last executing test programs: 1m55.923380322s ago: executing program 0 (id=459): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x80, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) r3 = accept$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @rose, @remote, @null, @default, @bcast, @bcast]}, &(0x7f0000000180)=0x48) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f00000003c0)=0x9, &(0x7f0000000500)=0x4) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="7aea55", 0x3}], 0x1, &(0x7f0000000440)=ANY=[], 0x488}, 0x40) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004140)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x102, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x14}, 0xc) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x303000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0000000900000000040000f9ffffff80000100", @ANYRES32=r4, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000004000000050000000e00"/24, @ANYRES32=r5, @ANYBLOB="7f0186dfd8bfd41c72b60c68c8c60d314a1100ecf4b083db9ba37b4117f95a65b07799a1cb4245330c4acf3a8cb50f3748995a"], 0xfffffffffffffeac) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) ioctl$KDGKBDIACR(r7, 0x4b4a, &(0x7f00000000c0)=""/157) 1m53.744536437s ago: executing program 0 (id=490): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x2048004}, 0x40000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000680)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000880)="b4e15258e6d2de1115c41c179f20b4490bbe014236913aeb1a6b08a49b5c1fb2cd37b2ee2f0a79dbc822b8832b467091c04df7b5f1123a94af35a88de7c7c94ee4cd0dce81759e4960a43cfda1ca267a7e5c5561e7f89bb383ac3746d9a99d838d83f5389be14103771b10cbda92f5e93788fbc8c86cec59f705a8fc3c5712c3297d452e9205c2628384413946a28b28f6d46693846ccd48fd2905da98601fdd23afa409d88a7ad971f72a6f334d6071b190e4c5fd84068c20d5ba", 0xbb}, {&(0x7f0000000340)="76da791cc874fd5bf9c9bc5e31771045ebf765d297521977c53db83b195d57172cebc58cec682408834ad8ac128cdc9d9e733b660a", 0x35}, {&(0x7f0000000940)="4d14ff454748d2ebcb7fcd03c83687baf787990c6d03b05ceb8039fd580a36206115ed08f839fc88649039884324558653d8f1d5fbf10ad9d463045a2fd42b9ede3336baa16d7a39f31553da18da1ca427711e1abafbf506f35d403152f4388b1cead846a8c7eb29b5c618bd96dce950760dfb5cc4fd6cd34a9abfb303e86cbb026f7dab06f7cd9b971f", 0x8a}, {&(0x7f0000000500)="0be2fbf6d2691664294f283f2162586bc93571ca3c6a7c1e7673a8df1ac2a7", 0x1f}, {&(0x7f0000000a00)="7f7f86ba175bfee49f067720b771075fdc2f61458abfb698870d34e0deb362a7266c0052268f26dfa579b5aca8370febd84e622d45193b2cf0edba28c0d50f808db3b515fb0bf44bd3c2de8c2cda885775b768adbe968ba4aabeb0e99f16bf63f048749fa8a7789eda4f3cf11bcbe7178d9ac9811ef8aa7bc0ba2e7ba2dd850297ef37c0ca9f7fce75f1d29bf4de43ff390c348e4f7062016d149a6ca3fe41932851d905330d3e6afbac99f893d9c72cfdaa56392ccbd0", 0xb7}, {&(0x7f0000000c00)="a73e938a38c6169c31aef45e47e7a072c0851900cc6d233c907804005f5a8c8518d271a132f3e696cb91362e323d3d2d586d2d10111e1d90a60712a34cf0197723ee7026ed3fd3ba2be1a77ac0419a225d77180830af53320333f15e35a7812393fa15ef0ce8a1dfa77d56569a498e7045bddca67bce93806406fa22cc7df269a233f1d7ca14ad3ad2e66e7f5fddb819e38e8f53597c4dd5b1de1ad6a4556bb1e68d3036b213d14e2960d72ec9d9041b7041ce6513436a7c694a59710ead14b4c9", 0xc1}, {&(0x7f0000000e00)="c94210565728b29508f066b81f0013f4f7fdc7d5a873da27f697fb61b65f875c034c8383e4e0a1dc4cff9fe14f0176b2dacce03d511f4d7bdf29357b7a9dc0ca608124844462a72f7c2d4d95faa5979ec059282b893aa62e5ad04c30ab49c83e5553c1fc2d6674f60b382eef8a720246cdd0d21acd8532a3a96b3153813285082db5458faec0c10d9952e476b75541", 0x8f}, {&(0x7f0000002840)="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", 0x1000}], 0x8, &(0x7f0000000ac0)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d40)="99ca236c9303ace8258d5554f904ee531d83040767f11426", 0x18}], 0x1}}], 0x2, 0x0) pwritev(r3, &(0x7f0000000d80), 0x0, 0x4d9d, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0xfffffffe, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000dcdf250f0000af", @ANYRES32=0x0, @ANYBLOB="4000e4090a0002000180c20000030000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 1m52.814619159s ago: executing program 0 (id=494): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="66460f11caf69ec7438d2ac463714b60920f66ba6100ed0f01d164430f01c2400f300f01cab805000000b9000000000f01c1660f38805809"}], 0xaaaaaaaaaaaad75, 0x10, 0x0, 0xffffffb8) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000003c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m52.595037002s ago: executing program 0 (id=495): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a40)="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", 0x5c1}], 0x1}, 0x48010) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 1m52.576039623s ago: executing program 0 (id=497): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) lsetxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@random={'trusted.', 'gretap\x00'}, &(0x7f0000000540)='^\x00', 0x2, 0x3) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=r1, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1m51.814743868s ago: executing program 1 (id=508): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x3, 0x18, 0x1c, 0x1, 0x4, 0x2, 0x4}}) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffff80000000, 0x52501) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000040)) 1m51.814345041s ago: executing program 1 (id=509): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x13c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x101}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5e}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x382}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x237}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x147}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}]}, 0x13c}, 0x1, 0x0, 0x0, 0x48c0}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0x2d, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x7) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r3, 0x89f2, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8}) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000280)) open(0x0, 0x40, 0x55) setsockopt$netrom_NETROM_T1(r2, 0x11d, 0x1, 0x0, 0x4) 1m51.522448445s ago: executing program 0 (id=510): r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@posixacl}]}}) r1 = socket$netlink(0x10, 0x3, 0x14) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, &(0x7f0000000000)={'trans=virtio,', {[{@access_any}]}}) sendmsg$netlink(r1, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001840)={0x10, 0x1000}, 0x10}], 0x1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL={0x8, 0x7, @private=0xa010102}]}}}]}, 0x40}}, 0x50) r9 = openat$cgroup_procs(r7, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) readv(r9, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/252, 0xfc}], 0x1) sendfile(r9, r9, &(0x7f0000000000)=0x5, 0x6) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xc, 0xd}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1m51.313880158s ago: executing program 1 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703fff818000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m51.312222159s ago: executing program 1 (id=512): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f00000000c0)=0x3, 0x4) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000001100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 1m51.204654589s ago: executing program 1 (id=513): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$llc(r1, &(0x7f0000000bc0)="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", 0x1000, 0x4008010, &(0x7f00000000c0)={0x1a, 0x311, 0x4, 0x5, 0x9, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0xfffffffffffffcfa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x20140c4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40800) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffffffffffff0000000000000000000000000000000000000000cbbb762a573bdde111912d8eeeab79c764795833f5ebdc7930329e0000000000000000"], 0x48) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7}]}}}]}, 0x3c}}, 0x0) chroot(&(0x7f0000000b80)='./file0\x00') umount2(&(0x7f0000000280)='./file0\x00', 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x4, 0x0, 0x0, {0x2, 0x0, 0x14, 0x6, 0x44, 0x0, 0x0, 0x7, 0x1001d}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1m50.933075533s ago: executing program 1 (id=516): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bind$inet6(r0, 0x0, 0x0) (async) bind$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r4, 0x0, 0x0) (async) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="1846f800fb0a78eeff3c20f1670e169908f2b2de5c6b", 0x16}, {&(0x7f0000000380)="b0ed4a47db9c0530e308119f4c55d580759d624d585de9768f9b138d4a3a0bb0d66a63fceea8006c96d55d9e3a1f6932090893aaa7be5e291fd4d9554e", 0x3d}, {&(0x7f0000000480)="94ba6a7cac9845baac1ddbfe3b7064cad590fc7f8ee4919664f0840aab44c4f348981c9be0279325dbba779fe5", 0x2d}], 0x3, 0x0, 0x0, 0x1}], 0x1, 0x40c4850) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) 1m50.898449067s ago: executing program 32 (id=516): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bind$inet6(r0, 0x0, 0x0) (async) bind$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r4, 0x0, 0x0) (async) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="1846f800fb0a78eeff3c20f1670e169908f2b2de5c6b", 0x16}, {&(0x7f0000000380)="b0ed4a47db9c0530e308119f4c55d580759d624d585de9768f9b138d4a3a0bb0d66a63fceea8006c96d55d9e3a1f6932090893aaa7be5e291fd4d9554e", 0x3d}, {&(0x7f0000000480)="94ba6a7cac9845baac1ddbfe3b7064cad590fc7f8ee4919664f0840aab44c4f348981c9be0279325dbba779fe5", 0x2d}], 0x3, 0x0, 0x0, 0x1}], 0x1, 0x40c4850) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) 1m50.083340421s ago: executing program 3 (id=522): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000ed0300022dbd7000ffdbdf257b7abc4d"], 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r1, 0x540b, 0x2) 1m50.082682104s ago: executing program 3 (id=523): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 1m50.078720274s ago: executing program 3 (id=524): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f23, 0x5, 0x2, 0x4000401, 0x1, 0x40000cc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x8, 0x10001, 0x1, 0x9, 0xe1cb, 0x6, 0x401, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x32, 0xfffffff5, 0xffffeadb, 0x7, 0x3c, 0x8, 0x3, 0x8000000, 0x2ec0]}) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f00000d76c0)=[{0xa000005, 0x0, 0x0, 0x0, 0x2da}]}) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/184, 0xb8}], 0x1, 0x801, 0x804) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000040)={0x6, 0x1}) 1m49.934904057s ago: executing program 3 (id=525): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000300)) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000040)={0x3b, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x19, 0x4, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x41c}, [@jmp={0x5, 0x0, 0xb, 0x4, 0xb, 0xfffffffffffffffe, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) 1m49.655002699s ago: executing program 3 (id=528): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (rerun: 64) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0xfffffff7, 0x6) (async) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1a3, &(0x7f0000000240)={@multicast, @random="04b09812d367", @val={@void, {0x8100, 0x7, 0x1}}, {@mpls_uc={0x8847, {[{}, {0x3}], @ipv4=@tcp={{0x25, 0x4, 0x2, 0x2d, 0x189, 0x65, 0x0, 0x6, 0x6, 0x0, @rand_addr=0x64010102, @loopback, {[@lsrr={0x83, 0x17, 0xa2, [@broadcast, @local, @rand_addr=0x64010101, @rand_addr=0x64010102, @multicast2]}, @rr={0x7, 0x7, 0xa, [@broadcast]}, @ssrr={0x89, 0x1b, 0xd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x32}]}, @timestamp={0x44, 0x18, 0xd8, 0x0, 0x9, [0x0, 0x9, 0x3ff, 0x800, 0xf9]}, @timestamp={0x44, 0x2c, 0x86, 0x0, 0x0, [0x9, 0x6447, 0x9, 0x7ff, 0xb, 0x401, 0x16, 0x7, 0xfff, 0x15c00]}]}}, {{0x4e21, 0x4e22, r2, r3, 0x0, 0x0, 0xa, 0x10, 0x3ff, 0x0, 0x8, {[@fastopen={0x22, 0x11, "c863e7f7d153f80b9a2ffdd8664e36"}]}}, {"1922411a918213a5c84ddf3162b32a3de2e401c809e0191ba561ba47fd09873e6787fe7544a4240d4975cdc95c05975676a76c6f372e46b9923c271926fe6323c77cf0dee97331a7a5947142803f667f549093016c994807979534502f8a3c53e4a866091d4df1f53a10e45a28c1190bdef74e215870f657a86f740353ea71cbe377ba9620a7fc4d42ce4b44a79f546c31118b1ecac9a87f2a10d9b833067df3faabc0bdcca2f92a3551e6a957a07a3305b7cc8beb1ddf07368e80a507aded55db4ba6ad15e2a2deebe84059c6"}}}}}}}, &(0x7f00000000c0)={0x1, 0x1, [0x512, 0x128, 0x3a7, 0xed6]}) (async) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3b}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x34000800) 1m49.424301946s ago: executing program 3 (id=531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xc4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x50881}, 0x24008040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r6 = dup3(r5, r4, 0x0) recvmmsg$unix(r6, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000004c0)=@req3={0x8249, 0x4, 0xfffffffa, 0x5, 0x9, 0xd, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x101d0}}], 0x400000000000181, 0x9200000000000000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000300000003000000580001800d0001007564703a73797a310000000044000400200001000a004e2400000044fe800000000000000000000000000016f80f0000120002000a000000fffffffcff02000000000000000000000000000103000000da07c57556e2f95964337fb425ad062181e649d25290ca9bc053e7c25c4173175388ece7aae8762f"], 0x6c}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010027bd6b670e04287000fedbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x800) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050025bd7000fddbdf250600000008000300", @ANYRES32=r9, @ANYBLOB="08000500060002000400178029157daffd7433bd2b1da61e730c4b53db7e2b6d9527b0b88b00f07e392d906c5b7aa4e032d743c857c7629e76145320fc02d464c194924439927a20aba6d0c1c1f8ac8703af71e4dc2b3233d7eb4146ced05c66e600"/107], 0x28}, 0x1, 0x0, 0x0, 0x40048}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x40000) 1m49.345774626s ago: executing program 33 (id=531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xc4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x50881}, 0x24008040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r6 = dup3(r5, r4, 0x0) recvmmsg$unix(r6, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000004c0)=@req3={0x8249, 0x4, 0xfffffffa, 0x5, 0x9, 0xd, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x101d0}}], 0x400000000000181, 0x9200000000000000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000300000003000000580001800d0001007564703a73797a310000000044000400200001000a004e2400000044fe800000000000000000000000000016f80f0000120002000a000000fffffffcff02000000000000000000000000000103000000da07c57556e2f95964337fb425ad062181e649d25290ca9bc053e7c25c4173175388ece7aae8762f"], 0x6c}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010027bd6b670e04287000fedbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x800) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050025bd7000fddbdf250600000008000300", @ANYRES32=r9, @ANYBLOB="08000500060002000400178029157daffd7433bd2b1da61e730c4b53db7e2b6d9527b0b88b00f07e392d906c5b7aa4e032d743c857c7629e76145320fc02d464c194924439927a20aba6d0c1c1f8ac8703af71e4dc2b3233d7eb4146ced05c66e600"/107], 0x28}, 0x1, 0x0, 0x0, 0x40048}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x40000) 1m36.551560875s ago: executing program 34 (id=510): r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@posixacl}]}}) r1 = socket$netlink(0x10, 0x3, 0x14) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, &(0x7f0000000000)={'trans=virtio,', {[{@access_any}]}}) sendmsg$netlink(r1, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001840)={0x10, 0x1000}, 0x10}], 0x1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL={0x8, 0x7, @private=0xa010102}]}}}]}, 0x40}}, 0x50) r9 = openat$cgroup_procs(r7, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) readv(r9, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/252, 0xfc}], 0x1) sendfile(r9, r9, &(0x7f0000000000)=0x5, 0x6) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xc, 0xd}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1m28.279854928s ago: executing program 4 (id=751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20241, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6003000000082cfffe8000000000000000000000000000bbfe8000000000000000000000000000aa06000208000000000ad5c3d1952f36a62e8695034aff63b360e4df81d70dd5d1a16496a6dcf013b80aaf5ee423530a93cfaff8874bb4e5c7a591001cfb22b1f00f6d580441ec3062513034f3d849843bc1881cc2e11ed4476c90db87915d63cbb777e8"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000300)="b969080000b80b000000ba000000000f3036410f7945000f01c4460f08b8010000000f01c10f00d00f0966b88f000f00d80f01d1660f3a0d5226ac", 0x3b}], 0x1, 0x98, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f00000001c0)) 1m28.110463816s ago: executing program 4 (id=754): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000500), 0x0, &(0x7f0000000440)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './bus'}, 0x3a}], [], 0x2f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "d4cfa62846444572", "a6263d22b82de7ac9b0cf1961311733e", "59321444", "42e0925f233c185f"}, 0x28) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)=0x7}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_normal', 0x2608c2, 0x100) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[], 0x2c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES16=r0, @ANYRESDEC=0x0], 0x13c}, 0x1, 0x0, 0x0, 0x801}, 0x44004) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r6, 0x1, 0xa, 0x0, &(0x7f0000000080)) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f0000000100)={0x80}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x800132e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0xe, 0xfe}, {0x8, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x7}, {0x0, 0x4000, 0x1, 0x3, 0x0, 0x0, 0x1, 0xfd, 0x64, 0x2, 0x20, 0x8, 0x1000000}], 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='context', &(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000600)=[@in6={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1ff}, @in6={0xa, 0x4e23, 0x8, @remote, 0x4}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e24, 0x5b1, @remote, 0x1ff80}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @multicast1}], 0xc4) sendmmsg$inet6(r9, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1, 0x0, 0xfffffffffffffef0}}], 0x1, 0x4048054) 1m28.002175901s ago: executing program 4 (id=758): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x3172, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x3) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$unix(r3, &(0x7f0000000240)=@file={0x1}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01022bbd657464657673696d0000000f0002006e657464657673696d30000008000b00f8ffffff06001100000000000800130005000000050014000100"/78], 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x4040000) 1m27.91256226s ago: executing program 4 (id=760): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020}, 0x2020) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1cd883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 1m27.912293611s ago: executing program 4 (id=761): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x200e80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 1m26.941954325s ago: executing program 4 (id=773): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) unshare(0x2000200) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x200, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000000040)={0x0, 0x22, 0x1, @tid=r1}, &(0x7f0000000080)) 1m26.877294606s ago: executing program 35 (id=773): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) unshare(0x2000200) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x200, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000000040)={0x0, 0x22, 0x1, @tid=r1}, &(0x7f0000000080)) 1m25.858880718s ago: executing program 5 (id=790): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000800000081120000000000009500000700000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 1m25.725465868s ago: executing program 5 (id=792): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000a1000010025bd7000ffdbdf250d000000", @ANYRES32=0x0, @ANYBLOB="3a2906000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 1m25.725117225s ago: executing program 5 (id=793): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getown(r1, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c4"], 0x30}}, 0x0) 1m25.652673616s ago: executing program 5 (id=795): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioprio_set$uid(0x3, 0x0, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0xfffffffffffffffe, 0x5, 0x7, 0x3, 0x1, {0x2000400000080001, 0xfd, 0x20ff, 0xdd6, 0xe, 0xd615, 0x9, 0xffff, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080)=0x9, 0x7f01) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$fuse(0x0, 0x0, 0x0, 0x20040bc, &(0x7f00000006c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m25.532643893s ago: executing program 5 (id=797): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00110001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x4, &(0x7f0000000580)=[{0x4, 0x8, 0x80, 0x3}, {0x3, 0xda, 0x6, 0x8}, {0x4, 0x2, 0x5, 0x200}, {0xff00, 0x0, 0x5, 0x6}]}, 0x10) r1 = semget$private(0x0, 0x6, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x73, 0x4, @buffer={0x0, 0xed, &(0x7f0000000280)=""/237}, &(0x7f0000000380)="2ff8a81b133dd98b45b8d0d6802b0c0015c164b5976a95145c2834614c44a5db47e9c5e05a09000000c990c99147d875d3c151d56919a5027ca6356e85db1624fed9831ddbab1e9040abd342054e03560a951d1e922c30da659f21730900000046b1692274f85d1698db801de43c4dc11ba769", 0x0, 0x0, 0x10060, 0x0, 0x0}) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000040)) r4 = syz_io_uring_setup(0x66f5, &(0x7f00000004c0)={0x0, 0x6ec0, 0x40, 0x3, 0x16f}, &(0x7f0000000180), &(0x7f0000000540)) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) (async) r6 = gettid() ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000180)={0x2, 0x71b4635c, 0x10001, 0x900}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002280), 0x602, 0x0) ppoll(&(0x7f0000002540)=[{r7, 0x80}], 0x1, &(0x7f0000002580)={0x0, 0x989680}, 0x0, 0x0) (async) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = syz_io_uring_setup(0x54ed, &(0x7f0000000100)={0x0, 0x845f, 0x0, 0x3, 0x4f, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000480)) r10 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) (async) io_uring_register$IORING_REGISTER_NAPI(r9, 0x1b, &(0x7f0000000240)={0x3, 0xe}, 0x1) (async) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000), 0x4) ioctl$BTRFS_IOC_DEV_INFO(r10, 0xd000941e, &(0x7f0000001980)={0x0, "e0bea5f554b8526d52a9032588e77269"}) ioctl$BTRFS_IOC_DEV_INFO(r10, 0xd000941e, &(0x7f0000002980)={r11, "2e1a28980eacaabb571c85046a5f2ce9"}) (async) syz_open_dev$hidraw(&(0x7f0000000080), 0x4000000, 0x8496714a32a14324) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) semtimedop(r1, &(0x7f0000000200)=[{0x2, 0x4, 0x1800}, {0x4, 0x3, 0x1000}], 0x2, 0x0) semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r1, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) (async) semctl$GETZCNT(r1, 0x0, 0xf, 0x0) 1m25.15664569s ago: executing program 5 (id=800): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000580)={{r0}, "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"}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171fb757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13fbf66d28b02a7f7bff7ddc34"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "641b0230944a0546"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 1m25.016254052s ago: executing program 36 (id=800): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000580)={{r0}, "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"}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171fb757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13fbf66d28b02a7f7bff7ddc34"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "641b0230944a0546"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 1m9.172650264s ago: executing program 7 (id=1045): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000000)={{0x3, 0x0, 0x1, 0x2}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 1m9.060647477s ago: executing program 7 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[], 0x500}) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[], 0x500}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'dvmrp0\x00'}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0, r3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="40004d00160011002cbd7000fedbdf250a0040ffb476e874fda2edf33c663df977e25edd81b11ac90b0dfbbf46b5048f53e977559c78", @ANYRES32=r4, @ANYBLOB="14000100ff02000000000000000000000000000114000200fc0200"/40], 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="40004d00160011002cbd7000fedbdf250a0040ffb476e874fda2edf33c663df977e25edd81b11ac90b0dfbbf46b5048f53e977559c78", @ANYRES32=r4, @ANYBLOB="14000100ff02000000000000000000000000000114000200fc0200"/40], 0x40}}, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x50000) bind$packet(r5, &(0x7f0000000100)={0x11, 0x10, r4, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 1m8.912397011s ago: executing program 7 (id=1050): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000500)=""/67, 0x43}, {&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000001840)=""/4097, 0x1001}], 0x5}, 0x70000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xfffffff7}], 0x3, 0x40, 0x0) chdir(&(0x7f0000000000)='./file2\x00') (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @remote, 0x8}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x8000007, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) syz_emit_ethernet(0x6f, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x61, 0x64, 0x0, 0x76, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x6071, 0x0, 0xe7}, {"33e3f0a7b7c2c8fde3b643123378e8051fa87c33196d20baeff358cd8a60483c3cd064dd67f3bcee396f6e13f5b5c1423c1b0b3f6038784fdc"}}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000006800eb7800000000ffdbdf250a000000000038da1883b66fee000008000500e482fb15c77d44ec5853db6bde737cb81937eaf7f1ba70f11a25fb1a2044144c73691ab6b91e5531c4aa89d2f23add1c2e55", @ANYRES32=0x0, @ANYBLOB="1400060000000000000000000000000000000001"], 0x34}}, 0x24008000) (async) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x7ffe, 0xf, 0x1, 0x8, 0x4, 0x9, 0xffffff56, 0x7, 0xd, 0xfe, 0x4, 0x1, 0x7, 0x4, 0x6, 0xfffffe00, 0x1, 0x1001a44d, 0x7, 0x3, 0x86, 0x2, 0xf27, 0x6, 0xd17, 0x8, 0x4, 0x8, 0x4, 0x10000, 0xfffffff8, 0xffffffff]}) (async) ioctl$COMEDI_INSNLIST(r5, 0x8010640b, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) r6 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080), 0x4) sendmmsg$inet(r6, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x19, &(0x7f00000016c0)=[{&(0x7f0000000000)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0xffe3}], 0x1}}], 0x1, 0x4000800) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) fallocate(r7, 0x0, 0x9, 0x10001) (async) fcntl$setlease(r0, 0x400, 0x0) 1m8.888739702s ago: executing program 7 (id=1051): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb70300007b0a0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m8.831518264s ago: executing program 7 (id=1053): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async, rerun: 64) r1 = fanotify_init(0x200, 0x0) (async, rerun: 64) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) 1m8.782382835s ago: executing program 7 (id=1055): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000580), 0x10001, 0x20400) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x3e, &(0x7f0000000000)=0x101, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000380)={0x2, 0x5e21, @local}, 0x10) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_emit_ethernet(0x3e, &(0x7f00000021c0)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x8, 0x2c, 0xff, @remote, @local, {[@routing={0x6, 0x0, 0x2, 0x8}]}}}}}, 0x0) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r8, r7}}, 0x18) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000693000/0x1000)=nil, 0x1000}) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000100)={0x36a9, 0x5, 0x0, 0x7fffffff, 0x2, 0x0, [{0x2c, 0x7, 0x3, '\x00', 0x2400}, {0xfffffffffffffffe, 0x9, 0x2, '\x00', 0x100c}]}) 53.776825508s ago: executing program 37 (id=1055): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000580), 0x10001, 0x20400) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x3e, &(0x7f0000000000)=0x101, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000380)={0x2, 0x5e21, @local}, 0x10) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_emit_ethernet(0x3e, &(0x7f00000021c0)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x8, 0x2c, 0xff, @remote, @local, {[@routing={0x6, 0x0, 0x2, 0x8}]}}}}}, 0x0) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r8, r7}}, 0x18) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000693000/0x1000)=nil, 0x1000}) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000100)={0x36a9, 0x5, 0x0, 0x7fffffff, 0x2, 0x0, [{0x2c, 0x7, 0x3, '\x00', 0x2400}, {0xfffffffffffffffe, 0x9, 0x2, '\x00', 0x100c}]}) 1.251943501s ago: executing program 2 (id=1749): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x89901) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './cgroup\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a80)=@newtaction={0x1520, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x150c, 0x1, [@m_police={0x1508, 0x14, 0x0, 0x0, {{0xb}, {0x14dc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x5, 0x980, 0x9e80, {0x0, 0x1, 0xffff, 0xa, 0x7, 0x5}, {0x6, 0x2, 0x400, 0x81, 0x3800, 0x9}, 0x8, 0xd7e, 0x691}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x6, 0x7, 0x0, 0x5, 0x8, 0x6, 0x1, 0x80000001, 0x3, 0x8, 0x4, 0x6, 0x27, 0x4, 0x0, 0x8, 0x2, 0x8, 0x7f, 0x8, 0x9, 0x9, 0x401, 0x0, 0x9, 0x0, 0xd9, 0xffffffff, 0xb4d, 0x8, 0xe27, 0x5, 0x3, 0x1000, 0x2, 0x0, 0x51e1, 0x4, 0x8, 0x3, 0x2, 0x3, 0xf78, 0x4, 0x8a31, 0x9, 0x5, 0x59b, 0xfffffffc, 0x81, 0x3, 0xfffffff9, 0x8, 0x8916, 0x1, 0xc0000, 0x4, 0x0, 0x1, 0x7, 0x3, 0x5, 0x401, 0x1, 0x7, 0x56d, 0x9, 0x1390, 0x9, 0x4, 0x7fff, 0x4, 0x1e9, 0x7ff, 0x1, 0x3, 0xd, 0xfff, 0x3000, 0x5e82, 0x0, 0x8001, 0x1, 0x5, 0xd3d, 0x4, 0x1, 0x1, 0x7f, 0xc5, 0x9, 0x9, 0x5, 0x83fb, 0x2, 0x40, 0x4, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x400, 0x79, 0x0, 0x3, 0x3f12, 0xff, 0x2, 0x4, 0x6730, 0x0, 0x3, 0x9, 0xffffcb8e, 0x3, 0x5, 0x5, 0x9, 0xa3, 0x4, 0x5, 0x8, 0x5, 0x4, 0x4, 0x4, 0xffffffc8, 0x6, 0x0, 0xc, 0xc6a80000, 0x6, 0x6fe714de, 0x1ff, 0x5, 0x7, 0xfffffffa, 0x3, 0x1, 0x8, 0x5, 0x517b, 0x101, 0x4, 0x8, 0xcf48, 0x400, 0x8, 0x401, 0xff, 0x7, 0x410, 0x69, 0x5, 0xd597, 0x7, 0x2, 0xfffff000, 0x101, 0x1, 0x5, 0x4, 0x9, 0x7ff, 0xfcea, 0x3, 0x8, 0x7, 0x1, 0x5, 0x0, 0x0, 0x7, 0x400, 0xe3, 0x1, 0x6dd6, 0xa5c, 0xf77, 0x904, 0xc1c, 0x40, 0x2, 0xb, 0x0, 0xfffffff7, 0x2, 0x800, 0xa, 0x400, 0x6, 0x8, 0x5, 0x7ff, 0xc2f8, 0xb, 0x7, 0x3, 0x8, 0x1, 0x3, 0x8, 0x1, 0x3, 0x3, 0x2, 0x3, 0x5, 0x7, 0x1, 0x2, 0x9000000, 0x7, 0x7, 0x5, 0x101, 0x5, 0x656, 0x1, 0x4, 0x7fff, 0x48, 0x10, 0x9, 0xf, 0xd0e, 0x5, 0x2, 0x9, 0x9, 0x6, 0xfffffa98, 0x3, 0x2, 0xf1c0, 0x8, 0x1000, 0x800, 0x0, 0x9, 0x3, 0x0, 0x4, 0x7, 0x80000000, 0x8, 0x83, 0xffffffd9, 0xe, 0x6, 0x5, 0x10, 0x7, 0x9f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffff5, 0x9, 0x4, 0x6, 0x4, 0x52f2e16c, 0x587b, 0x0, 0x2, 0x64, 0xfffffa4e, 0x66, 0x9, 0xfd, 0x4, 0xce, 0x2, 0x1, 0x7fff, 0x9, 0x7, 0x5, 0x3, 0x7f, 0x5, 0x18, 0x6, 0x74, 0xa53, 0x4, 0x3, 0x0, 0x2, 0x7, 0x9, 0xfffffa3d, 0x2, 0xfffffffa, 0x0, 0x5, 0x8, 0x450, 0x14552d7c, 0xc, 0x0, 0x1ff, 0x100, 0x7, 0x1, 0x1, 0x4, 0x0, 0xa468, 0x237, 0x38, 0x7ff, 0x7, 0x10001, 0xfff, 0x5, 0x80000001, 0xa, 0x0, 0x4, 0x4, 0x9, 0x0, 0x9, 0x80000000, 0x5, 0x3c, 0x7fffffff, 0x4e, 0x3, 0xf, 0x7, 0xc9bc, 0xb6e, 0x1, 0x80, 0x5, 0x1, 0x80000001, 0x6, 0x5667e4a2, 0x1, 0x3, 0x7, 0xd5, 0xf, 0x1, 0x40, 0x0, 0x9b97, 0x4, 0xffffffff, 0x3, 0x2, 0x2, 0xf, 0xffffff1a, 0x0, 0x0, 0x4, 0x10, 0x9, 0xfffffff9, 0x4, 0x5, 0x1, 0xd, 0x2, 0x6, 0x6, 0x1, 0x5, 0x100000, 0x4, 0x1000, 0x1, 0x3, 0x2, 0xb, 0x0, 0x3b7a, 0x92, 0x8, 0x80000001, 0x9, 0xff, 0x2, 0x40, 0xaf, 0x4, 0x0, 0x101, 0xf5a8, 0xec, 0x5, 0x7, 0xd6, 0x10000, 0x0, 0x7fffffff, 0x5, 0x3, 0x2, 0x5, 0x5, 0x40, 0xfffffff9, 0xffffffff, 0x7, 0x5, 0x4, 0xffff, 0x1, 0xa142d15, 0x0, 0x2, 0xf65, 0x1, 0xc, 0x80000000, 0xff, 0xfffffffa, 0x6fb, 0x2, 0x6798, 0x401, 0xfffffff7, 0x7, 0x1, 0xfffffff8, 0x6, 0x7, 0x2, 0x101, 0x4, 0xab5, 0x80000001, 0x7, 0x8a7f, 0x6, 0x892e, 0xa, 0x10000, 0x800, 0x8, 0x7fff, 0xa8f, 0x684, 0x0, 0x2, 0x1, 0x100, 0x1, 0x5, 0x5, 0xad9f, 0x1, 0x7, 0x101, 0x4, 0x7, 0x1, 0x9d10, 0x7b02, 0x8a, 0x6, 0x9e6, 0x5, 0x5, 0x5, 0x0, 0xa092, 0x5, 0x0, 0x8000, 0x2, 0x2, 0x3, 0x2, 0x3d, 0x0, 0x9, 0x2, 0x3, 0x800, 0x0, 0x5, 0x3, 0x581, 0x6, 0x1, 0x2, 0x5, 0x4, 0x33, 0x9, 0xe, 0x3, 0x200, 0x3, 0x4, 0x3fc000, 0x5, 0x9, 0x3, 0x7ff, 0x0, 0x19, 0x3, 0xa5, 0xffff0000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x20000000, 0x1000, 0x1ff, 0x8e, {0x1, 0x0, 0x400, 0x8, 0x0, 0x1}, {0x86, 0x0, 0x1, 0x3, 0xfffc, 0x7}, 0xfa2, 0x1, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfc}, @TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x8, 0xffffff81, 0xffff, 0x3, 0x8, 0x200, 0x1, 0x4, 0x0, 0x0, 0x1, 0x4, 0x8, 0x5, 0x5, 0x8, 0xf, 0xc, 0x748b, 0x284, 0x1e, 0x4, 0xffffce64, 0x5, 0x4, 0x6, 0x7a, 0x2f4, 0x40, 0x8, 0xf57c, 0xadfd, 0x7, 0x9, 0xc48c, 0x2, 0x56, 0x4f, 0x1dc, 0x101, 0x5, 0x9, 0xffff, 0x1, 0x200, 0x6, 0x7, 0x3, 0x7fffffff, 0xffffffff, 0xfffffff7, 0x8001, 0x3, 0x6, 0xf, 0xc, 0x200, 0x9, 0x1, 0x1, 0x80000001, 0x8, 0x3b2c, 0x7, 0x0, 0xd, 0xffff, 0xffff, 0x2, 0x0, 0x1, 0x8, 0x1, 0xfc49, 0x5, 0x2, 0x5, 0x3, 0x6, 0x8, 0x2, 0x80, 0x6, 0x539b, 0x5, 0x9, 0x6, 0x2, 0x3, 0x4ae, 0xffffff22, 0x1000, 0xfffffff8, 0x8, 0x6, 0x1, 0x3, 0x4, 0x9, 0x8, 0x3, 0x8, 0x5, 0xfffffffe, 0xf97, 0xffffffff, 0x5, 0xceb8, 0x3, 0xc, 0xb, 0x3, 0x1, 0xa8, 0x8, 0x81, 0x75, 0x80000000, 0x200, 0x101, 0x4, 0x2, 0xa, 0x1e5a, 0x5, 0x401, 0x1, 0x4, 0x5, 0x1, 0x401, 0x5, 0x36f, 0x3a, 0x8, 0x6f, 0x4, 0x8, 0x10, 0x2, 0x800, 0x7ff, 0x6, 0x542af351, 0x8, 0x5, 0xffff, 0x4, 0x9, 0x401, 0x6, 0x7, 0x8001, 0x9, 0x1, 0x6, 0x7, 0x3, 0x10001, 0x6, 0xbdf, 0x7, 0x3, 0x0, 0x8, 0x2, 0x0, 0x0, 0xce, 0x2, 0x7fffffff, 0x302, 0x6, 0x8, 0xfffffffa, 0x200, 0xefa, 0x4, 0xe347a01, 0x0, 0x0, 0x7, 0x9, 0x8000, 0x3, 0x1, 0x10, 0x2f, 0x10000, 0xe, 0x5, 0xffffff60, 0xff, 0x0, 0x59, 0xb, 0x7, 0x6, 0x1, 0x2, 0x4, 0x2, 0x5, 0xffff, 0xe, 0x60, 0x8, 0xf2, 0x0, 0x1e3f, 0x8, 0x7e, 0x4, 0x0, 0x1, 0x9, 0x9, 0xa05, 0x5, 0x0, 0x2de60238, 0x10001, 0x2, 0x1, 0x81, 0xe, 0x3, 0xfffffffc, 0x5, 0x2, 0x5, 0x0, 0x9, 0x1, 0x72a6, 0x6aff, 0x4b, 0xff, 0x1, 0x1, 0xfffffffa, 0x6, 0x2, 0x1, 0x2, 0x10, 0x50, 0x1ff, 0x6, 0x2, 0x5, 0x2, 0x1, 0x7, 0x7]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xffffff4a, 0x8, 0x6, 0x4, 0x101, 0x4382cad3, 0x7, 0xffffffff, 0x6, 0x5, 0x7, 0x3d, 0x57c00, 0x0, 0xdc, 0xe4f, 0x4, 0x8, 0x9, 0x2, 0x40, 0x2, 0x0, 0x6, 0x1ff, 0x9, 0x7, 0x3, 0x2, 0x6228, 0x1000, 0x6, 0x3, 0x2, 0x9, 0xf, 0x7, 0x1, 0x5e, 0x4712, 0x9, 0x3a1, 0x6, 0x5, 0x100, 0xfffffffd, 0x9, 0x8, 0x10001, 0x3, 0x1, 0x2926, 0xfffff800, 0x10001, 0x80000000, 0xfffffff8, 0x3, 0xfffffffd, 0x6, 0x9, 0x40, 0x1ff, 0x7, 0x9, 0x7fff, 0x8, 0xd, 0x6, 0x3, 0x7, 0x3, 0x5, 0x1, 0x7, 0x400, 0x3, 0x0, 0xffff8001, 0x2, 0x3, 0x3, 0xe, 0x0, 0x3, 0x67, 0x3, 0x9, 0x6e6, 0x1, 0x1526a067, 0x400, 0x2d7c, 0x3, 0x9, 0x2, 0xfffffff8, 0x2, 0xff, 0xffff8703, 0x8, 0x9, 0x1ff, 0x8000, 0x29, 0x1000, 0x4, 0x40, 0x1ff, 0x9, 0x7, 0x9, 0x0, 0xbf, 0xfe, 0x0, 0x3, 0x9, 0xad, 0x6, 0x8000, 0x2999, 0xdd3, 0x2, 0x9, 0x6, 0x3, 0x1, 0x7, 0x4, 0xfffffff7, 0x3ff, 0x4, 0x4f3, 0xfffffff7, 0xffffffff, 0x2, 0x400, 0x8, 0x100, 0x4, 0x7, 0x4, 0x4, 0x4, 0x8000, 0x6, 0x11b, 0x2, 0x2, 0x7, 0x6, 0x7, 0x80, 0x8, 0x86, 0x401, 0x10000, 0xa322, 0x5, 0x7, 0x0, 0x1, 0x401, 0xa, 0x38f8, 0x6, 0x6, 0xf, 0x7, 0x10001, 0x8000, 0x2, 0x94c, 0xed, 0x8, 0x3, 0x4, 0xa, 0x4, 0x7ff, 0x656, 0x7, 0x9, 0x4, 0xc, 0x2, 0x4, 0x4, 0x0, 0x7f, 0x80, 0x0, 0xb, 0x6, 0x0, 0x6, 0x3, 0x8, 0x8, 0xffff, 0x30, 0xd3, 0x5, 0x2, 0xfffffffe, 0xffffdaa1, 0x3, 0x1, 0xf, 0xfffffffb, 0xbf, 0x2, 0x6f3, 0x8, 0xba, 0x6, 0x1, 0x3, 0x2, 0x8, 0x7f, 0x1, 0x6, 0x6, 0x4, 0x4, 0x200, 0x3edd, 0x9, 0x1, 0x80000001, 0xf, 0x1, 0x6, 0xfffffffd, 0xb0, 0x0, 0x80000000, 0x80000001, 0x2, 0x8000007, 0xe, 0x6, 0x33, 0x9, 0x241, 0x3, 0x20, 0x0, 0x3, 0x0, 0x81, 0x7, 0x24, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5b31210, 0x2d8, 0x7ff, 0x2, 0x7, 0xffff, 0x6, 0x649, 0x4d, 0x2, 0xb762, 0x2, 0x2, 0x7, 0x5, 0x7c6, 0x2, 0xc, 0x3, 0xdf, 0x8, 0x6, 0xf25, 0x6, 0x6, 0xfffff800, 0x9, 0x6b8716c3, 0x5, 0x20, 0x5, 0x8, 0xe7, 0x3, 0x3, 0x401, 0x2, 0x8, 0x101, 0xe8, 0x2, 0x8, 0x7, 0x5, 0x8, 0xa74, 0xfffffffc, 0x6, 0x3, 0xe5a, 0x135, 0xf7, 0xb, 0x26, 0x5, 0xf531, 0x100, 0x8000, 0x6, 0x6, 0x1, 0x3, 0x6, 0x9, 0x0, 0x9, 0xfc8, 0xee9f, 0x4, 0x9, 0xce, 0x0, 0x61, 0x5, 0x3ff, 0x0, 0x7, 0x97, 0x830, 0x4, 0x1, 0x3, 0x7, 0x6, 0x9, 0x5, 0x5, 0x9e8, 0x1, 0x5, 0x7, 0xb5, 0xf, 0x1ff, 0x6, 0xffffffff, 0x3c, 0x4, 0x0, 0x4, 0x7b7, 0x81, 0xfffffff8, 0x7, 0xf, 0x100, 0x3, 0x5, 0x5, 0x7fffffff, 0x3, 0x3, 0x1ff, 0x40, 0xd, 0x1ff, 0x101, 0x4, 0x3, 0x698b0880, 0x9, 0x3472, 0x6, 0x401, 0x3, 0x0, 0x40, 0xfff, 0x1, 0x6, 0x89, 0x0, 0x7, 0x66, 0x297ad387, 0x8, 0x4000000, 0x6, 0x2, 0x1ff, 0x40000000, 0x879e, 0x9, 0xf9, 0xb87d, 0xc0, 0x40, 0x1000, 0x5, 0x17, 0x100, 0x5, 0xe, 0x3ad7, 0x0, 0xc9, 0x7fffffff, 0x3, 0x4c, 0x8, 0x9, 0x7, 0xffffff01, 0x1ff, 0x1, 0x6, 0x4cd, 0x0, 0xf9, 0x7, 0x1, 0x4, 0x5, 0x3, 0x0, 0x0, 0x5, 0x4, 0x59, 0x6b74, 0x80000001, 0x9, 0x9edb, 0x0, 0x4a5, 0x2543, 0x200, 0x3, 0x8000, 0x9, 0x8, 0x0, 0x80000000, 0x7, 0x6, 0x9ce3, 0x43, 0x6, 0xfffffffb, 0x5, 0x7, 0x234c9126, 0x5, 0x2, 0x1, 0x4, 0x4, 0x5, 0xc, 0x9, 0x3ff, 0x4, 0x8, 0x6, 0xfffffffa, 0x7, 0x8000, 0x7, 0x8b, 0xfffff800, 0x3, 0x3, 0x8, 0x5, 0x95d, 0xfffffffe, 0x0, 0x8, 0x3, 0x9, 0x8, 0x4, 0xffffada7, 0x25a, 0x4, 0x2, 0xf, 0x4, 0x9, 0x8, 0x5, 0xffffffff, 0x4, 0xde, 0x100, 0x0, 0xffff0001, 0x1, 0x2, 0x9, 0x7, 0x8, 0x3, 0x4, 0x4]}], []]}, {0x4}, {0xc}, {0xc, 0x8, {0x5, 0x1}}}}]}]}, 0x1520}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000080)=0xff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x5, 0x4000000000000e55, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000004, 0x0, 0x4fda967d, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x81c54}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r0, 0x0, r5, 0x0, 0x46) 1.189086466s ago: executing program 8 (id=1752): timerfd_create(0x9, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0xa}}, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 1.137438285s ago: executing program 8 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x301, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x8000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="011628bd8302fb9bdf2503000000080001"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x50000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfa, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40880) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r5, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400d0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008864}, 0x800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r11, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$TIOCGPKT(r10, 0x80045438, &(0x7f0000000040)) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xfffffffffffffefb, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfea8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x80) 1.136809202s ago: executing program 2 (id=1755): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @local}}, [0x400, 0x7, 0x3, 0x88, 0x8, 0x4, 0xcc3, 0x6, 0x1, 0x4, 0x1, 0x1, 0x2, 0x1, 0x100]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0x99c7158}, &(0x7f0000000180)=0x8) (async) r3 = socket(0x26, 0x800, 0x7) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='netpci0\x00', 0x10) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8) (async) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) r6 = eventfd2(0x4, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000003c0)={0x0, r6}) (async) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000400)={0xf9, 0x6e}) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000005c0)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xdc, 0x17, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40015}, 0x40000) r7 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r7, 0x4020565b, &(0x7f0000000600)={0x8000000, 0x2, 0x1}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r3) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x6c, r9, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000800)={r2, 0x7}, 0x8) r11 = accept$inet(r3, &(0x7f0000000840)={0x2, 0x0, @broadcast}, &(0x7f0000000880)=0x10) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f00000008c0)='veth0_to_hsr\x00', 0x10) (async) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r12, 0x6, 0x3, &(0x7f0000000900), &(0x7f0000000940)=0x4) (async) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, r13, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) write$selinux_load(0xffffffffffffffff, &(0x7f0000000b00)={0xf97cff8c, 0x8, 'SE Linux', "2f59395133b6ed2bf0864bbbf95004ed712093f8d6c8522dfa3681723e8222e116a7e906a60c641d4771858fca014921213ecc08d979736580e68044939defdb64a620851af4f6bc11a420b0a08c9c1d3df34e795bf07fa0632c7533546b89a2aa71731ed0"}, 0x75) (async) recvmmsg(r3, &(0x7f00000035c0)=[{{&(0x7f0000000b80)=@tipc=@id, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/229, 0xe5}], 0x2, &(0x7f0000001d40)=""/61, 0x3d}, 0x3}, {{&(0x7f0000001d80)=@isdn, 0x80, &(0x7f0000001e00)}, 0x4}, {{&(0x7f0000001e40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001ec0)=""/158, 0x9e}], 0x1, &(0x7f0000001fc0)=""/230, 0xe6}, 0x5}, {{&(0x7f00000020c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000003540)=[{&(0x7f0000002140)=""/133, 0x85}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/206, 0xce}, {&(0x7f0000003300)=""/43, 0x2b}, {&(0x7f0000003340)=""/84, 0x54}, {&(0x7f00000033c0)=""/229, 0xe5}, {&(0x7f00000034c0)=""/68, 0x44}], 0x7}, 0x28400000}], 0x4, 0x40012023, &(0x7f00000036c0)={0x0, 0x3938700}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000003700)=0x1, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003740)={@ifindex=r10, r7, 0x21, 0x4, 0x0, @void, @value=r7}, 0x20) ioctl$EVIOCGABS3F(r7, 0x8018457f, &(0x7f0000003780)=""/242) 1.068961976s ago: executing program 9 (id=1756): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.016738818s ago: executing program 8 (id=1757): r0 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c00000010000104fc00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008001d0008000000"], 0x3c}}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000300)="c744240000000000c7442402e1000000c7442406000000000f011424b8e7d4af310f23d80f21f835c00000100f23f80f060f08660f3882bb000001000fc72c970f0967640f01c3660fc7360f07", 0x4d}], 0x1, 0x5b, 0x0, 0x1e) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000040)="9b2d", 0x2}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000b40)={0x1, 0x0, 0x1, &(0x7f0000000b00)={0x0, "5a54f9e02cb612f2ab8371533b1a289255cf9fdfebfb57089d8a86a476506dd5e4"}}) 1.016140528s ago: executing program 6 (id=1758): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ff4000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1.015577061s ago: executing program 2 (id=1759): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x309042, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$ax25(r0, &(0x7f00000000c0)={{0x3, @null, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x72, 0xc9, 0x7f, 0xa}}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x184}, @l2cap_cid_signaling={{0x180}, [@l2cap_conn_rsp={{0x3, 0x91, 0x8}, {0xb6a6, 0x0, 0xd4f9, 0x1}}, @l2cap_conn_rsp={{0x3, 0x5, 0x8}, {0x5, 0x6abb, 0xa, 0xaa2}}, @l2cap_disconn_req={{0x6, 0x5, 0x4}, {0x40, 0x1}}, @l2cap_info_rsp={{0xb, 0x7, 0xdf}, {0x4, 0x1ff, "246894a748515a5b01b8909e1f25453e0f9f2e594a8cff38cd6766ef7fb5d4ebcbcac1248397157cd5fcb15b0d6652ea37ef6a5a0bef5770f96eeff1416ecb72a66c8cbd5a29a844092b71fe401a5436368f77e6161e5a4147efb27b23d5e53d502bf606e135ed521bd41ff178f5511b1a48d52b5b4123535ddfdb5440a01b88ed520ef305ddf07ea139232dd768f7dffbe9a99d262596bc25df27203027408dc808f1e7b17017ec9fcfae4999bf01f64f3dda81ff6da78cb8b93159e78a12e48d590b979e437bcf22eb0bbb921285960c8482888f274229b0ceda"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xd, 0x2}, {0x10}}, @l2cap_info_rsp={{0xb, 0x4, 0x67}, {0x400, 0x6, "98dda12239188de91684caa1d8bdc06314acf2a003c9245e8ff1d1797dea12db313dd2965c07a5112b9774c34bf9ff0aebbaf318bc542a312f13db5d2c877839a4dfb1bce238b1602b0e01bd6bba5a42e63ddacdcdf4ab671171f76d0bc3310113f327"}}, @l2cap_info_req={{0xa, 0x1, 0x2}, {0x1}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x4}}]}}, 0x189) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', r0}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x10, 0x40, 0x6, 0x7fff, {{0x19, 0x4, 0x1, 0x0, 0x64, 0x64, 0x0, 0x5, 0x29, 0x0, @loopback, @empty, {[@end, @end, @timestamp_prespec={0x44, 0x1c, 0xd5, 0x3, 0x4, [{@private=0xa010101, 0x8001}, {@remote, 0x7}, {@multicast1, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0xd3, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x7}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @ssrr={0x89, 0x13, 0xff, [@dev={0xac, 0x14, 0x14, 0x25}, @multicast1, @dev={0xac, 0x14, 0x14, 0x24}, @broadcast]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x61802104}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@setlink={0x54, 0x13, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x30a0, 0x10040}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_GROUP={0x8, 0x1b, 0x9}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7}, @IFLA_IFALIAS={0x14, 0x14, 'syzkaller1\x00'}]}, 0x54}}, 0x0) read$FUSE(r0, &(0x7f00000006c0)={0x2020}, 0x2020) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000002740)={{@_ha_fsid={[0x3, 0x6]}, {0x3, 0x2, 0x3ff, 0x2}}, {{[0xfffffe00, 0x40, 0x101, 0x8cd]}, 0x0, 0x2, 0x8, 0x0, &(0x7f0000002700)=[{{@_ha_fsid={[0x1, 0x7f]}, {0x8ff, 0xe, 0x7f92, 0x7}}, 0x400, 0x0, 'tunl0\x00'}]}}) r3 = dup2(r0, r0) syz_emit_vhci(&(0x7f0000002780)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x36}, "227aea2c515682d18549c8ec15b17e1693174482dd493d829f840df3ce946effb81961a95fdde3afd566673e03cb48d6eb9209b4289d"}, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000027c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000002d00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x164, 0x0, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xfe, 0x6, "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"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x15, 0x6, "e115551f4ad8deb58c9cd87b3e1d023595"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0xdc, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x9d, 0x6, "e82375eb9d3f38a8b2347c46cfb99382ecf543d36fbcca91d28409abe5e8871336e385c4b5a057025aad65775253720cc4099ff1846b07d77d6e8a3b77d7eee7a92d456f6d74ad585910d64464511b8eb9f753681a596a1e3748e7a46ee0ac9ce5573aa1ea27ac705b0aab0ba6d61c4829db0c82b54c6e09dd59e58dbf68eafd6ffdd7653731dc96ec3084c217e3968129472c9d62b6c14644"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0xb, 0x0, 0x9}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_NEWOBJ={0x24, 0x12, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x10, 0x4, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}}], {0x14}}, 0x2ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000002) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000002d40)={r4}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002ec0)={&(0x7f0000002d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func={0xf, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0xfd754fd12b41018a, 0x0, 0x0, 0x71, 0x2e, 0x61, 0x2e, 0x30, 0x0, 0x2e]}}, &(0x7f0000002dc0)=""/194, 0x30, 0xc2, 0x1, 0x6}, 0x28) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000002f00)={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x1c) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000002f40)={0x3, 0x9, [{0x3, 0x0, 0xa8}, {0x5e7cbc85, 0x0, 0xc800}, {0x9, 0x0, 0x8}, {0x6, 0x0, 0x3f32}, {0x7ff, 0x0, 0x2}, {0x1, 0x0, 0x7}, {0x3, 0x0, 0x8}, {0x3, 0x0, 0x7}, {0x3, 0x0, 0x8}, {0x983f, 0x0, 0x1}, {0x6, 0x0, 0x8}, {0x1, 0x0, 0xfffffffffffffff7}, {0x81, 0x0, 0x4}, {0xfff, 0x0, 0x8000000000000001}, {0x10001, 0x0, 0x9}, {0x77, 0x0, 0x200}]}) syz_emit_vhci(&(0x7f0000003100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_req={{0x17, 0x3, 0x10}, {0xfffe, 0x0, 0x40, 0x4, [0x3ff, 0x8b, 0xd53f, 0x100]}}}}, 0x1d) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000003140)=[{r6, 0xe002}, {r5, 0x404}], 0x2, &(0x7f0000003180)={0x77359400}, &(0x7f00000031c0)={[0x1]}, 0x8) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000003240), r0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000003300)={&(0x7f0000003200), 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x1c, r7, 0x10, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000003340)) 946.095613ms ago: executing program 6 (id=1760): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000448d", @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x800) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, &(0x7f0000000200)="600103bb6426e86cfdb19848b3cf5aa2109914f0d987c34434bc2d977c4e0f08490dd94dacbe706d1caab5bb5959f93ea83403810bff9cf49830fce06defb99867bc0b1111870d90e707b96a163fb76f487408c1aae25f0c0b7b1387c7d526ea0a2ec10b6a1b878c3e71bd4b0549e52ac5fb9f411f47b34d87329dd1f789578d2b8e7c45ef30c1d24c57bc4f257d38dfc4e8deeaa49b4e638dfa860c11a596e63aa3dccf19a9bffe65519dde8c4e33094d75e22a0efdc2b9baef5e639914760c54da3ddcbdf1443390538388f29b955ad5ed", 0xd2, 0x10, &(0x7f0000000000)={0xa, 0x4e23, 0x14a8000, @private0, 0xae2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@arp={0x806, @generic={0x118, 0x6, 0x6, 0xd, 0x0, @local, "4920c04dcabced944b93becade", @local, "1dcd5d198b22ef3499af60"}}}}, &(0x7f0000000100)={0x1, 0x2, [0xb66, 0x8b3, 0x7db, 0x6fc]}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000448d", @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x800) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendto$inet6(r1, &(0x7f0000000200)="600103bb6426e86cfdb19848b3cf5aa2109914f0d987c34434bc2d977c4e0f08490dd94dacbe706d1caab5bb5959f93ea83403810bff9cf49830fce06defb99867bc0b1111870d90e707b96a163fb76f487408c1aae25f0c0b7b1387c7d526ea0a2ec10b6a1b878c3e71bd4b0549e52ac5fb9f411f47b34d87329dd1f789578d2b8e7c45ef30c1d24c57bc4f257d38dfc4e8deeaa49b4e638dfa860c11a596e63aa3dccf19a9bffe65519dde8c4e33094d75e22a0efdc2b9baef5e639914760c54da3ddcbdf1443390538388f29b955ad5ed", 0xd2, 0x10, &(0x7f0000000000)={0xa, 0x4e23, 0x14a8000, @private0, 0xae2}, 0x1c) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@arp={0x806, @generic={0x118, 0x6, 0x6, 0xd, 0x0, @local, "4920c04dcabced944b93becade", @local, "1dcd5d198b22ef3499af60"}}}}, &(0x7f0000000100)={0x1, 0x2, [0xb66, 0x8b3, 0x7db, 0x6fc]}) (async) 945.624443ms ago: executing program 8 (id=1761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x24000420) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.current\x00', 0x275a, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000180)) r5 = socket$unix(0x1, 0x5, 0x0) read$FUSE(r5, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregset(0x4205, r7, 0x6, &(0x7f00000000c0)={0x0}) kcmp(r6, r7, 0x2, r2, r2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 945.391907ms ago: executing program 6 (id=1762): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\x01\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{ \xeb\xb2\x81\xe1q\x98\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;\x03\x00\x00\x00\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07\x14\xee\xf9<\"\xf0\xc8\xae\x96\xc4\xf6]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0) r2 = dup(r1) execveat(r2, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000200)={0x8, {"b9abf9202d80cbfafa15647929f2a401", "14bfe0fdb42e7be95e915d5dd2911356", "616028c9a86eb8386d3a64b2ddff4091"}, 0x3, 0x6}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\x01\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{ \xeb\xb2\x81\xe1q\x98\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;\x03\x00\x00\x00\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07\x14\xee\xf9<\"\xf0\xc8\xae\x96\xc4\xf6]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0) (async) dup(r1) (async) execveat(r2, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) (async) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000200)={0x8, {"b9abf9202d80cbfafa15647929f2a401", "14bfe0fdb42e7be95e915d5dd2911356", "616028c9a86eb8386d3a64b2ddff4091"}, 0x3, 0x6}) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) (async) 877.371447ms ago: executing program 8 (id=1763): r0 = getpgrp(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) rt_tgsigqueueinfo(r0, r1, 0x15, &(0x7f0000000140)={0x18, 0x12b3, 0x8}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) 877.147528ms ago: executing program 6 (id=1764): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000000040)="7f3675993d93dcb95c16139ba1ab20e6f12f83f4cec02a9d265eba1e3e3459f24415e46cdef9477c6d3b30f432c9b07365dffd25eadac6e125c3335abfac764d48758d3c14744460360e767a5d61e0d9779c22171b01411b561c2ce39e67d52b2fc12f1312b53cd2f4f078cc6c041c192619", 0x72, r0}, 0x68) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001c00070c2bbd70000000000002000000", @ANYRES32=r0, @ANYBLOB="4000100a140001"], 0x3c}, 0x1, 0x0, 0x0, 0x240080d4}, 0x20024090) 876.851579ms ago: executing program 6 (id=1765): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r2 = dup2(r0, r1) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r9, 0xffffffffffffffff}) close_range(r6, r7, 0x0) ioctl$SYNC_IOC_FILE_INFO(r10, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) close_range(r2, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000100000053609cb147c8765eaa0af5e7a170d3af2ebcbf5671d93747419979b25a2e45c68b7c21da7b0e6f16eb97f5522e16ea4129c87570ce69b8f0433ad1793888955259bccfe35d6740d926deb7e5ee2112c0eeebc60a5e34766a6d"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r11}, &(0x7f0000000080), &(0x7f0000000300)=r12}, 0x20) 813.785674ms ago: executing program 8 (id=1766): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) fsopen(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) r0 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x80000, 0x1e0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x1400) utimes(&(0x7f0000000000)='./file1\x00', 0x0) 135.310705ms ago: executing program 9 (id=1767): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) sendmmsg$inet6(r1, &(0x7f0000001780)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x38}}, 0x1c, 0x0}}], 0x1, 0xc040) sendto$inet6(r1, 0x0, 0x0, 0x4000000, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x70bd26, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x1, 0x0, 0xc, 0x1}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x40000) 134.384343ms ago: executing program 2 (id=1768): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)) r1 = socket(0x1f, 0x800, 0x44) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="0157a66541533861c41194ad9978a964d9fc55d28e22d640"], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) fdatasync(r2) getsockopt$inet_mreqn(r1, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) 72.59726ms ago: executing program 2 (id=1769): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x4050) 71.448231ms ago: executing program 9 (id=1770): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f00000001c0)={0xfffffab3, 0x80000, r0}) 71.159202ms ago: executing program 2 (id=1771): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x4, @local, 0x6}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000300)={r2, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x2}, &(0x7f0000000240)=0x8) 70.735649ms ago: executing program 9 (id=1772): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x5, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) syz_open_dev$amidi(&(0x7f0000000000), 0x5, 0x0) (async) ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000004e350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) 3.556107ms ago: executing program 9 (id=1773): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 2.555419ms ago: executing program 9 (id=1774): chdir(&(0x7f0000000100)='./file1\x00') r0 = fsopen(&(0x7f0000001400)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000180)='iocharset', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSYMLINK(r2, &(0x7f0000000140)={0x14, 0x11, 0x2, {0x4, 0x0, 0x6}}, 0x14) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 0s ago: executing program 6 (id=1775): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x321980, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x181083, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x80000002, 0xff, 0x4, 0x12a00, r4, 0x7, '\x00', 0x0, r5, 0x0, 0x4, 0x1, 0x0, @void, @value, @value=r5}, 0x50) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'erspan0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 0s ago: executing program 9 (id=1776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd99e2ae4c56d00d94a77000fddbdf25090000004c000380140002006272696467655f736c6176655f3000000800030000000000080001000200000014000600ff020000000000000000000000000001060007004e21000b06cba31a"], 0x60}}, 0x48040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001180f7ffffff000000dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c0000000001400001400350077673200"/28], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000006c0)={0x0}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000000)=[r6], 0xa92, 0x40000263, 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r7, 0xc03064ca, &(0x7f0000000180)={&(0x7f00000001c0)=[r8], 0x0, 0x200000000009, 0x1, 0xb}) r9 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r9, 0xc02064cc, &(0x7f00000001c0)={r10, r10, 0x1, 0x5, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r9, 0xc01864cd, &(0x7f0000000300)={&(0x7f0000000180)=[r10, r10, r10], &(0x7f0000000140)=[0x7fff], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000740)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000780)={0x0}) r13 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r13, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r13, 0xc03064ca, &(0x7f0000000480)={&(0x7f00000003c0)=[r14, r14], &(0x7f0000000400)=[0xffffffffffffa820], 0xea25, 0x2, 0x3}) r15 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r15, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r15, 0xc03064ca, &(0x7f0000000480)={&(0x7f00000003c0)=[r16], &(0x7f0000000400), 0xea25, 0x1, 0x3}) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(0xffffffffffffffff, 0xc0186449, &(0x7f0000000940)={0x0, 0x0, {0x28, 0x5, &(0x7f0000000840)=[{0xbf9, 0x60048c90, 0xcf3fd91562447780, 0x5, 0x0, {0x10, 0x7, &(0x7f0000000380)=[{0xff, 0x0, 0x400}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x7}, {0x80000000, 0x0, 0xffffffffffff412e}, {0x1, 0x0, 0xffffffffffffffff}, {0xff}, {0xff}]}}, {0x8a6b, 0x2156da10, 0xc0, 0xffffffff, 0x0, {0x10, 0x6, &(0x7f0000000580)=[{0x0, r12, 0xfffffffffffffff8}, {0x0, 0x0, 0xffff}, {0x80000000, 0x0, 0x53}, {0x80000000, 0x0, 0xfffffffffffffffc}, {0xff, 0x0, 0x3}, {0xff, 0x0, 0x8000000000000000}]}}, {0x2, 0x264d8de8, 0x373570bbc32e4d40, 0x9, 0x0, {0x10, 0x3, &(0x7f0000000640)=[{0x80000000, 0x0, 0x8000000000000001}, {0xfe, 0x0, 0xc8}, {0x80000000}]}}, {0x9ca, 0x0, 0x1a32af4ff3c13b80, 0x200e7fa, 0x0, {0x10, 0x4, &(0x7f0000000700)=[{0x0, 0x0, 0x84}, {0x80000001, r4, 0x5}, {0xff}, {0xff, r6, 0x2}]}}, {0x1, 0x28, 0xb186f3ac0b835a80, 0x3, 0x0, {0x10, 0x6, &(0x7f00000007c0)=[{0xff, r8, 0x8}, {0x80000000, r10, 0x1000}, {0x0, r11, 0xffffffff}, {0x1, r12, 0x5}, {0xff, r14, 0xf302}, {0x0, r16, 0x7f}]}}]}}) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fcfbffffff000000"], 0x14}}, 0x800) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000002600010003000000"], 0x14}, 0x1, 0xffffffff, 0x0, 0x1}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x2a, r1, 'id0\x00'}) write$6lowpan_enable(r17, &(0x7f0000000180)='1', 0x1) kernel console output (not intermixed with test programs): 126.476349][ T6899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.485580][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.488650][ T6899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.491173][ T9023] overlayfs: statfs failed on './file0' [ 126.545137][ T5938] Bluetooth: hci2: command tx timeout [ 126.550607][ T9063] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 126.655849][ T39] usb 12-1: USB disconnect, device number 2 [ 126.668651][ T39] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 126.700401][ T5938] Bluetooth: hci0: command tx timeout [ 126.822577][ T8951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.841568][ T9076] /dev/sr0: Can't open blockdev [ 127.016356][ T8951] veth0_vlan: entered promiscuous mode [ 127.026518][ T8951] veth1_vlan: entered promiscuous mode [ 127.046981][ T8951] veth0_macvtap: entered promiscuous mode [ 127.051756][ T8951] veth1_macvtap: entered promiscuous mode [ 127.061841][ T8951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.072317][ T8951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.082980][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.086345][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.095699][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.099433][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.174472][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.177812][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.206332][ T6899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.209661][ T6899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.234546][ T39] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 127.236025][ T5938] Bluetooth: hci0: unexpected event 0x1c length: 3 < 5 [ 127.391650][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.395154][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.398236][ T39] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 127.401872][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.411786][ T39] usb 7-1: config 0 descriptor?? [ 127.559470][ T9118] 9pnet_virtio: no channels available for device syz [ 127.624066][ T39] usbhid 7-1:0.0: can't add hid device: -71 [ 127.630824][ T39] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 127.638876][ T39] usb 7-1: USB disconnect, device number 7 [ 127.904974][ T9134] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 128.020211][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.8.837'. [ 128.032917][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.8.837'. [ 128.164120][ T9148] netlink: 184 bytes leftover after parsing attributes in process `syz.6.835'. [ 128.169235][ T9148] xt_socket: unknown flags 0xd0 [ 128.197419][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 128.197471][ T40] audit: type=1400 audit(2000524329.611:621): avc: denied { map } for pid=9149 comm="syz.8.839" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.207096][ T9150] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9150 comm=syz.8.839 [ 128.223741][ T9155] netlink: 'syz.7.841': attribute type 39 has an invalid length. [ 128.308827][ T9162] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 128.379213][ T40] audit: type=1400 audit(2000524329.791:622): avc: denied { remount } for pid=9172 comm="syz.2.840" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 128.477658][ T40] audit: type=1400 audit(2000524329.891:623): avc: denied { setopt } for pid=9178 comm="syz.2.846" lport=42415 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 128.488408][ T40] audit: type=1400 audit(2000524329.891:624): avc: denied { getopt } for pid=9178 comm="syz.2.846" lport=42415 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 128.510954][ T9181] netlink: 36 bytes leftover after parsing attributes in process `syz.6.847'. [ 128.520620][ T9181] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 128.523646][ T9181] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 128.531505][ T9181] vhci_hcd vhci_hcd.0: Device attached [ 128.535211][ T9182] vhci_hcd: connection closed [ 128.537266][ T60] vhci_hcd vhci_hcd.6: stop threads [ 128.543425][ T60] vhci_hcd vhci_hcd.6: release socket [ 128.545687][ T60] vhci_hcd vhci_hcd.6: disconnect device [ 128.620172][ T5938] Bluetooth: hci2: command tx timeout [ 128.697385][ T9194] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 128.711645][ T40] audit: type=1400 audit(2000524330.131:625): avc: denied { map } for pid=9193 comm="syz.7.850" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 128.723241][ T9194] sp0: Synchronizing with TNC [ 128.853963][ T40] audit: type=1400 audit(2000524330.271:626): avc: denied { mounton } for pid=9200 comm="syz.7.852" path="/13/file0" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 128.880173][ T29] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 128.989140][ T9213] fuse: Unknown parameter 'rootmo3' [ 128.992373][ T9213] fuse: Unknown parameter 'rootmo3' [ 128.995593][ T9213] fuse: Unknown parameter 'rootmo3' [ 128.998117][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.001914][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.004575][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.007142][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.009690][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.012610][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.014551][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.016432][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.018900][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.022048][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.024726][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.027319][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.029870][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.032777][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.035470][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.038104][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.040928][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.043317][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.045878][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.048305][ T9213] fuse: Unknown parameter 'rootmo3' [ 129.073029][ T29] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 129.076187][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.078766][ T29] usb 7-1: Product: syz [ 129.080634][ T29] usb 7-1: Manufacturer: syz [ 129.082184][ T29] usb 7-1: SerialNumber: syz [ 129.090353][ T29] usb 7-1: config 0 descriptor?? [ 129.207949][ T9236] bridge0: port 3(gretap0) entered blocking state [ 129.214827][ T9236] bridge0: port 3(gretap0) entered disabled state [ 129.217864][ T9236] gretap0: entered allmulticast mode [ 129.223994][ T9236] gretap0: entered promiscuous mode [ 129.226178][ T9236] bridge0: port 3(gretap0) entered blocking state [ 129.228930][ T9236] bridge0: port 3(gretap0) entered forwarding state [ 129.233716][ T9238] Mount JFS Failure: -22 [ 129.244400][ T9238] tipc: Enabling of bearer rejected, failed to enable media [ 129.245018][ T9228] netlink: 32 bytes leftover after parsing attributes in process `syz.7.858'. [ 129.312299][ T40] audit: type=1400 audit(2000524330.721:627): avc: denied { write } for pid=9245 comm="syz.7.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 129.320955][ T40] audit: type=1400 audit(2000524330.721:628): avc: denied { getopt } for pid=9178 comm="syz.2.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.371968][ T9254] mkiss: ax0: crc mode is auto. [ 129.516906][ T9273] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 129.583996][ T9283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.871'. [ 129.588325][ T9283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.871'. [ 129.907637][ T9311] netlink: 24 bytes leftover after parsing attributes in process `syz.6.877'. [ 129.974565][ T40] audit: type=1400 audit(2000524331.391:629): avc: denied { create } for pid=9313 comm="syz.8.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 130.243876][ T40] audit: type=1400 audit(2000524331.661:630): avc: denied { execute_no_trans } for pid=9326 comm="syz.8.882" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81202864656C6574656429 dev="hugetlbfs" ino=32129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 130.408292][ T9339] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 130.420299][ T9339] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 130.425924][ T9339] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 130.613386][ T9351] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 130.700549][ T5932] Bluetooth: hci2: command tx timeout [ 131.059457][ T9362] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 131.280155][ T9368] netlink: 76 bytes leftover after parsing attributes in process `syz.8.892'. [ 131.285364][ T9368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9368 comm=syz.8.892 [ 131.295051][ T9368] overlayfs: upper fs does not support file handles, falling back to index=off. [ 131.398044][ T9380] netlink: 104 bytes leftover after parsing attributes in process `syz.8.897'. [ 131.430164][ T5932] Bluetooth: hci4: command 0x0406 tx timeout [ 131.484511][ T6023] usb 7-1: USB disconnect, device number 8 [ 131.565185][ T9388] xt_limit: Overflow, try lower: 271964/0 [ 131.672577][ T5932] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 131.676525][ T5932] Bluetooth: hci0: Injecting HCI hardware error event [ 131.682746][ T5938] Bluetooth: hci0: hardware error 0x00 [ 131.683139][ T9393] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.902'. [ 131.899165][ T9404] overlayfs: failed to resolve './bus': -2 [ 132.047855][ T9417] program syz.2.912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.092805][ T9420] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.913'. [ 132.310223][ T830] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 132.323948][ T9432] netlink: 32 bytes leftover after parsing attributes in process `syz.8.917'. [ 132.353204][ T9432] netlink: 16 bytes leftover after parsing attributes in process `syz.8.917'. [ 132.356852][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.8.917'. [ 132.402668][ T5335] pmem0: [POWERTEC] [ 132.469478][ T830] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 132.471211][ T9437] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.474116][ T830] usb 7-1: config 0 has no interface number 0 [ 132.494871][ T830] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 132.499955][ T830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.504638][ T830] usb 7-1: Product: syz [ 132.507670][ T830] usb 7-1: Manufacturer: syz [ 132.512048][ T830] usb 7-1: SerialNumber: syz [ 132.526315][ T830] usb 7-1: config 0 descriptor?? [ 132.790482][ T5932] Bluetooth: hci2: command tx timeout [ 133.023852][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.8.933'. [ 133.068978][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.8.936'. [ 133.204748][ T9498] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 133.259401][ T9504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.290895][ T9490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=9490 comm=syz.2.912 [ 133.295048][ T9490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=9490 comm=syz.2.912 [ 133.374885][ T830] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 133.389701][ T830] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 133.395886][ T830] asix 7-1:0.251: probe with driver asix failed with error -5 [ 133.408266][ T830] usb 7-1: USB disconnect, device number 9 [ 133.510358][ T39] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 133.547350][ T9521] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 133.549632][ T9521] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 133.553049][ T9521] vhci_hcd vhci_hcd.0: Device attached [ 133.583057][ T9522] vhci_hcd: connection closed [ 133.584797][ T6897] vhci_hcd vhci_hcd.7: stop threads [ 133.589137][ T6897] vhci_hcd vhci_hcd.7: release socket [ 133.592002][ T6897] vhci_hcd vhci_hcd.7: disconnect device [ 133.660202][ T39] usb 13-1: Using ep0 maxpacket: 8 [ 133.665418][ T39] usb 13-1: config 179 has an invalid interface number: 65 but max is 0 [ 133.669021][ T39] usb 13-1: config 179 has no interface number 0 [ 133.672175][ T39] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 133.676942][ T39] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 133.682687][ T39] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 133.687554][ T39] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 133.692481][ T39] usb 13-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 133.698268][ T39] usb 13-1: config 179 interface 65 has no altsetting 0 [ 133.701346][ T39] usb 13-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 133.705204][ T39] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.710436][ T9505] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 133.718799][ T39] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:179.65/input/input17 [ 133.740134][ T5938] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 133.761060][ T5320] input input17: unable to receive magic message: -110 [ 133.774405][ T5320] input input17: unable to receive magic message: -32 [ 133.784214][ T5320] input input17: unable to receive magic message: -32 [ 133.811119][ C2] xpad 13-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 133.823901][ T5320] input input17: unable to receive magic message: -32 [ 133.835609][ T5320] input input17: unable to receive magic message: -32 [ 133.843511][ C2] xpad 13-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 133.919372][ T9537] input: syz0 as /devices/virtual/input/input18 [ 133.961208][ T8618] usb 13-1: USB disconnect, device number 2 [ 133.961232][ C2] xpad 13-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 134.066106][ T9545] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 134.069411][ T9545] netlink: 'syz.2.952': attribute type 2 has an invalid length. [ 134.073371][ T9545] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 134.076687][ T9545] netlink: 'syz.2.952': attribute type 3 has an invalid length. [ 134.139635][ T9551] netlink: 'syz.7.956': attribute type 1 has an invalid length. [ 134.173339][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 134.173398][ T40] audit: type=1400 audit(2000524335.591:636): avc: denied { block_suspend } for pid=9553 comm="syz.6.958" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.208669][ T40] audit: type=1326 audit(2000524335.621:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.6.958" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcca8b9c629 code=0x0 [ 134.218797][ T40] audit: type=1400 audit(2000524335.621:638): avc: denied { setopt } for pid=9557 comm="syz.2.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 134.288438][ T9564] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 134.292203][ T9564] VFS: Can't find a romfs filesystem on dev nullb0. [ 134.292203][ T9564] [ 134.411323][ T40] audit: type=1804 audit(2000524335.821:639): pid=9571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.960" name="/newroot/216/file1" dev="tmpfs" ino=1152 res=1 errno=0 [ 134.425147][ T40] audit: type=1400 audit(2000524335.841:640): avc: denied { write } for pid=9572 comm="syz.7.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.425497][ T9573] ip6t_srh: unknown srh match flags 4000 [ 134.699322][ T9580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9580 comm=syz.8.964 [ 134.830140][ T830] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 134.960073][ T830] usb 12-1: device descriptor read/64, error -71 [ 134.990157][ T54] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 135.117002][ T9586] __nla_validate_parse: 6 callbacks suppressed [ 135.117014][ T9586] netlink: 172 bytes leftover after parsing attributes in process `syz.6.967'. [ 135.150192][ T54] usb 13-1: Using ep0 maxpacket: 16 [ 135.153773][ T54] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.157355][ T54] usb 13-1: config 0 interface 0 has no altsetting 0 [ 135.161982][ T54] usb 13-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 135.165292][ T54] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.167944][ T54] usb 13-1: Product: syz [ 135.169394][ T54] usb 13-1: Manufacturer: syz [ 135.171153][ T54] usb 13-1: SerialNumber: syz [ 135.174590][ T54] usb 13-1: config 0 descriptor?? [ 135.210208][ T830] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 135.350152][ T830] usb 12-1: device descriptor read/64, error -71 [ 135.450195][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 135.461619][ T830] usb usb12-port1: attempt power cycle [ 135.605652][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 135.609586][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.613582][ T24] usb 7-1: Product: syz [ 135.615463][ T24] usb 7-1: Manufacturer: syz [ 135.617452][ T24] usb 7-1: SerialNumber: syz [ 135.625728][ T24] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 135.644377][ T39] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 135.840095][ T830] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 135.853805][ T9588] netlink: 'syz.2.968': attribute type 32 has an invalid length. [ 135.870902][ T830] usb 12-1: device descriptor read/8, error -71 [ 135.903348][ T9588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.907917][ T8618] usb 7-1: USB disconnect, device number 10 [ 136.140587][ T830] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 136.171218][ T830] usb 12-1: device descriptor read/8, error -71 [ 136.294366][ T830] usb usb12-port1: unable to enumerate USB device [ 136.498639][ T9613] bond4 (unregistering): Released all slaves [ 136.648702][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 136.652408][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 136.690500][ T9624] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 136.700093][ T39] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 136.703232][ T39] ath9k_htc: Failed to initialize the device [ 136.707583][ T8618] usb 7-1: ath9k_htc: USB layer deinitialized [ 136.729898][ T9624] bridge_slave_0: left allmulticast mode [ 136.731940][ T9624] bridge_slave_0: left promiscuous mode [ 136.733885][ T9624] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.738786][ T9624] bridge_slave_1: left allmulticast mode [ 136.740869][ T9624] bridge_slave_1: left promiscuous mode [ 136.742761][ T9624] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.747723][ T9624] bond0: (slave bond_slave_0): Releasing backup interface [ 136.753658][ T9624] bond0: (slave bond_slave_1): Releasing backup interface [ 136.762250][ T9624] team0: Port device team_slave_0 removed [ 136.767018][ T9626] netlink: 'syz.6.975': attribute type 10 has an invalid length. [ 136.767858][ T9624] team0: Port device team_slave_1 removed [ 136.774178][ T9624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.776894][ T9624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.784614][ T9624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.787743][ T9624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.795578][ T9624] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.807587][ T9626] mac80211_hwsim hwsim16 wlan1: left allmulticast mode [ 136.816901][ T9626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.821409][ T9626] bond0: (slave wlan1): Opening slave failed [ 136.849956][ T9624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.939019][ T40] audit: type=1400 audit(2000524338.351:641): avc: denied { listen } for pid=9635 comm="syz.6.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.972975][ T9639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9639 comm=syz.6.978 [ 136.978228][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.6.978'. [ 136.982113][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.6.978'. [ 137.069586][ T40] audit: type=1400 audit(2000524338.481:642): avc: denied { create } for pid=9645 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.079432][ T40] audit: type=1400 audit(2000524338.481:643): avc: denied { getopt } for pid=9645 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.089580][ T40] audit: type=1400 audit(2000524338.491:644): avc: denied { ioctl } for pid=9645 comm="syz.2.981" path="cgroup:[4026533299]" dev="nsfs" ino=4026533299 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 137.099920][ T40] audit: type=1400 audit(2000524338.491:645): avc: denied { ioctl } for pid=9642 comm="syz.6.980" path="socket:[32545]" dev="sockfs" ino=32545 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 137.196224][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.985'. [ 137.216250][ T9654] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 137.239013][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 137.242956][ T9664] netlink: 'syz.2.986': attribute type 26 has an invalid length. [ 137.267075][ T9664] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 137.273549][ T9664] bond4 (unregistering): Released all slaves [ 137.311545][ T9666] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 137.317193][ T9666] bond4 (unregistering): Released all slaves [ 137.341032][ T9669] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 137.343759][ T9669] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 137.456275][ T9679] netlink: 'syz.2.988': attribute type 9 has an invalid length. [ 137.494879][ T9686] netlink: 'syz.6.989': attribute type 3 has an invalid length. [ 137.567591][ T9697] netlink: 20 bytes leftover after parsing attributes in process `syz.6.991'. [ 137.701511][ T9717] netlink: 228 bytes leftover after parsing attributes in process `syz.6.993'. [ 137.705480][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.993'. [ 137.713865][ T9704] No control pipe specified [ 137.753436][ C1] imon 13-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 137.767832][ T54] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input19 [ 137.834038][ T54] imon:send_packet: packet tx failed (-71) [ 137.852394][ T54] imon 13-1:0.0: panel buttons/knobs setup failed [ 137.885527][ T9737] veth0_to_bridge: entered promiscuous mode [ 137.910522][ T54] rc_core: IR keymap rc-imon-pad not found [ 137.912596][ T54] Registered IR keymap rc-empty [ 137.920174][ T54] imon 13-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 137.923541][ T54] imon 13-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 137.934227][ T54] imon:send_packet: packet tx failed (-71) [ 137.951065][ T54] imon 13-1:0.0: remote input dev register failed [ 137.954549][ T54] imon 13-1:0.0: imon_init_intf0: rc device setup failed [ 137.989260][ T54] imon 13-1:0.0: unable to initialize intf0, err 0 [ 137.991965][ T54] imon:imon_probe: failed to initialize context! [ 137.992078][ T9736] veth0_to_bridge: left promiscuous mode [ 137.993993][ T54] imon 13-1:0.0: unable to register, err -19 [ 137.999150][ T54] usb 13-1: USB disconnect, device number 3 [ 138.157253][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.159618][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.175960][ T9754] sctp: [Deprecated]: syz.2.1006 (pid 9754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.175960][ T9754] Use struct sctp_sack_info instead [ 138.650374][ T10] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 138.776389][ T9793] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 138.791361][ T9793] exFAT-fs (nullb0): invalid boot record signature [ 138.793561][ T9793] exFAT-fs (nullb0): failed to read boot sector [ 138.795671][ T9793] exFAT-fs (nullb0): failed to recognize exfat type [ 138.803478][ T9796] Can't find a SQUASHFS superblock on nullb0 [ 138.832179][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 138.834691][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 138.838515][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.843707][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 138.847266][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 138.852374][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 138.855014][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 138.858390][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.864991][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 138.868463][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 138.873308][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 138.875792][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 138.878996][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.882714][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 138.886284][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 138.892306][ T10] usb 7-1: string descriptor 0 read error: -22 [ 138.894385][ T10] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 138.897989][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.919969][ T10] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 138.958181][ T9763] syz.7.1008 (9763): drop_caches: 1 [ 139.003516][ T9763] syz.7.1008 (9763): drop_caches: 1 [ 139.133129][ T10] usb 7-1: USB disconnect, device number 11 [ 139.532092][ T9821] could not allocate digest TFM handle hmac(sha1-neon) [ 139.573471][ T9829] validate_nla: 3 callbacks suppressed [ 139.573514][ T9829] netlink: 'syz.7.1027': attribute type 21 has an invalid length. [ 139.665390][ T9834] netlink: 'syz.2.1029': attribute type 1 has an invalid length. [ 139.801979][ T9864] netlink: 'syz.7.1034': attribute type 63 has an invalid length. [ 139.805872][ T9864] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 139.831371][ T6082] udevd[6082]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 139.842225][ T9868] binder: BINDER_SET_CONTEXT_MGR already set [ 139.844220][ T9868] binder: 9867:9868 ioctl 4018620d 200000000040 returned -16 [ 139.854602][ T5335] pmem0: [POWERTEC] [ 139.926669][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 139.926721][ T40] audit: type=1400 audit(139.749:654): avc: denied { bind } for pid=9869 comm="syz.7.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.203622][ T9793] Set syz1 is full, maxelem 65536 reached [ 140.378431][ T9912] __nla_validate_parse: 8 callbacks suppressed [ 140.378532][ T9912] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1050'. [ 140.380081][ T9914] comedi comedi0: comedi_config --init_data is deprecated [ 140.501008][ T9926] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 141.194214][ T9952] xt_TCPMSS: Only works on TCP SYN packets [ 141.279067][ T40] audit: type=1400 audit(141.099:655): avc: denied { ioctl } for pid=9961 comm="syz.6.1065" path="/107/file0/file0" dev="9p" ino=79953973 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 141.283243][ T9963] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9963 comm=syz.2.1064 [ 141.300282][ T40] audit: type=1400 audit(141.119:656): avc: denied { listen } for pid=9959 comm="syz.2.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.593506][ T40] audit: type=1400 audit(141.419:657): avc: denied { read write } for pid=9969 comm="syz.6.1067" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 141.605457][ T40] audit: type=1400 audit(141.419:658): avc: denied { open } for pid=9969 comm="syz.6.1067" path="/109/file0/file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 141.794471][ T9980] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 141.803489][ T9982] : renamed from wg2 (while UP) [ 141.804498][ T40] audit: type=1400 audit(141.629:659): avc: denied { setopt } for pid=9981 comm="syz.6.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.190352][ T39] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 142.237255][T10010] ip6t_srh: unknown srh invflags 4000 [ 142.247652][ T40] audit: type=1400 audit(142.069:660): avc: denied { setopt } for pid=10009 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 142.273024][ T40] audit: type=1400 audit(142.099:661): avc: denied { read } for pid=10014 comm="syz.6.1081" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:man_t:s0" [ 142.285943][ T40] audit: type=1400 audit(142.099:662): avc: denied { open } for pid=10014 comm="syz.6.1081" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:man_t:s0" [ 142.297299][ T40] audit: type=1400 audit(142.109:663): avc: denied { ioctl } for pid=10014 comm="syz.6.1081" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:man_t:s0" [ 142.370069][ T39] usb 13-1: Using ep0 maxpacket: 16 [ 142.374216][ T39] usb 13-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 142.377374][ T39] usb 13-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.383593][ T39] usb 13-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.387085][ T39] usb 13-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 142.400034][ T39] usb 13-1: config 0 interface 0 has no altsetting 0 [ 142.403992][ T39] usb 13-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 142.406941][ T39] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.409612][ T39] usb 13-1: Product: syz [ 142.411092][ T39] usb 13-1: Manufacturer: syz [ 142.412618][ T39] usb 13-1: SerialNumber: syz [ 142.418391][ T39] usb 13-1: config 0 descriptor?? [ 142.420937][ T9997] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 142.627778][ T9997] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 142.633221][ T39] input: syz syz as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input21 [ 142.718158][T10038] trusted_key: encrypted_key: master key parameter 'usead' is invalid [ 142.723775][T10038] ipvlan0: entered promiscuous mode [ 142.725920][T10038] ipvlan0: entered allmulticast mode [ 142.728076][T10038] veth0_vlan: entered allmulticast mode [ 142.764260][T10043] pim6reg99999999: entered allmulticast mode [ 142.871186][T10055] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1093'. [ 142.942372][T10055] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 143.118038][T10062] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 143.275944][T10076] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1099'. [ 143.289695][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1099'. [ 143.296852][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1099'. [ 143.389710][ T6897] Bluetooth: hci3: Frame reassembly failed (-84) [ 144.186603][T10092] netlink: 'syz.2.1104': attribute type 7 has an invalid length. [ 144.318098][T10100] program syz.2.1106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.952185][ T6013] usb 13-1: USB disconnect, device number 4 [ 144.988786][T10106] netlink: 'syz.8.1108': attribute type 21 has an invalid length. [ 144.991438][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1108'. [ 145.004611][T10106] netlink: 'syz.8.1108': attribute type 21 has an invalid length. [ 145.004680][ T1167] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.007203][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1108'. [ 145.013268][ T1167] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.017685][ T1167] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.021806][ T1167] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.311072][T10108] syzkaller1: entered promiscuous mode [ 145.312850][T10108] syzkaller1: entered allmulticast mode [ 145.319030][T10108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10108 comm=syz.8.1109 [ 145.326020][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1109'. [ 145.386639][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 145.386651][ T40] audit: type=1400 audit(145.209:666): avc: denied { accept } for pid=10107 comm="syz.8.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 145.420192][ T5938] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 145.420451][ T5932] Bluetooth: hci3: command 0x1003 tx timeout [ 145.490712][ T830] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 145.790906][T10125] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 145.964576][T10144] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 146.499524][T10147] binder: 10146:10147 ioctl c0306201 0 returned -14 [ 146.579087][T10154] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 146.586436][T10154] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 146.721044][T10160] cgroup: none used incorrectly [ 146.916389][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1131'. [ 147.608863][T10166] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.611947][T10166] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 147.614648][T10166] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 147.619593][T10166] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.624546][T10166] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.630246][T10166] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.872525][T10213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42850 sclass=netlink_route_socket pid=10213 comm=syz.2.1139 [ 147.890179][ T6013] usb 13-1: new full-speed USB device number 5 using dummy_hcd [ 148.000901][T10221] netlink: 'syz.2.1141': attribute type 39 has an invalid length. [ 148.052357][ T6013] usb 13-1: not running at top speed; connect to a high speed hub [ 148.057697][ T6013] usb 13-1: config 1 interface 0 has no altsetting 0 [ 148.067533][ T6013] usb 13-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.40 [ 148.073243][ T6013] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.078722][ T6013] usb 13-1: Product: 뮱ル語奒൵㉲ᄹ嵨寢䏨떆經嚲 [ 148.082675][ T6013] usb 13-1: Manufacturer: 倊 [ 148.084856][ T6013] usb 13-1: SerialNumber: syz [ 148.163852][T10226] netlink: 'syz.6.1143': attribute type 10 has an invalid length. [ 148.173064][T10226] team0: Port device vxcan1 added [ 148.237086][T10230] netlink: 'syz.6.1143': attribute type 10 has an invalid length. [ 148.319613][ T6013] usbhid 13-1:1.0: can't add hid device: -71 [ 148.321526][T10235] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1145'. [ 148.330612][ T6013] usbhid 13-1:1.0: probe with driver usbhid failed with error -71 [ 148.345432][ T6013] usb 13-1: USB disconnect, device number 5 [ 148.449382][T10241] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 148.453370][T10241] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 148.459204][T10241] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 148.940220][ T5938] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.660131][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.660309][ T5932] Bluetooth: hci4: command 0x0406 tx timeout [ 149.825913][T10279] ALSA: seq fatal error: cannot create timer (-22) [ 149.879437][ T40] audit: type=1400 audit(149.699:667): avc: denied { write } for pid=10283 comm="syz.6.1162" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 149.882691][T10284] autofs4:pid:10284:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 149.911760][T10284] netlink: 'syz.6.1162': attribute type 1 has an invalid length. [ 150.930853][T10303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21264 sclass=netlink_route_socket pid=10303 comm=syz.6.1168 [ 150.970477][ T40] audit: type=1400 audit(150.789:668): avc: denied { connect } for pid=10304 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 151.212862][T10313] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1172'. [ 151.341377][T10344] binder: 10343:10344 ioctl c0306201 200000000640 returned -22 [ 151.344822][T10344] binder: 10343:10344 ioctl 4020aea5 200000000040 returned -22 [ 151.344829][T10345] binder: 10343:10345 ioctl 4020aea5 200000000040 returned -22 [ 151.398737][T10348] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1181'. [ 151.402924][T10348] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1181'. [ 151.406692][T10348] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1181'. [ 151.497822][ T40] audit: type=1400 audit(151.319:669): avc: denied { setopt } for pid=10354 comm="syz.8.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.624539][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1186'. [ 151.629412][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1186'. [ 151.740427][ T5932] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.741526][ T5938] Bluetooth: hci4: command 0x0406 tx timeout [ 151.858271][ T40] audit: type=1400 audit(151.679:670): avc: denied { append } for pid=10381 comm="syz.2.1191" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 151.940467][T10382] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.943293][T10382] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 151.945915][T10382] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 151.963289][T10388] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1192'. [ 151.966422][T10388] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1192'. [ 151.969765][T10388] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1192'. [ 151.972899][T10388] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1192'. [ 152.108145][ T40] audit: type=1400 audit(151.929:671): avc: denied { setopt } for pid=10396 comm="syz.6.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 152.108753][T10397] program syz.6.1195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.130093][ T40] audit: type=1400 audit(151.929:672): avc: denied { write } for pid=10396 comm="syz.6.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 152.137797][ T40] audit: type=1400 audit(151.949:673): avc: denied { mounton } for pid=10396 comm="syz.6.1195" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 152.155035][T10399] random: crng reseeded on system resumption [ 152.165313][T10399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.168585][T10399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.185701][T10399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.187310][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1198'. [ 152.188819][T10399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.208596][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1198'. [ 152.287178][T10408] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1200'. [ 152.581819][T10412] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 152.596330][T10418] xt_hashlimit: invalid rate [ 152.669119][T10420] nfs: Unknown parameter '' [ 152.793435][T10425] netem: unknown loss type 0 [ 152.796235][T10425] netem: change failed [ 153.032680][ T40] audit: type=1400 audit(152.859:674): avc: denied { write } for pid=10434 comm="syz.6.1210" path="socket:[38469]" dev="sockfs" ino=38469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 153.050450][ T40] audit: type=1326 audit(152.869:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.2.1208" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f922f59c629 code=0x0 [ 153.246829][T10447] FAULT_INJECTION: forcing a failure. [ 153.246829][T10447] name failslab, interval 1, probability 0, space 0, times 1 [ 153.253547][T10447] CPU: 0 UID: 0 PID: 10447 Comm: syz.6.1214 Not tainted syzkaller #0 PREEMPT(full) [ 153.253562][T10447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.253594][T10447] Call Trace: [ 153.253617][T10447] [ 153.253622][T10447] dump_stack_lvl+0x100/0x190 [ 153.253650][T10447] should_fail_ex.cold+0x5/0xa [ 153.253664][T10447] should_failslab+0xc2/0x120 [ 153.253681][T10447] __kvmalloc_node_noprof+0xfa/0xa00 [ 153.253696][T10447] ? seq_read_iter+0x819/0x1270 [ 153.253716][T10447] seq_read_iter+0x819/0x1270 [ 153.253736][T10447] ? __pfx_seq_read_iter+0x10/0x10 [ 153.253752][T10447] vfs_read+0x825/0xb30 [ 153.253769][T10447] ? __pfx_vfs_read+0x10/0x10 [ 153.253793][T10447] ksys_read+0x12a/0x250 [ 153.253808][T10447] ? __pfx_ksys_read+0x10/0x10 [ 153.253827][T10447] do_syscall_64+0x106/0xf80 [ 153.253842][T10447] ? clear_bhb_loop+0x40/0x90 [ 153.253856][T10447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.253866][T10447] RIP: 0033:0x7fcca8b9c629 [ 153.253876][T10447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.253886][T10447] RSP: 002b:00007fcca6df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.253920][T10447] RAX: ffffffffffffffda RBX: 00007fcca8e15fa0 RCX: 00007fcca8b9c629 [ 153.253926][T10447] RDX: 0000000000002020 RSI: 0000200000002780 RDI: 0000000000000003 [ 153.253932][T10447] RBP: 00007fcca6df6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.253938][T10447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.253945][T10447] R13: 00007fcca8e16038 R14: 00007fcca8e15fa0 R15: 00007ffeb8945448 [ 153.253959][T10447] [ 153.377395][T10449] openvswitch: netlink: IP tunnel dst address not specified [ 153.993135][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.993163][ T5932] Bluetooth: hci4: command 0x0406 tx timeout [ 153.995143][ T5938] Bluetooth: hci1: command 0x0c1a tx timeout [ 154.290189][ T6013] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 154.460585][ T6013] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.464388][ T6013] usb 11-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 154.479238][ T6013] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.483210][ T6013] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 154.487751][ T6013] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 154.496268][ T6013] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.500334][ T6013] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.503680][ T6013] usb 11-1: Product: syz [ 154.510037][ T6013] usb 11-1: Manufacturer: syz [ 154.517556][T10478] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 154.526881][ T6013] cdc_wdm 11-1:1.0: skipping garbage [ 154.529062][ T6013] cdc_wdm 11-1:1.0: skipping garbage [ 154.535324][ T6013] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 154.537891][ T6013] cdc_wdm 11-1:1.0: Unknown control protocol [ 154.699618][T10483] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1227'. [ 154.702832][T10483] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 154.730225][T10481] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.734375][ T40] audit: type=1400 audit(154.559:676): avc: denied { read write } for pid=10477 comm="syz.6.1225" name="cdc-wdm0" dev="devtmpfs" ino=3127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 154.734650][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 154.745504][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 154.749284][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 154.752072][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 154.754886][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 154.757652][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 154.760084][ T40] audit: type=1400 audit(154.559:677): avc: denied { open } for pid=10477 comm="syz.6.1225" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 154.760559][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 154.771849][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 154.775268][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 154.778142][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 154.782227][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 154.785229][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 154.788314][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 154.791419][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 154.794435][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 154.797213][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 154.800163][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 154.802916][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 154.805837][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 154.808574][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 154.820751][T10478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.824250][T10478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.034724][T10496] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 155.115015][T10500] netlink: 'syz.2.1235': attribute type 3 has an invalid length. [ 155.118106][T10500] fuse: Bad value for 'group_id' [ 155.119766][T10500] fuse: Bad value for 'group_id' [ 155.180728][T10503] vlan0: entered allmulticast mode [ 155.281081][T10501] /dev/sr0: Can't open blockdev [ 155.338577][T10508] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 155.615224][ T1167] Bluetooth: hci3: Frame reassembly failed (-84) [ 155.691420][ T5932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.696153][ T5932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.710703][ T5932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.715277][ T5932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.718531][ T5932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.896440][T10516] chnl_net:caif_netlink_parms(): no params data found [ 155.968160][T10516] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.970884][T10516] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.973650][T10516] bridge_slave_0: entered allmulticast mode [ 155.977634][T10516] bridge_slave_0: entered promiscuous mode [ 155.985035][T10516] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.987491][T10516] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.990760][T10516] bridge_slave_1: entered allmulticast mode [ 155.994829][T10516] bridge_slave_1: entered promiscuous mode [ 156.044201][ T6897] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.060691][T10516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.066601][T10516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.093550][T10516] team0: Port device team_slave_0 added [ 156.097893][T10516] team0: Port device team_slave_1 added [ 156.120959][T10516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.123291][T10516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.131418][T10516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.147613][ T6897] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.159898][T10516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.162488][T10516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.170481][T10516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.207112][T10516] hsr_slave_0: entered promiscuous mode [ 156.209787][T10516] hsr_slave_1: entered promiscuous mode [ 156.213155][T10516] debugfs: 'hsr0' already exists in 'hsr' [ 156.215071][T10516] Cannot create hsr debugfs directory [ 156.252250][ T6897] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.411626][ T6897] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.552206][T10516] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 156.557438][T10516] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 156.594167][T10516] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 156.601308][T10516] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 156.626367][ T6897] gretap0: left promiscuous mode [ 156.629430][ T6897] bridge0: port 3(gretap0) entered disabled state [ 156.637388][ T6897] bridge_slave_1: left allmulticast mode [ 156.639353][ T6897] bridge_slave_1: left promiscuous mode [ 156.642484][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.651862][ T6897] bridge_slave_0: left allmulticast mode [ 156.653815][ T6897] bridge_slave_0: left promiscuous mode [ 156.655797][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.033304][ T10] usb 11-1: USB disconnect, device number 3 [ 157.175111][ T6897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.181406][ T6897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.186513][ T6897] bond0 (unregistering): Released all slaves [ 157.194816][ T6897] bond1 (unregistering): Released all slaves [ 157.271225][T10548] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 157.291480][T10516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.304256][T10516] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.323747][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.326959][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.330069][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 157.330080][ T40] audit: type=1400 audit(413.151:682): avc: denied { read } for pid=10551 comm="syz.6.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.345781][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.348093][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.426879][ T40] audit: type=1400 audit(413.251:683): avc: denied { append } for pid=10560 comm="syz.6.1249" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 157.428249][T10561] program syz.6.1249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.565838][T10516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.635454][ T6897] hsr_slave_0: left promiscuous mode [ 157.638103][ T6897] hsr_slave_1: left promiscuous mode [ 157.644373][ T6897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.646687][ T6897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.656937][ T6897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.659277][ T6897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.660206][ T5932] Bluetooth: hci3: command 0xfc11 tx timeout [ 157.666006][ T5938] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 157.689175][T10581] binder: 10579:10581 ioctl c00c620f 200000000500 returned -22 [ 157.695250][ T6897] veth1_macvtap: left promiscuous mode [ 157.700200][ T6897] veth0_macvtap: left promiscuous mode [ 157.702038][ T6897] veth1_vlan: left promiscuous mode [ 157.703777][ T6897] veth0_vlan: left promiscuous mode [ 157.831005][ T5938] Bluetooth: hci5: command tx timeout [ 157.878448][ T6897] team0 (unregistering): Port device team_slave_1 removed [ 157.886313][ T6897] team0 (unregistering): Port device team_slave_0 removed [ 158.081190][T10516] veth0_vlan: entered promiscuous mode [ 158.089522][T10516] veth1_vlan: entered promiscuous mode [ 158.113296][T10588] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.115466][T10588] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 158.117458][T10588] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.119512][T10588] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 158.125762][T10516] veth0_macvtap: entered promiscuous mode [ 158.129882][T10516] veth1_macvtap: entered promiscuous mode [ 158.130891][T10588] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 158.138316][T10588] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 158.141810][T10516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.147546][T10516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.155966][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.162029][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.203886][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.206924][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.304264][ T6898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.311836][ T6898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.342351][ T6898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.344891][ T6898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.447233][T10622] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1240'. [ 158.455730][T10622] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1240'. [ 158.908603][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1262'. [ 158.970290][T10643] netlink: 'syz.9.1263': attribute type 1 has an invalid length. [ 158.980039][T10643] netlink: 228 bytes leftover after parsing attributes in process `syz.9.1263'. [ 159.062978][ T40] audit: type=1400 audit(414.891:684): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 159.090108][ T40] audit: type=1400 audit(414.911:685): avc: denied { setopt } for pid=10660 comm="syz.8.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.119156][T10668] netlink: 'syz.9.1267': attribute type 1 has an invalid length. [ 159.141093][T10668] team0: Device vxcan3 is of different type [ 159.150406][ T40] audit: type=1400 audit(414.981:686): avc: denied { mount } for pid=10669 comm="syz.6.1268" name="/" dev="configfs" ino=2190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 159.163038][T10673] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 159.166064][T10673] overlay: filesystem on ./bus not supported as upperdir [ 159.169089][ T40] audit: type=1400 audit(414.981:687): avc: denied { mounton } for pid=10669 comm="syz.6.1268" path="/186/file0" dev="configfs" ino=2190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.212754][ T40] audit: type=1400 audit(414.981:688): avc: denied { read } for pid=10669 comm="syz.6.1268" name="/" dev="configfs" ino=2190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.222006][ T40] audit: type=1400 audit(414.981:689): avc: denied { read } for pid=10669 comm="syz.6.1268" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.231569][ T40] audit: type=1400 audit(414.981:690): avc: denied { open } for pid=10669 comm="syz.6.1268" path="/186/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.239819][ T40] audit: type=1400 audit(414.981:691): avc: denied { read } for pid=10669 comm="syz.6.1268" name="/" dev="configfs" ino=2190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.256124][T10676] gretap1: entered promiscuous mode [ 159.263539][T10676] team0: Port device gretap1 added [ 159.268705][T10676] openvswitch: netlink: IP tunnel dst address not specified [ 159.277279][T10676] macvlan2: entered promiscuous mode [ 159.279387][T10676] macvlan2: entered allmulticast mode [ 159.281922][T10676] team0: Device macvlan2 is already an upper device of the team interface [ 159.337578][ T5938] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 159.367377][T10681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10681 comm=syz.8.1271 [ 159.454146][T10690] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1274'. [ 159.512070][T10697] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1275'. [ 160.158852][ T5938] Bluetooth: hci5: command 0x040f tx timeout [ 160.160702][ T5932] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.161575][ T5938] Bluetooth: hci4: command 0x0406 tx timeout [ 160.164157][ T5932] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.250143][T10745] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 160.293299][ T5932] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 160.526249][T10768] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1295'. [ 160.628654][T10775] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1297'. [ 160.821013][T10796] tmpfs: Unknown parameter 'X6' [ 160.825433][T10798] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1303'. [ 161.053928][T10829] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1306'. [ 161.301238][T10838] kvm: kvm [10836]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 161.305568][T10838] kvm: kvm [10836]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 161.482849][T10863] tmpfs: Unknown parameter 'noUcָWzswap' [ 161.544755][T10872] hpfs: Bad magic ... probably not HPFS [ 161.551789][T10871] hpfs: Bad magic ... probably not HPFS [ 161.737602][T10876] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 161.793903][T10898] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 161.807075][T10901] batadv_slave_1: entered promiscuous mode [ 161.823537][T10900] batadv_slave_1: left promiscuous mode [ 161.884760][ T5932] Bluetooth: hci2: unexpected subevent 0x05 length: 232 > 12 [ 162.069557][T10903] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 162.125740][T10922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.192396][T10924] netlink: 'syz.8.1341': attribute type 1 has an invalid length. [ 162.228592][ T5932] Bluetooth: hci5: command 0x040f tx timeout [ 162.252536][T10930] netlink: 'syz.6.1343': attribute type 29 has an invalid length. [ 162.255785][T10930] netlink: 'syz.6.1343': attribute type 3 has an invalid length. [ 162.262887][T10924] bond3: entered promiscuous mode [ 162.268318][T10924] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.311480][T10932] bond3: (slave bridge1): making interface the new active one [ 162.321786][T10932] bridge1: entered promiscuous mode [ 162.324467][T10932] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 162.404422][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 162.404477][ T40] audit: type=1400 audit(524706.217:703): avc: denied { bind } for pid=10937 comm="syz.8.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.424284][T10938] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 162.491240][ T40] audit: type=1400 audit(524706.307:704): avc: denied { setopt } for pid=10937 comm="syz.8.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.603680][ T40] audit: type=1400 audit(524706.416:705): avc: denied { ioctl } for pid=10954 comm="syz.2.1350" path="socket:[43217]" dev="sockfs" ino=43217 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 162.616245][ T8457] IPVS: starting estimator thread 0... [ 162.621783][T10951] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.625042][T10951] netlink: 'syz.8.1348': attribute type 1 has an invalid length. [ 162.629685][T10955] tipc: Started in network mode [ 162.631997][T10955] tipc: Node identity ac1414aa, cluster identity 4711 [ 162.635636][T10955] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 162.638707][T10955] tipc: Enabled bearer , priority 10 [ 162.713358][T10956] IPVS: using max 31 ests per chain, 74400 per kthread [ 162.772705][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 162.866998][T10972] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.923644][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 163.064698][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 163.215840][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 163.346947][ T10] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 163.357074][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 163.497977][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 163.520305][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 163.523838][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 163.528549][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.550011][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 163.557038][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 163.561981][ T40] audit: type=1400 audit(524707.368:706): avc: denied { wake_alarm } for pid=11008 comm="syz.6.1365" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.584624][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 163.588035][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 163.592975][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.598000][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 163.603782][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 163.609955][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 163.613374][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 163.618227][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.623208][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 163.627869][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 163.636153][ T10] usb 7-1: string descriptor 0 read error: -22 [ 163.639357][ T10] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 163.643279][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.649174][ T8457] tipc: Node number set to 2886997162 [ 163.683716][ T10] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 163.790248][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 163.914070][T11025] 9p: Bad value for 'wfdno' [ 163.931459][ T5932] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.200871][T11034] syzkaller0: entered promiscuous mode [ 164.202705][T11034] syzkaller0: entered allmulticast mode [ 164.324310][ T5932] Bluetooth: hci5: command 0x040f tx timeout [ 164.607992][ C1] net_ratelimit: 1 callbacks suppressed [ 164.608012][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 164.992470][T11050] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 164.995470][T11050] UDF-fs: Scanning with blocksize 2048 failed [ 164.999814][T11050] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 165.002881][T11050] UDF-fs: Scanning with blocksize 4096 failed [ 165.101474][T11050] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 165.372221][T11056] 9pnet_virtio: no channels available for device syz [ 165.695831][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 165.947459][ T6327] usb 7-1: USB disconnect, device number 12 [ 166.057584][T11070] netlink: 'syz.8.1381': attribute type 1 has an invalid length. [ 166.203957][T11077] netlink: 'syz.2.1384': attribute type 1 has an invalid length. [ 166.361855][ T40] audit: type=1400 audit(524710.148:707): avc: denied { lock } for pid=11088 comm="syz.2.1389" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.419742][ T5932] Bluetooth: hci5: command 0x040f tx timeout [ 166.453246][T11100] overlay: Unknown parameter 'uid>00000000000000000000' [ 166.492256][ T40] audit: type=1400 audit(524710.277:708): avc: denied { mounton } for pid=11107 comm="syz.6.1392" path="/" dev="tmpfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 166.643854][T11112] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 166.647760][T11112] bridge1: entered promiscuous mode [ 166.649894][T11112] bridge1: entered allmulticast mode [ 166.664699][ T40] audit: type=1400 audit(524710.445:709): avc: denied { ioctl } for pid=11114 comm="syz.2.1393" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 166.742100][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 166.783856][T11127] __nla_validate_parse: 4 callbacks suppressed [ 166.783870][T11127] netlink: 4456 bytes leftover after parsing attributes in process `syz.6.1398'. [ 166.791685][ T40] audit: type=1400 audit(524710.565:710): avc: denied { load_policy } for pid=11125 comm="syz.6.1398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 166.791775][T11127] SELinux: security policydb version 17 (MLS) not backwards compatible [ 166.802663][T11127] SELinux: failed to load policy [ 166.953858][T11138] netlink: 'syz.6.1402': attribute type 9 has an invalid length. [ 167.001686][ T40] audit: type=1400 audit(524710.773:711): avc: denied { write } for pid=11146 comm="syz.2.1404" path="socket:[42403]" dev="sockfs" ino=42403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.142577][T11156] kvm: kvm [11152]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 167.146716][T11156] kvm: kvm [11152]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 167.669260][T11188] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.706812][ T40] audit: type=1400 audit(524711.478:712): avc: denied { ioctl } for pid=11192 comm="syz.8.1413" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 167.773573][T11189] tmpfs: Unknown parameter 'grpquota_block_hardl' [ 167.789553][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 167.792627][T11201] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 167.960886][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1416'. [ 167.971206][T11211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.989284][T11211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.006068][ T40] audit: type=1400 audit(524711.776:713): avc: denied { connect } for pid=11214 comm="syz.2.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 168.184877][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1421'. [ 168.285823][ T40] audit: type=1400 audit(524712.054:714): avc: denied { create } for pid=11228 comm="syz.6.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 168.300659][ T40] audit: type=1400 audit(524712.064:715): avc: denied { sys_admin } for pid=11228 comm="syz.6.1422" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 168.353834][T11235] tmpfs: Unknown parameter 'n_blocks' [ 168.514882][ T5932] Bluetooth: hci5: command 0x040f tx timeout [ 168.694221][ T40] audit: type=1400 audit(524712.461:716): avc: denied { mount } for pid=11257 comm="syz.2.1428" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 168.817389][ T40] audit: type=1400 audit(524712.590:717): avc: denied { ioctl } for pid=11263 comm="syz.8.1430" path="/dev/usbmon7" dev="devtmpfs" ino=759 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.838114][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 169.384332][T11278] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.387052][T11278] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.406292][T11281] netlink: 'syz.2.1435': attribute type 10 has an invalid length. [ 169.570854][T11286] netlink: 'syz.2.1435': attribute type 10 has an invalid length. [ 169.694945][T11278] ipvlan0: left allmulticast mode [ 169.703829][T11290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11290 comm=syz.6.1436 [ 169.836633][T11281] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 169.842346][T11286] syz_tun: entered promiscuous mode [ 169.870849][ T6898] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.878352][ T6898] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.884601][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 169.888927][ T6898] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.892111][ T6898] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.939278][T11293] sock: sock_set_timeout: `syz.6.1437' (pid 11293) tries to set negative timeout [ 170.931578][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 171.978516][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 173.025678][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 174.072632][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 175.118838][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 176.165454][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 177.211915][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 178.258532][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 179.304464][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 180.351182][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 181.396710][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 182.444368][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 183.488755][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 184.534455][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 185.579860][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 186.625715][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 187.670915][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 188.161849][T11321] batman_adv: batadv0: Adding interface: macsec1 [ 188.164187][T11321] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.179913][T11321] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 188.197458][T11326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11326 comm=syz.9.1439 [ 188.204898][T11326] gfs2: not a GFS2 filesystem [ 188.210055][T11326] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1439'. [ 188.289147][ T40] audit: type=1400 audit(524731.933:718): avc: denied { setcheckreqprot } for pid=11337 comm="syz.6.1444" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 188.375409][T11344] syzkaller1: entered promiscuous mode [ 188.377278][T11344] syzkaller1: entered allmulticast mode [ 188.400797][ T40] audit: type=1400 audit(524732.052:719): avc: denied { mount } for pid=11346 comm="syz.2.1449" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 188.421650][ T40] audit: type=1400 audit(524732.072:720): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 188.486024][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1450'. [ 188.499284][T11357] bridge0: entered promiscuous mode [ 188.502138][T11357] macvlan2: entered promiscuous mode [ 188.508505][T11356] lo speed is unknown, defaulting to 1000 [ 188.513920][T11356] lo speed is unknown, defaulting to 1000 [ 188.533071][T11356] lo speed is unknown, defaulting to 1000 [ 188.541125][T11356] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.550105][T11356] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 188.575704][ T6327] usb 13-1: new full-speed USB device number 6 using dummy_hcd [ 188.592572][T11356] lo speed is unknown, defaulting to 1000 [ 188.611832][T11356] lo speed is unknown, defaulting to 1000 [ 188.617305][T11356] lo speed is unknown, defaulting to 1000 [ 188.620188][T11356] lo speed is unknown, defaulting to 1000 [ 188.716307][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 188.740746][ T6327] usb 13-1: config 1 interface 0 has no altsetting 0 [ 188.744682][ T6327] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 188.748391][ T6327] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.751084][ T6327] usb 13-1: Product: syz [ 188.752521][ T6327] usb 13-1: Manufacturer: syz [ 188.754303][ T6327] usb 13-1: SerialNumber: syz [ 188.899325][T11382] sctp: [Deprecated]: syz.6.1458 (pid 11382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.899325][T11382] Use struct sctp_sack_info instead [ 188.940742][T11386] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1462'. [ 189.067914][T11397] EXT4-fs: Conflicting test_dummy_encryption options [ 189.156211][T11411] sit0: entered allmulticast mode [ 189.163219][ T40] audit: type=1400 audit(524732.808:721): avc: denied { connect } for pid=11410 comm="syz.9.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.181762][ T6327] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 189.314139][ T5335] pmem0: [POWERTEC] [ 189.467239][T11446] ufs: You didn't specify the type of your ufs filesystem [ 189.467239][T11446] [ 189.467239][T11446] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 189.467239][T11446] [ 189.467239][T11446] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 189.484429][T11446] ufs: failed to set blocksize [ 189.526917][T11455] Cannot find add_set index 0 as target [ 189.631082][ T6327] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 189.636687][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1478'. [ 189.721368][ T6023] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 189.761660][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 189.781811][ T6327] usb 11-1: Invalid ep0 maxpacket: 64 [ 189.817951][T11464] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 189.821455][T11464] SELinux: failed to load policy [ 189.882908][ T6023] usb 7-1: Using ep0 maxpacket: 16 [ 189.889761][ T6023] usb 7-1: config index 0 descriptor too short (expected 65, got 36) [ 189.893459][ T6023] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 189.898346][ T6023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 189.903431][ T6023] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.908855][ T6023] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 189.913410][ T6327] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 189.916761][ T6023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.924078][ T6023] usb 7-1: config 0 descriptor?? [ 189.932846][ T6023] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input22 [ 189.941358][T11458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.945818][T11458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.962957][T11467] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.060666][T11467] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.063212][ T6327] usb 11-1: Invalid ep0 maxpacket: 64 [ 190.068284][ T6327] usb usb11-port1: attempt power cycle [ 190.146361][T11467] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.163433][T11449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20779 sclass=netlink_route_socket pid=11449 comm=syz.2.1476 [ 190.169650][ T8367] usb 7-1: USB disconnect, device number 13 [ 190.237046][T11467] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.394494][ T13] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.403179][ T13] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.411699][ T6899] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.415112][ T6327] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 190.421835][ T13] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.436428][ T6327] usb 11-1: Invalid ep0 maxpacket: 64 [ 190.577387][ T6327] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 190.601801][ T6327] usb 11-1: Invalid ep0 maxpacket: 64 [ 190.604458][ T6327] usb usb11-port1: unable to enumerate USB device [ 190.660790][T11480] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1485'. [ 190.713828][T11488] sg_read: process 1142 (syz.2.1487) changed security contexts after opening file descriptor, this is not allowed. [ 190.806995][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 190.933410][ T40] audit: type=1400 audit(524734.569:722): avc: denied { link } for pid=11494 comm="syz.9.1489" name="file1" dev="9p" ino=79953975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 190.940686][T11495] wg1: entered promiscuous mode [ 190.944566][T11495] wg1: entered allmulticast mode [ 191.162328][T11497] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 191.197291][T11499] binder: 11498:11499 ioctl c0046686 200000000240 returned -22 [ 191.339565][ T6013] usb 13-1: USB disconnect, device number 6 [ 191.353755][T11501] macvlan2: entered promiscuous mode [ 191.430005][T11341] usblp0: removed [ 191.610837][ T833] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 191.627715][ T40] audit: type=1400 audit(524735.256:723): avc: denied { ioctl } for pid=11507 comm="syz.8.1495" path="socket:[42983]" dev="sockfs" ino=42983 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 191.687135][ T40] audit: type=1400 audit(524735.316:724): avc: denied { ioctl } for pid=11517 comm="syz.2.1498" path="socket:[44322]" dev="sockfs" ino=44322 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.687716][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'. [ 191.700523][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'. [ 191.707792][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'. [ 191.751625][T11524] misc userio: Can't change port type on an already running userio instance [ 191.755722][T11524] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1499'. [ 191.759588][T11524] misc userio: Begin command sent, but we're already running [ 191.787805][ T833] usb 14-1: config index 0 descriptor too short (expected 45, got 36) [ 191.791177][ T833] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.806123][ T833] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.809277][ T833] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.814391][ T833] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.818081][ T833] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.823098][ T833] usb 14-1: config 0 descriptor?? [ 191.851975][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 191.864347][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1503'. [ 192.016004][T11536] efs: device does not support 512 byte blocks [ 192.018728][T11536] device does not support 512 byte blocks [ 192.018728][T11536] [ 192.028087][ T40] audit: type=1400 audit(524735.654:725): avc: denied { setopt } for pid=11535 comm="syz.2.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.028393][T11501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.050457][T11501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.073988][ T40] audit: type=1400 audit(524735.704:726): avc: denied { listen } for pid=11541 comm="syz.8.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.081619][ T40] audit: type=1400 audit(524735.704:727): avc: denied { create } for pid=11541 comm="syz.8.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 192.154498][T11548] netlink: 'syz.8.1509': attribute type 1 has an invalid length. [ 192.279817][ T830] IPVS: starting estimator thread 0... [ 192.364781][T11553] IPVS: using max 43 ests per chain, 103200 per kthread [ 192.472119][ T833] usbhid 14-1:0.0: can't add hid device: -71 [ 192.474221][ T833] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 192.478831][ T833] usb 14-1: USB disconnect, device number 2 [ 192.816915][ T10] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 192.912459][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 192.913213][T11562] 9p: Unknown access argument 18446744073709551615: -34 [ 192.990650][ T10] usb 11-1: config 0 has no interfaces? [ 192.993100][ T10] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.007489][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.013551][ T10] usb 11-1: config 0 descriptor?? [ 193.230692][ T833] usb 11-1: USB disconnect, device number 8 [ 193.320915][T11585] overlayfs: failed to resolve './file2': -2 [ 193.329048][ T10] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 193.374757][T11589] tipc: Enabling of bearer rejected, failed to enable media [ 193.500409][ T10] usb 14-1: Using ep0 maxpacket: 16 [ 193.507276][ T10] usb 14-1: config index 0 descriptor too short (expected 65, got 36) [ 193.511082][ T10] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.515954][ T10] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 193.521278][ T10] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 193.525421][ T10] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.531145][ T10] usb 14-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 193.535045][ T10] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.544278][ T10] usb 14-1: config 0 descriptor?? [ 193.563931][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input25 [ 193.573071][ T5320] pxrc 14-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 193.632018][T11325] pxrc 14-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 193.653324][ T5320] pxrc 14-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 193.668266][T11603] __nla_validate_parse: 2 callbacks suppressed [ 193.668316][T11603] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1530'. [ 193.721407][ T5320] pxrc 14-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 193.735925][T11607] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 193.743079][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 193.743125][ T40] audit: type=1400 audit(524737.366:729): avc: denied { relabelto } for pid=11606 comm="syz.2.1532" name="392" dev="tmpfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 193.756966][ T40] audit: type=1400 audit(524737.366:730): avc: denied { associate } for pid=11606 comm="syz.2.1532" name="392" dev="tmpfs" ino=2097 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 193.772787][T11569] netlink: 'syz.9.1518': attribute type 8 has an invalid length. [ 193.776060][T11569] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 193.783646][ T40] audit: type=1400 audit(524737.406:731): avc: denied { add_name } for pid=11606 comm="syz.2.1532" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 193.785225][T11607] overlayfs: regular lower layers cannot follow data lower layers [ 193.793243][T11612] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1534'. [ 193.795459][ T40] audit: type=1400 audit(524737.406:732): avc: denied { create } for pid=11606 comm="syz.2.1532" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 193.809859][ T40] audit: type=1400 audit(524737.406:733): avc: denied { associate } for pid=11606 comm="syz.2.1532" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 193.809904][ T40] audit: type=1400 audit(524737.406:734): avc: denied { mounton } for pid=11606 comm="syz.2.1532" path="/392/file0" dev="tmpfs" ino=2102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 193.809941][ T40] audit: type=1400 audit(524737.406:735): avc: denied { read } for pid=11568 comm="syz.9.1518" path="socket:[44522]" dev="sockfs" ino=44522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.820049][T11607] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 193.854597][ T6023] usb 14-1: USB disconnect, device number 3 [ 193.952238][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 193.965923][T11617] Malformed UNC in devname [ 193.965923][T11617] [ 193.971270][T11617] CIFS: VFS: Malformed UNC in devname [ 194.032883][T11618] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1534'. [ 194.068107][T11617] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 194.070649][T11617] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 194.135006][ T40] audit: type=1400 audit(524737.744:736): avc: denied { remove_name } for pid=5929 comm="syz-executor" name="file0" dev="tmpfs" ino=2102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 194.142095][T11620] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1535'. [ 194.163840][ T40] audit: type=1400 audit(524737.744:737): avc: denied { rmdir } for pid=5929 comm="syz-executor" name="file0" dev="tmpfs" ino=2102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 194.170824][ T40] audit: type=1400 audit(524737.754:738): avc: denied { rmdir } for pid=5929 comm="syz-executor" name="392" dev="tmpfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 194.192921][T11620] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11620 comm=syz.6.1535 [ 194.211211][T11624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.222037][T11624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.330557][T11635] tmpfs: Unknown parameter '$' [ 194.575500][ T6023] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 194.620238][T11652] binder: Bad value for 'max' [ 194.650635][T11654] netlink: 'syz.9.1547': attribute type 1 has an invalid length. [ 194.727905][ T6023] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.732648][ T6023] usb 7-1: config 0 has no interfaces? [ 194.736493][ T6023] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.740999][ T6023] usb 7-1: config 0 has no interfaces? [ 194.744465][ T6023] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.749388][ T6023] usb 7-1: config 0 has no interfaces? [ 194.754117][ T6023] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 194.758755][ T6023] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 194.763859][ T6023] usb 7-1: Product: syz [ 194.766048][ T6023] usb 7-1: Manufacturer: syz [ 194.768155][ T6023] usb 7-1: SerialNumber: syz [ 194.773442][ T6023] usb 7-1: config 0 descriptor?? [ 194.945825][T11670] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1551'. [ 194.986861][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 194.991616][T11636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.995607][T11636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.035839][T11677] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 195.040762][T11678] trusted_key: encrypted_key: keylen parameter is missing [ 195.233932][T11690] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1556'. [ 195.353933][T11698] macsec1: entered promiscuous mode [ 195.353956][T11698] macsec1: entered allmulticast mode [ 195.356030][T11698] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 195.370118][T11698] overlayfs: conflicting options: userxattr,redirect_dir=on [ 195.408364][T11701] netlink: 'syz.8.1561': attribute type 1 has an invalid length. [ 195.440996][T11701] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.446060][T11701] bond4: (slave bond5): making interface the new active one [ 195.448991][T11701] bond4: (slave bond5): Enslaving as an active interface with an up link [ 195.477902][T11701] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 195.481890][T11701] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1561'. [ 195.486182][T11701] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.712674][T11714] /dev/sr0: Can't open blockdev [ 195.752310][T11720] netlink: 'syz.6.1566': attribute type 2 has an invalid length. [ 195.758879][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.761294][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.763583][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.765811][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.768140][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.770904][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.773252][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.775548][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.777873][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.780148][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.783623][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.786034][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.788399][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.790791][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.792998][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.795234][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.797472][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.799948][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.802686][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.804879][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.807044][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.809236][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.811722][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.813973][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.816317][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.818541][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.820882][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.823119][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.825313][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.827600][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.829814][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.832363][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.834568][ T5932] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 195.967354][T11727] IPVS: set_ctl: invalid protocol: 8 172.20.20.61:20000 [ 196.041685][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 196.996055][ T8366] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 197.017519][T11757] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1577'. [ 197.076467][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.142598][T11761] netlink: 'syz.8.1579': attribute type 3 has an invalid length. [ 197.169554][ T8366] usb 11-1: config 0 has an invalid interface number: 50 but max is 0 [ 197.172111][ T8366] usb 11-1: config 0 has no interface number 0 [ 197.174339][ T8366] usb 11-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.181147][ T8366] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 197.185001][ T8366] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.188820][ T8366] usb 11-1: Product: syz [ 197.190683][ T8366] usb 11-1: Manufacturer: syz [ 197.192488][ T8366] usb 11-1: SerialNumber: syz [ 197.195600][ T8366] usb 11-1: config 0 descriptor?? [ 197.201286][ T8366] yurex 11-1:0.50: USB YUREX device now attached to Yurex #0 [ 197.248668][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1580'. [ 197.248668][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1580'. [ 197.324043][ T8366] usb 7-1: USB disconnect, device number 14 [ 197.370355][T11764] cgroup2: Unknown parameter 'euid' [ 197.370406][T11774] cgroup2: Unknown parameter 'euid' [ 197.421250][T11776] tipc: Enabled bearer , priority 0 [ 197.453898][ C3] usb 11-1: yurex_control_callback - control failed: -71 [ 197.454086][ T830] usb 11-1: USB disconnect, device number 9 [ 197.461532][ T830] yurex 11-1:0.50: USB YUREX #0 now disconnected [ 197.479453][T11781] tipc: Resetting bearer [ 197.493752][T11775] tipc: Disabling bearer [ 197.737037][T11799] input: syz1 as /devices/virtual/input/input26 [ 197.740060][T11799] input: failed to attach handler leds to device input26, error: -6 [ 197.915140][T11818] netlink: 'syz.9.1597': attribute type 9 has an invalid length. [ 197.933173][ T13] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.933256][T11818] netlink: 'syz.9.1597': attribute type 9 has an invalid length. [ 197.938594][ T13] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.944783][ T13] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.947447][ T13] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.023519][T11831] pimreg: entered allmulticast mode [ 198.027276][T11831] pimreg: left allmulticast mode [ 198.080849][ T10] usb 11-1: new low-speed USB device number 10 using dummy_hcd [ 198.135103][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 198.176392][T11841] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 198.202595][T11835] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 198.232812][ T10] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.235403][ T10] usb 11-1: config 0 has no interface number 0 [ 198.248148][ T10] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 198.253100][ T10] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 198.257733][ T10] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 198.265061][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.269052][T11847] SELinux: policydb string length 0 does not match expected length 8 [ 198.271509][ T10] usb 11-1: config 0 descriptor?? [ 198.274060][T11847] SELinux: failed to load policy [ 198.274737][T11813] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 198.289788][ T10] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 198.507679][ T8366] usb 11-1: USB disconnect, device number 10 [ 198.608285][T11875] trusted_key: encrypted_key: key trusted:syz not found [ 198.619488][T11875] : entered promiscuous mode [ 198.972061][T11901] __nla_validate_parse: 3 callbacks suppressed [ 198.972073][T11901] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1624'. [ 199.115664][ T54] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 199.163753][T11905] sp0: Synchronizing with TNC [ 199.166322][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 199.198636][T11903] [U] [ 199.278636][ T54] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 199.282389][ T54] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 199.287472][ T54] usb 13-1: config 0 interface 0 has no altsetting 0 [ 199.293219][ T54] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 199.296546][ T54] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 199.299278][ T54] usb 13-1: Product: syz [ 199.300617][ T54] usb 13-1: Manufacturer: syz [ 199.302053][ T54] usb 13-1: SerialNumber: syz [ 199.306957][ T54] usb 13-1: config 0 descriptor?? [ 199.310861][ T54] hub 13-1:0.0: bad descriptor, ignoring hub [ 199.316325][ T54] hub 13-1:0.0: probe with driver hub failed with error -5 [ 199.323604][ T54] usb 13-1: selecting invalid altsetting 0 [ 199.436797][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 199.589621][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 199.593152][ T10] usb 7-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.598768][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 199.603617][ T10] usb 7-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.40 [ 199.607553][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.610192][ T10] usb 7-1: Product: syz [ 199.611747][ T10] usb 7-1: Manufacturer: syz [ 199.613797][ T10] usb 7-1: SerialNumber: syz [ 199.640669][ T6327] usb 13-1: USB disconnect, device number 7 [ 199.678492][ T6023] usb 11-1: new full-speed USB device number 11 using dummy_hcd [ 199.813200][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.816090][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.829799][ T40] kauditd_printk_skb: 103 callbacks suppressed [ 199.829844][ T40] audit: type=1400 audit(524743.428:842): avc: denied { ioctl } for pid=11908 comm="syz.2.1627" path="socket:[47574]" dev="sockfs" ino=47574 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 199.843452][ T10] usbhid 7-1:1.0: can't add hid device: -71 [ 199.843544][ T10] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 199.849955][ T6023] usb 11-1: config 0 has an invalid interface number: 168 but max is 0 [ 199.853299][ T6023] usb 11-1: config 0 has no interface number 0 [ 199.854550][ T10] usb 7-1: USB disconnect, device number 15 [ 199.855861][ T6023] usb 11-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 199.863987][ T6023] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.869860][ T6023] usb 11-1: config 0 descriptor?? [ 200.079778][ T5932] Bluetooth: hci4: adv larger than maximum supported [ 200.079832][ T5932] Bluetooth: hci4: Malformed LE Event: 0x0d [ 200.084446][ T6023] usb 11-1: string descriptor 0 read error: -71 [ 200.091207][ T6023] usb-storage 11-1:0.168: USB Mass Storage device detected [ 200.099575][ T6023] usb-storage 11-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 200.177248][ T6023] usb 11-1: USB disconnect, device number 11 [ 200.210242][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 200.229621][T11928] netlink: 'syz.8.1633': attribute type 1 has an invalid length. [ 200.246978][T11928] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.396594][T11937] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 200.415350][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1637'. [ 200.444940][ T40] audit: type=1400 audit(524744.036:843): avc: denied { setopt } for pid=11940 comm="syz.2.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.935740][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1651'. [ 200.984826][T11985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.003942][T11989] macvlan3: entered promiscuous mode [ 201.005635][T11989] macvlan3: entered allmulticast mode [ 201.007826][T11989] bond1: entered promiscuous mode [ 201.009809][T11989] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 201.044362][T11989] bond1: left promiscuous mode [ 201.105852][T11996] pim6reg1: entered promiscuous mode [ 201.108328][T11996] pim6reg1: entered allmulticast mode [ 201.152450][T12002] input: syz1 as /devices/virtual/input/input27 [ 201.158537][T12002] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 201.163922][ T40] audit: type=1400 audit(524744.743:844): avc: denied { relabelto } for pid=12001 comm="syz.6.1655" name="cpu.stat" dev="tmpfs" ino=1514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 201.175789][ T40] audit: type=1400 audit(524744.743:845): avc: denied { associate } for pid=12001 comm="syz.6.1655" name="cpu.stat" dev="tmpfs" ino=1514 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 201.186507][ T40] audit: type=1400 audit(524744.743:846): avc: denied { append } for pid=12001 comm="syz.6.1655" path="/279/cpu.stat" dev="tmpfs" ino=1514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 201.214356][ T40] audit: type=1400 audit(524744.803:847): avc: denied { unlink } for pid=8357 comm="syz-executor" name="cpu.stat" dev="tmpfs" ino=1514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 201.254527][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 201.256370][T12011] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 201.261666][T12011] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 201.269863][T12011] cramfs: wrong magic [ 201.271830][T12013] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 201.392527][T12022] mkiss: ax0: crc mode is auto. [ 201.486976][T12031] netlink: 'syz.8.1663': attribute type 11 has an invalid length. [ 201.556582][T12033] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1665'. [ 201.564231][T12033] openvswitch: netlink: Missing key (keys=40, expected=80) [ 201.606098][ T6023] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 201.608121][T12037] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1667'. [ 201.618461][T12038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12038 comm=syz.6.1667 [ 201.622855][T12038] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1667'. [ 201.756642][ T6023] usb 14-1: Using ep0 maxpacket: 32 [ 201.760861][ T6023] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 201.766352][ T6023] usb 14-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 201.770088][ T6023] usb 14-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 201.773460][ T6023] usb 14-1: Product: syz [ 201.775430][ T6023] usb 14-1: Manufacturer: syz [ 201.777976][ T6023] usb 14-1: SerialNumber: syz [ 201.782412][ T6023] usb 14-1: config 0 descriptor?? [ 201.784794][T12018] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 201.788586][ T6023] hub 14-1:0.0: bad descriptor, ignoring hub [ 201.790599][ T6023] hub 14-1:0.0: probe with driver hub failed with error -5 [ 201.937406][ T10] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 201.977941][T12051] netlink: 'syz.6.1671': attribute type 21 has an invalid length. [ 201.981493][T12051] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1671'. [ 202.096389][T12053] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1672'. [ 202.099956][ T10] usb 13-1: Using ep0 maxpacket: 32 [ 202.104814][ T10] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 202.110606][ T10] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 202.113556][ T10] usb 13-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 202.116182][ T10] usb 13-1: Product: syz [ 202.117529][ T10] usb 13-1: Manufacturer: syz [ 202.119451][ T10] usb 13-1: SerialNumber: syz [ 202.124712][ T10] usb 13-1: config 0 descriptor?? [ 202.126970][T12043] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 202.130805][ T10] hub 13-1:0.0: bad descriptor, ignoring hub [ 202.132757][ T10] hub 13-1:0.0: probe with driver hub failed with error -5 [ 202.138706][ T10] chaoskey 13-1:0.0: Unable to register with hwrng [ 202.299205][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 202.382769][ T10] IPVS: starting estimator thread 0... [ 202.480890][T12067] IPVS: using max 30 ests per chain, 72000 per kthread [ 202.501158][ T40] audit: type=1400 audit(524746.077:848): avc: denied { create } for pid=12073 comm="syz.2.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 202.509212][ T40] audit: type=1400 audit(524746.087:849): avc: denied { setopt } for pid=12073 comm="syz.2.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 202.742016][ T1146] raw-gadget.0 gadget.9: failed to queue suspend event [ 202.811052][T12043] raw-gadget.0 gadget.9: failed to queue resume event [ 202.831900][ T6899] raw-gadget.0 gadget.9: failed to queue suspend event [ 202.854786][T12054] raw-gadget.0 gadget.9: failed to queue disconnect event [ 203.208011][ T5335] pmem0: [POWERTEC] [ 203.252954][T12115] binder: BINDER_SET_CONTEXT_MGR already set [ 203.256298][T12115] binder: 12114:12115 ioctl 4018620d 200000000180 returned -16 [ 203.343170][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 203.353691][ T830] usb 13-1: USB disconnect, device number 8 [ 203.381538][ T40] audit: type=1400 audit(524746.954:850): avc: denied { write } for pid=12127 comm="syz.6.1682" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 203.384937][T12128] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12128 comm=syz.6.1682 [ 203.451140][T12072] netlink: 'syz.8.1669': attribute type 10 has an invalid length. [ 203.453781][T12072] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1669'. [ 203.456725][T12072] team0: entered promiscuous mode [ 203.458463][T12072] team_slave_0: entered promiscuous mode [ 203.460461][T12072] team_slave_1: entered promiscuous mode [ 203.462501][T12072] team0: entered allmulticast mode [ 203.464868][T12072] team_slave_0: entered allmulticast mode [ 203.466785][T12072] team_slave_1: entered allmulticast mode [ 203.469710][T12072] bridge0: port 3(team0) entered blocking state [ 203.471874][T12072] bridge0: port 3(team0) entered disabled state [ 203.476975][T12072] bridge0: port 3(team0) entered blocking state [ 203.479305][T12072] bridge0: port 3(team0) entered forwarding state [ 203.563193][T12130] erofs (device loop6): cannot find valid erofs superblock [ 203.601134][T12132] netlink: 'syz.6.1684': attribute type 28 has an invalid length. [ 203.605649][T12132] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1684'. [ 203.688180][T12136] netlink: 'syz.6.1685': attribute type 1 has an invalid length. [ 204.005870][ T10] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 204.157805][ T10] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.161166][ T10] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 204.164118][ T10] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 204.170385][ T10] usb 11-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 204.173277][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.176016][ T10] usb 11-1: Product: syz [ 204.177516][ T10] usb 11-1: Manufacturer: syz [ 204.179205][ T10] usb 11-1: SerialNumber: syz [ 204.182483][ T10] usb 11-1: config 0 descriptor?? [ 204.187532][ T10] uvcvideo 11-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 204.190715][ T10] uvcvideo 11-1:0.0: No valid video chain found. [ 204.387937][ T6327] usb 11-1: USB disconnect, device number 12 [ 204.397447][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 205.417273][T12158] syzkaller1: entered promiscuous mode [ 205.419114][T12158] syzkaller1: entered allmulticast mode [ 205.431513][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 205.646662][T12162] netlink: 'syz.6.1694': attribute type 21 has an invalid length. [ 205.649698][T12162] IPv6: NLM_F_CREATE should be specified when creating new route [ 205.653127][T12162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.656120][T12162] IPv6: NLM_F_CREATE should be set when creating new route [ 205.985788][ T5932] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 205.989940][ T5932] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 206.035326][ T5932] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 206.129127][ T6023] usb 14-1: USB disconnect, device number 4 [ 206.195686][ T40] audit: type=1400 audit(524749.772:851): avc: denied { name_bind } for pid=12189 comm="syz.8.1704" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 206.212789][ T40] audit: type=1400 audit(524749.782:852): avc: denied { mounton } for pid=12189 comm="syz.8.1704" path="/226/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 206.217909][T12192] overlayfs: failed to resolve './file0/file0': -2 [ 206.224964][T12192] binder: 12189:12192 ioctl 40046205 0 returned -22 [ 206.228766][T12192] binder: 12189:12192 ioctl c0306201 200000000540 returned -14 [ 206.346803][T12208] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1709'. [ 206.350240][T12208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1709'. [ 206.353927][T12208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1709'. [ 206.403314][T12212] netlink: 'syz.9.1711': attribute type 1 has an invalid length. [ 206.410503][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1711'. [ 206.485726][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 206.682538][ T40] audit: type=1400 audit(524750.250:853): avc: denied { create } for pid=12245 comm="syz.9.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 206.689581][ T40] audit: type=1400 audit(524750.250:854): avc: denied { read } for pid=12245 comm="syz.9.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 206.696416][ T40] audit: type=1400 audit(524750.260:855): avc: denied { ioctl } for pid=12245 comm="syz.9.1724" path="socket:[50330]" dev="sockfs" ino=50330 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 206.911352][ T40] audit: type=1400 audit(524750.480:856): avc: denied { remove_name } for pid=12254 comm="syz.9.1726" name="file1" dev="9p" ino=79953975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.919279][ T40] audit: type=1400 audit(524750.480:857): avc: denied { unlink } for pid=12254 comm="syz.9.1726" name="file1" dev="9p" ino=79953975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 207.053073][T12268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12268 comm=syz.8.1731 [ 207.110466][T12270] program syz.9.1730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.477986][ T40] audit: type=1400 audit(524751.037:858): avc: denied { getopt } for pid=12304 comm="syz.6.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 207.519765][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 207.700475][T12311] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 207.717388][T12311] CUSE: unknown device info "&b%ZW)3\my " [ 207.720327][T12311] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 207.724464][T12311] CUSE: DEVNAME unspecified [ 207.755610][ T40] audit: type=1800 audit(524751.316:859): pid=12313 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1745" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 207.856563][ T40] audit: type=1400 audit(524751.416:860): avc: denied { map } for pid=12318 comm="syz.2.1747" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 207.939106][T12319] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 208.035871][T12325] nfs4: Bad value for 'source' [ 208.038651][T12325] nfs4: Bad value for 'source' [ 208.169014][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1754'. [ 208.302207][ T5932] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 208.309871][ T5932] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 208.337959][T12346] kvm: kvm [12345]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xfe [ 208.347704][T12361] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1760'. [ 208.353250][ T5932] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 208.391139][T12346] kvm: kvm [12345]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xef [ 208.419915][T12375] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1764'. [ 208.425920][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.428683][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.471825][T12379] overlayfs: upper fs does not support file handles, falling back to index=off. [ 208.502912][T12379] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 208.563961][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.212053][T12391] overlayfs: regular lower layers cannot follow data lower layers [ 209.373744][T12409] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1776'. [ 209.387238][T12409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32785 sclass=netlink_route_socket pid=12409 comm=syz.9.1776 [ 209.392398][T12409] ------------[ cut here ]------------ [ 209.394166][T12409] 1 [ 209.394174][T12409] WARNING: mm/page_alloc.c:5226 at __alloc_frozen_pages_noprof+0x23ea/0x2ba0, CPU#2: syz.9.1776/12409 [ 209.400176][T12409] Modules linked in: [ 209.402384][T12409] CPU: 2 UID: 0 PID: 12409 Comm: syz.9.1776 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.406029][T12409] Tainted: [L]=SOFTLOCKUP [ 209.407801][T12409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.411067][T12409] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 209.413259][T12409] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 74 a2 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 209.420271][T12409] RSP: 0018:ffffc90025747790 EFLAGS: 00010246 [ 209.422318][T12409] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 209.424833][T12409] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 209.427701][T12409] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 209.430245][T12409] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 209.433415][T12409] R13: 1ffff92004ae8f41 R14: 0000000000000015 R15: 1ffff92004ae8f0b [ 209.436371][T12409] FS: 00007f730173a6c0(0000) GS:ffff8880d654a000(0000) knlGS:0000000000000000 [ 209.439545][T12409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.441630][T12409] CR2: 000000110c3c51e1 CR3: 000000002d506000 CR4: 0000000000352ef0 [ 209.444140][T12409] Call Trace: [ 209.445186][T12409] [ 209.446133][T12409] ? is_bpf_text_address+0x8a/0x1a0 [ 209.447961][T12409] ? bpf_ksym_find+0x128/0x1c0 [ 209.449468][T12409] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 209.451285][T12409] ? is_bpf_text_address+0x94/0x1a0 [ 209.452758][T12409] ? kernel_text_address+0x8d/0x100 [ 209.454219][T12409] ? __kernel_text_address+0xd/0x30 [ 209.455880][T12409] ? unwind_get_return_address+0x59/0xa0 [ 209.457999][T12409] ? arch_stack_walk+0xa6/0xf0 [ 209.459554][T12409] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 209.461572][T12409] ? tomoyo_path_number_perm+0x46d/0x580 [ 209.463415][T12409] ? stack_trace_save+0x8e/0xc0 [ 209.465156][T12409] ? stack_depot_save_flags+0x27/0x9d0 [ 209.467694][T12409] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 209.469863][T12409] ? policy_nodemask+0xed/0x4f0 [ 209.471281][T12409] alloc_pages_mpol+0x1fb/0x550 [ 209.472662][T12409] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 209.474186][T12409] ? find_held_lock+0x2b/0x80 [ 209.475704][T12409] ? avc_has_extended_perms+0x33a/0x1080 [ 209.477636][T12409] ? drm_syncobj_array_find+0x34/0x3b0 [ 209.479578][T12409] ___kmalloc_large_node+0x104/0x150 [ 209.481279][T12409] __kmalloc_large_node_noprof+0x1c/0x70 [ 209.483100][T12409] __kmalloc_noprof+0x5be/0x850 [ 209.484692][T12409] ? __lock_acquire+0x4a5/0x2630 [ 209.486306][T12409] drm_syncobj_array_find+0x34/0x3b0 [ 209.488551][T12409] drm_syncobj_wait_ioctl+0x230/0x390 [ 209.490347][T12409] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 209.492250][T12409] ? find_held_lock+0x2b/0x80 [ 209.493751][T12409] ? drm_dev_exit+0x41/0x60 [ 209.495236][T12409] ? drm_dev_exit+0x41/0x60 [ 209.496706][T12409] drm_ioctl_kernel+0x1f3/0x3e0 [ 209.498355][T12409] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 209.500188][T12409] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 209.502312][T12409] drm_ioctl+0x5e6/0xc60 [ 209.504127][T12409] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 209.506189][T12409] ? __pfx_drm_ioctl+0x10/0x10 [ 209.507971][T12409] ? selinux_file_ioctl+0x139/0x290 [ 209.509769][T12409] ? selinux_file_ioctl+0xb4/0x290 [ 209.511429][T12409] ? __pfx_drm_ioctl+0x10/0x10 [ 209.512986][T12409] __x64_sys_ioctl+0x18e/0x210 [ 209.514533][T12409] do_syscall_64+0x106/0xf80 [ 209.516026][T12409] ? clear_bhb_loop+0x40/0x90 [ 209.517851][T12409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.519774][T12409] RIP: 0033:0x7f730079c629 [ 209.521216][T12409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.527291][T12409] RSP: 002b:00007f730173a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.530147][T12409] RAX: ffffffffffffffda RBX: 00007f7300a15fa0 RCX: 00007f730079c629 [ 209.532622][T12409] RDX: 0000200000000080 RSI: 00000000c02864c3 RDI: 0000000000000006 [ 209.535083][T12409] RBP: 00007f7300832b39 R08: 0000000000000000 R09: 0000000000000000 [ 209.538000][T12409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.541234][T12409] R13: 00007f7300a16038 R14: 00007f7300a15fa0 R15: 00007ffc6caf2478 [ 209.543661][T12409] [ 209.544648][T12409] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 209.546947][T12409] CPU: 2 UID: 0 PID: 12409 Comm: syz.9.1776 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.550307][T12409] Tainted: [L]=SOFTLOCKUP [ 209.551710][T12409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.554826][T12409] Call Trace: [ 209.555890][T12409] [ 209.556838][T12409] dump_stack_lvl+0x100/0x190 [ 209.558383][T12409] vpanic+0x552/0x970 [ 209.559671][T12409] ? __pfx_vpanic+0x10/0x10 [ 209.561097][T12409] panic+0xd1/0xe0 [ 209.562302][T12409] ? __pfx_panic+0x10/0x10 [ 209.563702][T12409] check_panic_on_warn.cold+0x19/0x34 [ 209.565378][T12409] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 209.567302][T12409] __warn.cold+0x191/0x348 [ 209.568757][T12409] __report_bug+0x296/0x3d0 [ 209.570186][T12409] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 209.572297][T12409] ? __pfx___report_bug+0x10/0x10 [ 209.574452][T12409] ? __lock_acquire+0x4a5/0x2630 [ 209.576356][T12409] ? __lock_acquire+0x4a5/0x2630 [ 209.577979][T12409] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 209.579987][T12409] report_bug+0xb2/0x220 [ 209.581355][T12409] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 209.583332][T12409] handle_bug+0x166/0x2a0 [ 209.584727][T12409] exc_invalid_op+0x17/0x50 [ 209.586192][T12409] asm_exc_invalid_op+0x1a/0x20 [ 209.587895][T12409] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 209.590430][T12409] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 74 a2 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 209.596385][T12409] RSP: 0018:ffffc90025747790 EFLAGS: 00010246 [ 209.598354][T12409] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 209.600847][T12409] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 209.603372][T12409] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 209.605846][T12409] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 209.608384][T12409] R13: 1ffff92004ae8f41 R14: 0000000000000015 R15: 1ffff92004ae8f0b [ 209.610919][T12409] ? is_bpf_text_address+0x8a/0x1a0 [ 209.612586][T12409] ? bpf_ksym_find+0x128/0x1c0 [ 209.614143][T12409] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 209.616116][T12409] ? is_bpf_text_address+0x94/0x1a0 [ 209.617803][T12409] ? kernel_text_address+0x8d/0x100 [ 209.619478][T12409] ? __kernel_text_address+0xd/0x30 [ 209.621134][T12409] ? unwind_get_return_address+0x59/0xa0 [ 209.623369][T12409] ? arch_stack_walk+0xa6/0xf0 [ 209.625491][T12409] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 209.627753][T12409] ? tomoyo_path_number_perm+0x46d/0x580 [ 209.629584][T12409] ? stack_trace_save+0x8e/0xc0 [ 209.631165][T12409] ? stack_depot_save_flags+0x27/0x9d0 [ 209.632946][T12409] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 209.634839][T12409] ? policy_nodemask+0xed/0x4f0 [ 209.636402][T12409] alloc_pages_mpol+0x1fb/0x550 [ 209.638045][T12409] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 209.639801][T12409] ? find_held_lock+0x2b/0x80 [ 209.641352][T12409] ? avc_has_extended_perms+0x33a/0x1080 [ 209.643153][T12409] ? drm_syncobj_array_find+0x34/0x3b0 [ 209.644888][T12409] ___kmalloc_large_node+0x104/0x150 [ 209.646593][T12409] __kmalloc_large_node_noprof+0x1c/0x70 [ 209.648410][T12409] __kmalloc_noprof+0x5be/0x850 [ 209.650007][T12409] ? __lock_acquire+0x4a5/0x2630 [ 209.651612][T12409] drm_syncobj_array_find+0x34/0x3b0 [ 209.653324][T12409] drm_syncobj_wait_ioctl+0x230/0x390 [ 209.655056][T12409] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 209.657064][T12409] ? find_held_lock+0x2b/0x80 [ 209.659106][T12409] ? drm_dev_exit+0x41/0x60 [ 209.661088][T12409] ? drm_dev_exit+0x41/0x60 [ 209.662736][T12409] drm_ioctl_kernel+0x1f3/0x3e0 [ 209.664304][T12409] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 209.666164][T12409] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 209.667932][T12409] drm_ioctl+0x5e6/0xc60 [ 209.669326][T12409] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 209.671229][T12409] ? __pfx_drm_ioctl+0x10/0x10 [ 209.672788][T12409] ? selinux_file_ioctl+0x139/0x290 [ 209.674851][T12409] ? selinux_file_ioctl+0xb4/0x290 [ 209.677073][T12409] ? __pfx_drm_ioctl+0x10/0x10 [ 209.679055][T12409] __x64_sys_ioctl+0x18e/0x210 [ 209.680599][T12409] do_syscall_64+0x106/0xf80 [ 209.682080][T12409] ? clear_bhb_loop+0x40/0x90 [ 209.683601][T12409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.685484][T12409] RIP: 0033:0x7f730079c629 [ 209.686930][T12409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.692938][T12409] RSP: 002b:00007f730173a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.695580][T12409] RAX: ffffffffffffffda RBX: 00007f7300a15fa0 RCX: 00007f730079c629 [ 209.698319][T12409] RDX: 0000200000000080 RSI: 00000000c02864c3 RDI: 0000000000000006 [ 209.700937][T12409] RBP: 00007f7300832b39 R08: 0000000000000000 R09: 0000000000000000 [ 209.703433][T12409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.705974][T12409] R13: 00007f7300a16038 R14: 00007f7300a15fa0 R15: 00007ffc6caf2478 [ 209.709359][T12409] [ 209.711370][T12409] Kernel Offset: disabled [ 209.712794][T12409] Rebooting in 86400 seconds..