length. [ 213.047847][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'. [ 213.240213][T12121] overlayfs: failed to resolve './bus': -2 [ 213.276991][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 213.279729][ T5499] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 213.286291][T12125] gtp0: entered allmulticast mode [ 213.302425][ T5499] usb 7-1: device descriptor read/8, error -71 [ 213.540057][ T5499] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 213.561875][ T5499] usb 7-1: device descriptor read/8, error -71 [ 213.670142][ T5499] usb usb7-port1: unable to enumerate USB device [ 213.879731][ T5824] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 214.031581][ T5824] usb 5-1: config 0 has no interfaces? [ 214.036236][ T5824] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 214.043540][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.054889][ T5824] usb 5-1: config 0 descriptor?? [ 214.083895][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 214.086603][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1661'. [ 214.089008][T12144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58474 sclass=netlink_route_socket pid=12144 comm=syz.6.1662 [ 214.089301][T12142] netlink: 'syz.3.1661': attribute type 15 has an invalid length. [ 214.096051][T12142] netlink: 'syz.3.1661': attribute type 18 has an invalid length. [ 214.275932][ T1046] usb 5-1: USB disconnect, device number 26 [ 214.372918][T12156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1666'. [ 214.382292][T12156] xfrm1: entered promiscuous mode [ 214.383999][T12156] xfrm1: entered allmulticast mode [ 214.421294][T12158] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 214.744371][T12179] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1675'. [ 214.748027][T12179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.931707][T12193] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4264760714 (17059042856 ns) > initial count (3578439220 ns). Using initial count to start timer. [ 214.965766][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 214.965782][ T42] audit: type=1400 audit(1782421044.494:1135): avc: denied { write } for pid=12195 comm="syz.3.1681" name="/" dev="9p" ino=73138989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.269630][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1686'. [ 215.358786][T12212] loop6: detected capacity change from 0 to 2640 [ 215.364558][T12212] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.379797][T12212] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.382502][T12212] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.384978][T12212] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.387417][T12212] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.401991][T12212] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.406649][T12212] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.415100][T12212] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.423942][T12212] ldm_validate_partition_table(): Disk read failed. [ 215.439796][T12212] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.444503][T12212] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.459786][T12212] Dev loop6: unable to read RDB block 0 [ 215.461658][T12212] loop6: unable to read partition table [ 215.463532][T12212] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 215.478784][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 215.586188][T12229] rdma_rxe: rxe_newlink: failed to add bond0 [ 215.604658][T12229] ntfs3(sr0): Primary boot signature is not NTFS. [ 215.607989][T12229] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 215.676576][ T5145] ldm_validate_partition_table(): Disk read failed. [ 215.685299][ T5145] Dev loop6: unable to read RDB block 0 [ 215.687669][ T5145] loop6: unable to read partition table [ 215.714487][T12233] netlink: 'syz.6.1694': attribute type 1 has an invalid length. [ 215.740095][T12233] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.748756][T12233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=12233 comm=syz.6.1694 [ 215.771678][T12233] bond5: (slave geneve3): making interface the new active one [ 215.775458][T12233] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 215.799148][T12240] netlink: 'syz.2.1698': attribute type 1 has an invalid length. [ 215.809551][T12240] cgroup: Unknown subsys name 'cpuset' [ 215.824913][ T5145] ldm_validate_partition_table(): Disk read failed. [ 215.831634][ T5145] Dev loop6: unable to read RDB block 0 [ 215.837931][ T5145] loop6: unable to read partition table [ 216.133719][ T5145] ldm_validate_partition_table(): Disk read failed. [ 216.137718][ T5145] Dev loop6: unable to read RDB block 0 [ 216.140349][ T5145] loop6: unable to read partition table [ 216.352141][T12267] binder: 12266:12267 ioctl c0306201 2000000006c0 returned -14 [ 216.654138][ T42] audit: type=1400 audit(1782421046.184:1136): avc: denied { execute } for pid=12276 comm="syz.6.1708" path="/dev/net/tun" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 216.696354][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1709'. [ 216.855323][T12299] syzkaller0: entered promiscuous mode [ 216.857659][T12299] syzkaller0: entered allmulticast mode [ 216.884395][T12303] netlink: 'syz.3.1715': attribute type 1 has an invalid length. [ 216.886864][T12303] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1715'. [ 216.887021][T12301] Bluetooth: (null): Non-link packet received in non-active state [ 217.029893][T12305] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1716'. [ 217.054182][T12312] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 217.058106][T12312] bond7 (unregistering): Released all slaves [ 217.168837][T12323] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 217.290599][T12336] omfs: Invalid superblock (0) [ 217.297383][T12336] netlink: 'syz.0.1726': attribute type 1 has an invalid length. [ 217.315734][T12341] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 217.333151][T12336] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.346254][T12336] openvswitch: netlink: Actions may not be safe on all matching packets [ 217.356108][T12336] vlan4: entered allmulticast mode [ 217.357712][T12336] macsec0: entered allmulticast mode [ 217.359328][T12336] veth1_macvtap: entered allmulticast mode [ 217.362056][T12336] bond6: (slave vlan4): Error -34 calling dev_set_mtu [ 217.434734][ T42] audit: type=1400 audit(1782421046.964:1137): avc: denied { map } for pid=12351 comm="syz.2.1731" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 217.729825][ T5824] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 217.777256][T12374] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 217.883104][ T5824] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 217.888127][ T5824] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.896342][ T5824] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 217.902844][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 217.907063][ T5824] usb 7-1: Product: syz [ 217.908709][ T5824] usb 7-1: Manufacturer: syz [ 217.913600][ T5824] usb 7-1: SerialNumber: syz [ 218.075663][T12392] program syz.3.1742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.131737][ T5824] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 218.257021][T12409] batadv_slave_1: entered promiscuous mode [ 218.268659][ T42] audit: type=1400 audit(1782421047.794:1138): avc: denied { write } for pid=12410 comm="syz.3.1746" name="/" dev="9p" ino=73138989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.276424][ T42] audit: type=1400 audit(1782421047.794:1139): avc: denied { append } for pid=12410 comm="syz.3.1746" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 218.285586][T12414] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 218.329260][T12415] batadv_slave_1: left promiscuous mode [ 218.342537][ T42] audit: type=1400 audit(1782421047.874:1140): avc: denied { write } for pid=12412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.404734][ T42] audit: type=1400 audit(1782421047.934:1141): avc: denied { write } for pid=12421 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.433165][T12404] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.469147][ T5824] usb 7-1: USB disconnect, device number 37 [ 218.472806][ T5824] usblp0: removed [ 218.522043][T12428] block nbd2: NBD_DISCONNECT [ 218.526793][T12428] block nbd2: Send disconnect failed -104 [ 218.597532][T12435] loop4: detected capacity change from 0 to 7 [ 218.606787][T12435] loop4: [ 218.610393][T12435] loop4: partition table partially beyond EOD, truncated [ 218.644863][T12404] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.756015][T12404] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.833841][T12443] ubi0: attaching mtd0 [ 218.856278][T12443] ubi0: scanning is finished [ 218.859727][T12443] ubi0: empty MTD device detected [ 218.947061][ T5815] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.966111][ T5815] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.975894][ T5815] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.985159][ T5815] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.011522][T12447] exFAT-fs (nullb0): invalid boot record signature [ 219.013406][T12447] exFAT-fs (nullb0): failed to read boot sector [ 219.015251][T12447] exFAT-fs (nullb0): failed to recognize exfat type [ 219.068326][T12443] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 219.072014][T12443] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 219.074369][T12443] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 219.076642][T12443] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 219.079148][T12443] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 219.081573][T12443] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 219.084549][T12443] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 938465366 [ 219.090224][T12443] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 219.097016][T12451] ubi0: background thread "ubi_bgt0d" started, PID 12451 [ 219.166818][ T42] audit: type=1804 audit(1782421048.694:1142): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1760" name="/newroot/418/file0" dev="tmpfs" ino=2242 res=1 errno=0 [ 219.330003][ T5814] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 219.351410][T12465] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.375769][T12465] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 219.473762][T12478] __nla_validate_parse: 3 callbacks suppressed [ 219.473783][T12478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1766'. [ 219.495633][ T5814] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 219.502203][ T5814] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 219.502243][T12479] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1767'. [ 219.510350][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.515282][ T5814] usb 7-1: Product: syz [ 219.520019][ T5814] usb 7-1: Manufacturer: syz [ 219.526733][ T5814] usb 7-1: SerialNumber: syz [ 219.531774][T12482] netlink: 'syz.3.1768': attribute type 10 has an invalid length. [ 219.532224][T12455] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 219.539349][T12482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.548324][T12482] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 219.636876][T12487] can0: slcan on ttynull. [ 219.690944][ T5824] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 219.697095][ T42] audit: type=1400 audit(1782421049.224:1143): avc: denied { write } for pid=12495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.743060][ T42] audit: type=1400 audit(1782421049.274:1144): avc: denied { write } for pid=12500 comm="syz.3.1774" name="/" dev="9p" ino=73138989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.743114][T12455] kAFS: unable to lookup cell '1' [ 219.755699][T12455] netlink: 'syz.2.1759': attribute type 1 has an invalid length. [ 219.768665][T12455] netlink: 'syz.2.1759': attribute type 1 has an invalid length. [ 219.771462][T12455] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1759'. [ 219.781301][T12487] can0 (unregistered): slcan off ttynull. [ 219.843337][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 219.853116][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 219.864014][ T5824] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 219.868417][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.872510][ T5824] usb 5-1: Product: syz [ 219.873899][ T5824] usb 5-1: Manufacturer: syz [ 219.875720][ T5824] usb 5-1: SerialNumber: syz [ 219.891160][ T5824] usb 5-1: config 0 descriptor?? [ 219.897368][ T5824] hub 5-1:0.0: bad descriptor, ignoring hub [ 219.900028][ T5824] hub 5-1:0.0: probe with driver hub failed with error -5 [ 219.906997][ T5824] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input25 [ 220.016008][T12525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=12525 comm=syz.3.1776 [ 220.037352][T12527] bridge_slave_0: left allmulticast mode [ 220.039192][T12527] bridge_slave_0: left promiscuous mode [ 220.042059][T12527] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.054689][T12527] bridge_slave_1: left allmulticast mode [ 220.057060][T12527] bridge_slave_1: left promiscuous mode [ 220.059544][T12527] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.074319][T12527] bond0: (slave bond_slave_0): Releasing backup interface [ 220.082557][T12527] bond0: (slave bond_slave_1): Releasing backup interface [ 220.093677][T12527] team0: Port device team_slave_0 removed [ 220.102912][T12527] team0: Port device team_slave_1 removed [ 220.105338][T12527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.108905][T12527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.112525][T12527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.116920][T12527] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.134385][T12528] team0: Mode changed to "activebackup" [ 220.260728][T12535] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 220.263429][T12535] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 220.268054][T12535] vhci_hcd vhci_hcd.0: Device attached [ 220.274042][T12536] vhci_hcd: connection closed [ 220.274505][ T5815] vhci_hcd vhci_hcd.6: stop threads [ 220.278806][ T5815] vhci_hcd vhci_hcd.6: release socket [ 220.281305][ T5815] vhci_hcd vhci_hcd.6: disconnect device [ 220.310535][ T9356] usb 5-1: USB disconnect, device number 27 [ 220.912531][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 220.912548][ T42] audit: type=1400 audit(1782421050.444:1152): avc: denied { watch watch_reads } for pid=12542 comm="syz.0.1786" path="pipe:[49884]" dev="pipefs" ino=49884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 221.060016][ T5824] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 221.139995][T12555] vcan2: entered allmulticast mode [ 221.145833][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 221.160942][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 221.175070][ T42] audit: type=1400 audit(1782421050.704:1153): avc: denied { write } for pid=12554 comm="syz.3.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 221.175270][T12555] libceph: resolve '0' (ret=-3): failed [ 221.209856][ T5824] usb 11-1: Using ep0 maxpacket: 8 [ 221.213933][ T5824] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 221.217444][ T5824] usb 11-1: config 0 has no interface number 0 [ 221.221088][ T5824] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.222030][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 221.225777][ T5824] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 221.228853][T12557] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1790'. [ 221.234604][ T5824] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 221.241698][ T5824] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 221.245835][ T5824] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.254066][ T5824] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 221.258025][ T5824] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.264334][ T5824] usb 11-1: config 0 descriptor?? [ 221.273763][ T5824] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 221.447246][T12566] binder: 12564:12566 ioctl c0306201 2000000001c0 returned -14 [ 221.473601][T12539] ldusb 11-1:0.55: Couldn't submit interrupt_in_urb -90 [ 221.487874][T12539] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 221.492759][T12539] UDF-fs: Scanning with blocksize 2048 failed [ 221.495609][T12539] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 221.497842][T12539] UDF-fs: Scanning with blocksize 4096 failed [ 221.502789][ T9356] usb 11-1: USB disconnect, device number 13 [ 221.507941][ T9356] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 221.958603][T12574] tmpfs: Unknown parameter 'nr_囏ҌI' [ 222.100248][ T5814] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 222.105919][ T5814] usb 7-1: USB disconnect, device number 38 [ 222.109394][ T5814] usblp0: removed [ 222.133467][T12582] [U]  [ 222.181188][ T42] audit: type=1400 audit(1782421051.714:1154): avc: denied { mounton } for pid=12586 comm="syz.0.1800" path="/file0" dev="autofs" ino=50704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 222.181213][T12587] overlay: filesystem on ./file0 not supported [ 222.432554][T12609] netlink: 'syz.2.1807': attribute type 5 has an invalid length. [ 222.437142][T12609] exFAT-fs (nullb0): invalid boot record signature [ 222.442596][T12609] exFAT-fs (nullb0): failed to read boot sector [ 222.445269][T12609] exFAT-fs (nullb0): failed to recognize exfat type [ 222.520091][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 222.544811][T12619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12619 comm=syz.2.1810 [ 222.554390][T12619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12619 comm=syz.2.1810 [ 222.607487][T12624] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 222.608338][T12625] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 222.618017][T12624] romfs: unable to set blocksize [ 222.618017][T12624] [ 222.637993][T12625] romfs: unable to set blocksize [ 222.637993][T12625] [ 222.692156][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.701969][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 222.710135][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.726170][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 222.730219][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 222.733642][ T9] usb 5-1: Product: syz [ 222.735491][ T9] usb 5-1: Manufacturer: syz [ 222.737462][ T9] usb 5-1: SerialNumber: syz [ 222.952952][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 223.667324][ T5824] usb 5-1: USB disconnect, device number 28 [ 223.679182][ T5824] usblp0: removed [ 223.706339][T12639] 9p: Bad value for 'wfdno' [ 223.857073][T12652] i2c i2c-1: dtv_property_process_set: SET cmd 0xbc375ba1 undefined [ 223.865573][T12652] bridge3: entered promiscuous mode [ 223.867750][T12652] bridge3: entered allmulticast mode [ 223.951838][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'. [ 224.163734][T12670] netlink: 'syz.0.1826': attribute type 2 has an invalid length. [ 224.166694][T12670] netlink: 'syz.0.1826': attribute type 2 has an invalid length. [ 224.173814][ T42] audit: type=1400 audit(1782421053.704:1155): avc: denied { nlmsg_read } for pid=12669 comm="syz.0.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 224.229817][ T5822] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 224.259734][ T5744] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 224.379982][ T5822] usb 7-1: Using ep0 maxpacket: 8 [ 224.383527][ T5822] usb 7-1: config 3 has an invalid interface number: 219 but max is 3 [ 224.386285][ T5822] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 224.389035][ T5822] usb 7-1: config 3 has an invalid interface number: 225 but max is 3 [ 224.393363][ T5822] usb 7-1: config 3 has an invalid interface number: 255 but max is 3 [ 224.395915][ T5822] usb 7-1: config 3 has no interface number 0 [ 224.397892][ T5822] usb 7-1: config 3 has no interface number 1 [ 224.399962][ T5822] usb 7-1: config 3 has no interface number 2 [ 224.402007][ T5822] usb 7-1: config 3 interface 219 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 224.405379][ T5822] usb 7-1: config 3 interface 219 altsetting 251 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 224.409206][ T5822] usb 7-1: config 3 interface 219 altsetting 251 bulk endpoint 0xE has invalid maxpacket 64 [ 224.413070][ T5822] usb 7-1: config 3 interface 219 altsetting 251 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 224.416416][ T5822] usb 7-1: config 3 interface 219 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 224.420041][ T5822] usb 7-1: config 3 interface 219 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 224.423155][ T5822] usb 7-1: config 3 interface 219 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 224.426462][ T5822] usb 7-1: config 3 interface 219 altsetting 251 has a duplicate endpoint with address 0x9, skipping [ 224.430226][ T5822] usb 7-1: config 3 interface 219 altsetting 251 has a duplicate endpoint with address 0xE, skipping [ 224.433528][ T5822] usb 7-1: config 3 interface 219 altsetting 251 has a duplicate endpoint with address 0x4, skipping [ 224.436773][ T5822] usb 7-1: config 3 interface 219 altsetting 251 has a duplicate endpoint with address 0x3, skipping [ 224.441615][ T5822] usb 7-1: config 3 interface 3 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 224.444863][ T5822] usb 7-1: config 3 interface 3 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 224.448037][ T5822] usb 7-1: config 3 interface 3 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 224.451512][ T5822] usb 7-1: config 3 interface 3 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 224.454743][ T5822] usb 7-1: config 3 interface 3 altsetting 6 bulk endpoint 0xB has invalid maxpacket 8 [ 224.457614][ T5822] usb 7-1: config 3 interface 3 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 224.460864][ T5822] usb 7-1: config 3 interface 3 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 224.464145][ T5822] usb 7-1: config 3 interface 225 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 224.467448][ T5822] usb 7-1: config 3 interface 225 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 224.470719][ T5822] usb 7-1: config 3 interface 255 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 224.473977][ T5822] usb 7-1: config 3 interface 255 altsetting 64 has a duplicate endpoint with address 0xE, skipping [ 224.477409][ T5822] usb 7-1: config 3 interface 219 has no altsetting 0 [ 224.479545][ T5822] usb 7-1: config 3 interface 3 has no altsetting 0 [ 224.481742][ T5822] usb 7-1: config 3 interface 255 has no altsetting 0 [ 224.485661][ T5822] usb 7-1: New USB device found, idVendor=20d6, idProduct=9a9b, bcdDevice=5d.87 [ 224.488514][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.491106][ T34] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 224.493514][ T5822] usb 7-1: Product: syz [ 224.494807][ T5822] usb 7-1: Manufacturer: 㛘㏙蠂鑪餘੉㍵⥝鞪㬯슱ঌꫴ㭋꒔왊퇟鶴ᖌᥢ⌍킚艕맧嘒羃糡뜎攋矠ᘺ㷅덴쒾臮쩔丝它迀俓桛쟁诒ఏ푒鹧ꪋᮘ廧俩袌ᨤ蝗㮩ᣔ酗蒛蘧殇礪࿅蠖腸ꔫ篮䨴瞞䏣绂늎ὑ珔ͅ镀鸅ｵ诿恵쏃砊僞ꕉ⮓捚녃孉뽶ؼ⺌꭭軩읮鼰睍큘癬燴䵄憾ꄅ [ 224.504702][ T5822] usb 7-1: SerialNumber: syz [ 224.508759][T12661] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.511593][T12661] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.629712][ T34] usb 5-1: device descriptor read/64, error -71 [ 224.742811][ T5822] usb 7-1: USB disconnect, device number 39 [ 224.869907][ T34] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 224.999795][ T34] usb 5-1: device descriptor read/64, error -71 [ 225.110357][ T34] usb usb5-port1: attempt power cycle [ 225.241476][T12684] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1830'. [ 225.294024][ T42] audit: type=1400 audit(1782421054.824:1156): avc: denied { open } for pid=12687 comm="syz.6.1831" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=50075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 225.296275][T12690] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1831'. [ 225.304673][T12690] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1831'. [ 225.377764][T12695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1833'. [ 225.451802][ T34] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 225.470187][ T34] usb 5-1: device descriptor read/8, error -71 [ 225.675579][T12715] overlay: ./file0 is not a directory [ 225.709728][ T34] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 225.710208][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 225.715889][T12715] netlink: 10716 bytes leftover after parsing attributes in process `syz.2.1837'. [ 225.719507][T12715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1837'. [ 225.723688][T12715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1837'. [ 225.730387][ T34] usb 5-1: device descriptor read/8, error -71 [ 225.840107][ T34] usb usb5-port1: unable to enumerate USB device [ 225.940872][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 226.192336][T12756] affs: Unknown parameter 'barrier' [ 226.226301][T12762] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1847'. [ 226.229761][T12762] netlink: 'syz.6.1847': attribute type 30 has an invalid length. [ 226.291518][T12768] usb usb9: check_ctrlrecip: process 12768 (syz.2.1849) requesting ep 01 but needs 81 [ 226.295570][T12768] usb usb9: usbfs: process 12768 (syz.2.1849) did not claim interface 0 before use [ 226.303000][T12768] 8021q: VLANs not supported on ip_vti0 [ 226.507797][ T42] audit: type=1400 audit(1782421056.034:1157): avc: denied { ioctl } for pid=12781 comm="syz.2.1854" path="/531/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70cf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 226.508562][T12782] sd 0:0:0:0: PR command failed: 1026 [ 226.519938][T12782] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 226.522954][T12782] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 226.568534][T12787] bridge0: port 3(vlan0) entered blocking state [ 226.571524][T12787] bridge0: port 3(vlan0) entered disabled state [ 226.573741][T12787] vlan0: entered allmulticast mode [ 226.575455][T12787] geneve0: entered allmulticast mode [ 226.578865][T12787] vlan0: entered promiscuous mode [ 226.582410][T12787] geneve0: entered promiscuous mode [ 226.616612][ T42] audit: type=1400 audit(1782421056.144:1158): avc: denied { shutdown } for pid=12788 comm="syz.2.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.778884][T12798] syzkaller0: entered promiscuous mode [ 226.780808][T12798] syzkaller0: entered allmulticast mode [ 227.097821][ T42] audit: type=1400 audit(2000000004.312:1159): avc: denied { map } for pid=12809 comm="syz.6.1864" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 227.108061][ T42] audit: type=1400 audit(2000000004.312:1160): avc: denied { execute } for pid=12809 comm="syz.6.1864" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 227.541238][T12844] xt_hashlimit: size too large, truncated to 1048576 [ 227.675816][T12855] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 227.682626][T12853] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 227.685373][T12853] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 227.691619][T12853] vhci_hcd vhci_hcd.0: Device attached [ 227.939925][ T5824] usb 49-1: new high-speed USB device number 3 using vhci_hcd [ 228.433870][T12856] vhci_hcd: connection reset by peer [ 228.440585][ T13] vhci_hcd vhci_hcd.6: stop threads [ 228.443005][ T13] vhci_hcd vhci_hcd.6: release socket [ 228.445324][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 228.508434][ T42] audit: type=1400 audit(2000000005.722:1161): avc: denied { nlmsg_write } for pid=12878 comm="syz.0.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 228.750289][ T5499] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 228.910340][ T5499] usb 5-1: Invalid ep0 maxpacket: 64 [ 229.050470][ T5499] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 229.077078][T12885] kAFS: unable to lookup cell '(,c' [ 229.201317][ T42] audit: type=1326 audit(2000000006.422:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.6.1890" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca3a39ce59 code=0x0 [ 229.210077][ T5499] usb 5-1: Invalid ep0 maxpacket: 64 [ 229.212512][ T5499] usb usb5-port1: attempt power cycle [ 229.409871][ T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 229.550975][ T5499] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 229.561771][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.565716][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 229.569578][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.570218][ T5499] usb 5-1: Invalid ep0 maxpacket: 64 [ 229.577831][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 229.582061][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 229.585349][ T9] usb 7-1: Product: syz [ 229.587095][ T9] usb 7-1: Manufacturer: syz [ 229.589068][ T9] usb 7-1: SerialNumber: syz [ 229.699831][ T5499] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 229.720912][ T5499] usb 5-1: Invalid ep0 maxpacket: 64 [ 229.722833][ T5499] usb usb5-port1: unable to enumerate USB device [ 229.797349][ T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 229.943658][T12896] overlay: Unknown parameter 'xino#' [ 229.947170][T12898] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 229.997544][ T42] audit: type=1400 audit(2000000007.212:1163): avc: denied { setattr } for pid=12890 comm="syz.2.1888" path="socket:[53687]" dev="sockfs" ino=53687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 230.100038][ T9] usb 7-1: USB disconnect, device number 40 [ 230.114628][ T9] usblp0: removed [ 230.500314][T12908] overlay: Bad value for 'workdir' [ 230.616316][T12912] syzkaller0: entered promiscuous mode [ 230.618042][T12912] syzkaller0: entered allmulticast mode [ 230.681637][T12920] overlayfs: workdir and upperdir must reside under the same mount [ 230.695945][T12920] __nla_validate_parse: 5 callbacks suppressed [ 230.695961][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1896'. [ 230.725023][T12924] 9p: Bad value for 'rfdno' [ 230.760060][T12926] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20003 [ 230.763497][ T42] audit: type=1400 audit(2000000007.982:1164): avc: denied { connect } for pid=12925 comm="syz.3.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 231.064931][T12942] xfrm0 speed is unknown, defaulting to 1000 [ 231.077531][T12942] lo speed is unknown, defaulting to 1000 [ 231.300012][ T5499] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 231.387236][ T42] audit: type=1400 audit(2000000008.602:1165): avc: denied { write } for pid=12946 comm="syz.0.1906" name="/" dev="9p" ino=73138989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.395242][ T42] audit: type=1400 audit(2000000008.602:1166): avc: denied { unlink } for pid=12946 comm="syz.0.1906" name="file0" dev="9p" ino=73139171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 231.650730][ T1046] hid_parser_main: 91 callbacks suppressed [ 231.650755][ T1046] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 231.656512][ T1046] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 231.659201][ T1046] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 231.663228][ T1046] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 231.666080][ T1046] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 231.669026][ T1046] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 231.672484][ T1046] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 231.675854][ T1046] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 231.679188][ T1046] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 231.682655][ T1046] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 231.714716][ T1046] hid-generic 0000:0000:0004.0006: hidraw1: HID v0.03 Device [syz1] on syz0 [ 231.767987][T12952] fido_id[12952]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 231.988637][T12956] kvm: pic: non byte write [ 231.992367][T12956] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=101716994 (1627471904 ns) > initial count (448 ns). Using initial count to start timer. [ 233.052150][ T5824] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 233.338340][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'. [ 233.349863][T12962] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.433054][T12968] program syz.6.1911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.489352][ T42] audit: type=1400 audit(2000000010.702:1167): avc: denied { getopt } for pid=12967 comm="syz.6.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.501071][T12974] dvmrp0: left allmulticast mode [ 233.503339][T12974] pimreg: left allmulticast mode [ 233.667233][T12991] sctp: [Deprecated]: syz.2.1917 (pid 12991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.667233][T12991] Use struct sctp_sack_info instead [ 233.676846][T12993] sctp: [Deprecated]: syz.2.1917 (pid 12993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.676846][T12993] Use struct sctp_sack_info instead [ 233.684808][T12994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=12994 comm=syz.6.1918 [ 233.799752][ T9356] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 233.805075][T13000] program syz.2.1921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.890018][ T5499] usb 8-1: device descriptor read/64, error -71 [ 233.908772][T13017] xfrm0 speed is unknown, defaulting to 1000 [ 233.911952][T13017] lo speed is unknown, defaulting to 1000 [ 233.951881][ T9356] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.951990][T13017] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1924'. [ 233.956999][ T9356] usb 5-1: config 8 has an invalid interface number: 198 but max is 0 [ 233.960474][ T9356] usb 5-1: config 8 has no interface number 0 [ 233.962401][ T9356] usb 5-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 233.968703][ T9356] usb 5-1: string descriptor 0 read error: -22 [ 233.971650][ T9356] usb 5-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 233.974812][ T9356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.979542][T12980] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 233.995779][T13020] netlink: 'syz.2.1925': attribute type 3 has an invalid length. [ 233.999438][T13020] netlink: 'syz.2.1925': attribute type 1 has an invalid length. [ 234.003722][T13020] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1925'. [ 234.070179][ T34] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 234.079031][T13024] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 234.149830][ T5499] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 234.194057][ T9356] usb 5-1: USB disconnect, device number 37 [ 234.225059][ T34] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 234.232845][ T34] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 234.245998][ T34] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.258727][ T34] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 234.264737][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 234.268212][ T34] usb 11-1: Product: syz [ 234.269533][ T34] usb 11-1: Manufacturer: syz [ 234.271141][ T34] usb 11-1: SerialNumber: syz [ 234.309791][ T5499] usb 8-1: Using ep0 maxpacket: 8 [ 234.313120][ T5499] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.316537][ T5499] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.319494][ T5499] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 234.322817][ T5499] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.326845][ T5499] usb 8-1: config 0 descriptor?? [ 234.493376][ T34] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 234.532158][ T5499] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 234.705992][ T34] usb 11-1: USB disconnect, device number 14 [ 234.715641][ T34] usblp0: removed [ 234.732442][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.735514][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.765814][ T42] audit: type=1400 audit(2000000011.982:1168): avc: denied { accept } for pid=13030 comm="syz.6.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 234.833098][T13037] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 234.873093][ T42] audit: type=1400 audit(2000000012.092:1169): avc: denied { setopt } for pid=13041 comm="syz.6.1930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 234.897796][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1931'. [ 234.901067][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1931'. [ 234.990729][T13048] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1934'. [ 235.030190][ T5499] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 235.076319][T13056] netlink: 'syz.2.1935': attribute type 39 has an invalid length. [ 235.079633][T13048] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1934'. [ 235.083085][T13048] nbd: device at index 64 is going down [ 235.090003][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 235.098133][T13056] sock: sock_timestamping_bind_phc: sock not bind to device [ 235.114825][T10174] udevd[10174]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 235.203800][ T5499] usb 5-1: not running at top speed; connect to a high speed hub [ 235.213231][ T5499] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 235.223780][ T5499] usb 5-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 235.229162][ T5499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.234088][ T5499] usb 5-1: Product: syz [ 235.236160][ T5499] usb 5-1: Manufacturer: syz [ 235.236452][ T42] audit: type=1400 audit(2000000012.452:1170): avc: denied { lock } for pid=13058 comm="syz.6.1936" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 235.238682][ T5499] usb 5-1: SerialNumber: syz [ 235.449789][ T9356] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 235.462805][T13033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.470027][T13033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.486140][ T5499] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.492543][ T5499] usb 5-1: MIDIStreaming interface descriptor not found [ 235.515182][T13069] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 235.533689][T13069] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 1th superblock [ 235.537976][ T5499] usb 5-1: USB disconnect, device number 38 [ 235.548962][T13069] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 235.551605][T13069] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 2th superblock [ 235.569528][ T9949] udevd[9949]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.600898][ T9356] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 235.604059][ T9356] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 235.607267][ T9356] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.613830][ T9356] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 235.617366][ T9356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 235.621084][ T9356] usb 7-1: Product: syz [ 235.622548][ T9356] usb 7-1: Manufacturer: syz [ 235.624098][ T9356] usb 7-1: SerialNumber: syz [ 235.830394][ T9356] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 236.044723][T13083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34473 sclass=netlink_route_socket pid=13083 comm=syz.0.1942 [ 236.101792][ T1046] usb 7-1: USB disconnect, device number 41 [ 236.113202][ T1046] usblp0: removed [ 236.152998][T13089] CIFS mount error: No usable UNC path provided in device string! [ 236.152998][T13089] [ 236.156152][T13089] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 236.192934][T13093] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 236.196203][T13093] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 236.205262][T13093] tmpfs: Bad value for 'mpol' [ 236.272189][T13100] kvm: pic: non byte write [ 236.274342][T13100] kvm: pic: non byte write [ 236.305720][T13106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13106 comm=syz.2.1949 [ 236.312295][T13106] netlink: 'syz.2.1949': attribute type 1 has an invalid length. [ 236.314767][T13106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1949'. [ 236.355197][T13112] trusted_key: encrypted_key: keylen parameter is missing [ 236.364491][T13112] pim6reg: entered allmulticast mode [ 236.396611][T13116] xfrm0 speed is unknown, defaulting to 1000 [ 236.400156][T13116] lo speed is unknown, defaulting to 1000 [ 236.584421][ T34] usb 8-1: USB disconnect, device number 42 [ 236.776401][T13139] bond6 (unregistering): Released all slaves [ 236.949574][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1962'. [ 236.955265][T13162] /dev/sg0: Can't lookup blockdev [ 237.020516][T13168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1966'. [ 237.127333][T13178] loop5: detected capacity change from 0 to 2640 [ 237.321570][T13185] nbd: nbd0 already in use [ 237.323302][T13191] block nbd0: NBD_DISCONNECT [ 237.325085][T13191] block nbd0: Send disconnect failed -32 [ 237.330877][T13191] block nbd0: Send disconnect failed -32 [ 237.333019][T13191] block nbd0: shutting down sockets [ 237.344176][T13185] nbd: nbd0 already in use [ 237.353288][T13191] block nbd0: NBD_DISCONNECT [ 237.549710][ T5824] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 237.611644][T13185] nbd0: detected capacity change from 0 to 63 [ 237.614357][T13185] nbd: nbd0 already in use [ 237.616013][T13191] block nbd0: NBD_DISCONNECT [ 237.631364][T13191] block nbd0: Disconnected due to user request. [ 237.634041][T13191] block nbd0: shutting down sockets [ 237.638009][T10174] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.642683][T10174] buffer_io_error: 74 callbacks suppressed [ 237.642695][T10174] Buffer I/O error on dev nbd0, logical block 1, async page read [ 237.662047][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.665707][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 237.672857][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 237.677574][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 237.680552][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 237.685351][T10174] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.685579][T13191] block nbd0: NBD_DISCONNECT [ 237.690335][T10174] Buffer I/O error on dev nbd0, logical block 0, async page read [ 237.690575][T10174] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.693140][T13191] block nbd0: Send disconnect failed -32 [ 237.695933][T10174] Buffer I/O error on dev nbd0, logical block 1, async page read [ 237.701942][T13185] nbd: nbd0 already in use [ 237.702026][T13185] nbd: nbd0 already in use [ 237.702081][T13185] nbd: nbd0 already in use [ 237.702133][T13185] nbd: nbd0 already in use [ 237.702187][T13185] nbd: nbd0 already in use [ 237.702240][T13185] nbd: nbd0 already in use [ 237.702297][T13185] nbd: nbd0 already in use [ 237.702351][T13185] nbd: nbd0 already in use [ 237.702405][T13185] nbd: nbd0 already in use [ 237.702458][T13185] nbd: nbd0 already in use [ 237.702522][T13185] nbd: nbd0 already in use [ 237.702619][T13185] nbd: nbd0 already in use [ 237.702687][T13185] nbd: nbd0 already in use [ 237.702745][T13185] nbd: nbd0 already in use [ 237.702799][T13185] nbd: nbd0 already in use [ 237.702855][T13185] nbd: nbd0 already in use [ 237.702908][T13185] nbd: nbd0 already in use [ 237.702962][T13185] nbd: nbd0 already in use [ 237.703045][T13185] nbd: nbd0 already in use [ 237.703103][T13185] nbd: nbd0 already in use [ 237.703160][T13185] nbd: nbd0 already in use [ 237.703214][T13185] nbd: nbd0 already in use [ 237.703266][T13185] nbd: nbd0 already in use [ 237.703321][T13185] nbd: nbd0 already in use [ 237.703376][T13185] nbd: nbd0 already in use [ 237.703429][T13185] nbd: nbd0 already in use [ 237.703488][T13185] nbd: nbd0 already in use [ 237.703551][T13185] nbd: nbd0 already in use [ 237.703603][T13185] nbd: nbd0 already in use [ 237.703675][ T2151] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 237.703923][ T2151] Buffer I/O error on dev nbd0, logical block 2, async page read [ 237.703951][ T2151] Buffer I/O error on dev nbd0, logical block 3, async page read [ 237.704059][T10174] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.704114][T10174] Buffer I/O error on dev nbd0, logical block 0, async page read [ 237.704144][T10174] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.704183][T10174] Buffer I/O error on dev nbd0, logical block 1, async page read [ 237.704209][T10174] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.704292][T10174] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.705317][T10174] ldm_validate_partition_table(): Disk read failed. [ 237.705384][T13191] block nbd0: NBD_DISCONNECT [ 237.705399][T13191] block nbd0: Send disconnect failed -32 [ 237.707371][T13191] block nbd0: NBD_DISCONNECT [ 237.707384][T13191] block nbd0: Send disconnect failed -32 [ 237.708103][T13191] block nbd0: NBD_DISCONNECT [ 237.708118][T13191] block nbd0: Send disconnect failed -32 [ 237.708694][T13191] block nbd0: NBD_DISCONNECT [ 237.708711][T13191] block nbd0: Send disconnect failed -32 [ 237.710002][T13191] block nbd0: NBD_DISCONNECT [ 237.710740][T10174] Dev nbd0: unable to read RDB block 0 [ 237.712381][T13191] block nbd0: Send disconnect failed -32 [ 237.713695][ T5824] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.716207][T13191] block nbd0: NBD_DISCONNECT [ 237.717888][T10174] nbd0: unable to read partition table [ 237.717977][T13191] block nbd0: Send disconnect failed -32 [ 237.720683][ T5824] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.723335][T13191] block nbd0: NBD_DISCONNECT [ 237.724163][ T5824] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.725593][T13191] block nbd0: Send disconnect failed -32 [ 237.728783][ T5824] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 237.739874][T13191] block nbd0: NBD_DISCONNECT [ 237.740891][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 237.742234][T13191] block nbd0: Send disconnect failed -32 [ 237.743905][ T5824] usb 7-1: Product: syz [ 237.745967][T10174] ldm_validate_partition_table(): Disk read failed. [ 237.746764][ T5824] usb 7-1: Manufacturer: syz [ 237.746782][ T5824] usb 7-1: SerialNumber: syz [ 237.749022][T10174] Dev nbd0: unable to read RDB block 0 [ 237.760228][T13191] block nbd0: NBD_DISCONNECT [ 237.761756][T10174] nbd0: unable to read partition table [ 237.764569][T13191] block nbd0: Send disconnect failed -32 [ 237.880082][T13191] block nbd0: NBD_DISCONNECT [ 237.881611][T13191] block nbd0: Send disconnect failed -32 [ 237.935511][T13191] block nbd0: NBD_DISCONNECT [ 237.942213][T13191] block nbd0: NBD_DISCONNECT [ 237.976156][ T5824] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 238.072489][T13216] netlink: 'syz.3.1978': attribute type 17 has an invalid length. [ 238.075172][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1978'. [ 238.078585][T13216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1978'. [ 238.092135][T13216] erspan0: entered promiscuous mode [ 238.094937][T13216] erspan0: left promiscuous mode [ 238.120185][T13218] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002 [ 238.128921][ T42] audit: type=1400 audit(2000000015.342:1171): avc: denied { write } for pid=13217 comm="syz.6.1981" name="/" dev="9p" ino=73138989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.176957][T13190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.181309][T13190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.188621][ T5814] usb 7-1: USB disconnect, device number 42 [ 238.198826][ T5814] usblp0: removed [ 238.369996][ T1046] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 238.519766][ T1046] usb 8-1: Using ep0 maxpacket: 8 [ 238.524073][ T1046] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 238.527776][ T1046] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.532357][ T1046] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.536519][ T1046] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.540803][ T1046] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.546350][ T1046] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 238.550135][ T1046] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.023423][ T1046] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 239.027291][T13216] usbtmc 8-1:16.0: simple usb_control_msg failed -32 [ 239.031390][ T5814] usb 8-1: USB disconnect, device number 43 [ 239.181388][ T1046] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.184536][ T1046] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 239.187529][ T1046] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.193035][ T1046] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 239.196014][ T1046] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 239.198619][ T1046] usb 7-1: Product: syz [ 239.200035][ T1046] usb 7-1: Manufacturer: syz [ 239.201548][ T1046] usb 7-1: SerialNumber: syz [ 239.410207][ T1046] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 239.530091][T13244] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1987'. [ 239.537400][T13244] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 239.656530][ T42] audit: type=1400 audit(2000000016.872:1172): avc: denied { write } for pid=13247 comm="syz.3.1989" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 239.656878][T13248] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1989'. [ 239.709507][T13250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1991'. [ 239.713437][T13250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1991'. [ 239.717244][T13250] syzkaller1: entered promiscuous mode [ 239.719628][T13250] syzkaller1: entered allmulticast mode [ 239.738476][ T10] usb 7-1: USB disconnect, device number 43 [ 239.744239][ T10] usblp0: removed [ 239.885964][ T42] audit: type=1400 audit(2000000017.102:1173): avc: denied { accept } for pid=13261 comm="syz.2.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 239.888532][T13262] tipc: Enabled bearer , priority 0 [ 239.903401][T13262] tipc: Resetting bearer [ 239.936733][T13265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.939929][ T1046] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 240.090528][ T1046] usb 11-1: Using ep0 maxpacket: 8 [ 240.096858][ T1046] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 240.104331][ T1046] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.108408][ T1046] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.115187][ T1046] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.121804][ T1046] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.127271][ T1046] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 240.131975][ T1046] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.164687][T13275] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 240.348532][ T1046] usb 11-1: usb_control_msg returned -32 [ 240.350742][ T1046] usbtmc 11-1:16.0: can't read capabilities [ 240.706303][T13278] usbtmc 11-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 240.709257][T13278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.714830][T13278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.725914][ T34] usb 11-1: USB disconnect, device number 15 [ 240.760849][T13282] openvswitch: netlink: Actions may not be safe on all matching packets [ 241.119734][ T34] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 241.145856][ T42] audit: type=1400 audit(2000000018.362:1174): avc: denied { write } for pid=13285 comm="syz.2.2002" name="/" dev="9p" ino=73138989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.169990][ T42] audit: type=1400 audit(2000000018.382:1175): avc: denied { lock } for pid=13285 comm="syz.2.2002" path="/579/file0/cpuset.effective_cpus" dev="9p" ino=73139229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 241.276999][ T34] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 241.279969][T13289] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 241.286521][ T34] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 241.293706][ T34] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.309543][ T34] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 241.317009][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 241.320539][ T34] usb 11-1: Product: syz [ 241.322789][ T34] usb 11-1: Manufacturer: syz [ 241.326366][ T34] usb 11-1: SerialNumber: syz [ 241.407142][T13298] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.419396][T13298] bridge_slave_0 (unregistering): left allmulticast mode [ 241.423195][T13298] bridge_slave_0 (unregistering): left promiscuous mode [ 241.429000][T13298] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.557679][ T34] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 241.570894][ T42] audit: type=1400 audit(2000000018.782:1176): avc: denied { listen } for pid=13304 comm="syz.0.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 241.716482][T13318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2012'. [ 241.720827][T13318] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 241.772712][T13321] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 241.799110][T13321] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 241.803008][T13321] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 241.806510][T13321] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 241.809321][T13321] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 241.836437][ T1046] usb 11-1: USB disconnect, device number 16 [ 241.847724][ T1046] usblp0: removed [ 241.868832][T13326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2012'. [ 241.925652][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2015'. [ 241.934607][T13329] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2014'. [ 241.992913][ T42] audit: type=1107 audit(2000000019.212:1177): pid=13336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 242.152435][T13357] netlink: zone id is out of range [ 242.202990][T13357] netlink: zone id is out of range [ 242.216467][T13357] netlink: zone id is out of range [ 242.235276][ T42] audit: type=1400 audit(2000000019.452:1178): avc: denied { write } for pid=13364 comm="syz.2.2026" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 242.299722][ T42] audit: type=1400 audit(2000000019.512:1179): avc: denied { map } for pid=13372 comm="syz.6.2030" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 242.418792][T13382] xfrm0 speed is unknown, defaulting to 1000 [ 242.421997][T13382] lo speed is unknown, defaulting to 1000 [ 242.580870][T13402] netlink: 'syz.0.2039': attribute type 32 has an invalid length. [ 242.724219][T13413] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 242.789750][ T34] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 242.962035][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.970169][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.980018][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.991463][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.991719][T13441] netlink: 'syz.6.2051': attribute type 1 has an invalid length. [ 243.002071][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.007829][T13441] netlink: 'syz.6.2051': attribute type 4 has an invalid length. [ 243.010492][T13441] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2051'. [ 243.015249][ T34] usb 7-1: config 0 descriptor?? [ 243.261315][ T42] audit: type=1400 audit(2000000020.482:1180): avc: denied { map } for pid=13452 comm="syz.6.2057" path="/dev/video3" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 243.278706][ T42] audit: type=1400 audit(2000000020.492:1181): avc: denied { execute } for pid=13452 comm="syz.6.2057" path="/dev/video3" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 243.428721][ T34] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 243.451420][ T34] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 243.550499][ T5824] usb 11-1: new full-speed USB device number 17 using dummy_hcd [ 243.713282][ T5824] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 243.718209][ T5824] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 243.725064][ T5824] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 243.728027][ T5824] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.730766][ T5824] usb 11-1: Product: syz [ 243.732083][ T5824] usb 11-1: Manufacturer: syz [ 243.733599][ T5824] usb 11-1: SerialNumber: syz [ 243.736605][ T5824] usb 11-1: config 0 descriptor?? [ 244.148357][T13453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.152851][T13453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.167214][ T5824] usb 11-1: USB disconnect, device number 17 [ 244.260163][T13459] netlink: 7936 bytes leftover after parsing attributes in process `syz.0.2058'. [ 244.875203][T13481] netlink: 'syz.6.2067': attribute type 12 has an invalid length. [ 244.878622][T13481] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2067'. [ 244.883171][T13481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=13481 comm=syz.6.2067 [ 245.209291][T13492] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 245.308990][T13492] team0: Mode changed to "loadbalance" [ 245.311360][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2070'. [ 245.454014][T13500] can0: slcan on ptm1. [ 245.634256][T13497] can0 (unregistered): slcan off ptm1. [ 245.700103][ T34] usb 7-1: USB disconnect, device number 44 [ 246.035256][T13531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.250240][ T5824] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 246.314485][T13538] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2083'. [ 246.393966][T13542] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2085'. [ 246.402053][ T5824] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 246.406703][ T5824] usb 5-1: config 1 has no interface number 0 [ 246.415719][ T5824] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 246.422472][ T5824] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 246.425883][ T5824] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.431467][ T5824] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 246.434550][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.437088][ T5824] usb 5-1: Product: syz [ 246.438428][ T5824] usb 5-1: Manufacturer: syz [ 246.440780][ T5824] usb 5-1: SerialNumber: syz [ 246.444915][T13523] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 246.518575][T13550] binder: 13549:13550 ioctl c018620b 0 returned -14 [ 246.651835][T13523] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 246.712620][T13552] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 246.720863][T13552] xt_l2tp: v2 doesn't support IP mode [ 246.858482][ T5824] usb 5-1: Incompatible driver and firmware versions [ 246.928016][T13557] __nla_validate_parse: 2 callbacks suppressed [ 246.928035][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2091'. [ 246.928051][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2091'. [ 247.183485][T13559] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 247.189748][T13559] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 247.240849][T13572] loop5: detected capacity change from 0 to 7 [ 247.262254][ C0] blk_print_req_error: 126 callbacks suppressed [ 247.262270][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.269261][ C0] buffer_io_error: 138 callbacks suppressed [ 247.269276][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 247.284686][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.288796][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 247.297492][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.301037][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 247.307449][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.310390][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 247.313233][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.316303][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 247.319576][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.322469][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 247.325269][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.331466][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.334314][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 247.337239][T13572] ldm_validate_partition_table(): Disk read failed. [ 247.353927][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.356752][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 247.359451][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.362379][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 247.367131][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 247.371979][T13572] Dev loop5: unable to read RDB block 0 [ 247.377211][T13572] loop5: unable to read partition table [ 247.379049][T13572] loop5: partition table beyond EOD, truncated [ 247.398121][T13572] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 247.426407][ T5145] ldm_validate_partition_table(): Disk read failed. [ 247.437632][ T5145] Dev loop5: unable to read RDB block 0 [ 247.441079][ T5145] loop5: unable to read partition table [ 247.442955][ T5145] loop5: partition table beyond EOD, truncated [ 247.673366][T13580] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2098'. [ 247.688120][T13580] openvswitch: netlink: Flow key attr not present in new flow. [ 248.020403][ T9304] tipc: Resetting bearer [ 248.091144][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 248.105841][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 248.112632][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 248.133963][ T9304] tipc: Disabling bearer [ 248.147129][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 248.155133][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.211665][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 248.219034][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 248.222730][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 248.228920][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 248.232332][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.364253][T13594] [ 248.365198][T13594] ====================================================== [ 248.367474][T13594] WARNING: possible circular locking dependency detected [ 248.370267][T13594] syzkaller #0 Tainted: G L [ 248.372715][T13594] ------------------------------------------------------ [ 248.375429][T13594] syz.3.2101/13594 is trying to acquire lock: [ 248.377276][T13594] ffffffff8e9b7d00 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x63/0x6c0 [ 248.380775][T13594] [ 248.380775][T13594] but task is already holding lock: [ 248.383329][T13594] ffff888059775530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x53/0xbd0 [ 248.386540][T13594] [ 248.386540][T13594] which lock already depends on the new lock. [ 248.386540][T13594] [ 248.389898][T13594] [ 248.389898][T13594] the existing dependency chain (in reverse order) is: [ 248.393180][T13594] [ 248.393180][T13594] -> #8 (&idev->mc_lock){+.+.}-{4:4}: [ 248.395662][T13594] lock_acquire+0x1b9/0x370 [ 248.397603][T13594] __mutex_lock+0x1a4/0x1bd0 [ 248.399190][T13594] __ipv6_dev_mc_inc+0x53/0xbd0 [ 248.401409][T13594] addrconf_join_solict+0x109/0x160 [ 248.403456][T13594] __ipv6_dev_ac_inc+0x938/0xdb0 [ 248.405196][T13594] ipv6_sock_ac_join+0x929/0x10d0 [ 248.407415][T13594] do_ipv6_setsockopt+0x3874/0x44a0 [ 248.409620][T13594] ipv6_setsockopt+0xcb/0x170 [ 248.411341][T13594] tcp_setsockopt+0xa7/0x100 [ 248.413421][T13594] do_sock_setsockopt+0xf3/0x1d0 [ 248.415137][T13594] __sys_setsockopt+0x195/0x220 [ 248.417040][T13594] __x64_sys_setsockopt+0xbd/0x160 [ 248.419144][T13594] do_syscall_64+0x115/0x870 [ 248.420766][T13594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.423191][T13594] [ 248.423191][T13594] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 248.425785][T13594] lock_acquire+0x1b9/0x370 [ 248.427805][T13594] lock_sock_nested+0x41/0xf0 [ 248.429541][T13594] tls_sw_sendmsg+0x1c8/0x2b10 [ 248.431271][T13594] inet6_sendmsg+0x11c/0x140 [ 248.433309][T13594] sock_sendmsg+0x28c/0x410 [ 248.435193][T13594] splice_to_socket+0xb3c/0x11a0 [ 248.436858][T13594] direct_splice_actor+0x192/0x690 [ 248.438971][T13594] splice_direct_to_actor+0x345/0xa30 [ 248.441058][T13594] do_splice_direct+0x174/0x240 [ 248.442748][T13594] do_sendfile+0xadc/0xe20 [ 248.444733][T13594] __x64_sys_sendfile64+0x154/0x220 [ 248.446659][T13594] do_syscall_64+0x115/0x870 [ 248.448431][T13594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.450939][T13594] [ 248.450939][T13594] -> #6 (&ctx->tx_lock){+.+.}-{4:4}: [ 248.453225][T13594] lock_acquire+0x1b9/0x370 [ 248.455256][T13594] __mutex_lock+0x1a4/0x1bd0 [ 248.456902][T13594] tls_sw_sendmsg+0x141/0x2b10 [ 248.458919][T13594] inet6_sendmsg+0x11c/0x140 [ 248.460862][T13594] sock_sendmsg+0x28c/0x410 [ 248.462400][T13594] __sock_xmit+0x25a/0x520 [ 248.464223][T13594] nbd_disconnect.isra.0+0x329/0x401 [ 248.466454][T13594] nbd_ioctl.cold+0xd/0xbf [ 248.467965][T13594] blkdev_ioctl+0x5ad/0x6f0 [ 248.469799][T13594] __x64_sys_ioctl+0x18e/0x210 [ 248.471768][T13594] do_syscall_64+0x115/0x870 [ 248.473341][T13594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.475815][T13594] [ 248.475815][T13594] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 248.478448][T13594] lock_acquire+0x1b9/0x370 [ 248.480179][T13594] __mutex_lock+0x1a4/0x1bd0 [ 248.482224][T13594] nbd_queue_rq+0x428/0x1080 [ 248.483905][T13594] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 248.486016][T13594] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 248.488833][T13594] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 248.491496][T13594] blk_mq_run_hw_queue+0x23c/0x670 [ 248.493259][T13594] blk_mq_dispatch_list+0x51d/0x1360 [ 248.495256][T13594] blk_mq_flush_plug_list+0x130/0x600 [ 248.497713][T13594] __blk_flush_plug+0x2c4/0x4b0 [ 248.499401][T13594] __submit_bio+0x584/0x6c0 [ 248.501138][T13594] submit_bio_noacct_nocheck+0x549/0xc00 [ 248.503483][T13594] submit_bio_noacct+0xd17/0x1ff0 [ 248.505221][T13594] __bh_submit+0x658/0x850 [ 248.507195][T13594] block_read_full_folio+0x1f7/0x8c0 [ 248.509190][T13594] filemap_read_folio+0xfc/0x3b0 [ 248.511000][T13594] do_read_cache_folio+0x2d7/0x6b0 [ 248.513222][T13594] read_part_sector+0xd1/0x370 [ 248.515265][T13594] adfspart_check_ICS+0x91/0x7d0 [ 248.516924][T13594] bdev_disk_changed+0x7b1/0x1260 [ 248.518898][T13594] blkdev_get_whole+0x187/0x290 [ 248.521085][T13594] bdev_open+0x2c7/0xe40 [ 248.523100][T13594] blkdev_open+0x34e/0x4f0 [ 248.525088][T13594] do_dentry_open+0x6ab/0x14d0 [ 248.526934][T13594] vfs_open+0x82/0x3f0 [ 248.528470][T13594] path_openat+0x2873/0x4280 [ 248.530545][T13594] do_file_open+0x20e/0x430 [ 248.532151][T13594] do_sys_openat2+0x10f/0x1e0 [ 248.533862][T13594] __x64_sys_openat+0x12d/0x210 [ 248.535918][T13594] do_syscall_64+0x115/0x870 [ 248.537413][T13594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.539617][T13594] [ 248.539617][T13594] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 248.542299][T13594] lock_acquire+0x1b9/0x370 [ 248.543883][T13594] __mutex_lock+0x1a4/0x1bd0 [ 248.545875][T13594] nbd_queue_rq+0xba/0x1080 [ 248.547822][T13594] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 248.549645][T13594] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 248.551964][T13594] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 248.554547][T13594] blk_mq_run_hw_queue+0x23c/0x670 [ 248.556463][T13594] blk_mq_dispatch_list+0x51d/0x1360 [ 248.558389][T13594] blk_mq_flush_plug_list+0x130/0x600 [ 248.560831][T13594] __blk_flush_plug+0x2c4/0x4b0 [ 248.562728][T13594] __submit_bio+0x584/0x6c0 [ 248.564309][T13594] submit_bio_noacct_nocheck+0x549/0xc00 [ 248.566696][T13594] submit_bio_noacct+0xd17/0x1ff0 [ 248.568528][T13594] __bh_submit+0x658/0x850 [ 248.570083][T13594] block_read_full_folio+0x1f7/0x8c0 [ 248.572365][T13594] filemap_read_folio+0xfc/0x3b0 [ 248.574524][T13594] do_read_cache_folio+0x2d7/0x6b0 [ 248.576330][T13594] read_part_sector+0xd1/0x370 [ 248.578064][T13594] adfspart_check_ICS+0x91/0x7d0 [ 248.580253][T13594] bdev_disk_changed+0x7b1/0x1260 [ 248.582107][T13594] blkdev_get_whole+0x187/0x290 [ 248.583817][T13594] bdev_open+0x2c7/0xe40 [ 248.585753][T13594] blkdev_open+0x34e/0x4f0 [ 248.587738][T13594] do_dentry_open+0x6ab/0x14d0 [ 248.589448][T13594] vfs_open+0x82/0x3f0 [ 248.590924][T13594] path_openat+0x2873/0x4280 [ 248.592983][T13594] do_file_open+0x20e/0x430 [ 248.595004][T13594] do_sys_openat2+0x10f/0x1e0 [ 248.596754][T13594] __x64_sys_openat+0x12d/0x210 [ 248.598480][T13594] do_syscall_64+0x115/0x870 [ 248.600603][T13594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.603101][T13594] [ 248.603101][T13594] -> #3 (set->srcu){.+.+}-{0:0}: [ 248.605392][T13594] lock_sync+0x9d/0x110 [ 248.607305][T13594] __synchronize_srcu+0xa2/0x300 [ 248.609490][T13594] blk_mq_quiesce_queue+0x149/0x1c0 [ 248.611730][T13594] elevator_switch+0x17b/0x7e0 [ 248.613377][T13594] elevator_change+0x352/0x530 [ 248.615250][T13594] elevator_set_default+0x29e/0x360 [ 248.617601][T13594] blk_register_queue+0x48e/0x630 [ 248.619817][T13594] __add_disk+0x73f/0xe40 [ 248.621577][T13594] add_disk_fwnode+0x118/0x5c0 [ 248.623785][T13594] nbd_dev_add+0x77a/0xb10 [ 248.625748][T13594] nbd_init+0x291/0x2b0 [ 248.627434][T13594] do_one_initcall+0x11d/0x700 [ 248.629091][T13594] kernel_init_freeable+0x6ea/0x7b0 [ 248.631408][T13594] kernel_init+0x1f/0x1e0 [ 248.633344][T13594] ret_from_fork+0x72b/0xd50 [ 248.635341][T13594] ret_from_fork_asm+0x1a/0x30 [ 248.636943][T13594] [ 248.636943][T13594] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 248.639862][T13594] lock_acquire+0x1b9/0x370 [ 248.641887][T13594] __mutex_lock+0x1a4/0x1bd0 [ 248.643923][T13594] elevator_change+0x1bc/0x530 [ 248.645539][T13594] elevator_set_none+0x92/0xf0 [ 248.647351][T13594] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 248.649859][T13594] nbd_start_device+0x1a6/0xbd0 [ 248.651695][T13594] nbd_genl_connect+0xff2/0x1a40 [ 248.653349][T13594] genl_family_rcv_msg_doit+0x214/0x300 [ 248.655723][T13594] genl_rcv_msg+0x560/0x800 [ 248.657557][T13594] netlink_rcv_skb+0x159/0x420 [ 248.659159][T13594] genl_rcv+0x28/0x40 [ 248.660874][T13594] netlink_unicast+0x585/0x850 [ 248.663019][T13594] netlink_sendmsg+0x8b0/0xda0 [ 248.664907][T13594] ____sys_sendmsg+0xa4d/0xbe0 [ 248.666480][T13594] ___sys_sendmsg+0x190/0x1e0 [ 248.668411][T13594] __sys_sendmsg+0x160/0x210 [ 248.670433][T13594] do_syscall_64+0x115/0x870 [ 248.672134][T13594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.674235][T13594] [ 248.674235][T13594] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 248.677611][T13594] lock_acquire+0x1b9/0x370 [ 248.679193][T13594] blk_alloc_queue+0x610/0x790 [ 248.681038][T13594] blk_mq_alloc_queue+0x174/0x290 [ 248.683252][T13594] __blk_mq_alloc_disk+0x29/0x120 [ 248.685317][T13594] nbd_dev_add+0x492/0xb10 [ 248.686871][T13594] nbd_init+0x291/0x2b0 [ 248.688602][T13594] do_one_initcall+0x11d/0x700 [ 248.690700][T13594] kernel_init_freeable+0x6ea/0x7b0 [ 248.692640][T13594] kernel_init+0x1f/0x1e0 [ 248.694138][T13594] ret_from_fork+0x72b/0xd50 [ 248.696174][T13594] ret_from_fork_asm+0x1a/0x30 [ 248.698272][T13594] [ 248.698272][T13594] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 248.700766][T13594] check_prev_add+0xeb/0xe60 [ 248.702606][T13594] __lock_acquire+0x136c/0x1a40 [ 248.704789][T13594] lock_acquire+0x1b9/0x370 [ 248.706571][T13594] fs_reclaim_acquire+0xc4/0x100 [ 248.708284][T13594] __kmalloc_cache_noprof+0x63/0x6c0 [ 248.710629][T13594] __ipv6_dev_mc_inc+0x2f1/0xbd0 [ 248.712721][T13594] ipv6_add_dev+0xb78/0x1520 [ 248.714292][T13594] addrconf_notify+0x5db/0x1ba0 [ 248.716220][T13594] notifier_call_chain+0x99/0x3f0 [ 248.718453][T13594] call_netdevice_notifiers_info+0xbe/0x110 [ 248.720577][T13594] register_netdevice+0x1998/0x25a0 [ 248.722559][T13594] br_add_bridge+0x9a/0xf0 [ 248.724579][T13594] old_deviceless+0x619/0x700 [ 248.726543][T13594] br_ioctl_stub+0x12b/0x4d0 [ 248.728122][T13594] br_ioctl_call+0x53/0xa0 [ 248.729963][T13594] sock_ioctl+0x616/0x6b0 [ 248.731903][T13594] __x64_sys_ioctl+0x18e/0x210 [ 248.733756][T13594] do_syscall_64+0x115/0x870 [ 248.735336][T13594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.737827][T13594] [ 248.737827][T13594] other info that might help us debug this: [ 248.737827][T13594] [ 248.741337][T13594] Chain exists of: [ 248.741337][T13594] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 248.741337][T13594] [ 248.745903][T13594] Possible unsafe locking scenario: [ 248.745903][T13594] [ 248.748362][T13594] CPU0 CPU1 [ 248.750131][T13594] ---- ---- [ 248.752207][T13594] lock(&idev->mc_lock); [ 248.753925][T13594] lock(sk_lock-AF_INET6); [ 248.756167][T13594] lock(&idev->mc_lock); [ 248.758580][T13594] lock(fs_reclaim); [ 248.760225][T13594] [ 248.760225][T13594] *** DEADLOCK *** [ 248.760225][T13594] [ 248.763069][T13594] 3 locks held by syz.3.2101/13594: [ 248.764681][T13594] #0: ffffffff9060c080 (br_ioctl_mutex){+.+.}-{4:4}, at: br_ioctl_call+0x34/0xa0 [ 248.768366][T13594] #1: ffffffff9063c4c0 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0xf4/0x4d0 [ 248.771330][T13594] #2: ffff888059775530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x53/0xbd0 [ 248.775104][T13594] [ 248.775104][T13594] stack backtrace: [ 248.777284][T13594] CPU: 1 UID: 0 PID: 13594 Comm: syz.3.2101 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.777300][T13594] Tainted: [L]=SOFTLOCKUP [ 248.777304][T13594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.777311][T13594] Call Trace: [ 248.777316][T13594] [ 248.777321][T13594] dump_stack_lvl+0x100/0x190 [ 248.777338][T13594] print_circular_bug.cold+0x178/0x1c7 [ 248.777355][T13594] check_noncircular+0x146/0x160 [ 248.777370][T13594] check_prev_add+0xeb/0xe60 [ 248.777383][T13594] __lock_acquire+0x136c/0x1a40 [ 248.777399][T13594] lock_acquire+0x1b9/0x370 [ 248.777411][T13594] ? __kmalloc_cache_noprof+0x63/0x6c0 [ 248.777430][T13594] fs_reclaim_acquire+0xc4/0x100 [ 248.777444][T13594] ? __kmalloc_cache_noprof+0x63/0x6c0 [ 248.777460][T13594] __kmalloc_cache_noprof+0x63/0x6c0 [ 248.777476][T13594] ? in6_dev_get+0x133/0x310 [ 248.777491][T13594] ? __ipv6_dev_mc_inc+0x2f1/0xbd0 [ 248.777507][T13594] __ipv6_dev_mc_inc+0x2f1/0xbd0 [ 248.777525][T13594] ipv6_add_dev+0xb78/0x1520 [ 248.777537][T13594] addrconf_notify+0x5db/0x1ba0 [ 248.777552][T13594] ? __pfx_tls_dev_event+0x10/0x10 [ 248.777567][T13594] ? __pfx_addrconf_notify+0x10/0x10 [ 248.777582][T13594] ? ip6mr_device_event+0x1c4/0x230 [ 248.777597][T13594] notifier_call_chain+0x99/0x3f0 [ 248.777609][T13594] call_netdevice_notifiers_info+0xbe/0x110 [ 248.777621][T13594] register_netdevice+0x1998/0x25a0 [ 248.777639][T13594] ? __pfx_register_netdevice+0x10/0x10 [ 248.777656][T13594] br_add_bridge+0x9a/0xf0 [ 248.777671][T13594] old_deviceless+0x619/0x700 [ 248.777686][T13594] ? lock_acquire+0x1b9/0x370 [ 248.777699][T13594] ? __pfx_old_deviceless+0x10/0x10 [ 248.777715][T13594] ? trace_contention_end+0x126/0x160 [ 248.777730][T13594] ? __mutex_lock+0x26d/0x1bd0 [ 248.777743][T13594] br_ioctl_stub+0x12b/0x4d0 [ 248.777759][T13594] ? __pfx_br_ioctl_stub+0x10/0x10 [ 248.777776][T13594] ? do_vfs_ioctl+0x226/0x13e0 [ 248.777792][T13594] ? __pfx_br_ioctl_stub+0x10/0x10 [ 248.777808][T13594] br_ioctl_call+0x53/0xa0 [ 248.777820][T13594] sock_ioctl+0x616/0x6b0 [ 248.777831][T13594] ? __pfx_sock_ioctl+0x10/0x10 [ 248.777842][T13594] ? hook_file_ioctl_common+0x140/0x440 [ 248.777859][T13594] ? selinux_file_ioctl+0x13b/0x290 [ 248.777871][T13594] ? selinux_file_ioctl+0xb6/0x290 [ 248.777884][T13594] ? __pfx_sock_ioctl+0x10/0x10 [ 248.777896][T13594] __x64_sys_ioctl+0x18e/0x210 [ 248.777911][T13594] do_syscall_64+0x115/0x870 [ 248.777923][T13594] ? clear_bhb_loop+0x40/0x90 [ 248.777935][T13594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.777946][T13594] RIP: 0033:0x7f2b2df9ce59 [ 248.777956][T13594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.777966][T13594] RSP: 002b:00007f2b2eefa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.777976][T13594] RAX: ffffffffffffffda RBX: 00007f2b2e215fa0 RCX: 00007f2b2df9ce59 [ 248.777983][T13594] RDX: 0000200000000040 RSI: 0000000000008941 RDI: 0000000000000004 [ 248.777989][T13594] RBP: 00007f2b2e032e6f R08: 0000000000000000 R09: 0000000000000000 [ 248.777995][T13594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.778002][T13594] R13: 00007f2b2e216038 R14: 00007f2b2e215fa0 R15: 00007ffff84ddc68 [ 248.778012][T13594] [ 248.913759][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 248.913771][ T42] audit: type=1400 audit(2000000026.132:1183): avc: denied { write } for pid=5679 comm="syz-executor" path="pipe:[6391]" dev="pipefs" ino=6391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 249.027741][ T34] usb 5-1: USB disconnect, device number 39 [ 249.146678][ T5813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 249.151667][ T5813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.287505][ T5813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 249.290809][ T5813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.442486][ T5813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 249.445907][ T5813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.548208][ T5813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 249.553000][ T5813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.661723][ T5813] vlan0: left allmulticast mode [ 249.663442][ T5813] geneve0: left allmulticast mode [ 249.664975][ T5813] vlan0: left promiscuous mode [ 249.666438][ T5813] geneve0: left promiscuous mode [ 249.668103][ T5813] bridge0: port 3(vlan0) entered disabled state [ 249.671866][ T5813] bridge_slave_1: left allmulticast mode [ 249.673661][ T5813] bridge_slave_1: left promiscuous mode [ 249.675458][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.678274][ T5813] bridge_slave_0: left allmulticast mode [ 249.680573][ T5813] bridge_slave_0: left promiscuous mode [ 249.682633][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.723484][ T5813] erspan0 (unregistering): left promiscuous mode [ 249.741497][ T5813] bond3 (unregistering): (slave geneve4): Releasing active interface [ 249.784460][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.787625][ T5813] bond_slave_1: left allmulticast mode [ 249.789443][ T5813] bond0 (unregistering): Released all slaves [ 249.795613][ T5813] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 249.799246][ T5813] bond1 (unregistering): Released all slaves [ 249.803577][ T5813] bond2 (unregistering): Released all slaves [ 249.807535][ T5813] bond3 (unregistering): Released all slaves [ 249.811617][ T5813] bond4 (unregistering): Released all slaves [ 249.815679][ T5813] bond5 (unregistering): Released all slaves [ 249.819543][ T5813] bond6 (unregistering): Released all slaves [ 249.862078][ T42] audit: type=1400 audit(2000000027.082:1184): avc: denied { write } for pid=13604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.907718][ T42] audit: type=1400 audit(2000000027.122:1185): avc: denied { write } for pid=13607 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.915465][ T5813] tipc: Disabling bearer [ 249.926523][ T5813] tipc: Disabling bearer [ 249.928705][ T5813] tipc: Left network mode [ 249.949110][ T5447] 8021q: adding VLAN 0 to HW filter on device eth10 [ 249.999832][ T42] audit: type=1400 audit(2000000027.212:1186): avc: denied { write } for pid=13610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.025471][ T42] audit: type=1400 audit(2000000027.242:1187): avc: denied { write } for pid=13613 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.046103][ T5447] 8021q: adding VLAN 0 to HW filter on device eth11 [ 250.091907][ T42] audit: type=1400 audit(2000000027.312:1188): avc: denied { write } for pid=13616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.117285][ T42] audit: type=1400 audit(2000000027.332:1189): avc: denied { write } for pid=13619 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.141711][ T5447] 8021q: adding VLAN 0 to HW filter on device eth12 [ 250.189620][ T42] audit: type=1400 audit(2000000027.402:1190): avc: denied { write } for pid=13622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.216896][ T42] audit: type=1400 audit(2000000027.432:1191): avc: denied { write } for pid=13625 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.237970][ T5447] 8021q: adding VLAN 0 to HW filter on device eth13 [ 250.258297][ T42] audit: type=1400 audit(2000000027.472:1192): avc: denied { write } for pid=13627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.429154][ T5813] hsr_slave_0: left promiscuous mode [ 250.433145][ T5813] hsr_slave_1: left promiscuous mode [ 250.435842][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.438938][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.443792][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.553143][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 250.563556][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 250.896783][ T5813] IPVS: stop unused estimator thread 0...