last executing test programs: 1.788992349s ago: executing program 0 (id=144): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, r1) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r1}) r2 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x1) read$FUSE(r4, &(0x7f0000001640)={0x2020}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d01, 0xec000000, 0x3}]}) ioctl$KVM_KVMCLOCK_CTRL(r7, 0xaead) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x6800) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x12, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r8, 0x4c09, 0x200) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 1.7288861s ago: executing program 0 (id=145): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000040)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) 1.728006986s ago: executing program 0 (id=146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x13, 0x80801) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffffd, 0x40, &(0x7f0000000140)={0x1, 0x14, 0x8, 0x2}, 0x8, 0xb, 0x200, 0x0, 0x0, 0xe2, 0x0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) recvmmsg(r3, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000001740)}, 0x200}], 0x1, 0x2022, &(0x7f0000001b40)) syz_genetlink_get_family_id$mptcp(&(0x7f0000001bc0), r3) r4 = accept4(r2, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$batadv(0x0, r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, 0x0, 0xc004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x0, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x4, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r7, 0x80480911, 0x200000000005) syz_genetlink_get_family_id$smc(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x4, 0x2, 0x101, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0xfd3, 0x86}}, 0xe8) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f00000000c0)={{{0x6, 0x1}}, 0xe6, 0x40, &(0x7f0000000340)="374db17b1a3f3518160b277ab5986c6b0ffec57532b6c5e200836b0f0110db0a48cce20bccf8670f25abbdb1f75605c7b42022a8fb484cb20640007cabd6ab2af1bb4383abf291c8a1282f5e6d02002e3850336b7108f61e6877c317e172025c99256adbf0f1f2b8d8693e71a7b61d7bfc9e3e1da89e418a1de3ef654814892e5870ba36294ce4728ca6a949cc4fbb2ffb2b055b044df515e0e9649f4a80bd6ca2f8d545a223c29cbb406a66acc0173c8142ebc5e3e233f139084471ed4a3634a84ce75cab39f493502bdfaba0ef3a5d352ba2ebb62feb7e23898655b2e164430139aa6cf336"}) setsockopt$inet_int(r9, 0x0, 0x31, &(0x7f000000e5c0), 0x4) 1.290448819s ago: executing program 3 (id=152): r0 = socket(0x11, 0x2, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x3d, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x38}}, 0x4048000) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000000)={0x8d, ""/141}) setsockopt(r0, 0x107, 0x2, &(0x7f00000001c0)="fcff00000100060000071a80010061cc", 0x10) 1.237080902s ago: executing program 3 (id=153): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r3 = dup3(r0, r2, 0x0) ioctl$CDROM_NEXT_WRITABLE(r1, 0x5394, &(0x7f0000000080)) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x400, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048001) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) (async) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xd281}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000481) (async, rerun: 64) ioctl$COMEDI_SETWSUBD(r1, 0x6411) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r6) (async) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x10, r3, 0x8000000) syz_io_uring_submit(r8, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2007, @fd=r1, 0x500, 0x7, 0x9, 0x1e, 0x0, {0x1}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x3}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000440)={r9, 0x1ff, 0x3d, "dbe9979c23d5f9192a443c40ab6068c52b7dacdfc6177d91378080f1b3ecd8436ae5e2c56fce0db23f6bd9c1ff633aafb078e37a23398e5ef2d42b2bf8"}, 0x45) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000004c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000500)={0x1, 0x1, [0x139, 0x0, 0xff, 0x3, 0x7, 0x0, 0x9, 0xfffffe16]}) (async, rerun: 64) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x18, r1}, 0x18) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/custom1\x00', 0x800, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000600)=""/20, &(0x7f0000000640)=0x14) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000740)=@multiplanar_mmap={0x897, 0x2, 0x4, 0x70000, 0x7, {r10, r11/1000+60000}, {0x3, 0x2, 0xca, 0x27, 0x89, 0x4, "a26d418f"}, 0x0, 0x1, {&(0x7f00000006c0)=[{0x3, 0x0, {0xd}, 0x2}, {0x5, 0x200, {0xff}, 0x2}]}, 0x5, 0x0, r2}) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) (rerun: 32) ppoll(&(0x7f00000007c0)=[{r0, 0x2080}, {r3, 0x14}, {r3, 0x80}], 0x3, &(0x7f0000000840)={r12, r13+10000000}, &(0x7f0000000880)={[0xfffffffffffffffe]}, 0x8) (async) r14 = syz_open_dev$sndpcmp(&(0x7f00000008c0), 0x6, 0x40000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r14, 0xc1004110, &(0x7f0000000900)={0x101, [0x10, 0x6, 0x9], [{0x7, 0x2e}, {0x8bc, 0x3, 0x1, 0x1, 0x1}, {0x4, 0x401, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x8, 0x1, 0x0, 0x1, 0x1}, {0xfffffff5, 0x5, 0x1, 0x0, 0x1}, {0x6, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7fffffff, 0x6, 0x1, 0x1}, {0x0, 0x80000001}, {0x8, 0x5}, {0x2d0c, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x5}], 0xb}) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x24}}, 0x40080d0) 1.180553001s ago: executing program 3 (id=154): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8000000003080101000000000000000003000009050003003a0000003c000480080002400000000008000240df05007b08400240000007ff08000240000000330800014000000000080001400000000508000140000000c10500030084161eb1205629da10272582e82e4ba866d4010df741aac47bec46ce6fe73a262dd94164a0c81d6fbd06984d74853a944d564c5992e3a135a9f40a405d984319a90f81274a64ab9a9c4c3fec6e49af8abbd5cf3a53d198"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9, @private2}]}, &(0x7f0000000180)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="00fb52d7fc3978952ebbf700000000000000cd010001004e61e00000000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r2}, 0x38) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x80}) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x4, 0xd4}, 0xaa) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_io_uring_setup(0x7301, &(0x7f0000000340)={0x0, 0x4d29, 0x4000, 0x1, 0x4}, &(0x7f0000000140), &(0x7f00000003c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x8010, r5, 0x10000000) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) ioctl$CDROM_SET_OPTIONS(r7, 0x5320, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r8 = userfaultfd(0x801) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') openat$cgroup_freezer_state(r6, &(0x7f0000000540), 0x2, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 1.098865216s ago: executing program 3 (id=156): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r2, 0x0) ftruncate(r2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') symlinkat(&(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00') (async) symlinkat(&(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000680)={0x7, 0x8, 0xfa00, {r5, 0x5}}, 0x10) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000080)={0x0, 0x55, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4c001}, 0x4040000) (async) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000080)={0x0, 0x55, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4c001}, 0x4040000) 1.033547632s ago: executing program 3 (id=158): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f0000000280)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r5, &(0x7f0000000200)='ns/time\x00') sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="38b14bd6a5d00a1e1761ffc87bc86ab98d2c60834a682a8356e80a55f41f97ffb43d758b329be5d6d7617f6a31f2cc2de412652d73ae0775704e79a061765debb4e17226a2dc80466b5bf347ac6e3ed4e48ad32cfc952f71e7e6aa", 0x5b}, {&(0x7f0000000580)="74ff00cd8df5f9824ad79457cac36a7adc50a0cf957f549055cb53d4c382295ab049d04f04623613990cc5308657802dc2bbe8c2b7306985fdce08864702f50d3c58dd7f59998830fdb8da9dd6ae646ae4724545dc18d796a108099fe89e01a314e4c37fed2d0c282c62b8b737e6efbebcf0a749ff677c39bbd1bdf1dec2fb1c39349cfeb5e4ab3f", 0x88}], 0x2, &(0x7f0000000680)=[{0xe8, 0x10f, 0x8, "5526b53e31d02705c4249c90a51858bed681521460ee97222739fdf24cc3ca3bc148ea9ef895e98fa3d56600ed1aaa40f6ec16a937470dad6671b4854cd6da5920e0787e73cae1604897a02e0aafa41aa6c662d7c777cc7a86542908d7ae6a220323175f833c002e46e89d8eeee8770642bd3f6a139eb2ee552f60d1203503bd4c50ced3ffb82ee44de8e08916dd4c37eaa1ba909c5ba9771f4c73cf4f3d3e5f8a06a02e5fc5f16b76ebec926ba2443e5afa79bb81e78f31d13060b71338218a28a7dd8b7841de6f28a2c2344f18e2f8fd70a9d2add7b6fa"}], 0xe8}}], 0x1, 0xc5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="34000000065714075940d93fa61f5d1fe72c81e2dccf9d1951105c9f19514bb8875434e081653ee88dc5cc400fc03c6e943f3b4e11df7e843ea683fd9c03d38a89a694597432cace79615536791baeb0b3214c5e097dd7e1eaf597d3806f8ac41645c2dfeb8d80190a2b3fc9e0236e74825c734684458d", @ANYRES16=r9, @ANYBLOB="010028bd7000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="bd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000004) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000100)={0x18, 0x0, {0x1, @remote, 'ip_vti0\x00'}}, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x901891cbff212725, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) ioctl$PPPOEIOCSFWD(r12, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'team_slave_1\x00'}}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@getchain={0x2c, 0x66, 0x10, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0x6}, {0x1, 0xc}, {0xf, 0xfff1}}, [{0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x200480d0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000880)=[@ioring_restriction_register_op={0x0, 0xc}, @ioring_restriction_register_op={0x0, 0x2}, @ioring_restriction_sqe_op={0x1, 0x2}, @ioring_restriction_sqe_op={0x1, 0x4}], 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 820.141846ms ago: executing program 0 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000001}) epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x50102, 0x0) sendmsg$netlink(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001e00d7"], 0x24}], 0x1, 0x0, 0x0, 0x4040094}, 0x24000044) 719.304486ms ago: executing program 0 (id=162): syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x65, 0x63}, "f1db7aa4dde9b3124004e859a4c3b2651069a2ff3fb824c9278067da405eacf87fd7d17d7aee4dc05a722d67e75874433a4cdcfef663c1c65627fc7a2d0da5f5e47e0b381108e074fbeb9b651104a04f6d0d675797377ce0bc15b24370dc9cddea4579"}, 0x67) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@none}}}, 0xa) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd}, "979fe01b17fdd40efad59bd941"}, 0x11) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x6}}}, 0x4) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x69}, @l2cap_cid_signaling={{0x65}, [@l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x8, 0x2c5, 0x3}}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0xfffa}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x8, 0x9, 0x7}}, @l2cap_move_chan_rsp={{0xf, 0x2, 0x4}, {0xdf5b, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x3, 0x5}}, @l2cap_conf_rsp={{0x5, 0x0, 0x33}, {0x3, 0x3, 0x5, [@l2cap_conf_mtu={0x1, 0x2, 0xc5ed}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x2, 0xa, 0xfffc, 0x5, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0xf, 0x1, 0xe, 0x9, 0x5000, 0xe}}, @l2cap_conf_ews={0x7, 0x2}]}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x80}}]}}, 0x6e) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) r0 = userfaultfd(0x800) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000001240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001340)={'syzkaller1\x00', &(0x7f0000001280)=@ethtool_rx_ntuple={0x35, {0xe, @usr_ip4_spec={@broadcast, @local, 0xc37, 0x8, 0x1, 0xfd}, @ether_spec={@multicast, @multicast, 0x7}, 0x1, 0xf99f, 0x3, 0x2, 0xfffffffffffffffe}}}) read$FUSE(0xffffffffffffffff, &(0x7f0000001380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) move_pages(r2, 0x1, &(0x7f00000033c0)=[&(0x7f0000ffb000/0x1000)=nil], &(0x7f0000003400)=[0x0], &(0x7f0000003440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) syz_emit_vhci(&(0x7f0000003480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa0}, "63afb08c3db54c39a355f9eae0578ee6a005b351cfb454e0c8b5f2dbfe52b7a2b9e04828d68d6ef14912065e9948bd3ceb10d87b43e33e2a23383bc61e1bc3b9d68be74dfe08cf0f37bb3240d3bdaaec93789a56268149a4807dcb84e292c28d405f546055e987de369341b9208fd5fb1818f0742686a3f0faad713c9c1d3589978b67d10af01ec997672f76fba5f95ac424d2940dece5ff4d5f846b31050aea"}, 0xa4) syz_emit_vhci(&(0x7f0000003540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xb, 0xa}, {0x3, 0x7, 0x1000, 0x5a4c, 0x4}}}}, 0x17) syz_emit_vhci(&(0x7f0000003580)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000035c0)=0x1, 0x4) io_uring_setup(0x1d82, &(0x7f0000003600)={0x0, 0x291e, 0x8000, 0x3, 0x84}) r3 = syz_open_dev$evdev(&(0x7f0000003680), 0xd, 0x2000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f00000036c0)=""/247) syz_emit_vhci(&(0x7f00000037c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xae}, "68fe9dde79ffb1a1f29ff8cbf62ce1a67f4217c62b0149e53f4feccce367358c8875579de02bd4ed38796dbc01794cf347a137d84eb42897654494c057f3874619ab1df485ee0451f0e599f61d3291896c0dd47622b93c1cc9e3e7a1ff868efe18ab581f5096029b9a0a63b48cb8506f2c7dd13fcde461e9735c13a10ef0be20a06aafc4c7f57d52d8dc700304b415ea4696708fa6811ddbadde0cc05ef11e910f87baa5e2758e1195ad2c7c9a3c"}, 0xb2) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000003880)=0x4) shmget$private(0x0, 0xd000, 0x1, &(0x7f0000ff3000/0xd000)=nil) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000003940)={0xa, &(0x7f00000038c0)=[{0x4a2, 0x9, 0x6, 0x4}, {0x0, 0x1, 0x1, 0x80000000}, {0x0, 0x3, 0x4d, 0x10c1}, {0x1, 0x2, 0x9, 0x7}, {0x6, 0x6, 0xe, 0xcd88}, {0xc000, 0x7, 0x9, 0x100}, {0x8, 0x6, 0x2, 0x200}, {0xf, 0x1d, 0xe8, 0x2}, {0x91e, 0x2, 0xa, 0x9}, {0x1, 0x8, 0x0, 0xc6}]}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003980), r4) syz_genetlink_get_family_id$ethtool(&(0x7f00000039c0), r4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000003a00), 0x260000, 0x0) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000003ac0)=[@text32={0x20, &(0x7f0000003a40)="dbe0c4c3716c830b0000007cb9dd0b00000f3266b817018ed066baf80cb8220f4189ef66bafc0c66b8468566ef0f20d835200000000f22d826670f01d1b91d090000b883000000ba000000000f3066b831018ee8660fc731", 0x58}], 0x1, 0x13, &(0x7f0000003b00)=[@dstype0={0x6, 0x4}], 0x1) 562.209779ms ago: executing program 0 (id=166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17}}, 0x18}, 0x1, 0x0, 0x0, 0x2004c040}, 0x49d2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x200400c0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0xb000, 0x0, 0xe2fa, 0x9, 0x0, [{0x7, 0xdd, 0x2}, {0x9, 0x0, 0x1, '\x00', 0x4}, {0x3, 0x0, 0x1, '\x00', 0x1}, {0x8, 0xb, 0x4, '\x00', 0x7}, {0x0, 0x6, 0xf3, '\x00', 0x4b}, {0x1, 0x5, 0x1, '\x00', 0x2f}, {0x3, 0x64, 0x5, '\x00', 0x5}, {0x90, 0x40, 0x6, '\x00', 0x2}, {0x0, 0x4, 0x7, '\x00', 0x8}, {0x2, 0x82, 0x0, '\x00', 0x4}, {0xb, 0x9, 0xf9, '\x00', 0x1}, {0x7, 0x0, 0x10, '\x00', 0xf}, {0xff, 0x3, 0x3, '\x00', 0x4}, {0x8, 0x5, 0xfd, '\x00', 0x95}, {0x6, 0x9, 0x6, '\x00', 0x7}, {0x2, 0x8, 0x47, '\x00', 0xff}, {0x8, 0x8, 0xb, '\x00', 0x4d}, {0xc, 0x7, 0x6, '\x00', 0x2}, {0x6, 0x4a, 0x3c, '\x00', 0x6}, {0xfa, 0x6, 0x5, '\x00', 0x1}, {0x2, 0xff, 0x8, '\x00', 0x2}, {0x7, 0x3, 0x8, '\x00', 0xd}, {0x1d, 0x10, 0x3, '\x00', 0x9e}, {0x5, 0x6, 0x9, '\x00', 0x8}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 561.921803ms ago: executing program 2 (id=168): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x100}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0xfe06, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x90}, 0x0) io_setup(0x973, &(0x7f0000000380)=0x0) r3 = eventfd2(0x0, 0x0) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_getevents(r2, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) 398.394982ms ago: executing program 1 (id=169): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/timer_list\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mremap(&(0x7f0000169000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00005db000/0x3000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mlock(&(0x7f00001fe000/0x1000)=nil, 0x1000) 396.200069ms ago: executing program 1 (id=170): socket(0x840000000002, 0x3, 0xff) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x10300, 0x0) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="a9050000000074640006000000003552bd078064", 0x14}, {0x0}], 0x2}}], 0x1, 0x0) 330.195309ms ago: executing program 2 (id=171): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ufs\x00', 0x204009, 0x0) fchdir(r3) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) 329.828699ms ago: executing program 1 (id=172): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="010202000080000034001280090001007866726d0000000024000280080001000000000008000100030000000800010003000000080001000400000024fe1300", @ANYRES32=r1, @ANYBLOB="8391bd51c6646a39d58022716e13e73348397b782fe2f38241af57a067c29d9e7c50aba1037a93155e5d853387a90a99a112d2393867ba1d8a"], 0x5c}}, 0x8000) 265.538279ms ago: executing program 1 (id=173): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(0x0, &(0x7f0000000300)='./file3\x00', &(0x7f00000000c0)='pvfs2\x00', 0x0, &(0x7f0000000380)='acl') socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x3], 0x5, 0x14, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x40044160, 0x3) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000100039042ccc7000f6ffffffffffffff56845632db664c44046a1037c3d84ced668cd2349ebba04b83d012b80ad79beffa6f9c1cd4e80954117f11e41ce6872cbb2ffec612c9f6ce409ad2c2161471bb8bdd5e38f6f0abd81f70144e0d61bdd14311d7b987846679475f519d409aebff222d6de05cddc741a440d6b63e18", @ANYRES32=r4, @ANYBLOB="0198000003430200"], 0x20}}, 0x24000004) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r11, &(0x7f0000000040)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x75, 0x40000, {r11}}, 0x20) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 195.605457ms ago: executing program 2 (id=174): r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x1, 0x10, 0x3, 0xf9b}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r2, 0x6}, 0x8) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x94) 194.436235ms ago: executing program 2 (id=175): madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) (async) 90.150425ms ago: executing program 1 (id=176): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x804, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d766961317710696f2c6d73697a653d3078303030303030303030303030643037342c0000"]) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0xf8ab52690d89ff83) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000100)=0x4) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) prctl$PR_SET_SECUREBITS(0x1c, 0x25) (async) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) syz_emit_ethernet(0x51, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x1b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1, "a78ce54006598080a8"}]}}}}}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async, rerun: 32) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) (async) capget(&(0x7f0000000240)={0x20080522, r2}, &(0x7f0000000280)={0x8, 0x240, 0x3, 0x7, 0x7fffffff, 0x3}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) (async) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x3, 0x4) 89.519716ms ago: executing program 2 (id=177): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x246000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0xffff) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x88}}, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000100)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000d0b000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="8fc9e8994e0db805000000b9b70000000f01c1c4c17d1146008fc978d2bc1682940000660f38812e0f781e660f38828c550700000036672e36f0802222f30f1eec66ba4300b0f0ee", 0x48}], 0x1, 0x0, 0x0, 0x0) 88.805165ms ago: executing program 3 (id=178): r0 = socket$pppoe(0x18, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="1b308c420000000700", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc) r3 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='jffs2\x00', 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, &(0x7f0000000000)=ANY=[@ANYBLOB="73697a653d35bb0c00"]) setxattr$trusted_overlay_redirect(&(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80), &(0x7f0000001ac0)='./file0\x00', 0x8, 0x3) syz_emit_ethernet(0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c220000000020011907800000000000000008303bb0000000000000890780000000001040000000000000000"], 0x0) r4 = socket$unix(0x1, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003080)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x301900, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001b40), 0x400, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000200)=0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000001b00)=0x80000) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e05040f20"], 0x7) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010000100000000000000020000000000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) pselect6(0x95, &(0x7f00000001c0)={0x3f, 0xffffffffffffff7e, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x3, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0) 401.107µs ago: executing program 1 (id=179): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89457ef57d9870ded755f449979184f760cca72809061475982a9b1ba828b5ec9eab4a2218594f2d528099f987be79aefba780323b51ead5d78078777da4c28d1e3d961bcb0b51b112cc7e5398ccc58878cf2c2f9ab595b19f069881e7dff752e990bf5080c33e87b37ebfbbb7ace52a0345ddd2ed4d7194074efb8581a677c2c7ecf2a9ba0b10e407662d70", 0x8c}, {&(0x7f0000000200)="cce1dc9d9b6afce225e6482eedd2384d394b8397b6451ea00100000000000000302b22abc65da9a7dafd91ae", 0xffffffffffffffec}, {&(0x7f0000000140)="8af9885c94965bee53e1851ef47b25b27d1417475d211075976ddd7bd05245d835002b99", 0x24}, {&(0x7f0000000340)="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", 0x1000}], 0x4) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0xcc20, @empty}, 0x10) listen(r0, 0x3) 0s ago: executing program 2 (id=180): r0 = socket(0xa, 0x80000, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @empty, 0x9}, 0x1c) (async) r1 = socket(0xa, 0x1, 0x0) (async) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x20800, 0x20) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) sendto$inet(r3, 0x0, 0x0, 0x200047f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) kernel console output (not intermixed with test programs): [ 43.975515][ T40] audit: type=1400 audit(1773770214.991:60): avc: denied { rlimitinh } for pid=5841 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.981682][ T40] audit: type=1400 audit(1773770214.991:61): avc: denied { siginh } for pid=5841 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:30434' (ED25519) to the list of known hosts. [ 45.954788][ T40] audit: type=1400 audit(1773770216.991:62): avc: denied { name_bind } for pid=5912 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.982112][ T40] audit: type=1400 audit(1773770217.011:63): avc: denied { execute } for pid=5913 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.991404][ T40] audit: type=1400 audit(1773770217.021:64): avc: denied { execute_no_trans } for pid=5913 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.283215][ T40] audit: type=1400 audit(1773770219.321:65): avc: denied { mounton } for pid=5913 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.296093][ T5913] cgroup: Unknown subsys name 'net' [ 48.298487][ T40] audit: type=1400 audit(1773770219.331:66): avc: denied { mount } for pid=5913 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.459510][ T5913] cgroup: Unknown subsys name 'cpuset' [ 48.464374][ T5913] cgroup: Unknown subsys name 'rlimit' [ 48.678185][ T5922] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.447450][ T5913] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.662152][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 52.662164][ T40] audit: type=1400 audit(1773770223.691:82): avc: denied { execmem } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.816832][ T40] audit: type=1400 audit(1773770223.841:83): avc: denied { create } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.836169][ T40] audit: type=1400 audit(1773770223.841:84): avc: denied { read write } for pid=5932 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.840158][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.841617][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.843054][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.843261][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.844964][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.846194][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.848974][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.849648][ T40] audit: type=1400 audit(1773770223.841:85): avc: denied { open } for pid=5932 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.849688][ T40] audit: type=1400 audit(1773770223.861:86): avc: denied { ioctl } for pid=5932 comm="syz-executor" path="socket:[5833]" dev="sockfs" ino=5833 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.852855][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.854286][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.856962][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.860813][ T40] audit: type=1400 audit(1773770223.901:87): avc: denied { read } for pid=5932 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.861826][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.867460][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.868880][ T40] audit: type=1400 audit(1773770223.901:88): avc: denied { open } for pid=5932 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.868905][ T40] audit: type=1400 audit(1773770223.901:89): avc: denied { mounton } for pid=5932 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.883513][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.886382][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.888395][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.896255][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.897608][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.902554][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.921078][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.931103][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.074514][ T40] audit: type=1400 audit(1773770224.111:90): avc: denied { module_request } for pid=5932 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.113999][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 53.142246][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 53.225052][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 53.289185][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 53.297272][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.299659][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.302681][ T5932] bridge_slave_0: entered allmulticast mode [ 53.305422][ T5932] bridge_slave_0: entered promiscuous mode [ 53.309062][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.311378][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.313944][ T5932] bridge_slave_1: entered allmulticast mode [ 53.316628][ T5932] bridge_slave_1: entered promiscuous mode [ 53.323219][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.325613][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.327920][ T5940] bridge_slave_0: entered allmulticast mode [ 53.330683][ T5940] bridge_slave_0: entered promiscuous mode [ 53.339724][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.342300][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.344675][ T5940] bridge_slave_1: entered allmulticast mode [ 53.347300][ T5940] bridge_slave_1: entered promiscuous mode [ 53.403516][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.412951][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.422748][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.454247][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.466533][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.469148][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.471507][ T5936] bridge_slave_0: entered allmulticast mode [ 53.475062][ T5936] bridge_slave_0: entered promiscuous mode [ 53.478675][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.481595][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.485051][ T5936] bridge_slave_1: entered allmulticast mode [ 53.488174][ T5936] bridge_slave_1: entered promiscuous mode [ 53.494402][ T5932] team0: Port device team_slave_0 added [ 53.527040][ T5932] team0: Port device team_slave_1 added [ 53.537315][ T5940] team0: Port device team_slave_0 added [ 53.541698][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.545437][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.548648][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.551001][ T5946] bridge_slave_0: entered allmulticast mode [ 53.554374][ T5946] bridge_slave_0: entered promiscuous mode [ 53.559539][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.561890][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.565524][ T5946] bridge_slave_1: entered allmulticast mode [ 53.569456][ T5946] bridge_slave_1: entered promiscuous mode [ 53.581415][ T5940] team0: Port device team_slave_1 added [ 53.585903][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.603737][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.606035][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.614461][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.636641][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.639018][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.649083][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.661702][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.664321][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.675339][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.680585][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.683266][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.694265][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.720009][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.728753][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.732879][ T5936] team0: Port device team_slave_0 added [ 53.736044][ T5936] team0: Port device team_slave_1 added [ 53.779220][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.781487][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.789714][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.799216][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.801489][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.809778][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.815003][ T5946] team0: Port device team_slave_0 added [ 53.826009][ T5946] team0: Port device team_slave_1 added [ 53.840800][ T5932] hsr_slave_0: entered promiscuous mode [ 53.843346][ T5932] hsr_slave_1: entered promiscuous mode [ 53.850407][ T5940] hsr_slave_0: entered promiscuous mode [ 53.853796][ T5940] hsr_slave_1: entered promiscuous mode [ 53.856677][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 53.859156][ T5940] Cannot create hsr debugfs directory [ 53.887371][ T5936] hsr_slave_0: entered promiscuous mode [ 53.889721][ T5936] hsr_slave_1: entered promiscuous mode [ 53.892137][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 53.894031][ T5936] Cannot create hsr debugfs directory [ 53.921873][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.924944][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.935232][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.945786][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.948710][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.957463][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.106114][ T5946] hsr_slave_0: entered promiscuous mode [ 54.108723][ T5946] hsr_slave_1: entered promiscuous mode [ 54.111154][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 54.114781][ T5946] Cannot create hsr debugfs directory [ 54.263638][ T5932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.277551][ T5932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.287016][ T5932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.296588][ T5932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.344956][ T5940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.353106][ T5940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.358816][ T5940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.365065][ T5940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.427869][ T5936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.434752][ T5936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.440971][ T5936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.448309][ T5936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.495696][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.538788][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.545373][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.551511][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.558554][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.566594][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.569838][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.579594][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.593856][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.596211][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.607077][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.647178][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.672361][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.674808][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.696430][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.699147][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.740752][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.743902][ T40] audit: type=1400 audit(1773770225.781:91): avc: denied { sys_module } for pid=5932 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.769585][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.774863][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.798152][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.800539][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.807296][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.820020][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.823233][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.828612][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.831683][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.837617][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.840753][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.903787][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.914257][ T5939] Bluetooth: hci2: command tx timeout [ 54.914264][ T5944] Bluetooth: hci0: command tx timeout [ 54.942718][ T5932] veth0_vlan: entered promiscuous mode [ 54.950664][ T5932] veth1_vlan: entered promiscuous mode [ 54.980679][ T5932] veth0_macvtap: entered promiscuous mode [ 54.988226][ T5932] veth1_macvtap: entered promiscuous mode [ 54.995035][ T5939] Bluetooth: hci3: command tx timeout [ 54.997670][ T5939] Bluetooth: hci1: command tx timeout [ 55.011652][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.021381][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.027108][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.040503][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.047054][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.052512][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.062005][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.096960][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.124628][ T5940] veth0_vlan: entered promiscuous mode [ 55.129807][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.151190][ T5940] veth1_vlan: entered promiscuous mode [ 55.161788][ T1207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.166758][ T1207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.198590][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.199022][ T5946] veth0_vlan: entered promiscuous mode [ 55.201137][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.223940][ T5946] veth1_vlan: entered promiscuous mode [ 55.231140][ T5940] veth0_macvtap: entered promiscuous mode [ 55.243981][ T5940] veth1_macvtap: entered promiscuous mode [ 55.249977][ T5932] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.258472][ T5936] veth0_vlan: entered promiscuous mode [ 55.271410][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.279696][ T5936] veth1_vlan: entered promiscuous mode [ 55.296099][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.299520][ T5946] veth0_macvtap: entered promiscuous mode [ 55.309518][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.315722][ T5946] veth1_macvtap: entered promiscuous mode [ 55.323038][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.326883][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.334356][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.350092][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.370427][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.375355][ T6019] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.391734][ T6019] unsupported nla_type 4111 [ 55.409073][ T92] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.413765][ T92] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.417440][ T92] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.420759][ T92] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.428044][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.430597][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.433716][ T5936] veth0_macvtap: entered promiscuous mode [ 55.438273][ T5936] veth1_macvtap: entered promiscuous mode [ 55.461482][ T6021] syz.2.5 uses obsolete (PF_INET,SOCK_PACKET) [ 55.466901][ T1207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.470011][ T1207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.476748][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.495114][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.506377][ T92] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.509162][ T92] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.511914][ T92] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.529083][ T92] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.535773][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.552458][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.599654][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.602347][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.628022][ T1207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.631606][ T1207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.675544][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.678877][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.860419][ T6038] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.864699][ T6038] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.322702][ T5992] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.466669][ T6095] netlink: 'syz.3.20': attribute type 4 has an invalid length. [ 56.494833][ T5992] usb 7-1: Using ep0 maxpacket: 8 [ 56.499263][ T5992] usb 7-1: config 255 has an invalid interface number: 184 but max is 1 [ 56.502131][ T5992] usb 7-1: config 255 has no interface number 1 [ 56.505042][ T5992] usb 7-1: config 255 interface 184 altsetting 10 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 56.508734][ T5992] usb 7-1: config 255 interface 184 altsetting 10 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 56.513231][ T5992] usb 7-1: config 255 interface 184 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 56.517291][ T5992] usb 7-1: config 255 interface 184 altsetting 10 has a duplicate endpoint with address 0x4, skipping [ 56.522937][ T5992] usb 7-1: config 255 interface 0 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 56.526680][ T5992] usb 7-1: config 255 interface 0 altsetting 4 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 56.530637][ T5992] usb 7-1: config 255 interface 0 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 56.535366][ T5992] usb 7-1: config 255 interface 0 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 56.542010][ T5992] usb 7-1: config 255 interface 0 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 56.545659][ T6099] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.546017][ T5992] usb 7-1: config 255 interface 184 has no altsetting 0 [ 56.551727][ T6099] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.562984][ T5992] usb 7-1: config 255 interface 0 has no altsetting 0 [ 56.568592][ T5992] usb 7-1: Dual-Role OTG device on HNP port [ 56.570757][ T5992] usb 7-1: New USB device found, idVendor=0af0, idProduct=6600, bcdDevice=5d.f0 [ 56.574220][ T5992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.576782][ T5992] usb 7-1: Product: syz [ 56.578154][ T5992] usb 7-1: Manufacturer: 涬陏꨸鴥ꞎ쾵鎦㢼죘觫稃룚旁춆ꖽ쟿ɝ䩫鍱ꈤꖲ䧚㨃剘ﾡ㡁ꑒ应莓礶␑⤪弳㞗罁㼓쒰둁쉄ἶ怕ﲞ긕꜆ᗗ덭盷ᾡ궞俳葍皋鐣䷙㎱⇲툈튜㠴㋄᫪题咯찥矕⵵簦ꂗᰮ曠莬﷜﫞篣촜倄諊ꖌ䶦ꚫ邑梇쪲྆㡧퐦ⴂ摴完⦔奰귋ꚭጩ眰涁壘ƽ鯞肏☫퇤ᮀ [ 56.590392][ T5992] usb 7-1: SerialNumber: syz [ 56.707296][ T6108] syzkaller0: entered promiscuous mode [ 56.709625][ T6108] syzkaller0: entered allmulticast mode [ 56.714585][ T6110] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.25'. [ 56.759114][ T6113] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 56.805217][ T6119] cgroup: Name too long [ 56.818230][ T5992] option 7-1:255.184: GSM modem (1-port) converter detected [ 56.829417][ T5992] option 7-1:255.0: GSM modem (1-port) converter detected [ 56.836649][ T5992] usb 7-1: USB disconnect, device number 2 [ 56.846358][ T5992] option 7-1:255.184: device disconnected [ 56.849203][ T6123] netlink: 'syz.3.29': attribute type 4 has an invalid length. [ 56.851080][ T5992] option 7-1:255.0: device disconnected [ 56.857325][ T6123] Illegal XDP return value 4294967262 on prog (id 4) dev N/A, expect packet loss! [ 56.914471][ T6125] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 56.925192][ T6125] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 56.933728][ T6125] fuse: Bad value for 'fd' [ 56.993859][ T5939] Bluetooth: hci2: command tx timeout [ 56.993874][ T5944] Bluetooth: hci0: command tx timeout [ 57.008274][ T6127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=6127 comm=syz.3.31 [ 57.070924][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.082141][ T5939] Bluetooth: hci1: command tx timeout [ 57.082152][ T5944] Bluetooth: hci3: command tx timeout [ 57.372123][ T5992] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 57.389409][ T6137] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.393970][ T6137] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.486243][ T6140] loop2: detected capacity change from 0 to 3 [ 57.492967][ T6140] ldm_validate_privheads(): Disk read failed. [ 57.495931][ T6140] Dev loop2: unable to read RDB block 3 [ 57.498339][ T6140] loop2: unable to read partition table [ 57.500890][ T6140] loop2: partition table beyond EOD, truncated [ 57.506378][ T5992] usb 8-1: device descriptor read/64, error -71 [ 57.509173][ T6140] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 57.559211][ T6142] sch_fq: defrate 4294967295 ignored. [ 57.695134][ T40] kauditd_printk_skb: 84 callbacks suppressed [ 57.695150][ T40] audit: type=1400 audit(1773770228.731:176): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.740733][ T40] audit: type=1400 audit(1773770228.771:177): avc: denied { create } for pid=6148 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.748249][ T40] audit: type=1400 audit(1773770228.771:178): avc: denied { connect } for pid=6148 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.762214][ T5992] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 57.829116][ T40] audit: type=1400 audit(1773770228.861:179): avc: denied { read } for pid=6155 comm="syz.2.40" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.833438][ T6156] Zero length message leads to an empty skb [ 57.837970][ T40] audit: type=1400 audit(1773770228.861:180): avc: denied { open } for pid=6155 comm="syz.2.40" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.848585][ T40] audit: type=1400 audit(1773770228.861:181): avc: denied { ioctl } for pid=6155 comm="syz.2.40" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.856691][ T40] audit: type=1400 audit(1773770228.861:182): avc: denied { create } for pid=6155 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 57.863722][ T40] audit: type=1400 audit(1773770228.861:183): avc: denied { write } for pid=6155 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 57.870405][ T40] audit: type=1400 audit(1773770228.881:184): avc: denied { read } for pid=6155 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 57.897597][ T40] audit: type=1400 audit(1773770228.931:185): avc: denied { map } for pid=6157 comm="syz.2.41" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.903288][ T5992] usb 8-1: device descriptor read/64, error -71 [ 58.022952][ T5992] usb usb8-port1: attempt power cycle [ 58.025110][ T6158] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.039117][ T6158] No source specified [ 58.097025][ T6163] kvm: pic: non byte write [ 58.322191][ T6169] process 'syz.2.44' launched './file2' with NULL argv: empty string added [ 58.372152][ T5992] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 58.406545][ T5992] usb 8-1: device descriptor read/8, error -71 [ 58.464002][ T6188] xt_hashlimit: size too large, truncated to 1048576 [ 58.604611][ T6192] netlink: 64 bytes leftover after parsing attributes in process `syz.1.49'. [ 58.610948][ T6192] sch_fq: defrate 7 ignored. [ 58.652121][ T5992] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 58.673947][ T5992] usb 8-1: device descriptor read/8, error -71 [ 58.700268][ T6194] "syz.1.50" (6194) uses obsolete ecb(arc4) skcipher [ 58.793232][ T5992] usb usb8-port1: unable to enumerate USB device [ 58.827038][ T6205] Bluetooth: MGMT ver 1.23 [ 58.829245][ T6205] Bluetooth: hci0: unsupported parameter 255 [ 58.831868][ T6205] Bluetooth: hci0: unsupported parameter 255 [ 58.832201][ T6003] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.993441][ T6216] capability: warning: `syz.1.55' uses deprecated v2 capabilities in a way that may be insecure [ 58.997882][ T6216] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.012139][ T6003] usb 7-1: Using ep0 maxpacket: 8 [ 59.023218][ T6003] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 59.026253][ T6003] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.028804][ T6003] usb 7-1: Product: syz [ 59.030292][ T6003] usb 7-1: Manufacturer: syz [ 59.031935][ T6003] usb 7-1: SerialNumber: syz [ 59.034892][ T6003] usb 7-1: config 0 descriptor?? [ 59.057735][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 59.072690][ T5944] Bluetooth: hci2: command tx timeout [ 59.072698][ T5939] Bluetooth: hci0: command tx timeout [ 59.101629][ T6224] ======================================================= [ 59.101629][ T6224] WARNING: The mand mount option has been deprecated and [ 59.101629][ T6224] and is ignored by this kernel. Remove the mand [ 59.101629][ T6224] option from the mount to silence this warning. [ 59.101629][ T6224] ======================================================= [ 59.152167][ T5944] Bluetooth: hci3: command tx timeout [ 59.162142][ T5944] Bluetooth: hci1: command tx timeout [ 59.239762][ T6003] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 59.247737][ T6228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=6228 comm=syz.0.60 [ 59.400491][ T6239] binder: 6238:6239 ioctl 4004662b 200000000180 returned -22 [ 59.445917][ T6003] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 59.450960][ T6242] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 59.453637][ T6003] usb 7-1: USB disconnect, device number 3 [ 59.496756][ T6244] MINIX-fs: blocksize too small for device [ 59.838107][ T6258] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 60.128926][ T6277] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 60.172311][ T6258] nbd0: detected capacity change from 0 to 63 [ 60.813196][ T5939] block nbd0: Receive control failed (result -104) [ 60.813499][ T5944] block nbd0: Receive control failed (result -32) [ 60.899564][ T6307] tmpfs: Bad value for 'mpol' [ 60.979054][ T6313] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 60.982013][ T6313] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 60.986439][ T6313] vhci_hcd vhci_hcd.0: Device attached [ 60.991468][ T6313] vhci_hcd vhci_hcd.0: port 0 already used [ 60.995077][ T6315] vhci_hcd: connection closed [ 60.996180][ T61] vhci_hcd vhci_hcd.0: stop threads [ 61.000631][ T61] vhci_hcd vhci_hcd.0: release socket [ 61.012623][ T61] vhci_hcd vhci_hcd.0: disconnect device [ 61.056478][ T6326] pim6reg: entered allmulticast mode [ 61.060891][ T6326] pim6reg: left allmulticast mode [ 61.152107][ T5944] Bluetooth: hci0: command tx timeout [ 61.162449][ T5944] Bluetooth: hci2: command tx timeout [ 61.214598][ T6343] netlink: 'syz.1.96': attribute type 10 has an invalid length. [ 61.218005][ T6343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.96'. [ 61.234208][ T5944] Bluetooth: hci1: command tx timeout [ 61.234251][ T5939] Bluetooth: hci3: command tx timeout [ 61.329785][ T6350] netlink: 'syz.1.98': attribute type 9 has an invalid length. [ 61.335625][ T6350] netlink: 'syz.1.98': attribute type 11 has an invalid length. [ 61.339046][ T6350] netlink: 'syz.1.98': attribute type 12 has an invalid length. [ 61.342625][ T6350] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.98'. [ 61.346894][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'. [ 61.426354][ T6359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'. [ 61.453080][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.495009][ T6364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.498964][ T6364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.563704][ T6377] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 61.567952][ T6377] SELinux: failed to load policy [ 61.575070][ T6369] netlink: 164 bytes leftover after parsing attributes in process `syz.2.105'. [ 61.590415][ T6380] netlink: 'syz.3.108': attribute type 29 has an invalid length. [ 61.594297][ T6380] netlink: 'syz.3.108': attribute type 3 has an invalid length. [ 61.597277][ T6380] netlink: 76 bytes leftover after parsing attributes in process `syz.3.108'. [ 61.732059][ T5972] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 61.779804][ T6393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.114'. [ 61.883223][ T5972] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 61.888330][ T5972] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.892587][ T5972] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.897275][ T5972] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.900945][ T5972] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.908844][ T5972] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.912926][ T5972] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.918342][ T5972] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.922598][ T5972] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.927180][ T5972] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.930851][ T5972] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.935122][ T5972] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.939734][ T5972] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.943735][ T5972] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.947429][ T5972] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.952166][ T5972] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.962337][ T5972] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.966259][ T5972] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.970961][ T5972] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.974880][ T5972] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.978592][ T5972] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.980324][ T6405] netlink: 'syz.0.117': attribute type 1 has an invalid length. [ 61.982123][ T5972] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.982888][ T5972] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.989808][ T5972] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.993282][ T5972] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.994494][ T6405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.996849][ T5972] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 62.000185][ T5972] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 62.002857][ T5972] usb 6-1: Product: syz [ 62.004205][ T5972] usb 6-1: Manufacturer: syz [ 62.005782][ T5972] usb 6-1: SerialNumber: syz [ 62.008560][ T5972] usb 6-1: config 0 descriptor?? [ 62.016822][ T5972] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 62.046003][ T6405] bond1: (slave ip6gretap1): making interface the new active one [ 62.049472][ T6405] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 62.214691][ T5972] usb 6-1: USB disconnect, device number 2 [ 62.220370][ T5972] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 62.244645][ T6413] overlayfs: missing 'workdir' [ 62.448804][ T6427] netlink: 80 bytes leftover after parsing attributes in process `syz.0.122'. [ 62.454810][ T6427] comedi comedi3: comedi_config --init_data is deprecated [ 62.522005][ T5972] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 62.677735][ T5972] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 62.684911][ T5972] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.688738][ T5972] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.692360][ T5972] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.695784][ T5972] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.698546][ T5972] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.702320][ T5972] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.705440][ T5972] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.708350][ T5972] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.711854][ T5972] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.714965][ T5972] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.717725][ T5972] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.721438][ T5972] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.725696][ T5972] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.729420][ T5972] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.734130][ T5972] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.737622][ T5972] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.740669][ T5972] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.745234][ T5972] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.749082][ T5972] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.753361][ T5972] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.756847][ T5972] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.759698][ T5972] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.762973][ T5972] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.766696][ T5972] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.770303][ T5972] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 62.773791][ T5972] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 62.777450][ T5972] usb 7-1: Product: syz [ 62.778877][ T5972] usb 7-1: Manufacturer: syz [ 62.780386][ T5972] usb 7-1: SerialNumber: syz [ 62.783865][ T5972] usb 7-1: config 0 descriptor?? [ 62.790499][ T5972] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 62.795465][ T40] kauditd_printk_skb: 118 callbacks suppressed [ 62.795478][ T40] audit: type=1400 audit(1773770233.841:304): avc: denied { sqpoll } for pid=6444 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 62.905459][ T40] audit: type=1400 audit(1773770233.941:305): avc: denied { read } for pid=6452 comm="syz.3.130" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 62.915789][ T40] audit: type=1400 audit(1773770233.941:306): avc: denied { open } for pid=6452 comm="syz.3.130" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 62.938247][ T40] audit: type=1400 audit(1773770233.961:307): avc: denied { create } for pid=6452 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 62.944702][ T40] audit: type=1400 audit(1773770233.961:308): avc: denied { ioctl } for pid=6452 comm="syz.3.130" path="socket:[11051]" dev="sockfs" ino=11051 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 62.953017][ T40] audit: type=1400 audit(1773770233.961:309): avc: denied { getopt } for pid=6452 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 62.959218][ T40] audit: type=1400 audit(1773770233.961:310): avc: denied { ioctl } for pid=6452 comm="syz.3.130" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 62.967551][ T40] audit: type=1400 audit(1773770233.961:311): avc: denied { prog_load } for pid=6452 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.979553][ T40] audit: type=1400 audit(1773770234.011:312): avc: denied { setopt } for pid=6456 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.041323][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 63.041479][ T39] usb 7-1: USB disconnect, device number 4 [ 63.047955][ T39] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 63.159960][ T40] audit: type=1400 audit(1773770234.191:313): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 63.312760][ T5939] Bluetooth: hci3: command tx timeout [ 63.322503][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 63.527004][ T6490] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.140'. [ 63.662397][ T6502] random: crng reseeded on system resumption [ 63.702435][ T6505] usb usb9: usbfs: process 6505 (syz.0.146) did not claim interface 2 before use [ 63.837947][ T6520] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 63.838848][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 63.841634][ T6520] block device autoloading is deprecated and will be removed. [ 63.844758][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 63.850220][ T6509] SELinux: policydb version 275 does not match my version range 15-35 [ 63.853631][ T6509] SELinux: failed to load policy [ 63.856559][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.859921][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.864306][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.867640][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.939363][ T6527] evm: overlay not supported [ 63.957817][ T6528] netlink: 14 bytes leftover after parsing attributes in process `syz.1.150'. [ 63.973287][ T6528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.977968][ T6528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.981736][ T6528] bond0 (unregistering): Released all slaves [ 64.013206][ T6525] infiniband syz0: set down [ 64.015716][ T5972] syz0: Port: 1 Link DOWN [ 64.017285][ T6525] infiniband syz0: added bond_slave_0 [ 64.039738][ T6525] RDS/IB: syz0: added [ 64.041404][ T6525] smc: adding ib device syz0 with port count 1 [ 64.043678][ T6525] smc: ib device syz0 port 1 has no pnetid [ 64.120994][ T6531] dummy0: entered allmulticast mode [ 64.126043][ T6530] dummy0: left allmulticast mode [ 64.209230][ T6539] NILFS (loop3): device size too small [ 64.216154][ T6539] netlink: 32 bytes leftover after parsing attributes in process `syz.3.154'. [ 64.220237][ T6539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.154'. [ 64.410783][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.159'. [ 64.679559][ T5939] Bluetooth: hci1: SCO packet for unknown connection handle 101 [ 64.681260][ T6564] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 64.682781][ T5939] Bluetooth: Unexpected continuation frame (len 105) [ 64.685502][ T5944] Bluetooth: hci1: hardware error 0x06 [ 64.753646][ T6569] gretap1: entered promiscuous mode [ 64.756629][ T6569] batman_adv: batadv0: Adding interface: gretap1 [ 64.759526][ T6569] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 64.772493][ T6569] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 64.808334][ T6573] hfsplus: unable to find HFS+ superblock [ 65.008730][ T6586] netlink: 'syz.1.169': attribute type 4 has an invalid length. [ 65.135928][ T6595] Device name not specified. [ 65.135928][ T6595] [ 65.143590][ T6596] ufs: You didn't specify the type of your ufs filesystem [ 65.143590][ T6596] [ 65.143590][ T6596] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 65.143590][ T6596] [ 65.143590][ T6596] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 65.157054][ T6596] ufs: failed to set blocksize [ 65.362494][ T6609] 9p: Could not find request transport: via1wio [ 65.508037][ T5939] block nbd1: Receive control failed (result -111) [ 65.512810][ T5939] [ 65.513925][ T5939] ====================================================== [ 65.516951][ T5939] WARNING: possible circular locking dependency detected [ 65.519965][ T5939] syzkaller #0 Not tainted [ 65.522102][ T5939] ------------------------------------------------------ [ 65.525130][ T5939] kworker/u33:3/5939 is trying to acquire lock: [ 65.527861][ T5939] ffff88803c72dba0 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x67/0x410 [ 65.531773][ T5939] [ 65.531773][ T5939] but task is already holding lock: [ 65.535012][ T5939] ffff88803927e270 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 65.538821][ T5939] [ 65.538821][ T5939] which lock already depends on the new lock. [ 65.538821][ T5939] [ 65.543202][ T5939] [ 65.543202][ T5939] the existing dependency chain (in reverse order) is: [ 65.547130][ T5939] [ 65.547130][ T5939] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 65.550465][ T5939] __mutex_lock+0x1a2/0x1b90 [ 65.552749][ T5939] nbd_queue_rq+0x428/0x1080 [ 65.555129][ T5939] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 65.557832][ T5939] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 65.560824][ T5939] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 65.563725][ T5939] blk_mq_run_hw_queue+0x23c/0x670 [ 65.566109][ T5939] blk_mq_dispatch_list+0x51d/0x1360 [ 65.568671][ T5939] blk_mq_flush_plug_list+0x130/0x600 [ 65.571287][ T5939] __blk_flush_plug+0x2c4/0x4b0 [ 65.573638][ T5939] __submit_bio+0x584/0x6c0 [ 65.575859][ T5939] submit_bio_noacct_nocheck+0x562/0xc10 [ 65.578570][ T5939] submit_bio_noacct+0xd17/0x2010 [ 65.580992][ T5939] submit_bh_wbc+0x59c/0x770 [ 65.583267][ T5939] block_read_full_folio+0x264/0x8e0 [ 65.585861][ T5939] filemap_read_folio+0xfc/0x3b0 [ 65.588165][ T5939] do_read_cache_folio+0x2d7/0x6b0 [ 65.590634][ T5939] read_part_sector+0xd1/0x370 [ 65.592955][ T5939] adfspart_check_ICS+0x93/0x910 [ 65.595349][ T5939] bdev_disk_changed+0x7f8/0xc80 [ 65.597742][ T5939] blkdev_get_whole+0x187/0x290 [ 65.600116][ T5939] bdev_open+0x2c7/0xe40 [ 65.602235][ T5939] blkdev_open+0x34e/0x4f0 [ 65.604428][ T5939] do_dentry_open+0x6d8/0x1660 [ 65.606762][ T5939] vfs_open+0x82/0x3f0 [ 65.608810][ T5939] path_openat+0x208c/0x31a0 [ 65.611088][ T5939] do_file_open+0x20e/0x430 [ 65.613291][ T5939] do_sys_openat2+0x10d/0x1e0 [ 65.615584][ T5939] __x64_sys_openat+0x12d/0x210 [ 65.617950][ T5939] do_syscall_64+0x106/0xf80 [ 65.620159][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.622928][ T5939] [ 65.622928][ T5939] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 65.626125][ T5939] __mutex_lock+0x1a2/0x1b90 [ 65.628378][ T5939] nbd_queue_rq+0xba/0x1080 [ 65.630610][ T5939] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 65.633279][ T5939] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 65.636258][ T5939] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 65.639087][ T5939] blk_mq_run_hw_queue+0x23c/0x670 [ 65.641562][ T5939] blk_mq_dispatch_list+0x51d/0x1360 [ 65.644134][ T5939] blk_mq_flush_plug_list+0x130/0x600 [ 65.646717][ T5939] __blk_flush_plug+0x2c4/0x4b0 [ 65.649086][ T5939] __submit_bio+0x584/0x6c0 [ 65.651347][ T5939] submit_bio_noacct_nocheck+0x562/0xc10 [ 65.654073][ T5939] submit_bio_noacct+0xd17/0x2010 [ 65.656514][ T5939] submit_bh_wbc+0x59c/0x770 [ 65.658741][ T5939] block_read_full_folio+0x264/0x8e0 [ 65.661307][ T5939] filemap_read_folio+0xfc/0x3b0 [ 65.663737][ T5939] do_read_cache_folio+0x2d7/0x6b0 [ 65.666271][ T5939] read_part_sector+0xd1/0x370 [ 65.668596][ T5939] adfspart_check_ICS+0x93/0x910 [ 65.671091][ T5939] bdev_disk_changed+0x7f8/0xc80 [ 65.673552][ T5939] blkdev_get_whole+0x187/0x290 [ 65.675916][ T5939] bdev_open+0x2c7/0xe40 [ 65.678054][ T5939] blkdev_open+0x34e/0x4f0 [ 65.680251][ T5939] do_dentry_open+0x6d8/0x1660 [ 65.682601][ T5939] vfs_open+0x82/0x3f0 [ 65.684730][ T5939] path_openat+0x208c/0x31a0 [ 65.687034][ T5939] do_file_open+0x20e/0x430 [ 65.689257][ T5939] do_sys_openat2+0x10d/0x1e0 [ 65.691587][ T5939] __x64_sys_openat+0x12d/0x210 [ 65.693993][ T5939] do_syscall_64+0x106/0xf80 [ 65.696293][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.699131][ T5939] [ 65.699131][ T5939] -> #4 (set->srcu){.+.+}-{0:0}: [ 65.702262][ T5939] __synchronize_srcu+0xa1/0x2a0 [ 65.704673][ T5939] blk_mq_quiesce_queue+0x149/0x1c0 [ 65.707201][ T5939] elevator_switch+0x17b/0x7e0 [ 65.709540][ T5939] elevator_change+0x352/0x530 [ 65.711862][ T5939] elevator_set_default+0x29e/0x360 [ 65.714394][ T5939] blk_register_queue+0x412/0x590 [ 65.716842][ T5939] __add_disk+0x73f/0xe40 [ 65.719023][ T5939] add_disk_fwnode+0x118/0x5c0 [ 65.721360][ T5939] nbd_dev_add+0x77a/0xb10 [ 65.723592][ T5939] nbd_init+0x291/0x2b0 [ 65.725732][ T5939] do_one_initcall+0x11d/0x760 [ 65.728066][ T5939] kernel_init_freeable+0x6e5/0x7a0 [ 65.730501][ T5939] kernel_init+0x1f/0x1e0 [ 65.732655][ T5939] ret_from_fork+0x754/0xd80 [ 65.734931][ T5939] ret_from_fork_asm+0x1a/0x30 [ 65.737272][ T5939] [ 65.737272][ T5939] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 65.740590][ T5939] __mutex_lock+0x1a2/0x1b90 [ 65.742794][ T5939] elevator_change+0x1bc/0x530 [ 65.745096][ T5939] elevator_set_none+0x92/0xf0 [ 65.747355][ T5939] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 65.750141][ T5939] nbd_start_device+0x1a6/0xbd0 [ 65.752476][ T5939] nbd_genl_connect+0xff2/0x1a40 [ 65.754899][ T5939] genl_family_rcv_msg_doit+0x214/0x300 [ 65.757558][ T5939] genl_rcv_msg+0x560/0x800 [ 65.759795][ T5939] netlink_rcv_skb+0x159/0x420 [ 65.762137][ T5939] genl_rcv+0x28/0x40 [ 65.764180][ T5939] netlink_unicast+0x5aa/0x870 [ 65.766537][ T5939] netlink_sendmsg+0x8b0/0xda0 [ 65.768889][ T5939] ____sys_sendmsg+0x9e1/0xb70 [ 65.771228][ T5939] ___sys_sendmsg+0x190/0x1e0 [ 65.773535][ T5939] __sys_sendmsg+0x170/0x220 [ 65.775846][ T5939] do_syscall_64+0x106/0xf80 [ 65.778112][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.780851][ T5939] [ 65.780851][ T5939] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 65.784627][ T5939] blk_alloc_queue+0x610/0x790 [ 65.786964][ T5939] blk_mq_alloc_queue+0x174/0x290 [ 65.789397][ T5939] __blk_mq_alloc_disk+0x29/0x120 [ 65.791773][ T5939] nbd_dev_add+0x492/0xb10 [ 65.793986][ T5939] nbd_init+0x291/0x2b0 [ 65.796095][ T5939] do_one_initcall+0x11d/0x760 [ 65.798440][ T5939] kernel_init_freeable+0x6e5/0x7a0 [ 65.801043][ T5939] kernel_init+0x1f/0x1e0 [ 65.803245][ T5939] ret_from_fork+0x754/0xd80 [ 65.805563][ T5939] ret_from_fork_asm+0x1a/0x30 [ 65.807937][ T5939] [ 65.807937][ T5939] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 65.811107][ T5939] fs_reclaim_acquire+0xc4/0x100 [ 65.813552][ T5939] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 65.816375][ T5939] __alloc_skb+0x140/0x710 [ 65.818584][ T5939] tcp_stream_alloc_skb+0x34/0x660 [ 65.821063][ T5939] tcp_sendmsg_locked+0x1396/0x45e0 [ 65.823540][ T5939] tcp_sendmsg+0x2e/0x50 [ 65.825712][ T5939] inet_sendmsg+0xb9/0x140 [ 65.827909][ T5939] sock_write_iter+0x4ea/0x5a0 [ 65.830274][ T5939] vfs_write+0x6ac/0x1070 [ 65.832450][ T5939] ksys_write+0x1f8/0x250 [ 65.834658][ T5939] do_syscall_64+0x106/0xf80 [ 65.836924][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.839720][ T5939] [ 65.839720][ T5939] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 65.843085][ T5939] __lock_acquire+0x14b8/0x2630 [ 65.845525][ T5939] lock_acquire+0x1cf/0x380 [ 65.847731][ T5939] lock_sock_nested+0x41/0xf0 [ 65.850045][ T5939] inet_shutdown+0x67/0x410 [ 65.852257][ T5939] nbd_mark_nsock_dead+0xae/0x5c0 [ 65.854711][ T5939] recv_work+0x5fb/0x8c0 [ 65.856824][ T5939] process_one_work+0xa23/0x19a0 [ 65.859189][ T5939] worker_thread+0x5ef/0xe50 [ 65.861379][ T5939] kthread+0x370/0x450 [ 65.863445][ T5939] ret_from_fork+0x754/0xd80 [ 65.865716][ T5939] ret_from_fork_asm+0x1a/0x30 [ 65.868018][ T5939] [ 65.868018][ T5939] other info that might help us debug this: [ 65.868018][ T5939] [ 65.872423][ T5939] Chain exists of: [ 65.872423][ T5939] sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 65.872423][ T5939] [ 65.877832][ T5939] Possible unsafe locking scenario: [ 65.877832][ T5939] [ 65.881020][ T5939] CPU0 CPU1 [ 65.883358][ T5939] ---- ---- [ 65.885715][ T5939] lock(&nsock->tx_lock); [ 65.887698][ T5939] lock(&cmd->lock); [ 65.890533][ T5939] lock(&nsock->tx_lock); [ 65.893534][ T5939] lock(sk_lock-AF_INET); [ 65.895506][ T5939] [ 65.895506][ T5939] *** DEADLOCK *** [ 65.895506][ T5939] [ 65.899015][ T5939] 3 locks held by kworker/u33:3/5939: [ 65.901381][ T5939] #0: ffff888029345148 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 65.906033][ T5939] #1: ffffc90003c7fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 65.910812][ T5939] #2: ffff88803927e270 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 65.914782][ T5939] [ 65.914782][ T5939] stack backtrace: [ 65.917361][ T5939] CPU: 0 UID: 0 PID: 5939 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 65.917381][ T5939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.917391][ T5939] Workqueue: nbd1-recv recv_work [ 65.917417][ T5939] Call Trace: [ 65.917423][ T5939] [ 65.917430][ T5939] dump_stack_lvl+0x100/0x190 [ 65.917456][ T5939] print_circular_bug.cold+0x178/0x1c7 [ 65.917483][ T5939] check_noncircular+0x146/0x160 [ 65.917531][ T5939] __lock_acquire+0x14b8/0x2630 [ 65.917549][ T5939] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 65.917574][ T5939] lock_acquire+0x1cf/0x380 [ 65.917590][ T5939] ? inet_shutdown+0x67/0x410 [ 65.917614][ T5939] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 65.917638][ T5939] lock_sock_nested+0x41/0xf0 [ 65.917658][ T5939] ? inet_shutdown+0x67/0x410 [ 65.917680][ T5939] inet_shutdown+0x67/0x410 [ 65.917703][ T5939] nbd_mark_nsock_dead+0xae/0x5c0 [ 65.917726][ T5939] recv_work+0x5fb/0x8c0 [ 65.917749][ T5939] ? __lock_acquire+0xd73/0x2630 [ 65.917765][ T5939] ? __pfx_recv_work+0x10/0x10 [ 65.917788][ T5939] ? debug_object_deactivate+0x2e4/0x3b0 [ 65.917815][ T5939] ? rcu_is_watching+0x12/0xc0 [ 65.917836][ T5939] process_one_work+0xa23/0x19a0 [ 65.917857][ T5939] ? __pfx_process_one_work+0x10/0x10 [ 65.917877][ T5939] ? __pfx_recv_work+0x10/0x10 [ 65.917901][ T5939] worker_thread+0x5ef/0xe50 [ 65.917919][ T5939] ? __pfx_worker_thread+0x10/0x10 [ 65.917938][ T5939] ? kthread+0x13a/0x450 [ 65.917952][ T5939] ? __pfx_worker_thread+0x10/0x10 [ 65.917968][ T5939] kthread+0x370/0x450 [ 65.917983][ T5939] ? __pfx_kthread+0x10/0x10 [ 65.917997][ T5939] ret_from_fork+0x754/0xd80 [ 65.918015][ T5939] ? __pfx_ret_from_fork+0x10/0x10 [ 65.918031][ T5939] ? __switch_to+0x7b4/0x1120 [ 65.918050][ T5939] ? __pfx_kthread+0x10/0x10 [ 65.918066][ T5939] ret_from_fork_asm+0x1a/0x30 [ 65.918088][ T5939] [ 66.752097][ T5944] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 67.802089][ T40] kauditd_printk_skb: 34265 callbacks suppressed [ 67.802107][ T40] audit: type=1326 audit(1773770238.831:34579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.178" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04179c799 code=0x50000 [ 67.815112][ T40] audit: type=1326 audit(1773770238.841:34580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.178" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04179c799 code=0x50000 [ 67.824861][ T40] audit: type=1326 audit(1773770238.841:34581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.178" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04179c799 code=0x50000 [ 67.834664][ T40] audit: type=1326 audit(1773770238.841:34582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.178" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04179c799 code=0x50000 [ 67.845051][ T40] audit: type=1326 audit(1773770238.841:34583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.178" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04179c799 code=0x50000 [ 67.854419][ T40] audit: type=1326 audit(1773770238.841:34584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.178" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04179c799 code=0x50000 [ 67.863168][ T40] audit: type=1326 audit(1773770238.841:34585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.178" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04179c799 code=0x50000 [ 67.870490][ T40] audit: type=1326 audit(1773770238.841:34586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.178" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04179c799 code=0x50000 [ 67.877851][ T5944] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 67.877876][ T40] audit: type=1326 audit(1773770238.841:34587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.178" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04179c799 code=0x50000 [ 67.881337][ T5944] Bluetooth: hci2: Injecting HCI hardware error event [ 67.881398][ T5939] Bluetooth: hci2: hardware error 0x00 [ 67.888767][ T40] audit: type=1326 audit(1773770238.841:34588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.178" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04179c799 code=0x50000 [ 69.952158][ T5939] Bluetooth: hci2: Opcode 0x0c03 failed: -110