last executing test programs: 3.955377934s ago: executing program 1 (id=259): bind$inet(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) (async) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) (async) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) (async) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvmsg$qrtr(r1, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x10061}, 0x38, 0x2042) 3.8691369s ago: executing program 1 (id=261): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x44, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r8, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r9 = socket(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0d022abd7000fedbdf250100060000000600020000008500050004000000080003000600000008050400260000003747e06d53ee8466ac021de17ca53f6e8409ee6f3456b5cbdc1a64c7217ae70d4558532e01473e38f3b3ab3504f4446a5de2450b6aec09b75bf2cdaf"], 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c978f064eb9c78f905ea86ef88cf9cc9b129e0afb0a5b24f70300e0599803fb343c18556a0", @ANYRESOCT=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r13, 0x3b82, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0}) r14 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r14, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000040)="9b2d", 0x2}) close_range(r14, 0xffffffffffffffff, 0x0) 3.778680378s ago: executing program 1 (id=264): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x81) (async) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb72b40000005908060001080006040001aaaaaaaaaa16ac1414bbaaaaaaaaaa14ac1414bb"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, &(0x7f0000000100)={0xa, &(0x7f0000000080)=[{0x400, 0x29, 0x7, 0x3}, {0x1, 0x6, 0x9, 0x6}, {0x4, 0x8d, 0x4, 0x8ae9}, {0x5, 0x4, 0x6, 0x80}, {0x6, 0x8, 0x10, 0x81}, {0x10, 0x3, 0x8, 0x6000}, {0x101, 0x0, 0x4, 0xffff}, {0x9, 0x1a, 0x6, 0x8}, {0x81, 0x4, 0x32, 0xb3}, {0x6f6, 0xff, 0x7f, 0x7f}]}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002400010026bd700001dbdf251cf9ffff060003"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 3.71038897s ago: executing program 1 (id=266): r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000000000000080017"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000000000000080017"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) shutdown(r0, 0x0) (async) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) 3.70738701s ago: executing program 1 (id=267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) (async, rerun: 32) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (rerun: 32) close_range(r3, 0xffffffffffffffff, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) (async, rerun: 32) r5 = syz_open_dev$dvb_dvr(&(0x7f00000000c0), 0x5ab, 0x610041) (rerun: 32) ioctl$DVB_DVR_DMX_REQBUFS(r5, 0xc0086f3c, &(0x7f0000000140)={0x75}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) (async, rerun: 32) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x3, 0xffffffffffffffff, 0x1}) (async, rerun: 32) r6 = syz_clone(0x11, 0x0, 0x3e, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (rerun: 64) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x0, '\x00', @p_u16=0x0}}) r8 = syz_pidfd_open(r6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0xff01, 0x0) (async) close(0x5) 1.325989067s ago: executing program 3 (id=306): r0 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0xb, 0x1}, 0xc) (async) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x82300) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000000c0)={0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, r8, 0x4}, 0x38) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f00000001c0)={r6, r6, 0x10000000, 0x80000001, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000040)=[r6], 0x1}) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) fcntl$addseals(r3, 0x409, 0x9) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0317000001000000140012800b0001006d616373656300000400028008000500", @ANYRESOCT=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.218506272s ago: executing program 3 (id=309): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) time(&(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.050035634s ago: executing program 2 (id=314): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="038000000000000008000a00", @ANYRES32, @ANYBLOB="1c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @empty}, {0x2, 0x0, @local}, {0x2, 0x4e23, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000380)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000180)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeef0000}) r5 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x80, 0xfffffffe, 0xc}) prctl$PR_SET_IO_FLUSHER(0x4a, 0x2) r6 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905010940"], 0x0) syz_usb_control_io$uac2(r6, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r6, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000080)) 820.543636ms ago: executing program 0 (id=315): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/time\x00') r0 = socket$packet(0x11, 0x3, 0x300) r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r2 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xd0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newlink={0x30, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0xb881, 0x20000}, [@IFLA_GROUP={0x8, 0x1b, 0xc60}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008006}, 0x80d4) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f0000000200)='m', 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="0f229748b8540a0000000000000f23c00f21f835000005000f23f80f782a65430f01c266666666470f104a0b360f0139f20f1c00b9800000c00f3235004000000f300f06c4c1f877", 0x48}], 0x1, 0x43, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r10) sendmsg$IEEE802154_LIST_IFACE(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r11, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r12 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r12, 0x40045532, &(0x7f0000000100)) r13 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r13, &(0x7f0000000200)="a3", 0x1) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, 0xfffffffffffffffe, 0x0) 450.492968ms ago: executing program 1 (id=316): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @local, 0x2}, @ethernet={0x1, @multicast}, @ax25={0x3, @null, 0x7}, 0x14a6, 0x0, 0x0, 0x0, 0xff, 0x0, 0x4, 0xf}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 279.660518ms ago: executing program 3 (id=317): r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvmmsg$unix(r0, &(0x7f0000002500)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f0000000140)=""/240, 0xf0}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000280)=""/168, 0xa8}], 0x4, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000000440), 0x6e, &(0x7f00000004c0)}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000580), 0x0, 0xffffffffffffffff}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/156, 0x9c}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000740)=""/115, 0x73}, {&(0x7f00000007c0)=""/243, 0xf3}, {&(0x7f00000008c0)=""/87, 0x57}, {&(0x7f0000000940)=""/6, 0x6}, {&(0x7f0000000980)=""/143, 0x8f}, {&(0x7f0000000a40)=""/176, 0xb0}], 0x8}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000002000)=[{&(0x7f0000000c00)=""/242, 0xf2}, {&(0x7f0000000d00)=""/42, 0x2a}, {&(0x7f0000000d40)=""/128, 0x80}, {&(0x7f0000000dc0)=""/48, 0x30}, {&(0x7f0000000e00)=""/249, 0xf9}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/175, 0xaf}, {&(0x7f0000001fc0)=""/42, 0x2a}], 0x8, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002100)=@abs, 0x6e, &(0x7f0000002440)=[{&(0x7f0000002180)=""/181, 0xb5}, {&(0x7f0000002240)=""/86, 0x56}, {&(0x7f00000022c0)=""/75, 0x4b}, {&(0x7f0000002340)=""/225, 0xe1}], 0x4, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x20, &(0x7f0000002680)={0x0, 0x3938700}) ptrace(0x10, r5) (async, rerun: 32) bind$inet(r11, &(0x7f00000026c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000002840)={'syztnl0\x00', &(0x7f0000002740)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x20c, 0x8001, {{0x2e, 0x4, 0x3, 0x8, 0xb8, 0x67, 0x0, 0xf2, 0x29, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0x14, 0xd2, 0x3, 0x1, [{@multicast1, 0xd4e1}, {@remote, 0x4}]}, @rr={0x7, 0x7, 0x81, [@private=0xa010102]}, @ssrr={0x89, 0x1b, 0x14, [@multicast1, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xf8, 0x3, 0xd, [{@loopback, 0xd}, {@private=0xa010100, 0x80}, {@remote, 0x7}, {@multicast2, 0x1}, {@private=0xa010102, 0x1}]}, @end, @cipso={0x86, 0x3d, 0x1, [{0x0, 0x10, "99e7a7d0494501a7061cd1b228c3"}, {0x2, 0x6, "faeb20b4"}, {0x7, 0x11, "c1b017a05223fa70dedda719d459f8"}, {0x5, 0x10, "c65db99082ac11de0b10cdfab769"}]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)=@dellinkprop={0x38, 0x6d, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, 0x438c1, 0x10}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x5) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000002940)={{0x21, @local, 0x4e20, 0x4, 'wrr\x00', 0x8, 0x4, 0x4e}, {@broadcast, 0xc4, 0x1, 0x8, 0x10, 0x3}}, 0x44) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1ca918512976772f, &(0x7f0000002a00)={0x5, &(0x7f00000029c0)=[{0x1000, 0x6, 0x8, 0x2}, {0x3, 0x4, 0x3, 0x9}, {0x9, 0x5, 0x3, 0x8}, {0x5, 0xc, 0x5, 0x6}, {0x4, 0xa, 0x9, 0x7}]}) (async, rerun: 64) fchmodat(r9, &(0x7f0000002a40)='./file0\x00', 0x8) (async, rerun: 64) recvmsg$can_raw(r3, &(0x7f0000002fc0)={&(0x7f0000002a80)=@ethernet, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002b00)=""/253, 0xfd}, {&(0x7f0000002c00)=""/149, 0x95}, {&(0x7f0000002cc0)=""/235, 0xeb}, {&(0x7f0000002dc0)=""/147, 0x93}], 0x4, &(0x7f0000002ec0)=""/236, 0xec}, 0x20012120) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f00000030c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)=@newspdinfo={0x2c, 0x24, 0x100, 0x70bd25, 0x25dfdbfe, 0x1, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x810) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000003100), r1) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), r4) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000003300)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000032c0)={&(0x7f00000031c0)={0xd8, r14, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x98, 0x33, @ctrl_frame=@ba={{}, {0x7f}, @device_b, @device_b, @basic={{0x0, 0x0, 0x0, 0x0, 0x7}, {0xe, 0xff8}, "2f0d6ba8e567c56c0c5ab228c6e591d64384020be51e5069e4df98a54c34ffe1769af7844e70f2386143674d78adc7e8609080c29e0e0aca50ba6ce3448ecd782953830a9c70407011885eeb1c4cb0111cfc8090f1dc3b7178b453069e525859430ed3b55945c1ad5b8e20784be6e35f2bfadec8a2f3c464047d7593f76387a6"}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x5}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x400c1}, 0x18007) (async) close_range(r13, r7, 0x0) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003380), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r15, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x2c, r16, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) (async) syz_emit_ethernet(0xbe, &(0x7f0000003480)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x4, 0x1, 0x4}}, {@generic={0xf7, "a0a3de2af9912e024d40bf0f476c23d610cfb6ec1194fadb29c0feed06ffd74f90a28e541a1c3c7569edae92e072b69e7203b2b62cf0eeed0c07ebe3b6ee002169eefb149d3f4a89e05f36d91ce29178bb21466e05f2224ccc075c33e5a368279bdff40c05a17ee0fc0d1fa39c534ca397009f08a449158dd01872319fa225aa06bc5bfd907d26a62e90cdacb4978bb09d61be74b5459c709b5e65090fcc917ee44a6613b9e819b3"}}}, &(0x7f0000003540)={0x1, 0x1, [0x162, 0xf8, 0x8e, 0xb30]}) (async) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r9) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f00000036c0)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003680)={&(0x7f0000003600)={0x74, r17, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="75700f09037f67416ddd00cdcf6f4213"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f7b7c46012bb1067"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1ab4dd8044e6dd50179b7ae64ff162f5f21d348691aabc5ff73f80951c515d19"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d9610d0c84c924fa0da4280740c662e7"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x9001) (async, rerun: 64) syz_emit_ethernet(0xc8, &(0x7f0000003700)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5}, @val={@void}, {@llc={0x4, {@llc={0xf0, 0xdc, "c226", "db2e0249614d8b4b6ed7dadaf053e0e569e374f98be9733e17a936118c1a7b5f61604a97fde07eadc867c9060b115b67898987d19611c60b3545533d0575423641f51ad61ab085bedaa00ecadc02aa53b9a7c10b75ccad18ddcc11586c6ca388abf2471c021e40532e4a74eeac4a9d3c02f6efcd47f4847eb1bc3647d02224716c7956414b5c2b5135cff678d411bf3bf514e8fab02ff2247c51e84e84a3413eee3975eebffd057d769c0f79e3ba62964e8b"}}}}}, &(0x7f0000003800)={0x1, 0x1, [0xc76, 0x66f, 0x653, 0x869]}) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003ac0)={0x18, 0x13, &(0x7f0000003840)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x80000001}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0xe4, 0x9, 0x7, 0x2, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x2}]}, &(0x7f0000003900)='syzkaller\x00', 0x200, 0xe3, &(0x7f0000003940)=""/227, 0x41100, 0x19, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000003a40)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000003a80)=[{0x1, 0x1, 0x5, 0x7}, {0x2, 0x4, 0x6, 0x5}, {0x1, 0x1, 0x3, 0xf}], 0x10, 0x11}, 0x94) open$dir(&(0x7f0000003b80)='./file0\x00', 0x1, 0x21) clock_gettime(0x0, &(0x7f000000b7c0)={0x0, 0x0}) recvmmsg(r6, &(0x7f000000b5c0)=[{{&(0x7f0000003bc0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000051c0)=[{&(0x7f0000003c40)=""/246, 0xf6}, {&(0x7f0000003d40)=""/245, 0xf5}, {&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/181, 0xb5}, {&(0x7f0000004f00)=""/68, 0x44}, {&(0x7f0000004f80)=""/114, 0x72}, {&(0x7f0000005000)=""/88, 0x58}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/197, 0xc5}], 0x9, &(0x7f0000005280)=""/150, 0x96}, 0x7}, {{&(0x7f0000005340)=@xdp, 0x80, &(0x7f0000005680)=[{&(0x7f00000053c0)=""/160, 0xa0}, {&(0x7f0000005480)}, {&(0x7f00000054c0)=""/26, 0x1a}, {&(0x7f0000005500)=""/160, 0xa0}, {&(0x7f00000055c0)=""/119, 0x77}, {&(0x7f0000005640)=""/20, 0x14}], 0x6, &(0x7f0000005700)=""/207, 0xcf}, 0x6}, {{&(0x7f0000005800)=@hci, 0x80, &(0x7f0000005940)=[{&(0x7f0000005880)=""/176, 0xb0}], 0x1}, 0xf}, {{&(0x7f0000005980)=@ax25={{0x3, @netrom}, [@remote, @rose, @null, @null, @default, @remote, @netrom, @netrom]}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005a00)=""/78, 0x4e}, {&(0x7f0000005a80)=""/58, 0x3a}, {&(0x7f0000005ac0)=""/245, 0xf5}, {&(0x7f0000005bc0)=""/207, 0xcf}, {&(0x7f0000005cc0)=""/189, 0xbd}, {&(0x7f0000005d80)=""/77, 0x4d}, {&(0x7f0000005e00)=""/128, 0x80}], 0x7, &(0x7f0000005f00)=""/154, 0x9a}}, {{&(0x7f0000005fc0)=@ieee802154, 0x80, &(0x7f00000063c0)=[{&(0x7f0000006040)=""/124, 0x7c}, {&(0x7f00000060c0)=""/238, 0xee}, {&(0x7f00000061c0)=""/27, 0x1b}, {&(0x7f0000006200)=""/199, 0xc7}, {&(0x7f0000006300)=""/155, 0x9b}], 0x5, &(0x7f0000006440)=""/247, 0xf7}, 0x40}, {{&(0x7f0000006540)=@tipc=@id, 0x80, &(0x7f0000006980)=[{&(0x7f00000065c0)=""/87, 0x57}, {&(0x7f0000006640)=""/66, 0x42}, {&(0x7f00000066c0)=""/212, 0xd4}, {&(0x7f00000067c0)=""/174, 0xae}, {&(0x7f0000006880)=""/15, 0xf}, {&(0x7f00000068c0)=""/37, 0x25}, {&(0x7f0000006900)=""/127, 0x7f}], 0x7, &(0x7f0000006a00)=""/226, 0xe2}, 0x3}, {{&(0x7f0000006b00)=@sco={0x1f, @none}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000006b80)=""/229, 0xe5}, {&(0x7f0000006c80)=""/145, 0x91}, {&(0x7f0000006d40)=""/250, 0xfa}, {&(0x7f0000006e40)=""/4096, 0x1000}, {&(0x7f0000007e40)=""/131, 0x83}, {&(0x7f0000007f00)=""/185, 0xb9}], 0x6, &(0x7f0000008040)=""/113, 0x71}, 0x200}, {{&(0x7f00000080c0)=@hci, 0x80, &(0x7f000000b500)=[{&(0x7f0000008140)=""/92, 0x5c}, {&(0x7f00000081c0)=""/196, 0xc4}, {&(0x7f00000082c0)=""/246, 0xf6}, {&(0x7f00000083c0)=""/4096, 0x1000}, {&(0x7f00000093c0)=""/4096, 0x1000}, {&(0x7f000000a3c0)=""/4096, 0x1000}, {&(0x7f000000b3c0)=""/170, 0xaa}, {&(0x7f000000b480)=""/71, 0x47}], 0x8, &(0x7f000000b580)=""/32, 0x20}, 0x3ff}], 0x8, 0x2000, &(0x7f000000b800)={r18, r19+10000000}) (async, rerun: 32) r20 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r20, &(0x7f000000b900)={&(0x7f000000b840), 0xc, &(0x7f000000b8c0)={&(0x7f000000b880)={0x34, r16, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f000000ba00)={0x0, 0x0, &(0x7f000000b940), 0x80, 0x0, &(0x7f000000b980)="1dcc8f2216eb5a58d91a24a637036e6285f88ace9d27e4dc67e4dd112fc1a94ba451d4ae4bb9ef21bbe82418e154126ad8d0691216a51bbfee43552b39b1e40b1f56409c8862b7204a69e18b29143323b07cc75d7fdc01127e4c6e8f29cd501466e90dc8cf933680c57445a75a1ff27e06ae09b4862acb852bec29d5385efa6d"}) 279.344497ms ago: executing program 0 (id=318): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x4c1, 0x6, 0x4, 0xfffffffa, 0x81, 0x7fff, 0xc9, 0x28f}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) clock_getres(0x2, &(0x7f0000000380)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x310, 0x168, 0x0, 0x310, 0x98, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@pkttype={{0x28}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 230.61309ms ago: executing program 2 (id=319): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r1, 0x40084d02, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x0}) ioctl$CDROMREADCOOKED(r1, 0x5315, &(0x7f0000000300)) (async) ioctl$CDROMREADCOOKED(r1, 0x5315, &(0x7f0000000300)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 228.518411ms ago: executing program 0 (id=320): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x8}}) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x3, './file0\x00'}, 0x6e) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) fcntl$setstatus(r0, 0x4, 0x2c00) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x103000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864d0, &(0x7f00000003c0)={0x2b, 0x0, 0x0, 0xb0b0b0b0}) poll(&(0x7f0000000000)=[{r0, 0x740c}, {r3, 0x2000}, {r1, 0x1008}, {r1, 0x8000}], 0x4, 0x10001) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x8}}) (async) close(r0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) connect$unix(r2, &(0x7f0000000100)=@file={0x3, './file0\x00'}, 0x6e) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) (async) fcntl$setstatus(r0, 0x4, 0x2c00) (async) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x103000) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864d0, &(0x7f00000003c0)={0x2b, 0x0, 0x0, 0xb0b0b0b0}) (async) poll(&(0x7f0000000000)=[{r0, 0x740c}, {r3, 0x2000}, {r1, 0x1008}, {r1, 0x8000}], 0x4, 0x10001) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) (async) 228.357149ms ago: executing program 3 (id=321): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 32) listen(r1, 0x0) (async, rerun: 32) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x3b, 0x0, 0x4, 0x1, 0x0, 0x6, 0x68}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "3c0200", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'sit0\x00', 0x0}) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0xfff2}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) 228.10178ms ago: executing program 2 (id=322): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fc, 0x1ff, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000400)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) fcntl$setstatus(r2, 0x4, 0x46c00) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x42880, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000000300)={0x3ff, [0x2, 0x84, 0xeec], [{0x8001, 0xa05, 0x0, 0x1, 0x0, 0x1}, {0xa, 0xffffef20, 0x1, 0x1, 0x1}, {0x7fff, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x8001, 0x3, 0x1, 0x0, 0x1}, {0x4, 0xfffffff1, 0x0, 0x0, 0x0, 0x1}, {0x3, 0xc73, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x800, 0x77eb, 0x1, 0x0, 0x0, 0x1}, {0xd75, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x8001, 0x1}, {0x1, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x0, 0x0, 0x1}], 0x2}) sendfile(r2, r3, 0x0, 0x7ffff004) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x4}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 140.414018ms ago: executing program 3 (id=323): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x5002011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) prlimit64(r1, 0x7, &(0x7f0000000140), 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0xa00, 0x10) open_tree(r4, &(0x7f0000000080)='./file0\x00', 0x101) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x116980180, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x8d, 0x0, 0x1}]}) 139.860199ms ago: executing program 2 (id=324): syz_open_dev$video4linux(&(0x7f0000000280), 0x401, 0x8000) (async) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f00000005c0)={0x0, 0x3, @value=0xfffffffffffffffd}) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x580, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="4274aa814c8f", 0x6}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d046bccc3025bbe70905237ffee5666e0", 0x23}], 0x2}, 0x41) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x10082, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0x100000f, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x100007e, 0x3, 0x9, 0xff, 0x25, 0x5, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x2, 0x1, 0x7f, 0x9, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0xa86d, 0x5, 0x2, 0x6, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xcb, 0x1, 0x4, 0x9, 0x7f, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x6, 0x7, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x2b5f5d41, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x4, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x6, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0xad, 0x4, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xed, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2, 0x3}}) (rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x5, 0x12) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async, rerun: 32) r5 = accept4(r4, 0x0, 0x0, 0x800) (rerun: 32) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x48800) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000880)=""/83, 0x53}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x4) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x180, 0xff}) 138.854043ms ago: executing program 0 (id=325): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000400)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, 0x0, @private1, 0xfffffffe}}, 0x24) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 62.163994ms ago: executing program 0 (id=326): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7b, 0x7b, 0x6, [@func={0xd, 0x0, 0x0, 0xc, 0x5}, @datasec={0x3, 0x8, 0x0, 0xf, 0x3, [{0x1, 0x7, 0xfffffffe}, {0x5, 0xa, 0x1}, {0x4, 0x10, 0x1ff}, {0x3, 0x6, 0x7}, {0x2, 0x81, 0x4}, {0x3, 0x38d, 0x9}, {0x3, 0x6, 0x200000}, {0x1, 0x400, 0xc8}], "16b783"}]}, {0x0, [0x61, 0x30, 0x5f, 0x0]}}, &(0x7f0000000100)=""/88, 0x9a, 0x58, 0x1, 0x3}, 0x28) setrlimit(0xc, &(0x7f0000000200)={0x2, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 61.871522ms ago: executing program 2 (id=327): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x17b, 0x0, 0x400000000000}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r7, &(0x7f0000002c80)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r7, 0xae01, 0xf) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002280)=ANY=[@ANYBLOB="1400000040000100fc050700140000b690ef0da2e5988001000000"], 0x14}, 0x1, 0x0, 0x0, 0xc801}, 0x4008094) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') pread64(r8, &(0x7f0000000780)=""/185, 0xb9, 0x3c) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) listen(r1, 0x8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r9}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f00)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_DIVISOR={0x8, 0x4, 0x4f}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24041091}, 0x800) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002240)=@ipv6_delrule={0x30, 0x21, 0x400, 0x70bd28, 0x25dfdbfd, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x30}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r10}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x1) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) 60.32939ms ago: executing program 0 (id=328): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='maps\x00') exit(0x5) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota.\x00']) 411.362µs ago: executing program 3 (id=329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x108, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xffff, 0x7ff8}, {0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xffffff22}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 0s ago: executing program 2 (id=330): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010101}, @IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r4, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000200)={0x18, r6}) write$9p(r0, &(0x7f0000000100)="d5c0", 0x2) ioctl$I2C_TENBIT(r0, 0x704, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r8, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095", @ANYRESOCT=r8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_validatetrans(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6b6d73675f6465766963655f743a73302073797374656d5f753a6f626a6563745f723a1e7d89fec52346c0956ffe6d6e745f743a733020303030303030303030303030303030303030303720"], 0x5e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0x40) kernel console output (not intermixed with test programs): [ 44.056113][ T40] audit: type=1400 audit(1780048865.827:114): avc: denied { rlimitinh } for pid=5637 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.064029][ T40] audit: type=1400 audit(1780048865.827:115): avc: denied { siginh } for pid=5637 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.087157][ T40] audit: type=1400 audit(1780048866.877:116): avc: denied { write } for pid=5642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.128971][ T40] audit: type=1400 audit(1780048866.917:117): avc: denied { write } for pid=5645 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.669956][ T40] audit: type=1400 audit(1780048867.457:118): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.722552][ T40] audit: type=1400 audit(1780048867.507:119): avc: denied { write } for pid=5651 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.922343][ T40] audit: type=1400 audit(1780048867.707:120): avc: denied { write } for pid=5654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.976429][ T40] audit: type=1400 audit(1780048867.767:121): avc: denied { write } for pid=5657 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:26672' (ED25519) to the list of known hosts. [ 46.067561][ T40] audit: type=1400 audit(1780048867.857:122): avc: denied { write } for pid=5662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.082648][ T40] audit: type=1400 audit(1780048867.867:123): avc: denied { name_bind } for pid=5664 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.119077][ T40] audit: type=1400 audit(1780048867.907:124): avc: denied { execute } for pid=5666 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.125727][ T40] audit: type=1400 audit(1780048867.907:125): avc: denied { execute_no_trans } for pid=5666 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.513604][ T5666] cgroup: Unknown subsys name 'net' [ 48.677999][ T5666] cgroup: Unknown subsys name 'cpuset' [ 48.682752][ T5666] cgroup: Unknown subsys name 'rlimit' [ 48.856189][ T5718] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.560822][ T5666] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.333096][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 53.333107][ T40] audit: type=1400 audit(1780048875.117:158): avc: denied { execmem } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.473118][ T40] audit: type=1400 audit(1780048875.257:159): avc: denied { create } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.485926][ T40] audit: type=1400 audit(1780048875.257:160): avc: denied { read write } for pid=5733 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.494917][ T40] audit: type=1400 audit(1780048875.257:161): avc: denied { open } for pid=5733 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.496227][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.502171][ T40] audit: type=1400 audit(1780048875.277:162): avc: denied { ioctl } for pid=5733 comm="syz-executor" path="socket:[2838]" dev="sockfs" ino=2838 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.509939][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.518438][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.519657][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.522952][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.524056][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.525824][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.526341][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.526787][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.527166][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.527731][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.528571][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.530643][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.531544][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.532258][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.532907][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.534118][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.534447][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.540753][ T40] audit: type=1400 audit(1780048875.327:163): avc: denied { read } for pid=5743 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.545755][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.547717][ T40] audit: type=1400 audit(1780048875.327:164): avc: denied { open } for pid=5737 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.551485][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.553193][ T40] audit: type=1400 audit(1780048875.337:165): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.553882][ T40] audit: type=1400 audit(1780048875.337:166): avc: denied { module_request } for pid=5743 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.596899][ T40] audit: type=1400 audit(1780048875.377:167): avc: denied { sys_module } for pid=5733 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.062349][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.065086][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.067586][ T5733] bridge_slave_0: entered allmulticast mode [ 54.071498][ T5733] bridge_slave_0: entered promiscuous mode [ 54.091279][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.093390][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.096432][ T5733] bridge_slave_1: entered allmulticast mode [ 54.098902][ T5733] bridge_slave_1: entered promiscuous mode [ 54.139416][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.157215][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.159433][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.162208][ T5743] bridge_slave_0: entered allmulticast mode [ 54.165955][ T5743] bridge_slave_0: entered promiscuous mode [ 54.170121][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.201270][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.203457][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.205943][ T5743] bridge_slave_1: entered allmulticast mode [ 54.208779][ T5743] bridge_slave_1: entered promiscuous mode [ 54.239500][ T5733] team0: Port device team_slave_0 added [ 54.266452][ T5733] team0: Port device team_slave_1 added [ 54.269748][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.273952][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.320036][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.322704][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.324838][ T5737] bridge_slave_0: entered allmulticast mode [ 54.328077][ T5737] bridge_slave_0: entered promiscuous mode [ 54.359035][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.362080][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.365275][ T5738] bridge_slave_0: entered allmulticast mode [ 54.369542][ T5738] bridge_slave_0: entered promiscuous mode [ 54.373168][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.375489][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.377917][ T5737] bridge_slave_1: entered allmulticast mode [ 54.381672][ T5737] bridge_slave_1: entered promiscuous mode [ 54.386445][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.389161][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.399841][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.405311][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.408153][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.416248][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.420559][ T5743] team0: Port device team_slave_0 added [ 54.422480][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.425126][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.427896][ T5738] bridge_slave_1: entered allmulticast mode [ 54.431020][ T5738] bridge_slave_1: entered promiscuous mode [ 54.465308][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.470732][ T5743] team0: Port device team_slave_1 added [ 54.488180][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.492428][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.508568][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.510727][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.518534][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.524388][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.542517][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.544902][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.552623][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.567778][ T5737] team0: Port device team_slave_0 added [ 54.576963][ T5737] team0: Port device team_slave_1 added [ 54.605450][ T5738] team0: Port device team_slave_0 added [ 54.608267][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.611123][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.620900][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.629260][ T5733] hsr_slave_0: entered promiscuous mode [ 54.631642][ T5733] hsr_slave_1: entered promiscuous mode [ 54.634760][ T5738] team0: Port device team_slave_1 added [ 54.644580][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.646741][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.655462][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.687460][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.689520][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.697127][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.701458][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.703521][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.710992][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.720411][ T5743] hsr_slave_0: entered promiscuous mode [ 54.723438][ T5743] hsr_slave_1: entered promiscuous mode [ 54.726675][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 54.728899][ T5743] Cannot create hsr debugfs directory [ 54.799061][ T5737] hsr_slave_0: entered promiscuous mode [ 54.801090][ T5737] hsr_slave_1: entered promiscuous mode [ 54.802901][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 54.804494][ T5737] Cannot create hsr debugfs directory [ 54.859877][ T5738] hsr_slave_0: entered promiscuous mode [ 54.862960][ T5738] hsr_slave_1: entered promiscuous mode [ 54.866144][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 54.868485][ T5738] Cannot create hsr debugfs directory [ 55.100060][ T5743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.108538][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.125104][ T5743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.132011][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.156773][ T5743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.161324][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.164122][ T5743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.170114][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.201617][ T5733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.207524][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.215968][ T5733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.221866][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.228132][ T5733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.233471][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.245912][ T5733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.251856][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.307557][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.311686][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.314890][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.319422][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.322630][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.328801][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.331456][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.336038][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.410636][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.415229][ T5738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.419925][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.426960][ T5738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.430728][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.433480][ T5738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.439884][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.442876][ T5738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.449180][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.469902][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.489230][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.492053][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.510087][ T218] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.513066][ T218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.533377][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.566718][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.588792][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.591690][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.605127][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.605918][ T62] Bluetooth: hci3: command tx timeout [ 55.606151][ T5094] Bluetooth: hci0: command tx timeout [ 55.606297][ T5094] Bluetooth: hci1: command tx timeout [ 55.607944][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.617043][ T62] Bluetooth: hci2: command tx timeout [ 55.634704][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.660261][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.670316][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.672512][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.682999][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.685868][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.714060][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.756045][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.763494][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.765809][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.776159][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.778299][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.883714][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.937562][ T5743] veth0_vlan: entered promiscuous mode [ 55.945872][ T5743] veth1_vlan: entered promiscuous mode [ 55.977187][ T5743] veth0_macvtap: entered promiscuous mode [ 55.988654][ T5743] veth1_macvtap: entered promiscuous mode [ 56.007773][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.016194][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.021061][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.032353][ T1232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.047463][ T1232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.050951][ T1232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.060959][ T1232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.076016][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.095581][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.109951][ T5733] veth0_vlan: entered promiscuous mode [ 56.151974][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.156253][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.162243][ T5733] veth1_vlan: entered promiscuous mode [ 56.186631][ T5738] veth0_vlan: entered promiscuous mode [ 56.190404][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.193453][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.202074][ T5737] veth0_vlan: entered promiscuous mode [ 56.204972][ T5738] veth1_vlan: entered promiscuous mode [ 56.219045][ T5737] veth1_vlan: entered promiscuous mode [ 56.233479][ T5733] veth0_macvtap: entered promiscuous mode [ 56.242287][ T5733] veth1_macvtap: entered promiscuous mode [ 56.249251][ T5738] veth0_macvtap: entered promiscuous mode [ 56.254958][ T5743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.258839][ T5738] veth1_macvtap: entered promiscuous mode [ 56.266196][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.281649][ T5737] veth0_macvtap: entered promiscuous mode [ 56.287931][ T5737] veth1_macvtap: entered promiscuous mode [ 56.292794][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.297402][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.313859][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.318668][ T1232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.322256][ T1232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.331020][ T1232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.334117][ T1232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.344642][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.348169][ T1232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.358699][ T1232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.361466][ T1232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.372395][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.376658][ T1232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.405036][ T1163] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.413808][ T1163] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.417147][ T1163] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.429334][ T1163] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.460792][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.463947][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.470480][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.473762][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.517852][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.521219][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.542877][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.546474][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.570642][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.581419][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.610692][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.614341][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.619929][ T5893] mmap: syz.0.7 (5893) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.724869][ T5901] syzkaller0: entered promiscuous mode [ 56.730471][ T5901] syzkaller0: entered allmulticast mode [ 56.927911][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 56.941134][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 56.941655][ T46] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.949049][ T46] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.952927][ T46] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.956922][ T46] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.607454][ T5955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23'. [ 57.641023][ T5961] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 57.687418][ T5747] Bluetooth: hci1: command tx timeout [ 57.688220][ T5094] Bluetooth: hci0: command tx timeout [ 57.688263][ T5744] Bluetooth: hci3: command tx timeout [ 57.690563][ T62] Bluetooth: hci2: command tx timeout [ 57.769253][ T5980] netlink: 48 bytes leftover after parsing attributes in process `syz.3.32'. [ 57.808487][ T5987] netlink: 'syz.1.35': attribute type 12 has an invalid length. [ 57.841558][ T5974] syzkaller0: entered promiscuous mode [ 57.843904][ T5974] syzkaller0: entered allmulticast mode [ 58.041688][ T6000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.38'. [ 58.125454][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.149377][ T6008] netlink: 40 bytes leftover after parsing attributes in process `syz.2.40'. [ 58.153339][ T6008] tipc: Started in network mode [ 58.155030][ T6008] tipc: Node identity 109, cluster identity 4711 [ 58.157814][ T6008] tipc: Node number set to 265 [ 58.186928][ T6012] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.41'. [ 58.282270][ T29] usb 8-1: config 8 has an invalid interface number: 159 but max is 2 [ 58.284819][ T29] usb 8-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 58.287721][ T29] usb 8-1: config 8 has an invalid interface number: 136 but max is 2 [ 58.290787][ T29] usb 8-1: config 8 has an invalid interface number: 43 but max is 2 [ 58.293191][ T29] usb 8-1: config 8 has 4 interfaces, different from the descriptor's value: 3 [ 58.296829][ T29] usb 8-1: config 8 has no interface number 0 [ 58.298829][ T29] usb 8-1: config 8 has no interface number 2 [ 58.301310][ T29] usb 8-1: config 8 has no interface number 3 [ 58.303714][ T29] usb 8-1: config 8 interface 159 altsetting 29 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 58.309151][ T29] usb 8-1: config 8 interface 159 altsetting 29 has an endpoint descriptor with address 0x47, changing to 0x7 [ 58.313869][ T29] usb 8-1: config 8 interface 159 altsetting 29 endpoint 0x7 has an invalid bInterval 144, changing to 7 [ 58.318793][ T29] usb 8-1: config 8 interface 159 altsetting 29 endpoint 0x7 has invalid maxpacket 16750, setting to 1024 [ 58.323499][ T29] usb 8-1: config 8 interface 159 altsetting 29 has an invalid descriptor for endpoint zero, skipping [ 58.330715][ T29] usb 8-1: config 8 interface 159 altsetting 29 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 58.337858][ T29] usb 8-1: config 8 interface 159 altsetting 29 has a duplicate endpoint with address 0x7, skipping [ 58.342270][ T29] usb 8-1: config 8 interface 159 altsetting 29 bulk endpoint 0x9 has invalid maxpacket 16 [ 58.346650][ T29] usb 8-1: config 8 interface 159 altsetting 29 endpoint 0x3 has invalid wMaxPacketSize 0 [ 58.350245][ T40] kauditd_printk_skb: 114 callbacks suppressed [ 58.350259][ T40] audit: type=1400 audit(1780048880.137:282): avc: denied { write } for pid=6031 comm="syz.2.44" name="001" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.350435][ T29] usb 8-1: config 8 interface 159 altsetting 29 has a duplicate endpoint with address 0x9, skipping [ 58.353502][ T40] audit: type=1400 audit(1780048880.137:283): avc: denied { ioctl } for pid=6032 comm="syz.1.45" path="/dev/input/mice" dev="devtmpfs" ino=940 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 58.360633][ T29] usb 8-1: config 8 interface 159 altsetting 29 has a duplicate endpoint with address 0x3, skipping [ 58.360655][ T29] usb 8-1: config 8 interface 159 altsetting 29 has 11 endpoint descriptors, different from the interface descriptor's value: 14 [ 58.360679][ T29] usb 8-1: too many endpoints for config 8 interface 136 altsetting 174: 185, using maximum allowed: 30 [ 58.360710][ T29] usb 8-1: config 8 interface 136 altsetting 174 has an invalid descriptor for endpoint zero, skipping [ 58.360729][ T29] usb 8-1: config 8 interface 136 altsetting 174 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 58.360752][ T29] usb 8-1: config 8 interface 136 altsetting 174 has 4 endpoint descriptors, different from the interface descriptor's value: 185 [ 58.360784][ T29] usb 8-1: config 8 interface 1 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 58.360801][ T29] usb 8-1: config 8 interface 1 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 58.360821][ T29] usb 8-1: config 8 interface 1 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 58.360840][ T29] usb 8-1: config 8 interface 1 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 58.360857][ T29] usb 8-1: config 8 interface 159 has no altsetting 0 [ 58.364731][ T40] audit: type=1400 audit(1780048880.157:284): avc: denied { map_read map_write } for pid=6031 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 58.373239][ T29] usb 8-1: config 8 interface 136 has no altsetting 0 [ 58.400725][ T40] audit: type=1400 audit(1780048880.187:285): avc: denied { read write } for pid=6036 comm="syz.1.46" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 58.404577][ T29] usb 8-1: config 8 interface 43 has no altsetting 0 [ 58.408668][ T40] audit: type=1400 audit(1780048880.187:286): avc: denied { open } for pid=6036 comm="syz.1.46" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 58.412643][ T29] usb 8-1: config 8 interface 1 has no altsetting 0 [ 58.449882][ T29] usb 8-1: string descriptor 0 read error: -71 [ 58.450856][ T6037] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 58.451939][ T29] usb 8-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice=dc.41 [ 58.459482][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.465012][ T6037] warning: `syz.1.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.467513][ T29] usb 8-1: can't set config #8, error -71 [ 58.475252][ T40] audit: type=1400 audit(1780048880.257:287): avc: denied { bind } for pid=6036 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.479845][ T29] usb 8-1: USB disconnect, device number 2 [ 58.500546][ T6041] Zero length message leads to an empty skb [ 58.504505][ T40] audit: type=1400 audit(1780048880.287:288): avc: denied { read } for pid=6040 comm="syz.2.47" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.514288][ T40] audit: type=1400 audit(1780048880.287:289): avc: denied { open } for pid=6040 comm="syz.2.47" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.518097][ T6043] netlink: 48 bytes leftover after parsing attributes in process `syz.1.48'. [ 58.523072][ T40] audit: type=1400 audit(1780048880.297:290): avc: denied { map } for pid=6040 comm="syz.2.47" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.533676][ T40] audit: type=1400 audit(1780048880.317:291): avc: denied { create } for pid=6042 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.562436][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'. [ 58.643195][ T6049] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 58.718265][ T6065] SELinux: syz.1.53 (6065) wrote to checkreqprot. This is no longer supported. [ 58.918417][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 58.993964][ T6090] netlink: 'syz.3.60': attribute type 5 has an invalid length. [ 59.096766][ T59] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.255471][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 59.258347][ T59] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 59.260735][ T59] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 59.264275][ T59] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 59.269333][ T59] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.272801][ T59] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.276659][ T59] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 59.280253][ T59] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 59.283322][ T6097] netlink: 'syz.2.63': attribute type 10 has an invalid length. [ 59.284509][ T59] usb 5-1: config 168 interface 0 has no altsetting 0 [ 59.290268][ T59] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 59.292758][ T59] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 59.294920][ T6097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.296455][ T59] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 59.301678][ T6097] team0: Port device netdevsim1 added [ 59.303530][ T59] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.307383][ T6097] netlink: 'syz.2.63': attribute type 10 has an invalid length. [ 59.310271][ T59] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.321014][ T59] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 59.324495][ T59] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 59.328798][ T59] usb 5-1: config 168 interface 0 has no altsetting 0 [ 59.330628][ T6097] team0: Port device netdevsim1 removed [ 59.332439][ T59] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 59.335726][ T6097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.336460][ T59] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 59.340889][ T6097] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 59.342777][ T59] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 59.349683][ T59] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.353120][ T59] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.356609][ T59] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 59.360182][ T59] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 59.364349][ T59] usb 5-1: config 168 interface 0 has no altsetting 0 [ 59.368849][ T59] usb 5-1: string descriptor 0 read error: -22 [ 59.370980][ T59] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 59.373697][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.386244][ T59] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 59.584759][ T59] usb 5-1: USB disconnect, device number 2 [ 59.765524][ T62] Bluetooth: hci0: command tx timeout [ 59.775780][ T62] Bluetooth: hci3: command tx timeout [ 59.775873][ T5094] Bluetooth: hci2: command tx timeout [ 59.778963][ T5747] Bluetooth: hci1: command tx timeout [ 59.785886][ T6074] adutux: No device or device unplugged -19 [ 59.887209][ T6131] netlink: 'syz.3.70': attribute type 10 has an invalid length. [ 59.894700][ T6131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.899090][ T6131] team0: Port device netdevsim1 added [ 59.931262][ T6135] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 59.934009][ T6135] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 59.937005][ T6134] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 59.939749][ T6134] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 59.945862][ T6134] vhci_hcd vhci_hcd.0: Device attached [ 59.948473][ T6135] vhci_hcd vhci_hcd.0: Device attached [ 60.011908][ T6146] tmpfs: Unknown parameter 'mp' [ 60.141751][ T6157] netlink: 'syz.2.77': attribute type 5 has an invalid length. [ 60.185932][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.195538][ T24] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 60.313351][ T6172] ======================================================= [ 60.313351][ T6172] WARNING: The mand mount option has been deprecated and [ 60.313351][ T6172] and is ignored by this kernel. Remove the mand [ 60.313351][ T6172] option from the mount to silence this warning. [ 60.313351][ T6172] ======================================================= [ 60.336413][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 60.339268][ T34] usb 8-1: config 0 has no interfaces? [ 60.342819][ T34] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.346708][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.349814][ T34] usb 8-1: Product: syz [ 60.352440][ T34] usb 8-1: Manufacturer: syz [ 60.354305][ T34] usb 8-1: SerialNumber: syz [ 60.369197][ T34] usb 8-1: config 0 descriptor?? [ 60.468217][ T6178] syz_tun: entered allmulticast mode [ 60.482030][ T6178] syz_tun (unregistering): left allmulticast mode [ 60.705444][ T24] usb 43-1: device descriptor read/64, error -71 [ 60.743160][ T6136] vhci_hcd: connection closed [ 60.745723][ T46] vhci_hcd vhci_hcd.3: stop threads [ 60.751042][ T34] usb 8-1: USB disconnect, device number 3 [ 60.754891][ T6137] vhci_hcd: connection closed [ 60.756923][ T46] vhci_hcd vhci_hcd.3: release socket [ 60.762316][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 60.770777][ T46] vhci_hcd vhci_hcd.3: stop threads [ 60.772915][ T46] vhci_hcd vhci_hcd.3: release socket [ 60.788979][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 60.805147][ T6187] uprobe: syz.2.87:6187 failed to unregister, leaking uprobe [ 60.895585][ T24] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 61.218350][ T62] Bluetooth: Wrong link type (-22) [ 61.218845][ T6232] netlink: 'syz.2.97': attribute type 4 has an invalid length. [ 61.398679][ T6240] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 61.440047][ T6240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.622227][ T6249] capability: warning: `syz.2.102' uses deprecated v2 capabilities in a way that may be insecure [ 61.651549][ T6249] tmpfs: Unknown parameter 'H‰ÀyÐ àHÇÂh' [ 61.747747][ T6252] program syz.2.103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.833457][ T6261] ucma_write: process 68 (syz.0.106) changed security contexts after opening file descriptor, this is not allowed. [ 61.838658][ T6261] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 61.843755][ T6262] XFS (loop3): SB validate failed with error -5. [ 61.846216][ T62] Bluetooth: hci2: command tx timeout [ 61.846243][ T62] Bluetooth: hci3: command tx timeout [ 61.846263][ T62] Bluetooth: hci1: command tx timeout [ 61.846282][ T62] Bluetooth: hci0: command tx timeout [ 61.872491][ T6273] 9p: Bad value for 'dfltgid' [ 61.873744][ T6274] 9p: Bad value for 'dfltgid' [ 61.874312][ T6273] 9p: Bad value for 'dfltgid' [ 61.878989][ T6274] 9p: Bad value for 'dfltgid' [ 61.890515][ T6274] QAT: failed to copy from user cfg_data. [ 61.894839][ T6273] QAT: failed to copy from user cfg_data. [ 61.919285][ T5747] Bluetooth: Wrong link type (-22) [ 61.996064][ T6284] ip6gretap0: entered promiscuous mode [ 62.014852][ T6287] netlink: 'syz.2.115': attribute type 9 has an invalid length. [ 62.020781][ T6287] __nla_validate_parse: 5 callbacks suppressed [ 62.020796][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 62.155831][ C1] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 62.159113][ C1] sd 0:0:0:0: [sda] tag#15 CDB: Test Unit Ready [ 62.161840][ T6301] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.121'. [ 62.163861][ T6302] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.121'. [ 62.242705][ T6310] netlink: 'syz.3.123': attribute type 1 has an invalid length. [ 62.244417][ T6311] overlayfs: failed to resolve './file2': -2 [ 62.245897][ T6310] netlink: 96 bytes leftover after parsing attributes in process `syz.3.123'. [ 62.252628][ T6310] netlink: 606 bytes leftover after parsing attributes in process `syz.3.123'. [ 62.255797][ T6310] netlink: 1 bytes leftover after parsing attributes in process `syz.3.123'. [ 62.256653][ T6311] tmpfs: Bad value for 'nr_inodes' [ 62.262286][ T6312] overlayfs: failed to resolve './file2': -2 [ 62.277415][ T6310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1023 sclass=netlink_route_socket pid=6310 comm=syz.3.123 [ 62.311379][ T1163] Bluetooth: hci4: Frame reassembly failed (-84) [ 62.314477][ T1163] Bluetooth: hci4: Frame reassembly failed (-84) [ 62.696692][ T6285] syz.0.114 (6285): drop_caches: 1 [ 62.779755][ T6325] bridge_slave_0: left allmulticast mode [ 62.781979][ T6325] bridge_slave_0: left promiscuous mode [ 62.786377][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.794198][ T6325] bridge_slave_1: left allmulticast mode [ 62.799687][ T6325] bridge_slave_1: left promiscuous mode [ 62.802173][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.814418][ T6325] bond0: (slave bond_slave_0): Releasing backup interface [ 62.821506][ T6325] bond0: (slave bond_slave_1): Releasing backup interface [ 62.828770][ T6325] team0: Port device team_slave_0 removed [ 62.832931][ T6325] team0: Port device team_slave_1 removed [ 62.837664][ T6325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.840150][ T6325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.844390][ T6325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.848269][ T6325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.851638][ T6325] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.863635][ T6326] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.893107][ T6329] validate_nla: 2 callbacks suppressed [ 62.893120][ T6329] netlink: 'syz.0.128': attribute type 7 has an invalid length. [ 62.897515][ T6329] netlink: 'syz.0.128': attribute type 7 has an invalid length. [ 62.901266][ T6329] qrtr: Invalid version 80 [ 62.987215][ T6332] netlink: 'syz.0.129': attribute type 5 has an invalid length. [ 63.005145][ T6334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.130'. [ 63.183600][ T6344] netlink: 240 bytes leftover after parsing attributes in process `syz.3.132'. [ 63.281719][ T6352] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1iÒûm÷]7ä(äaŠàó H˜] ³¹¿ÃÇ [ 63.528815][ T6365] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 63.850261][ T40] kauditd_printk_skb: 113 callbacks suppressed [ 63.850276][ T40] audit: type=1400 audit(1780048885.637:405): avc: denied { ioctl } for pid=6376 comm="syz.3.139" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12675 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.870072][ T40] audit: type=1400 audit(1780048885.657:406): avc: denied { getopt } for pid=6380 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.911523][ T6384] netlink: 'syz.3.141': attribute type 1 has an invalid length. [ 63.926239][ T5747] Bluetooth: hci0: command tx timeout [ 63.973437][ T40] audit: type=1400 audit(1780048885.757:407): avc: denied { unlink } for pid=6390 comm="syz.3.143" name="#1" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 63.975005][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 63.987743][ T40] audit: type=1400 audit(1780048885.777:408): avc: denied { mount } for pid=6390 comm="syz.3.143" name="/" dev="overlay" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.994802][ T6393] overlayfs: failed lookup in lower (newroot/30, name='file0', err=-40): overlapping layers [ 63.996887][ T6391] can0: slcan on ttyS3. [ 64.044554][ T40] audit: type=1400 audit(1780048885.827:409): avc: denied { allowed } for pid=6395 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.059075][ T6389] can0 (unregistered): slcan off ttyS3. [ 64.061750][ T5747] block nbd0: Receive control failed (result -107) [ 64.081329][ T40] audit: type=1400 audit(1780048885.867:410): avc: denied { bind } for pid=6400 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.090318][ T40] audit: type=1400 audit(1780048885.887:411): avc: denied { setopt } for pid=6400 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.098877][ T40] audit: type=1400 audit(1780048885.887:412): avc: denied { write } for pid=6400 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.103608][ T6404] fuse: Invalid rootmode [ 64.105891][ T40] audit: type=1400 audit(1780048885.887:413): avc: denied { mounton } for pid=6403 comm="syz.0.147" path="/31/file0" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 64.136366][ T6407] tipc: Started in network mode [ 64.138710][ T6407] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 64.141124][ T6407] tipc: Enabled bearer , priority 0 [ 64.151588][ T40] audit: type=1400 audit(1780048885.937:414): avc: denied { mount } for pid=6409 comm="syz.1.149" name="/" dev="autofs" ino=12713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 64.200770][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 64.330247][ T6422] netlink: 'syz.1.152': attribute type 7 has an invalid length. [ 64.335815][ T5747] Bluetooth: hci4: command 0x1003 tx timeout [ 64.335979][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 64.339739][ T6422] netlink: 'syz.1.152': attribute type 7 has an invalid length. [ 64.341282][ T90] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.341431][ T1232] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.341454][ T1232] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.341472][ T1232] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.490876][ T6433] netlink: 'syz.2.156': attribute type 11 has an invalid length. [ 64.575439][ T29] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 64.644895][ T6445] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 64.688567][ T10] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105) [ 64.727508][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 64.731189][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.736154][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 64.739253][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.830250][ T6457] vlan1: entered promiscuous mode [ 64.832583][ T6457] vlan1: entered allmulticast mode [ 64.834464][ T6457] veth0_vlan: entered allmulticast mode [ 64.949414][ T29] usb 8-1: usb_control_msg returned -32 [ 64.951719][ T29] usbtmc 8-1:16.0: can't read capabilities [ 64.991330][ T6469] IPVS: Error joining to the multicast group [ 65.001370][ T6469] devpts: Bad value for 'max' [ 65.051862][ T6477] ipt_rpfilter: unknown options [ 65.157133][ T29] usb 8-1: USB disconnect, device number 4 [ 65.277422][ T10] tipc: Node number set to 11578026 [ 65.853796][ T6545] netlink: 'syz.2.196': attribute type 1 has an invalid length. [ 65.855211][ T6544] syz.3.195 uses obsolete (PF_INET,SOCK_PACKET) [ 65.872265][ T6545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.912905][ T6545] bond2: (slave veth3): Enslaving as an active interface with a down link [ 66.308033][ T6603] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 66.525025][ T6625] macvlan2: entered promiscuous mode [ 66.526759][ T6625] bridge0: entered promiscuous mode [ 66.538683][ T6625] vlan2: entered allmulticast mode [ 66.540321][ T6625] bond0: entered allmulticast mode [ 66.542213][ T6625] bond_slave_0: entered allmulticast mode [ 66.544151][ T6625] bond_slave_1: entered allmulticast mode [ 66.546282][ T6625] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 66.711188][ T6657] futex_wake_op: syz.0.235 tries to shift op by -1; fix this program [ 66.776280][ T6667] bond1: Removing last ns target with arp_interval on [ 66.938527][ T6684] F2FS-fs: Conflicting test_dummy_encryption options [ 67.513817][ T6691] __nla_validate_parse: 13 callbacks suppressed [ 67.513835][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 67.521086][ T6691] netlink: 2 bytes leftover after parsing attributes in process `syz.1.244'. [ 67.524748][ T6691] netlink: 2 bytes leftover after parsing attributes in process `syz.1.244'. [ 67.530864][ T6694] syzkaller0: entered promiscuous mode [ 67.533606][ T6694] syzkaller0: entered allmulticast mode [ 67.823439][ T6739] 9p: p9: multiple sources not supported [ 67.825240][ T6738] 9p: p9: multiple sources not supported [ 67.828312][ T6728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.829703][ T59] libceph: connect (1)[c::]:6789 error -101 [ 67.839477][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 67.881835][ T5813] libceph: connect (1)[b::]:6789 error -101 [ 67.887835][ T5813] libceph: mon0 (1)[b::]:6789 connect error [ 67.911303][ T6753] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 67.917731][ T6754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.261'. [ 67.963486][ T6756] geneve2: entered promiscuous mode [ 67.968263][ T6754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6754 comm=syz.1.261 [ 67.978026][ T6754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.261'. [ 68.008422][ T6762] netlink: 'syz.1.264': attribute type 10 has an invalid length. [ 68.011418][ T6763] netlink: 'syz.1.264': attribute type 10 has an invalid length. [ 68.020678][ T6762] team0: Port device dummy0 added [ 68.027667][ T6763] team0: Port device dummy0 removed [ 68.033437][ T6763] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 68.117083][ T29] libceph: connect (1)[c::]:6789 error -101 [ 68.121261][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 68.147257][ T10] libceph: connect (1)[b::]:6789 error -101 [ 68.152132][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 68.629047][ T59] libceph: connect (1)[c::]:6789 error -101 [ 68.632022][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 68.636788][ T6734] ceph: No mds server is up or the cluster is laggy [ 68.636799][ T6741] ceph: No mds server is up or the cluster is laggy [ 68.665679][ T5813] libceph: connect (1)[b::]:6789 error -101 [ 68.668168][ T5813] libceph: mon0 (1)[b::]:6789 connect error [ 68.941582][ T40] kauditd_printk_skb: 696 callbacks suppressed [ 68.941593][ T40] audit: type=1400 audit(1780048890.727:1111): avc: denied { create } for pid=6810 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 68.962852][ T40] audit: type=1400 audit(1780048890.747:1112): avc: denied { map_create } for pid=6810 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.970376][ T40] audit: type=1400 audit(1780048890.757:1113): avc: denied { read } for pid=6810 comm="syz.2.275" dev="nsfs" ino=4026532883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 68.979120][ T40] audit: type=1400 audit(1780048890.757:1114): avc: denied { bpf } for pid=6810 comm="syz.2.275" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 68.985840][ T40] audit: type=1400 audit(1780048890.757:1115): avc: denied { map_create } for pid=6810 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 69.170544][ T40] audit: type=1400 audit(1780048890.947:1116): avc: denied { read write } for pid=5737 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.201649][ T40] audit: type=1400 audit(1780048890.987:1117): avc: denied { read write } for pid=5733 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.225491][ T40] audit: type=1400 audit(1780048891.007:1118): avc: denied { create } for pid=6816 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 69.235524][ T40] audit: type=1400 audit(1780048891.007:1119): avc: denied { read } for pid=6816 comm="syz.3.276" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 69.246473][ T40] audit: type=1400 audit(1780048891.017:1120): avc: denied { read } for pid=6820 comm="syz.2.277" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 69.413927][ T6834] netlink: 44 bytes leftover after parsing attributes in process `syz.0.282'. [ 69.457460][ T6834] netlink: 44 bytes leftover after parsing attributes in process `syz.0.282'. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xac000) [ 69.778832][ T1133] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 69.786192][ T1133] ata1: failed to read log page 10h (errno=-5) [ 69.794652][ T1133] ata1.00: exception Emask 0x1 SAct 0x40000020 SErr 0x0 action 0x0 [ 69.802068][ T1133] ata1.00: irq_stat 0x40000000 [ 69.812688][ T1133] ata1.00: failed command: WRITE FPDMA QUEUED [ 69.819911][ T1133] ata1.00: cmd 61/c8:28:16:2f:08/02:00:00:00:00/40 tag 5 ncq dma 364544 out [ 69.819911][ T1133] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 69.839713][ T1133] ata1.00: status: { DRDY } [ 69.841478][ T1133] ata1.00: failed command: WRITE FPDMA QUEUED [ 69.848643][ T1133] ata1.00: cmd 61/60:f0:b6:29:08/05:00:00:00:00/40 tag 30 ncq dma 704512 out [ 69.848643][ T1133] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 69.853688][ T6858] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 69.862721][ T1133] ata1.00: status: { DRDY } [ 69.867361][ T1133] ata1.00: configured for UDMA/100 [ 69.869569][ T1133] ata1: EH complete qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xac000) [ 69.928305][ T1133] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 69.931181][ T1133] ata1: failed to read log page 10h (errno=-5) [ 69.933827][ T1133] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 69.938835][ T1133] ata1.00: irq_stat 0x40000000 [ 69.941424][ T1133] ata1.00: failed command: WRITE FPDMA QUEUED [ 69.945217][ T1133] ata1.00: cmd 61/60:70:b6:29:08/05:00:00:00:00/40 tag 14 ncq dma 704512 out [ 69.945217][ T1133] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 69.955019][ T1133] ata1.00: status: { DRDY } [ 69.958919][ T1133] ata1.00: failed command: WRITE FPDMA QUEUED [ 69.961916][ T1133] ata1.00: cmd 61/78:78:96:46:08/02:00:00:00:00/40 tag 15 ncq dma 323584 out [ 69.961916][ T1133] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 69.972105][ T1133] ata1.00: status: { DRDY } [ 69.978033][ T1133] ata1.00: configured for UDMA/100 [ 69.980574][ T1133] ata1: EH complete [ 70.414738][ T6773] cgroup: fork rejected by pids controller in /syz1 [ 70.428578][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 70.446161][ T6897] netlink: 'syz.3.303': attribute type 2 has an invalid length. [ 70.621165][ T10] libceph: connect (1)[c::]:6789 error -101 [ 70.625169][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 70.704373][ T6922] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 70.738292][ T6927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.313'. [ 70.788792][ T6931] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 70.887302][ T10] libceph: connect (1)[c::]:6789 error -101 [ 70.889247][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 71.187998][ T6885] syz.1.267 (6885) used greatest stack depth: 19688 bytes left [ 71.196196][ T6823] syz.1.267 (6823) used greatest stack depth: 19480 bytes left [ 71.219900][ T6815] syz.1.267 (6815) used greatest stack depth: 19320 bytes left [ 71.285775][ T6875] syz.1.267 (6875) used greatest stack depth: 17992 bytes left [ 71.309456][ T6784] syz.1.267 (6784) used greatest stack depth: 17768 bytes left [ 71.397040][ T10] libceph: connect (1)[c::]:6789 error -101 [ 71.399267][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 71.433154][ T6916] ceph: No mds server is up or the cluster is laggy [ 71.445437][ T62] Bluetooth: hci1: command tx timeout [ 71.524970][ T6943] Cannot find add_set index 0 as target [ 71.587655][ T6950] netlink: 68 bytes leftover after parsing attributes in process `syz.2.322'. [ 71.659763][ T6966] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 71.663327][ T6966] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 71.716107][ T6944] bond0: (slave dummy0): Releasing backup interface [ 71.797012][ T6977] netlink: 'syz.3.329': attribute type 11 has an invalid length. [ 71.801301][ T6977] netlink: 'syz.3.329': attribute type 7 has an invalid length. [ 71.853389][ T6778] ------------[ cut here ]------------ [ 71.855826][ T6778] nr == SWAPFILE_CLUSTER && ci->extend_table [ 71.855834][ T6778] WARNING: mm/swapfile.c:471 at swap_cluster_assert_empty+0x2d5/0x320, CPU#3: syz.1.267/6778 [ 71.860750][ T6778] Modules linked in: [ 71.862275][ T6778] CPU: 3 UID: 0 PID: 6778 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(full) [ 71.865166][ T6778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.868260][ T6778] RIP: 0010:swap_cluster_assert_empty+0x2d5/0x320 [ 71.870133][ T6778] Code: 9b ff 49 8d 7d 50 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 46 49 83 7d 50 00 74 a5 e8 4c 09 9b ff 90 <0f> 0b 90 eb 9a e8 41 09 9b ff 90 0f 0b 90 e9 6f ff ff ff 48 89 ef [ 71.875922][ T6778] RSP: 0018:ffffc900039d7098 EFLAGS: 00010293 [ 71.877728][ T6778] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff826d976c [ 71.880227][ T6778] RDX: ffff888037a62540 RSI: ffffffff826d97d4 RDI: ffff8880273450f8 [ 71.882510][ T6778] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000200 [ 71.884857][ T6778] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000200 [ 71.887736][ T6778] R13: ffff8880273450a8 R14: 0000000000000001 R15: 0000000000000000 [ 71.890099][ T6778] FS: 0000000000000000(0000) GS:ffff8880d6686000(0000) knlGS:0000000000000000 [ 71.892721][ T6778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.894721][ T6778] CR2: 0000001b33323ffc CR3: 000000000e596000 CR4: 0000000000352ef0 [ 71.897160][ T6778] Call Trace: [ 71.898150][ T6778] [ 71.899019][ T6778] free_cluster+0x14b/0x360 [ 71.900345][ T6778] __swap_cluster_free_entries+0x73f/0xa30 [ 71.902075][ T6778] swap_put_entries_cluster+0x473/0x5b0 [ 71.903747][ T6778] swap_put_entries_direct+0x123/0x1b0 [ 71.905463][ T6778] ? __pfx_swap_put_entries_direct+0x10/0x10 [ 71.907236][ T6778] ? rcu_is_watching+0x12/0xc0 [ 71.908671][ T6778] ? _raw_spin_unlock_irq+0x23/0x50 [ 71.910199][ T6778] shmem_free_swap+0x1f4/0x200 [ 71.911604][ T6778] ? __pfx_shmem_free_swap+0x10/0x10 [ 71.913199][ T6778] ? filemap_remove_folio+0x19b/0x2a0 [ 71.915001][ T6778] ? do_raw_spin_unlock+0x145/0x1e0 [ 71.916889][ T6778] shmem_undo_range+0x3fd/0x1570 [ 71.918655][ T6778] ? __pfx_shmem_undo_range+0x10/0x10 [ 71.920644][ T6778] shmem_evict_inode+0x3f3/0xc40 [ 71.922362][ T6778] ? inode_wait_for_writeback+0x171/0x390 [ 71.924453][ T6778] ? __pfx_shmem_evict_inode+0x10/0x10 [ 71.926371][ T6778] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 71.928248][ T6778] ? find_held_lock+0x2b/0x80 [ 71.929956][ T6778] ? evict+0x37e/0xad0 [ 71.931348][ T6778] ? evict+0x37e/0xad0 [ 71.932787][ T6778] ? __pfx_shmem_evict_inode+0x10/0x10 [ 71.934670][ T6778] evict+0x3c2/0xad0 [ 71.935903][ T6778] ? find_held_lock+0x2b/0x80 [ 71.937350][ T6778] ? __pfx_evict+0x10/0x10 [ 71.938713][ T6778] ? iput.part.0+0x5fd/0xf50 [ 71.940048][ T6778] iput.part.0+0x605/0xf50 [ 71.941660][ T6778] ? __pfx_inode_just_drop+0x10/0x10 [ 71.943612][ T6778] iput+0x35/0x40 [ 71.944723][ T6778] dentry_unlink_inode+0x2c0/0x4c0 [ 71.946367][ T6778] __dentry_kill+0x1d0/0x690 [ 71.947767][ T6778] finish_dput+0x76/0x480 [ 71.949274][ T6778] dput.part.0+0x456/0x570 [ 71.950593][ T6778] dput+0x1f/0x30 [ 71.951877][ T6778] __fput+0x519/0xb50 [ 71.953053][ T6778] task_work_run+0x150/0x240 [ 71.954412][ T6778] ? __pfx_task_work_run+0x10/0x10 [ 71.955954][ T6778] ? do_raw_spin_unlock+0x145/0x1e0 [ 71.957475][ T6778] do_exit+0x951/0x2af0 [ 71.958676][ T6778] ? __pfx_do_exit+0x10/0x10 [ 71.960035][ T6778] ? __pfx_proc_coredump_connector+0x10/0x10 [ 71.961741][ T6778] do_group_exit+0xd5/0x2a0 [ 71.963063][ T6778] get_signal+0x20ff/0x2210 [ 71.964446][ T6778] ? __pfx_get_signal+0x10/0x10 [ 71.965957][ T6778] ? __pfx_force_sig_fault+0x10/0x10 [ 71.967527][ T6778] arch_do_signal_or_restart+0x91/0x7e0 [ 71.969131][ T6778] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 71.970939][ T6778] ? rcu_is_watching+0x12/0xc0 [ 71.972348][ T6778] irqentry_exit+0x39e/0x970 [ 71.973707][ T6778] asm_exc_page_fault+0x26/0x30 [ 71.975181][ T6778] RIP: 0033:0x7f3317d9ce61 [ 71.976571][ T6778] Code: Unable to access opcode bytes at 0x7f3317d9ce37. [ 71.978641][ T6778] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 71.980391][ T6778] RAX: 0000000000000000 RBX: 00007f3318015fa0 RCX: 00007f3317d9ce59 [ 71.982685][ T6778] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000011 [ 71.985034][ T6778] RBP: 00007f3317e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 71.987479][ T6778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 71.989802][ T6778] R13: 00007f3318016038 R14: 00007f3318015fa0 R15: 00007ffc650798c8 [ 71.992143][ T6778] [ 71.993065][ T6778] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 71.995222][ T6778] CPU: 3 UID: 0 PID: 6778 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(full) [ 71.997801][ T6778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.000676][ T6778] Call Trace: [ 72.001649][ T6778] [ 72.002549][ T6778] dump_stack_lvl+0x100/0x190 [ 72.003962][ T6778] vpanic+0x552/0x970 [ 72.005155][ T6778] ? __pfx_vpanic+0x10/0x10 [ 72.006549][ T6778] panic+0xd1/0xe0 [ 72.007650][ T6778] ? __pfx_panic+0x10/0x10 [ 72.008973][ T6778] ? check_panic_on_warn+0x1f/0x90 [ 72.010515][ T6778] check_panic_on_warn.cold+0x19/0x34 [ 72.012173][ T6778] ? swap_cluster_assert_empty+0x2d5/0x320 [ 72.013950][ T6778] __warn.cold+0x191/0x328 [ 72.015252][ T6778] __report_bug+0x296/0x3d0 [ 72.016549][ T6778] ? swap_cluster_assert_empty+0x2d5/0x320 [ 72.018216][ T6778] ? __pfx___report_bug+0x10/0x10 [ 72.019682][ T6778] ? xas_load+0x44/0x5c0 [ 72.020940][ T6778] ? xas_store+0x409/0x1a30 [ 72.022273][ T6778] ? swap_cluster_assert_empty+0x2d5/0x320 [ 72.024023][ T6778] report_bug+0xb2/0x220 [ 72.025237][ T6778] ? swap_cluster_assert_empty+0x2d5/0x320 [ 72.026872][ T6778] handle_bug+0x16a/0x2a0 [ 72.028185][ T6778] exc_invalid_op+0x17/0x50 [ 72.029547][ T6778] asm_exc_invalid_op+0x1a/0x20 [ 72.031039][ T6778] RIP: 0010:swap_cluster_assert_empty+0x2d5/0x320 [ 72.032953][ T6778] Code: 9b ff 49 8d 7d 50 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 46 49 83 7d 50 00 74 a5 e8 4c 09 9b ff 90 <0f> 0b 90 eb 9a e8 41 09 9b ff 90 0f 0b 90 e9 6f ff ff ff 48 89 ef [ 72.039940][ T6778] RSP: 0018:ffffc900039d7098 EFLAGS: 00010293 [ 72.042227][ T6778] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff826d976c [ 72.045358][ T6778] RDX: ffff888037a62540 RSI: ffffffff826d97d4 RDI: ffff8880273450f8 [ 72.048482][ T6778] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000200 [ 72.051544][ T6778] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000200 [ 72.054606][ T6778] R13: ffff8880273450a8 R14: 0000000000000001 R15: 0000000000000000 [ 72.057761][ T6778] ? swap_cluster_assert_empty+0x26c/0x320 [ 72.060104][ T6778] ? swap_cluster_assert_empty+0x2d4/0x320 [ 72.062483][ T6778] ? swap_cluster_assert_empty+0x2d4/0x320 [ 72.064875][ T6778] free_cluster+0x14b/0x360 [ 72.066671][ T6778] __swap_cluster_free_entries+0x73f/0xa30 [ 72.068907][ T6778] swap_put_entries_cluster+0x473/0x5b0 [ 72.071094][ T6778] swap_put_entries_direct+0x123/0x1b0 [ 72.073271][ T6778] ? __pfx_swap_put_entries_direct+0x10/0x10 [ 72.075660][ T6778] ? rcu_is_watching+0x12/0xc0 [ 72.077590][ T6778] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.079501][ T6778] shmem_free_swap+0x1f4/0x200 [ 72.081376][ T6778] ? __pfx_shmem_free_swap+0x10/0x10 [ 72.083453][ T6778] ? filemap_remove_folio+0x19b/0x2a0 [ 72.085602][ T6778] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.087698][ T6778] shmem_undo_range+0x3fd/0x1570 [ 72.089665][ T6778] ? __pfx_shmem_undo_range+0x10/0x10 [ 72.091644][ T6778] shmem_evict_inode+0x3f3/0xc40 [ 72.093418][ T6778] ? inode_wait_for_writeback+0x171/0x390 [ 72.095456][ T6778] ? __pfx_shmem_evict_inode+0x10/0x10 [ 72.097380][ T6778] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 72.099503][ T6778] ? find_held_lock+0x2b/0x80 [ 72.101014][ T6778] ? evict+0x37e/0xad0 [ 72.102175][ T6778] ? evict+0x37e/0xad0 [ 72.103353][ T6778] ? __pfx_shmem_evict_inode+0x10/0x10 [ 72.104942][ T6778] evict+0x3c2/0xad0 [ 72.106050][ T6778] ? find_held_lock+0x2b/0x80 [ 72.107656][ T6778] ? __pfx_evict+0x10/0x10 [ 72.109247][ T6778] ? iput.part.0+0x5fd/0xf50 [ 72.110816][ T6778] iput.part.0+0x605/0xf50 [ 72.112163][ T6778] ? __pfx_inode_just_drop+0x10/0x10 [ 72.113749][ T6778] iput+0x35/0x40 [ 72.114859][ T6778] dentry_unlink_inode+0x2c0/0x4c0 [ 72.116371][ T6778] __dentry_kill+0x1d0/0x690 [ 72.117722][ T6778] finish_dput+0x76/0x480 [ 72.118969][ T6778] dput.part.0+0x456/0x570 [ 72.120259][ T6778] dput+0x1f/0x30 [ 72.121318][ T6778] __fput+0x519/0xb50 [ 72.122541][ T6778] task_work_run+0x150/0x240 [ 72.123919][ T6778] ? __pfx_task_work_run+0x10/0x10 [ 72.125421][ T6778] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.126976][ T6778] do_exit+0x951/0x2af0 [ 72.128231][ T6778] ? __pfx_do_exit+0x10/0x10 [ 72.129605][ T6778] ? __pfx_proc_coredump_connector+0x10/0x10 [ 72.131397][ T6778] do_group_exit+0xd5/0x2a0 [ 72.132755][ T6778] get_signal+0x20ff/0x2210 [ 72.134124][ T6778] ? __pfx_get_signal+0x10/0x10 [ 72.135577][ T6778] ? __pfx_force_sig_fault+0x10/0x10 [ 72.137158][ T6778] arch_do_signal_or_restart+0x91/0x7e0 [ 72.138820][ T6778] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 72.140658][ T6778] ? rcu_is_watching+0x12/0xc0 [ 72.142111][ T6778] irqentry_exit+0x39e/0x970 [ 72.143566][ T6778] asm_exc_page_fault+0x26/0x30 [ 72.145011][ T6778] RIP: 0033:0x7f3317d9ce61 [ 72.146364][ T6778] Code: Unable to access opcode bytes at 0x7f3317d9ce37. [ 72.148438][ T6778] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 72.150208][ T6778] RAX: 0000000000000000 RBX: 00007f3318015fa0 RCX: 00007f3317d9ce59 [ 72.152566][ T6778] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000011 [ 72.154896][ T6778] RBP: 00007f3317e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 72.157162][ T6778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 72.159508][ T6778] R13: 00007f3318016038 R14: 00007f3318015fa0 R15: 00007ffc650798c8 [ 72.161858][ T6778] [ 72.163535][ T6778] Kernel Offset: disabled [ 72.164827][ T6778] Rebooting in 86400 seconds..