last executing test programs: 33.935006712s ago: executing program 2 (id=41): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0xe8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xa8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xbc}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7fffffff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffff9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x9}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) 33.812483897s ago: executing program 2 (id=42): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 33.562469429s ago: executing program 2 (id=46): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fcntl$addseals(r3, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x200, 0xf24}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dvmrp1\x00'}) close(r1) 33.460842127s ago: executing program 2 (id=47): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000008240), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000008280)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x38, 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, './file0'}, 0x79) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f0000000340)=ANY=[@ANYBLOB="060000005c00000089dd7232ceb6fa2985c6a05dde7ed2bd35b1000c7057cd8226dd254567153fe0cb6800000000000067737a1cc0c647af978fa5000000001ebd970406f77bdfe8c3cf5506a292b6e22d089343e14b00000000000000000800000000"]) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r4, &(0x7f0000000000)='.\x00', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, 0x24, r4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r7, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r8}, 0x4) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$cont(0x20, r9, 0x0, 0x0) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)=[0x7, 0x5, 0x8, 0x6, 0x7, 0xffffffff, 0x2, 0x3], &(0x7f00000005c0)=[0x5, 0x3, 0x1, 0x5, 0x1], 0xfffffffffffffffb, 0x8, 0x0, r9}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34ae1200", @ANYRES16=r11, @ANYBLOB="010e26bd7000fddbdf25010000000900030073797a31000000000900030073797a31000000000500040002000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40040) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r13 = fcntl$dupfd(r5, 0x0, r10) ioctl$IOCTL_GET_NUM_DEVICES(r13, 0x40046104, &(0x7f00000002c0)) umount2(&(0x7f0000000300)='./file0/file0\x00', 0x8) umount2(&(0x7f0000000100)='./file0\x00', 0x4) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 33.350200493s ago: executing program 2 (id=48): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000040)) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x8, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$int_out(r4, 0x5460, &(0x7f0000000040)) 32.880570542s ago: executing program 2 (id=54): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 32.801888736s ago: executing program 32 (id=54): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 11.357525049s ago: executing program 1 (id=274): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x18e8}, @from_mac=@device_b, @device_b, @initial, {0xa}, "", @value, @value=@ver_80211n={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0x7, "d07b9edf025d95"}, {@device_a, @device_a, 0x1000, "2519e7f179e657b56738c6489239c35ae80c167e4f853aa36e3a4eb6af3f3a957d1396a4d5e20f32d2626845039f1fd03161fe83c8b2408e1e0a2c0fbc3b5555749d7efb5e75d595e228f776d89923ba860d1d33cd967311cac2bc56aae44f0f1b6ba64226a6e93cb3d547c942717272ff704f472dda48c1eea63504ecee584424a295b4ba9ec67af8646555759b40f9df5aec0a5216a2a566e798d244bf43622b73a96cd8ebe5918ce43406a395630b9fb26b43922d7ef5f34fd9b55cd6e17efe4d9b3b17610162c779731b67afe97a0fb2e913b33e1cf2f66826674aee1bf30636f76b3156f55c46cb3138ce265e8d433edc22857777bf520d4ae61894db33eef1566032c1dabe71a2a64656f3415bfda8e444d018112e08e2ff80e7411facd05c663ccb0b5645310d79c55822fe925f8382f4210664eb3182d703d9799a7444d2a40ef7abeea36769a8850802a8b1225ffd2ccb2b28163945ac480e9c8b64b5deb0c4953b79a8c5a516b3c7bdecfba47c8b3586e07337676932e1391e5248ab59179c278f5bbbf525a5dfc225dd2d7d51e23f30b79aa8eb0369deb0a5fb754635ac25d29568c65d7b125c633455f0f2a5c0e7287c347a711bd4584c88519a668513ce45b9eb8432b33b1236085355ef011a4d9aa482b0d1239a41bb65543b0ef96e74e8407f327d07e7af8af892e00329e1d5af113ac2ebe79f4b9c71d0d90b99497aaff49ddeb235d3ff7e4a47460ac83c37965e6e3371b9edb273777033c9bc50b2738c857d21ee548edbc866a1f7a10ecf3c0bd7a1d500d252f79c343d8e5fd59794ee6ce2b2826f4f16fe23d3d1e43aacdf7249cda6c4ff4e03a2cfcecb0951761222e1904fff8e3e82d2f67471cc5dff4ad0dfe7e3135cc5f201536a0f3b21611895134599d0af358159ee84a9aadce04f681e79c62234621a177a52cbfb4c40b4054c7cd1e27a4278d35f818264697abc46a6338919d2bd40b343705c99e8e68d12b8e84fb8e417cabefa500bb5cc41a88d7bda2a68b827018e4d78f784b6d4eb601f7b14377810dcfc5e3395fb03c08b8be5e61a16da2b6fcd5bbe53ad95bac194a3c7a71fed42e0ff7d6f8c77dcdca82ee9912e8beb30d560c84694a603549898c035ade5d454625cf180e6b2d003f0907f7ce647569e7cf7bc6cd8ef0c3f2531681d6c0638a078552a777c6b825b0f0caebff0fd6988e3f23211c528446c6db931bb704d0a554144fecc77af4e218f2451ea724e807580a17ec7d0d708290ba01511f45cd8b5e7f194b2ee922f42677c8045c871d388af1bcd33564eb9d38b3d0c86e36ea73c65c3c89cb1c827186cdd1c86c27d2b88df033815603228ffb535ef6bd8a0cc997b2daee8ede8ce6fc7014a2052829a1e351c06a6aa2252f3d1034970ffd0477a4cdebccac9dac4e68b86080a7f7e1629b5d771a5694221d656f35243622d723e5fc5be4d641494be36f50e14e37b783acb329ae4f5a045229593b21c44699e213929b5b848aef49ef91b489158482790bab69800795526b9436fc3fc83cdf7e0970fd8bf95b9c4bb5160f453050b52d412492f3511c5e5324facea61f4c4fce7d22b383dda015fdbcadceda2745dff7eccb278c789c762c2ad14a172d8c7dd5c3ee6437669dea64535e241eb11c7afd0511b2e2212c429c431d35f33c738c1e987d2ef9f1790fa9846d50ab34ae2bcabdf349293a6023f3a3b4d6d6b8650bcad5bd678a9e1bd3172cf951cd27f3465bf9bcf97be230e49e605da47e4f001b81b7724a0b0518603a15cef7d0f9334336291c63088c5161a79ecd802d9edf9c18efd1559f40ad3bcdd1cfd26dc5c34eab2f1a3361ae64cfa22d1eede5eccc79342f8c683a599c1e1eeaf116ddd84fc909fb086a1ad3cfe83e0fe18975dc8d158038c19ea2efc7d16b1452956dd135ef866aef3cd2c6c2b738650f4289b73f34d32d48fb9bbadeea18d60393e18ede0f5d2489b71cde4de55f8738a129b8849b161dbbe325e795acb52522d9187b92f665953fa531c65761ecc769d00adf1496728257b93ab8d951f38d0df924f3130c0a4dbbae4b5c85bfd685277907a015538fef0dd010943f424ce5e8c37e0ba06c53c4fd99d4881eae63d12e4a6112e57e94db02f8186505351b16286200f55c38a67374557f7fe0a598ede6875617d3a7098265a63e250ed2e8756085ec4571882a092352ab92732d272120b69fe7c28ce66dfa08c2303b5bcc2231b0f30e066e6c85fff6d2dc8ecb5b2f2f8826cadcc77dd7e6d506b8701e50f66072216dbdffa0edbfebf54711e536ca5976cb80a859c582b6d40314001eaa97b5e080b17eb2d19656f73ae5bf3103721135582828b022efcfe53b97cd87c4f14bc1c6ae3afda6c1873bfabb4a0140fc215291554b110fd692bb9e9d62a316f2c6bf105b9441e7a7154b1a57073c76fe5bb4187132d1893cf14f7bfb62836c745401a05d700d305b068a58bd1a5b7d2e300fe10a797630423934f0726272f1c1f54cfb7d8de283a69df52944a7a178285c1bae74717ad113a27e56f88f9a39f64e91cc0433ae550ccb8ee09e58f2769d4c374e41513c6dd760adf0c7758a5a1072fdde832e2e86a35775eb0324d9bc19c6affff3199825eed00afbeb3cb8e11a26f0815a0e02f09a4aff51681a27ad1e768e00f109c6df72434f2c9272efb6f69cc73c9ecf5388dfc6188277e3b23bb9859bdd5d3aa2e25dfe8140d6f3ce2c0498ef0da7f132bb2b49dab90b8ffb87b67ab19e53c3cb2678502a1bb28ca52593818f33d734d18bff0375826144ab08164540665f80777f2092a105f93120128a923d42e680800612f41e2dc9d0c20aa5257dba24f8962afc3e2c71fe59cf80aff7487b83f0df1b7fe76afb57d45f3a6b91f01c10140064db6fc8ae0296ab2e8621811eb1808bb88cc1fdcadca8562f517f4631d167c38d62ecec232fe095e86f60ca42eebdb4f16b7145260f75d96b886ae400c401c2f9899b6fdae0483fefe48bc7a55c3bb00b9a345f7aec90d5a6d7a17d085501178556307914603af29d1da462d3828923d002d4eed19fbf9a00e7bd2cbf0f2bb5b182d88858bdd3bfd47d6a88a9e3cb9738d254c16ddf924efd4b9cbfb9da7f6f0a920040833929d0e1f8289c2f5c4364a8e65455612da7c36f8f0a5d0fdc210a5432c31699827fef32ce06c601d512520dc617dd86b52a449223bffa656b96a37fc5f83fa5eb41a5b34666ec2be5229f67a22838e7bbffaacba202989dc6a500b5be3b85f86dfafb42011ab24bb051fba77a267a1fb53f1da97a3a39f2519319c8b9dc4de93d6014da73531fa3b1eea81e93ed35993d8b5dc4186f41c4bc64fdf72a9071c79882679b50c556519ea68569878ec4b48281c0583c002a4c16c70cd3be088b47fa86cadbe5697d814c03661450e521076d62a19fe944e2a424bee70b40a0c5b6572a19ba83d59bbfed2da2590908c39b7d878fd9ab1d6a7bb37be17618dd50bcaa988369144c1e19c7ed6009558161b8ad50c6ff6876399d291322e6ec2580e7e40d5eba0c4646ebdf3fb9ea1a5b459e8d34bb98c859e4233c87f4b00c5768b48a8346493b12bd92569e41deb9a0a14b35e6d95c2e08053fefa05907c7dc43fb7451253e5d21366fd29820ffb923bdf74d08f30187518101dc27d12c4a2b2c6350d541983bb77d1082e1992cbcc7fa07c9ff6ac9ffe10d349c5809945cc06f23f30d0c0dcb60ead5c59b706dde959bc99be7bcd33d40e176659f1b60c9502cc74b2db04679bd1edbdca28f9995bbd367f050a61c4b3bab4ee91f90c9013d1850f8034b10f0a387d161d9b0527c85d6d52c2085a21567e66fc1a0173bf478e3b3d3bd77645572c2c6b773878bba68483d4d704f5b1a9144631aef72c649cea5c1e39fedd4a3cb59bc164cf325cbdb0710a78e1e467738f5460784e14cc2a2b3f3623d19290340f3c7eed3b0c714cdb54846c97081d5eadc9801c5a8e3df0a33da6516d8c184ca27518354593f5c1d4d719337c0a438aa311290dcfc63b2dfbd40673c4bc1185d5356143e25974417a1e19d95777558261ce8b726515f14ec7de5496fb2b130ec1ce2572bcfbbbc85a82b239dd8ae0053feb17ac6512e99649df9c48739cdedff9ca1d861469597437fd1f668d73a80b3bf606ee66b4975d39500c8152b297f5aef6d2d912e24a636d655dc55d76380427844365fc0dae2ee4d7f5793cbd6777bc975064709aebab92d66459405b3748fbee99dc457359445b042c4085c34b4881290767103c3ab6ad60334952fd729867f7e7b0d4833d681815e4ab148a21c12f8d263a9edfa55863e318af206b4467dccb733c059d994658a6fe0da3284cde3f4948571cefe7540b2d13b3c063147be674074a64b3554dcf5318ee1f1dcfa8f9600425ab706bef86e3a7522d5041afc709fee08fe21feaccc2c64d3eea29815c8737708f50b0fc627a3cc22cbe0c9362bfc92a033879800712c7c58cc25df46c3d149abb61a42575bdaf2b798c11f7ef178c9a98d90b0b3b6c0b747f102e20dd43252080318016fdb6ef032df2b0a7c9f7bc537257af5156ac952e85392c46b183defa6cdaf708eb7e9671467092768e22f1421b7d30ed7707893f5ea8f70836b9b8c2d6dece167bda0a37a2497606fc70ba0073a0500b3cbce167fa6107ab157d1482b5fc4c9bd56bd8ed0535e0a0272ba728ae5d263393a01ef02666c270934842abb5c1431eca2c7d020254d1612571f83f83818bd1b12a6612910ba0c917a8d9d67dc07106bfd9cbf9d386905efc5ad9533a779a972fbd0778e5bd8551eb46f73aec002ffb3f512f5e565c49d64bdda491fecd41533a09cbaa4f450aaf097af50ebdf8f94e57204544cfd04d0005954ae360f78ea0f97c3073e78b11e72d515a6ef40c1a862a544663ecd59390ee68b68a35728048f5524deb2f41007276ef6a784e2e1f0ad309e573b9653f6c31c930430d557040e787c60a0d25508c40aba806ab74f267eb976d16b306b333ff3ca71e766d3c0866885b5ce9393f25fccf49cde3be04bd7099823ede32652e3059e31190642b3173cbe415ab6dad9c38789018c29909b90af7fa5e4b5daebe5f2d24871f0e059e23f76d03c54e9c538b2dd8087bbe373932e473b90f03a407c1fe58ae5aba288a1ba485df83f447bfec22957732dfcffd7a486c27e32a25621d5f82fcd7864787a13d5fd286a33b88209334c180e5224c804dbc8c0e63c1f02310c459c21346c9a16f0f64619f7846610abbf554cce71584a1ce5ec4293ad9f02b32ea5113f7e748f1a2854d1556ef1725d846dbe66ee3c232157aa93bd462313f196db0c8ae271c9bce72351659aba94663eca4b27ae5fe97b340961f1c3fa3cc4641dfb6802dd4f70ced26e2269077245d2850f7843abf568b894e9ae0091cb822bc2592105a6906c707780b7917b20e534feb876c16af093c2a863de33cbf2abaab96f28681c1933758074265e47717effa66ed2481792d2e0f4d3c5599c3462d4ca9ccc973f6134c6e1b17afba84d6810eaba655fef5f4918b1564956fea944a43d55912639e9838928ea69bb8aa600a38bd1aa412b41f3f6127580560f918d2b7420cb7d376e75f4d97ae2dd898fde74119331906a26c69e2eaf2fd75a13a5df56dee6317d28b19b41b4a7b261fe7651feb810e3639784ff9e197eba1cdbcb6d7131c39a9ec8edc64bfb4eadedc274ed766aa16064761df9e4383175f40f42ac3e3325274612f0a9bcba8064991fe3b3a4dfa3caa811b5a"}, {@device_a, @device_a, 0x72, "14f92dae939ad03f798d0c41bbca4f0c57f8863071ea449de3634f79806db777abe1e35261a45bc8549e76144950d6ca23e86830651f885a72192fa9ea5eba7665211f366568a3f68b09d48a17498c6151680d13110bad893a0d78522aa18146e01368e71173d6d8c9cad9093cf8c201cde7"}, {@broadcast, @device_b, 0xde, "131c5b98f784ef3c64fae6cfe82946c3b9c809222205b0c3ab918dd2214e757a45e9b7eaa16f513bb5eed7f1ac42fc42be35aa284cedd732b2ea9736b290d43decdd5f3eb3fdde41ac9985a2e43ca53309af73984bd69c1c1f0c34017d37bd3568baf6a81aeac880a50eefa18010ebac73b77657c5413dbcca7869fbea7e8fcb47d6152f8dcfc50681f674c3e98c4e44e2859c23a0a80e19aa8a3ad2738a7909b302aba386ebf69fb13e9612f3e139996cb97e32c2af97c66221f144cff6131f40c7eb52b7aa686c166eef2ea90f1ba0b52e69251dd0cc844bed8a7e4787"}, {@broadcast, @device_a, 0xe1, "955ed9b22a957e0a8aca39a41b08f241d57fca351a99f8ee67b7d299dfed87d206048f7adbfec1f7a12643006360d5b092f0fec75521dc11d5c94f176a4432f537326f41055d6fd7bb1fca1a3fee3cfc0358bc8601f53ac4580057e85241b3293bb362516ca19d7fe27987eae7a08b7698d041a479f957f990daa2574a45bdceb3fa722ea27d192407b9bf447408dfa256f5b298f6593e0cd7e39a4404b31624df39b0343b316bb3c7f1576df3e219622fe3a919412da1dedae2d40e5c7b1bfdeb1d813ffaba7746f0a987a6b2b2a090880745a0e17d8d65e5e9598b50a0b31a5e"}, {@device_a, @device_a, 0xaf, "26a3151c08b3296694a1f7f5ed82526fb6a76c2a68f70a574b3749c31fdf8a3f99451a3912e1579c656cc223502828be818d043bfbb57d41ff6c42bb56ed81adc57adb40c85c2e62338bfee650546644ffe629270646cc5ad57904597d4fb93dba43fb483a32f20ef54e07804f7bfba357c57debcc2b78a47afbb44f2df93ecce109a2ac6a732dc11b0b8d3278ac24533988182cf05566fe04fc246d1dbf7e0874e026e2ba216611124ee0f1b8aa36"}]}, 0x1362) (async, rerun: 32) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000140)=ANY=[@ANYBLOB="ca00000008021100000108021100000008020000640001000006020202020202010882848b960c121824edd7b6f6f954cda0fa3a085821958acd1825d10dc1c53620b486ad9a492d0da1b2a818a665cf7a0068f637eded888ff187cde8e6d296214a4c4be2c460cc81ca361a20c0d21ca4bc5993c07b540b70ed3789fc3381d85f2ae85f519a0919cbf61c7b7fa16a094d2b4a31fee0213463d7f2ec8e82962b1cc80e44b7f9bfcaba0943d2c3a4e9c04dc3c03082ca5dde9e2ad6537bc7ba9eafe6e876735a254cbcd00a8d9e3f76a272be57c9066f5e7c308174e23c62d84b9d58f8456d60aecff7932c2b7b2dcac9c3f141fa57a2a6616ee235b3da53f6701308ac9561208e43bacc4d2ab55d9a70dbe0d5395aa74de06280733336ffa9bd38eed5382c40aa7bfdfce1710a05795b2f60344d565238c7435224b7152bc390f096ad8f7a4d3dbba34895df8eef2345e5bc365ae560620126bd05b15e8c21ae6f5b21cda0fea45294e9bc8bd58c41168a107e8922aea4c50f22aadd44dfe4cc8ea0d4"], 0x36) (rerun: 32) 10.654959776s ago: executing program 1 (id=291): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/133, 0x85}, {&(0x7f0000000100)=""/32, 0x20}], 0x2, 0x3, 0xfffffff7) r1 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40204, 0x100039}, &(0x7f0000000340)=0x0, &(0x7f0000000f80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 10.496179904s ago: executing program 1 (id=294): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_enter(r0, 0x2641, 0x15f4, 0x69, &(0x7f0000000040)={[0x8]}, 0x8) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xc0, @any, 0x4}, 0xe) ioctl$KVM_TDX_INIT_VCPU(r0, 0xc008aeba, &(0x7f00000000c0)={0x2, 0x0, 0x7fffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)) getuid() r1 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000140)='\x00', 0x2, &(0x7f0000000180)={@align=0x9, {0x3e, 0x401, 0xfff, 0x8}}, 0x7, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x1}) r3 = syz_open_dev$vcsn(&(0x7f0000000280), 0x4, 0x900) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000300)={0x0, r4}) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="6a9ac2412f3ea32ef3419455c7241aeaa52593b33d0adafecd27d933d525285d32aec3c0f0ca8fd878fb4d4d5ecc9a4b60877d65faa185c9edf1c02a89139f40dde00d08fcdf072c1e05def3fdd5230a", 0x50}, {&(0x7f00000003c0)="6670abccb913432ca7ca21c702db051c526911bb1c190181e4c21c84b85a041c55e4c2e06763e5233f3eb9c3e6d424d59b3fb120ec657c83aa54bbbb02f9e0ea562f0332b78ac917bd905be032b95251c5acd5a35c0c26e01ff8127e65ea803b1a3a9c84f0ee170d7060", 0x6a}, {&(0x7f0000000440)="e95ae0269770580ad9369315d30b2679813a4559ff2c9e27a7812308b8f57701df13a62b6cc6ee8067f0c1b03d71b6f36c2f93514ffd76e98f70e121b2eeab2ae61d2ca4cfb5e1d10f0eb699508f66954d122952d47484736bc0ebaa033aff87354eb1f869c420f5527d07974026f6d52412f9a0cce69fe52b7ef58c65cde61e08e7c56bf97c0577879cdfca63ff8720592935fc07fcef76287f046105bb3a613b51ed11be188f815d0d87d8a8768a068facbfe015ed0e69ead64daeab70cf0723a3d8c132e10164181905697b0ee96ee1e5acffa9ed44f6ece45040afb25bda1b42e9d0545fce38bafed6d6", 0xec}], 0x3, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1e}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf483d96a}}], 0x48}, 0x4880) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x12) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000640)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1b}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x84) mkdirat(r0, &(0x7f00000007c0)='./file0\x00', 0x103) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r5, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r6, 0x5606, 0xf5e) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000900), 0x24a000) mmap$qrtrtun(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000004, 0x8010, r7, 0x6) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf, 0x8010, r0, 0x0) syz_io_uring_setup(0x75b3, &(0x7f0000000940)={0x0, 0xa7a9, 0x2, 0x2, 0x195, 0x0, r3}, &(0x7f00000009c0), &(0x7f0000000a00)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000a40)=@IORING_OP_FALLOCATE={0x11, 0x12, 0x0, @fd_index=0x3, 0x6, 0x0, 0x8, 0x0, 0x1, {0x0, r10}}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000a80)=0x1, &(0x7f0000000ac0)=0x4) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r3, r11, 0x0) writev(r0, &(0x7f0000000b40)=[{&(0x7f0000000b00)="d0b02e86a2c715b20ec6d4bdb7375986d867f4a6b580a50379e8b1d29f0af6ad6b49", 0x22}], 0x1) 10.338309377s ago: executing program 1 (id=298): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f00000004c0)="1c", 0x1, 0x8800000, 0x0, 0x1}]) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = getpid() r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000a80)={{r4}, "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"}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_pidfd_open(r3, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x3c020000) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000300ffffffff8fd6e23adf4b563f17069ca3562a2fb12709bf9fd591d5fcd0ac5912f37ea667056b438b7691d38193f940d319"], 0x24}}, 0x8000) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 9.982135366s ago: executing program 1 (id=301): chdir(&(0x7f0000000080)='./file0\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c010000100001000000000800000000fc01000000000000000000000000000100000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="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"], 0x16c}}, 0x20000000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000002c0)={0x60, 0x3, &(0x7f0000004000/0xc00000)=nil, &(0x7f0000003000/0x4000)=nil, 0xa6c, &(0x7f0000000940)=[{0x8, 0x1, 0x2}, {0x0, 0x10000, 0x6}, {0x3e83, 0x2, 0x5}, {0x80005971f57, 0x1, 0x7}, {0x8, 0x9, 0x8}, {0x9, 0x7fffffff, 0x101}, {0x6, 0xa, 0x3}, {0x6000000000000, 0x2b, 0x80000001}, {0x101, 0x6, 0x1}, {0xee78, 0x8, 0x6}, {0x6, 0xff, 0x4}, {0x3, 0x6, 0x8}], 0xc, 0xfffffffffffffffa, 0x24, 0xc8, 0x15, 0x10}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$kcm(0x2, 0x0, 0x0) close(r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000640)=r1, 0x4) ioctl$BSG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)=0xa7ae) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000140100000000000000000008000300", @ANYRES32=r6, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x40080) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe88000000000000000000000000000120010000000000000000000000000000000046a200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe880000000000000000000000000001000000000000000000000000000000100000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000070000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00140073686131000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004201"], 0x184}}, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in=@private=0xa010102, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10, 0x1}, {0x7fe000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff}, {0x0, 0x1000000000000000, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0xffffffff, 0x4d6, 0x32}, 0x2, @in6=@remote, 0x0, 0x2, 0x0, 0xb7, 0xb, 0x81}}, 0xe8) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000100)={0x18, 0x0, {0x1, @remote, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r9, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'team_slave_1\x00'}}) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f0000000680)}, 0x10) 9.408309241s ago: executing program 1 (id=305): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xa}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x3004002, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x2b034a0f}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4603240095258000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff0000380046"], 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 9.358927791s ago: executing program 33 (id=305): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xa}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x3004002, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x2b034a0f}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4603240095258000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff0000380046"], 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2.141061045s ago: executing program 5 (id=397): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000000)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000400)) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000440)={0xa9, "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"}) r2 = accept4$unix(r0, &(0x7f0000000680), &(0x7f0000000700)=0x6e, 0x800) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000900)=0x0) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) (async) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002a40)=0x0) syz_open_dev$dvb_frontend(&(0x7f0000002a80), 0x3, 0x10000) (async) r8 = syz_open_dev$dvb_frontend(&(0x7f0000002a80), 0x3, 0x10000) socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$packet(0x11, 0x3, 0x300) sendmsg$unix(r2, &(0x7f0000002b80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000740)="5929c57337282e8dc701c3cc1e5efdd373785303a3f607d65595d98a8c2465d51126b5bbd0c372db1cb6024c34d91077f398d9fe5bd07a15d6f1f75fb87ee3f4f0502a0b79b8f92b3187de4c58d54563af842137d38a1f064a3c85d4986e5774a1f0c8da27dfb62ec326acbfe52a86d7471eda9d39c83d007fdf25e1b9d12861992c03d6429fce7f5b56604b4ff72899ce685b3bca0783cdca256fe1298944aee221840ec8f188beeec382a60f3ddcae8a106ab51a166cb5163782b88cca1d307ca878df", 0xc4}, {&(0x7f0000000840)="861b877f3ea06c589d7dfd91b3686c2019cf6e25281a074001559ec4d3e1ea4307afce9efa8ac4092a4a83668849d05e5e85e01af2a3a688e1e8bdc71096ce1e68f4", 0x42}, {0xffffffffffffffff}], 0x3, &(0x7f0000002ac0)=[@rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r1, r8, r0, r0, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r9, r1, r1]}}], 0xc0, 0x200080c0}, 0x20000890) (async) sendmsg$unix(r2, &(0x7f0000002b80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000740)="5929c57337282e8dc701c3cc1e5efdd373785303a3f607d65595d98a8c2465d51126b5bbd0c372db1cb6024c34d91077f398d9fe5bd07a15d6f1f75fb87ee3f4f0502a0b79b8f92b3187de4c58d54563af842137d38a1f064a3c85d4986e5774a1f0c8da27dfb62ec326acbfe52a86d7471eda9d39c83d007fdf25e1b9d12861992c03d6429fce7f5b56604b4ff72899ce685b3bca0783cdca256fe1298944aee221840ec8f188beeec382a60f3ddcae8a106ab51a166cb5163782b88cca1d307ca878df", 0xc4}, {&(0x7f0000000840)="861b877f3ea06c589d7dfd91b3686c2019cf6e25281a074001559ec4d3e1ea4307afce9efa8ac4092a4a83668849d05e5e85e01af2a3a688e1e8bdc71096ce1e68f4", 0x42}, {0xffffffffffffffff}], 0x3, &(0x7f0000002ac0)=[@rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r1, r8, r0, r0, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r9, r1, r1]}}], 0xc0, 0x200080c0}, 0x20000890) stat(&(0x7f0000002bc0)='./file1\x00', &(0x7f0000002c00)) (async) stat(&(0x7f0000002bc0)='./file1\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$dvb_frontend(&(0x7f0000002c80), 0x3, 0x10041) ioctl$FE_GET_EVENT(r11, 0x80286f4e, &(0x7f0000002cc0)) epoll_create(0x3) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000002d00)={0xfffffff8, 0xb6d, 0x2f95, 0x9, 0x9d, "a087f29c136e6d0cdc328bdba966b99c9f249b", 0x4, 0x7}) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000002d00)={0xfffffff8, 0xb6d, 0x2f95, 0x9, 0x9d, "a087f29c136e6d0cdc328bdba966b99c9f249b", 0x4, 0x7}) ioctl$FE_GET_PROPERTY(r11, 0x80106f53, &(0x7f0000002e40)={0x2e, &(0x7f0000002d40)=[{0x43, '\x00', @buffer={"f8bf145edb7680c3767aa96bb0226e86eafa457d045de82c0a28015d282057c1", 0x20}}, {0x16, '\x00', @st={0x4, [{0x3, @svalue=0x1000}, {0x3, @svalue=0x1}, {0x3, @uvalue=0x9}, {0x0, @uvalue=0x10}]}, 0xffff}, {0x40, '\x00', @buffer={"952c3514d634b5c139fc091096f2c46505eef6e108ab2d147fba7c03bf4511f3", 0x20}, 0xb}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/power/disk', 0x200840, 0xd0) (async) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/power/disk', 0x200840, 0xd0) setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f0000002f00)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x110, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000002ec0), {[{{@arp={@broadcast, @multicast2, 0x0, 0xff, 0x8, 0x5, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, {[0x0, 0x0, 0x0, 0xff]}}, 0x3, 0x9, 0x988, 0x81, 0x101, 0x0, 'wg1\x00', 'geneve1\x00', {}, {0x7f}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @loopback, @multicast1, 0xf}}}, {{@arp={@local, @rand_addr=0x64010102, 0xff000000, 0xffffffff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0x985633bb3b4f37b3, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x3ff, 0xa, 0xfff, 0x3, 0x2, 0xffff, 'ip_vti0\x00', 'veth0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="6f2615aab783", @dev={0xac, 0x14, 0x14, 0x10}, @remote, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) ioctl$TIOCMSET(r12, 0x5418, &(0x7f0000003380)=0x1) (async) ioctl$TIOCMSET(r12, 0x5418, &(0x7f0000003380)=0x1) read$FUSE(r12, &(0x7f00000033c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r12, 0xc018937b, &(0x7f0000005400)={{0x1, 0x1, 0x18, r9, {r5, r13}}, './file0\x00'}) syz_open_dev$media(&(0x7f0000005440), 0x8, 0x2) (async) r15 = syz_open_dev$media(&(0x7f0000005440), 0x8, 0x2) ioctl$LOOP_CHANGE_FD(r14, 0x4c06, r15) (async) ioctl$LOOP_CHANGE_FD(r14, 0x4c06, r15) ioctl$KDDELIO(r14, 0x4b35, 0x2) bind$inet(r14, &(0x7f0000005480)={0x2, 0x4e24, @broadcast}, 0x10) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, r10, &(0x7f00000054c0)='./file1\x00') 2.061812407s ago: executing program 5 (id=400): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x41, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 1.972459571s ago: executing program 5 (id=402): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x54761c86, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="cf0427bd7000fbdbdf255200000008000300", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x24044894}, 0x800c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r3, @ANYBLOB="000225bd7000fedbdf258700000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x44844}, 0x4010) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r6, 0x80045519, &(0x7f0000000080)=0x9) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}}, 0x1c) 1.968178426s ago: executing program 5 (id=403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000005e6bf02f000000180001801400020076657468315f746f5f626174616476000c000380"], 0x38}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f81fcb00503a00fe8000000000000000000000000000aaff0200000000000000000000000000010400907800000000604aa1d300000000fc01000000000000000000000000000000000000000000000000ffff7f0000013c00000000103b0000002f000400000800008800000000000000c20400000100"], 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {0x0, 0xa}, {0xffe0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xe}}]}, 0x2c}}, 0x24040084) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4048aecb, &(0x7f0000000140)=@vmx={0x9, 0x0, 0x2080, {0xeeee8000, 0x6000, {0x2}, 0x0, 0x316}, {"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", "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"}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xfffffffffffffffc) ioctl$KVM_CAP_DIRTY_LOG_RING(r10, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_RESET_DIRTY_RINGS(r10, 0xaec7) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r3, &(0x7f0000002240)="a6e2976b5c4383036db832dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b3710a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f07000000a464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee0598530000000000000000000000000000009d0900246a53ae45210f6e6c8795e6ac62dc327be1440f7dcf4cff143d301c55200415f2bb9f9d1cdb872d0550d2bcf012ad4d58f2c13212aff0", 0xfffffffffffffda1, 0x8c0, 0x0, 0xfca1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10010, r0, 0x604ae000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/178, 0xb2, 0x0, 0x0}, &(0x7f0000000680)=0x40) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x282301, 0x0) 1.740076722s ago: executing program 5 (id=407): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='westwood', 0xcfeab749528c43bd) r2 = io_uring_setup(0x6ddd, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2d000000010001", 0x7) 1.738126678s ago: executing program 0 (id=409): pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000280)) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0xaa00, 0x0) (async) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000800)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4}, {}, {}, {0xe5, 0xfffffffc}, {}, {}, {0x0, 0x8c7}], 0xfc, 0xf2, 0x7}}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="460f017038660ffab104000000659e0f6ec82e64f30f090f001b07e2e636430f3564420f01cfb805000000b9000001000fc77208460f01df", 0xfed0}], 0x1, 0x45, 0x0, 0x0) (async) write(r2, &(0x7f00000000c0)="6a8e7273bfd7d3adc80bfe531af220f68ca33517d908cfb86b08bc28b2e40800249ea097e263ee66fb9e879663eef3ecf22526e41543d7f61a8d0d6d175be1797b840f48f7e007505d05bc2d9e040b9810333062c74615196246a6e336ef1e225a04c0ff31451fa5958ba71db3cd1f82616133d9c9e38d26fa41de33770a29688770f749af0bf02673094075a4bd0c973d00", 0x92) ioctl$KVM_RUN(r6, 0xae80, 0x0) write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800020000000000", 0x24) (async) ioctl$BSG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000001c0)) 1.649108197s ago: executing program 5 (id=410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) ioctl$BLKRRPART(r3, 0x125f, 0x0) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect$midi(0x2, 0x68, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x3, 0xd0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x7, [@midi_out_jack={0x15, 0x24, 0x3, 0x2, 0x29, 0x7, [{0x43, 0x8e}, {0x9, 0x1}, {0x8, 0xfa}, {0x7, 0x60}, {0x6, 0x9}, {0x2, 0x8}, {0x7, 0x9}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x7, 0x38}, @midi_out_jack={0x9, 0x24, 0x3, 0x2, 0xc3, 0x1, [{0x0, 0x6}], 0xf8}, @midi_out_jack={0x9, 0x24, 0x3, 0x2, 0xff, 0x1, [{0x9, 0x4}], 0x2}], [{{0x9, 0x5, 0xe, 0x3, 0x40, 0x4, 0x81, 0xff, {0xe, 0x25, 0x1, 0xa, "2c38cc6ca25a6ee30a1e"}}}]}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x6, 0x2, 0x5, 0x10}, 0x71, &(0x7f0000000dc0)=ANY=[@ANYBLOB="050f7100061b1005dec5e2eda017963098dd6870717f585c57b895fad3e31f6703100b03100b24100a812680000000ff080030000000c000000000000000f060ff00f000ff000f3f00000b10010c4000010403007a1c100a7f24001000ac990000000000000f0000000f000000003f0000"], 0x6, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x44b}}, {0xda, &(0x7f0000000680)=@string={0xda, 0x3, "9e04355ac542daeee872e7b1be799f79f34b2bf57bdfa2fcd5124de58a19fd249cd13728710b094385389132ed75b35d37e86c2718aad167d70b875ec0f5363a509a805ac64b4326c8aaddc63006a9f4f1c0939b57c88e6f732cdc108c9f93e05da4c6f9b04ecb0161b5ca7460052ab62cb109bee137979447e8ae4c132c7c3040dba7f7bbb94980dc21218d76e4102bed16e64bc514d845f0978b6ad0678554bbd7cc4a141e2fb49a6f7f2bd8d3d6f30f037aaddef6d522332bdecea6db7adbde949c2dc894635b9686b8942b8726fe00fef63f4bd4cbad"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x40e}}]}) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a40)={0x14, &(0x7f0000000900)={0x0, 0x30, 0xc4, {0xc4, 0x22, "98bb80e64117d80c13583dbbe61aa8deeac958817b2186fd0e469043e0cbbcdc6fcee920e65faca9aca6fb38152cea838d9d16de167586fbfb71a48ef3765adcf2630d012f3fa25827df6cc0110a8e5b26f7f3f5181e8bf670d3f8bb47beeb5e41cd24df0dc91fa37bbc774b6f95e18c2a563a3f1164b5b2d42a520b1c2b43de72ffa80db9fe6d46bed7bd782486743d912668d627284e7241b09226f1ecd7c340c92d11599452ce07b01e5b95d39d995e06aea0b8fafdf5a48b1072d7594421c514"}}, &(0x7f0000000a00)={0x0, 0x3, 0x29, @string={0x29, 0x3, "b725be765b70742219d3b357f9ea369445065985bf287b62fdf85a8a3492477e73a56347794e00"}}}, &(0x7f0000000c80)={0x34, &(0x7f0000000a80)={0x0, 0xb, 0x8c, "6b1530477a525f2778ff9b0949e547abb205d104bae9a6cf8f8b524068d018474113989b34396ec2230f7d4860de1bd6c21f06972cde7752debeffd8846bc92b14f0a0f0176ccc11e1b4ec07b51476769565e9cb33e32f4970a71964d1a12885fc4d34c5fc284fdd6065e45846e06c05388bd834194fd488a8c2a051cec430faaedeb0c6277268826fbef659"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000bc0)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000c00)={0x40, 0xa0, 0x4, 0xd}, &(0x7f0000000c40)={0xc0, 0xa2, 0x2f, "739199095a6fec21f280b8318ac1adb05de03d7bddfa6c21723179bcaa75996848c8f60640dae7385f6ed7f2c51e05"}}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="81fc968c8e602f12c08090cca64b50fd3da579fea7cfb7a60842e5ed5f28eb92ce85ff67ae4586173191ea11764930ce6cffa1941eb83e19fd7edaacf94dc7424ea3f5b2c3090b2512c5731decbe5706505f71967d78c85e5dfe539b94b505fd017feaa8cb7ff33abfe523165e9245", 0x6f}, {&(0x7f0000000280)="d1eb57ef3c3b938aec92d6b0f96439092ce50229ef3c76f4a29925611af18ab9f6fb64dbda37de73d2f86599da41f74348d8abd1415cb7c0cc686346f39fad1650a45bb0e2351e84f0e5bd3539e67a87ee7661516e9ba9d5dd3c02a643420de7940c73cf1db26f55947a508b25f78dee121adf8805143e7fae13e8b6c5f129f3774d7bcbd71fb4089652786bc4cc963f1702", 0x92}], 0x2, 0x0, 0x0, 0x4040010}], 0x1, 0x0) recvmmsg$unix(r7, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0) syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100030000000899040e5040000102030109ecb8622ac703393e090400000001032005"], 0x0) syz_usb_connect$uac3(0x2, 0xba, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x2, 0x20, 0x3, {0x8, 0xb, 0x2, 0x1, 0x1, 0x22, 0x30, 0x83}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x208, 0x0, 0x8, 0x6, {0xa, 0x25, 0x25, 0xfffff001, 0x5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x2, 0x89, 0xfd, "7c80be3fcb3d"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x34, 0x2, 0x8, 0x4, "eeed", 'h'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x1, 0xfe, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x5, 0xb, '{e', "cb"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x6, 0x7, {0xa, 0x25, 0x25, 0x5, 0x0, 0xd}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x66, 0x2, 0x3, 0x8, 0x8}, 0x45, &(0x7f0000000240)={0x5, 0xf, 0x45, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x6, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x61, 0x6, 0xd, 0x5, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x8, 0xf, 0x8000}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "466c521fee4384187283b1fd532c8adb"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7f, 0x9, 0x7, 0x1}]}, 0x4, [{0x54, &(0x7f00000002c0)=@string={0x54, 0x3, "de1c26d8d69fd79d46300e484c2189b23bed6bbebd5b35dbfcd3b85858d1f34ff4b11c3607524aba14df6c412b4eb7616109cf155b476dadac7d8713580b322f842ad14a5a285fda712d11090024f0db64ab"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) fcntl$setlease(r9, 0x400, 0x1) syz_pidfd_open(r8, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0xffd9) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@initdev, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r10, 0x1, 0x6, @multicast}, 0x10) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x48a82, 0x0) write$sysctl(r11, &(0x7f0000000100)='0\x00', 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 1.471642789s ago: executing program 4 (id=414): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004040000080000000100000080000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1fe}, @TCA_EGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r8, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="0174b217cdb64cf36908bf000000f43fe671ddff00ddffffffffffffff0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x64008814}, 0x4000060) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xf4, r6, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x44}, 0xd4) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r12 = io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x7b61, 0x80, 0x1, 0x60}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r14 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r13, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r14, 0x4) close_range(r12, 0xffffffffffffffff, 0x0) bind$inet(r11, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r15 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r15, 0xc0386105, &(0x7f0000000000)={0x40, 0xf111fe, 0x9, 0x0, 0x7, 0x9, "8bf84df90032ba92af5de28a8580481e", 0x7, 0x4, 0x9, 0x35, 0x1, 0xa, 0x1}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6d706f6c3d62696e643a3088ffe00000354e00a303b973b87480ea215d27c9b6e022f8f3c811f1bb837d652130e981b1b33613c680992e20a2c7455e6c4cf170ef091f9554c04c9bc89fc228788635c8b14adb4a0336d96fbf27c300e3dfdabbefb240b99b219029fc6b2ff443bb892f75c51a767c3d3f30a342b524a57982cd4eba94afcb0547c0dc5b081745ff6ada0157f0e09a7c608f68720904a11b294006fd8a4fab1633bbb80deb6ece372e627ad201686de76549826caf14889c1687dd9a4d599e1491e2c9198f181b4f0f61e750673dcbcfd679900fe24100215c656a0237c878b9315e9303c404898ed72d1a4091288665ed45eb91df595b"]) 1.470933242s ago: executing program 0 (id=416): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a30000000002800048008000140000000011400040076657468315f766972745f77696669000800024000000000090003"], 0x9c}}, 0x0) ioctl$sock_ifreq(r0, 0x8905, &(0x7f0000000100)={'bond0\x00', @ifru_names='rose0\x00'}) 1.342076161s ago: executing program 0 (id=417): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x16a166c4d8b2b2d7, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) recvmmsg(0xffffffffffffffff, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1, &(0x7f0000000100)=""/36, 0x24}}], 0x1, 0x2002, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmmsg$unix(r2, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}}], 0x1dd, 0x10003, 0x0) 1.251720267s ago: executing program 4 (id=420): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x1000000000000000, 0x2) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x317}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x60, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0, 0x40002141}) (async) io_uring_enter(r3, 0x19ff, 0x0, 0x4, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@getrule={0x14, 0x22, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x20000000) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) (async) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000007fc0)={&(0x7f0000007f80)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@in6_addr=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe050}, 0x20000000) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r10, 0x0) (async) connect$x25(r10, &(0x7f0000001240), 0x12) (async) mmap$KVM_VCPU(&(0x7f0000fec000/0x3000)=nil, r9, 0x2, 0x10, r10, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f00000000c0)=0x4) (async, rerun: 64) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async, rerun: 64) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x1f, '\x00', @data=0x65}]}) 1.250290643s ago: executing program 4 (id=422): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000000d14bb0d"], 0x10}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) 1.112303106s ago: executing program 3 (id=424): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="09000000010000", 0x7) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) (async) r2 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x43d3, 0x40, 0x3, 0x235, 0x0, r1}) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) setresuid(0x0, 0x0, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 1.110717346s ago: executing program 3 (id=425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r5 = fanotify_init(0x1, 0x101801) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x400017e) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='>\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000080005000a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x4004885) 962.419372ms ago: executing program 3 (id=426): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x7, 0x200000000000005}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 461.634351ms ago: executing program 0 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'veth0_to_hsr\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x4}}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = fsopen(&(0x7f0000000140)='ocfs2_dlmfs\x00', 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x102, 0x0, 0x5}, 0x18, 0x2) landlock_restrict_self(r6, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x1) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) connect$pppl2tp(r8, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x5}}, 0x2e) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0100001a00010028bd700000000000022020680000000700000000"], 0x1c}}, 0xea5bc50b6199d77e) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f0000001180)=ANY=[@ANYRES16=r6, @ANYRES16=r0, @ANYRESOCT=r0]) r11 = socket(0x2, 0x805, 0x0) getsockopt$bt_hci(r11, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xe0d, 0x200000, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0x10000}, {0x0, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x845}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt(r4, 0x111, 0x1, 0x0, &(0x7f0000000080)=0x5c) 461.088212ms ago: executing program 0 (id=428): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000040)={{0xd3, 0x4}, 'port0\x00', 0x120, 0xa0000, 0x7, 0x3, 0x5, 0x3ff, 0x1b9, 0x0, 0x4, 0x6}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x200080, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000140)) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x115000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'pim6reg0\x00', 0x400}) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000240)={0x2, @raw_data="aeac5c26186ea7cdbbbd897e5d15a839953b0992fb82c0d5a03c3af79e99a4edb88ca69fcd171317882fa41714c1c8afe5969f729c5653e3c24e44ad27d667eed1e8fe2c3cdb4f3a3dfcb15a28432bb63f163dd673e8ce4aed1a27491c9e4d1a11bf7c8db2fc755e048fddc31a8c66b30d34a8072ed685244290ea7af89a15ea33ba3796c46ce1e5cdcafca178e681f3037026044716af2c700f00e8092041dc3444196b23a735aba065402e8af2e0e2b580fbab36d7fc8adcd68b1c6475c4d0b5cca01929ad3f18"}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000340)={0x0, 0x4, {0xfd, @usage=0x5, 0x0, 0x0, 0x60, 0x8, 0x4, 0x0, 0x0, @usage=0x3, 0xd, 0x8000, [0x0, 0x33b, 0x3fe, 0x3ff, 0x154a, 0x2]}, {0x7fff, @struct={0x9f62, 0x8}, 0x0, 0x5, 0x7, 0x52, 0x8000, 0xffffffff00000001, 0x10, @struct={0x2, 0x8f}, 0x9, 0x6, [0x3, 0xb544, 0x5, 0x0, 0x1, 0x5]}, {0x3, @struct={0x8000, 0x6}, 0x0, 0xcbb, 0x1, 0x7ea, 0x401, 0x4, 0x4c6, @usage=0x80, 0x5, 0x1, [0x1, 0xffffffff, 0x3f30, 0x6, 0xfc3b, 0x1]}, {0xe2, 0x6, 0x1}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000b40)={0x0, "b187291447a01a37482c68befc5c4e2e"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001b40)={0x14, 0x3, {0x6, @usage=0x9, r3, 0x1, 0x8, 0x8, 0x6, 0x7fffffff, 0x0, @struct={0x84, 0x1}, 0x7, 0x7, [0x5, 0x7f, 0x400000000000, 0xffffffff, 0x8, 0x870]}, {0x6, @struct={0x6, 0x7fff}, r5, 0x100000001, 0xfffffffffffffff8, 0x10, 0x4, 0xfffffffffffffffb, 0x92, @usage=0x8, 0x867, 0x9, [0x9, 0xd, 0x7, 0x52, 0x9]}, {0x6, @struct={0x6, 0xc8}, r6, 0x8, 0x80, 0x6, 0x0, 0x4, 0xe0, @usage=0xd, 0x5, 0x6, [0xaf6b, 0x7f, 0xfffffffffffffe00, 0x10001, 0x207a, 0x401]}, {0x8e, 0x0, 0x80}}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000001f40)={0xfffffff7, 0xc00000, 0x0, 'queue0\x00', 0x1}) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000002000)={0xa, {0x8, 0x5, 0x4}}, 0xa) fdatasync(r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x1010, r0, 0x462a5000) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r2, 0xc0106450, &(0x7f0000002040)={0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r1, 0xc0106446, &(0x7f0000002080)={r7}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000020c0)=0x10) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000002100)) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1c43) read(r0, &(0x7f0000002140)=""/177, 0xb1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002200)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000002480)={{r2}, r8, 0xa, @inherit={0x50, &(0x7f0000002400)={0x1, 0x1, 0xffffffff7fffffff, 0x7, {0x22, 0x2, 0x6, 0x4, 0xfff}, [0x0]}}, @devid=r4}) syz_genetlink_get_family_id$tipc(&(0x7f0000003480), r1) getdents64(r1, &(0x7f00000034c0)=""/4096, 0x1000) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000044c0), &(0x7f0000004500), 0x2, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000004540)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000045c0)={0x8, r9}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000004600)={0x0, 0x5}, 0x8) 371.170709ms ago: executing program 0 (id=429): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x3}}, 0x10, 0x0}, 0x101) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bond0\x00', 0x10) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r1, 0x0}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x141}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@nr_inodes}]}) 370.005656ms ago: executing program 4 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) (async) 82.46385ms ago: executing program 4 (id=431): r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/24, 0x18, 0x20000000, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x9, 0xa, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x1, 0x8, 0x7, 0x82, 0x10, 0x0, "bc8feb13"}, 0x8, 0x2, {&(0x7f0000000440)=[{0x8001, 0x7fffffff, {0x0}, 0x1000}, {0x3, 0xdf9, {0x0}, 0xd90b}]}, 0x6}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_generic(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000015003507e36b62effa00"/28], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000100)={r4}) 80.582977ms ago: executing program 3 (id=432): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x103, 0x1) getdents64(r0, &(0x7f0000000180)=""/60, 0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYBLOB="ef00000000000000140012"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x34}, {&(0x7f00000000c0)={0x5c, 0x24, 0xb00, 0x70bd2d, 0x25dfdbfc, "", [@generic="1dda7a4dddd9e71d64214650305476a9899b55370f5f00dcf28f963b240d4f917570f974eef98822833dd0d006288503db208380b1fe277ac8be72c667fab9109de334e9c81b1458da869f"]}, 0x5c}, {&(0x7f0000000600)={0x4a0, 0x41, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@nested={0xe5, 0x3c, 0x0, 0x1, [@nested={0x4, 0xa9}, @nested={0x4, 0xa3}, @generic="59f173a0a5298d5862b351a366ea73627d5c0456159b7cb070ef71b746301518c524f0d930283eb519fbb8dec78aa21c770b68512412a45d411ea280bee336c9db4d80a1a2429bfd1bf3a9175bebcd1076f99a6c58b7b2dc7b92e03d900d0c255d41d0b2d56672da99d1f14e809bac9e245e09cf4f2d6ab4e70978298bfd569162a3832c12cc4c4546878acc4a2d10c106c732c647c222cbc10fc12647b8df537c5deb3c997ef25f13ae78d2b37423f07fc21fbd2e55614fe5e057d69c270c1f1be36da55a737e1a3525621142bd6e423ac76907e8556325d2"]}, @generic="63553bc98ec5eae3618c", @nested={0x119, 0xe0, 0x0, 0x1, [@nested={0x4, 0x6e}, @typed={0xc7, 0x13c, 0x0, 0x0, @binary="3b7b31108f4c130a0337991c642b3b97f6a44aab927181b9f913b9f6e54afa65dc31a816efa48898b88f8eed10491fbd89043bea6ed3bcfbab56c4f24d53bbfe5214c6d81ba83656f86f3fc3b05cf129e10ddd408ade59d41a035471607f0fbf1c1a36b71f9ef309ff64fe5b5a299cace13ac6e68d27d9f994ec8fbc03f80c5a24cfc70d0bce75c45f2382aad5a536b7bf16640c21f908604185a067775e0b2c710c41d6214f27d4b36f342595a3f2edfb40955a87cf54e993c56b4c616c18549f0bb6"}, @generic="87352564de0bbe9cf4af7240ea2adad2638117995c5efeecc028a2bf37733ffcf3ec76ee9b157c58d286e5a11d2a804586ab076f29192adca16902095ffcd6317a984d9bfd", @nested={0x4, 0xbd}]}, @typed={0x8, 0x113, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x15c, 0x0, 0x0, @ipv4=@loopback}, @generic="dfb7d922e0091f35ba6b8a694ab30dd290098aa25c743a97e7e10f7b8810b0e9e3df69d9ea498c955f80a67451bb527608ab86fcfcbf2f0c8bedfd4fb40cce2454d88b826751c5dcf3a4ad17caf5709f54e1e1159d6a9c437247cbef043fa0aca4234d184134d3b2bf7b680cc619d73b1f0cbf2e11e7a704ec7f662e5b4d31f540e6fbfc16cc86cc32e3da227bf20df2cf3b9c8ed6cc3ca984e0d0ab631848e90a6238302b5004237e7cbd6dfbebe19996475f5c7f2ac0fb824fe97816c6bb5ade28", @nested={0x4, 0xf8, 0x0, 0x1, [@generic]}, @nested={0x1a9, 0xf9, 0x0, 0x1, [@generic="14e73da70e7c5b0d8681c25d9718a3a5abf2dea2ee267f3a43915767e257a081a6db51d519954f9ad52d85628c77bc31ac2ce14bff2361efa08d1b40e6d207d994069390526698f06ba8762d22858b474a05470ba471e1eed640f1f2282e4bcf0b6dedf68162d8f0d8237a9286e76d9b5c126521ab40f15501c761786a13754c3592a2349d14ef7e631c8df00246fcafdf7054803e412342b0f34a59c1e1e01c2bad7f8ccfed2e02debc0b1e5a375bb230509a1098a8f7074db3bf0bb31c10df9dafd334a9e9fa9c03b690ae466fc23bca94df086fe8ea666930a075c6ce3d7081010ea66a88f13602d2a39e104cca35ef", @typed={0x8, 0x135, 0x0, 0x0, @pid=r2}, @nested={0x4, 0xe9}, @typed={0x8, 0xe6, 0x0, 0x0, @u32=0x81}, @typed={0x97, 0x62, 0x0, 0x0, @binary="6e1dc9eceb95ed2121bbcea28c0dbc43dcb49b0b652aff0259a3977a3dbc048172e2a191d22bc8b7a18681218e8d69151e039f0b640b49c36ecbbf3f2e549a5c921b9ca0e38fc7525299503106dd5e307b14eb8802b55f26106c51cac31d2148dd3e1c4591114e8665442b087813f6e692bfd92e6b88cdb8a1319abfab7d335724d7337c888e1d3a8dcbb95bd266067f0708dc"}, @typed={0x8, 0x12e, 0x0, 0x0, @fd=r0}]}]}, 0x4a0}], 0x3, 0x0, 0x0, 0x4010}, 0x8050) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000002c0)=[@nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x1, 0x4}}, @wr_drn={0x68, 0x20, {0x4, 0xfffffffffffffffd}}, @set_irq_handler={0xc8, 0x20, {0xf0}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x25000, 0x855}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x5fe, 0x8001, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x0, 0x5}}, @nested_vmresume={0x130, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0x7, 0xfffffffb}}], 0x1d8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f00000001c0)={0x7, 0x80}) 80.073492ms ago: executing program 3 (id=433): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000200)=0x6) getsockopt$inet6_udp_int(r2, 0x11, 0x66, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f00000000c0)={0x3c, 0x40000010, 0x15, 0x8, 0xb, 0x10, 0x6, 0x101, 0x1}) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = fsopen(&(0x7f0000000000)='adfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x102000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r6, 0x0, 0x4) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r2, 0xc0805841, &(0x7f0000000180)={0x7, 0x80008, 0xfffffff8, 0x0, 0xfffffa07}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 2.000374ms ago: executing program 4 (id=434): r0 = epoll_create1(0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0xd0, 0x0, &(0x7f0000000100)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x800, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000040) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x67f, 0x64, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0xe000001d}) 0s ago: executing program 3 (id=435): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000000)={0xbc, 0x0, 0x16f9b7895fa0351b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 0s ago: executing program 4 (id=436): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000200)={&(0x7f0000000180)=[r2, r2], &(0x7f0000000100)=[0xffffffffffffa820], 0xea25, 0x3fffff63, 0xb}) kernel console output (not intermixed with test programs): [ 52.933990][ T40] audit: type=1400 audit(1772432921.833:60): avc: denied { rlimitinh } for pid=5883 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.942828][ T40] audit: type=1400 audit(1772432921.833:61): avc: denied { siginh } for pid=5883 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:8854' (ED25519) to the list of known hosts. [ 54.089375][ T40] audit: type=1400 audit(1772432923.013:62): avc: denied { name_bind } for pid=5912 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.131771][ T40] audit: type=1400 audit(1772432923.053:63): avc: denied { execute } for pid=5913 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 54.141742][ T40] audit: type=1400 audit(1772432923.053:64): avc: denied { execute_no_trans } for pid=5913 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 56.917779][ T40] audit: type=1400 audit(1772432925.843:65): avc: denied { mounton } for pid=5913 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.929111][ T40] audit: type=1400 audit(1772432925.853:66): avc: denied { mount } for pid=5913 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.932378][ T5913] cgroup: Unknown subsys name 'net' [ 57.055805][ T5913] cgroup: Unknown subsys name 'cpuset' [ 57.062996][ T5913] cgroup: Unknown subsys name 'rlimit' [ 57.276311][ T5921] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 57.963647][ T5913] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.964381][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 61.964400][ T40] audit: type=1400 audit(1772432930.883:82): avc: denied { execmem } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.146953][ T40] audit: type=1400 audit(1772432931.073:83): avc: denied { create } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.156032][ T40] audit: type=1400 audit(1772432931.073:84): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.164321][ T40] audit: type=1400 audit(1772432931.073:85): avc: denied { read write } for pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.164986][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.174780][ T40] audit: type=1400 audit(1772432931.073:86): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.188303][ T40] audit: type=1400 audit(1772432931.073:87): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="socket:[2954]" dev="sockfs" ino=2954 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.190373][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.201493][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.205166][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.208802][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.211308][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.216086][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.216883][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.217616][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.218472][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.218825][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.220618][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.222326][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.224974][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.225809][ T5935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.226848][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.230308][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.234846][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.244183][ T40] audit: type=1400 audit(1772432931.163:88): avc: denied { read } for pid=5930 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.249539][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.258991][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.265930][ T40] audit: type=1400 audit(1772432931.163:89): avc: denied { open } for pid=5930 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.274641][ T40] audit: type=1400 audit(1772432931.163:90): avc: denied { mounton } for pid=5930 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.502871][ T40] audit: type=1400 audit(1772432931.423:91): avc: denied { module_request } for pid=5930 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.543991][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 62.564657][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 62.805123][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 62.813822][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.817946][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.821199][ T5930] bridge_slave_0: entered allmulticast mode [ 62.825557][ T5930] bridge_slave_0: entered promiscuous mode [ 62.832159][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 62.840971][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.844167][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.847893][ T5930] bridge_slave_1: entered allmulticast mode [ 62.852321][ T5930] bridge_slave_1: entered promiscuous mode [ 62.856978][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.859869][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.863191][ T5937] bridge_slave_0: entered allmulticast mode [ 62.867665][ T5937] bridge_slave_0: entered promiscuous mode [ 62.872507][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.875700][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.879184][ T5937] bridge_slave_1: entered allmulticast mode [ 62.883627][ T5937] bridge_slave_1: entered promiscuous mode [ 62.958124][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.992906][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.009714][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.058384][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.075199][ T5937] team0: Port device team_slave_0 added [ 63.120830][ T5937] team0: Port device team_slave_1 added [ 63.123639][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.127528][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.131132][ T5941] bridge_slave_0: entered allmulticast mode [ 63.135159][ T5941] bridge_slave_0: entered promiscuous mode [ 63.140574][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.143819][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.147940][ T5941] bridge_slave_1: entered allmulticast mode [ 63.151918][ T5941] bridge_slave_1: entered promiscuous mode [ 63.168161][ T5930] team0: Port device team_slave_0 added [ 63.183683][ T5930] team0: Port device team_slave_1 added [ 63.226680][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.229961][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.233446][ T5931] bridge_slave_0: entered allmulticast mode [ 63.237754][ T5931] bridge_slave_0: entered promiscuous mode [ 63.253667][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.257212][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.269330][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.287652][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.293117][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.307143][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.313731][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.316939][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.325823][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.330665][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.333992][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.337825][ T5931] bridge_slave_1: entered allmulticast mode [ 63.341944][ T5931] bridge_slave_1: entered promiscuous mode [ 63.348796][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.361645][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.366084][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.369442][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.380269][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.417408][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.430031][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.479531][ T5931] team0: Port device team_slave_0 added [ 63.483957][ T5941] team0: Port device team_slave_0 added [ 63.497050][ T5941] team0: Port device team_slave_1 added [ 63.510763][ T5931] team0: Port device team_slave_1 added [ 63.519413][ T5937] hsr_slave_0: entered promiscuous mode [ 63.522975][ T5937] hsr_slave_1: entered promiscuous mode [ 63.572917][ T5930] hsr_slave_0: entered promiscuous mode [ 63.575465][ T5930] hsr_slave_1: entered promiscuous mode [ 63.578040][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 63.580194][ T5930] Cannot create hsr debugfs directory [ 63.595552][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.598626][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.607722][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.613865][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.616792][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.625639][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.630554][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.633749][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.646558][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.662352][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.665727][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.677161][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.826786][ T5941] hsr_slave_0: entered promiscuous mode [ 63.830407][ T5941] hsr_slave_1: entered promiscuous mode [ 63.833686][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 63.836243][ T5941] Cannot create hsr debugfs directory [ 63.850464][ T5931] hsr_slave_0: entered promiscuous mode [ 63.853305][ T5931] hsr_slave_1: entered promiscuous mode [ 63.855961][ T5931] debugfs: 'hsr0' already exists in 'hsr' [ 63.858234][ T5931] Cannot create hsr debugfs directory [ 64.151362][ T5937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.160914][ T5937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.167480][ T5937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.182593][ T5937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.234008][ T5930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.241140][ T5930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.248549][ T5947] Bluetooth: hci1: command tx timeout [ 64.248553][ T5930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.248555][ T5938] Bluetooth: hci2: command tx timeout [ 64.261264][ T5930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.324881][ T5931] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.331574][ T5931] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.331768][ T5947] Bluetooth: hci3: command tx timeout [ 64.336693][ T5938] Bluetooth: hci0: command tx timeout [ 64.341478][ T5931] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.350873][ T5931] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.456346][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.464548][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.479283][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.491399][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.497291][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.534050][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.555764][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.559154][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.568606][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.571128][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.578085][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.603806][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.638738][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.663088][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.666201][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.675811][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.684975][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.688429][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.693381][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.696174][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.715126][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.718622][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.747373][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.783780][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.794645][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.797387][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.804986][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.807783][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.874346][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.910636][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.927409][ T5937] veth0_vlan: entered promiscuous mode [ 64.944003][ T5937] veth1_vlan: entered promiscuous mode [ 64.964788][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.980797][ T5930] veth0_vlan: entered promiscuous mode [ 64.998876][ T5937] veth0_macvtap: entered promiscuous mode [ 65.002611][ T5930] veth1_vlan: entered promiscuous mode [ 65.012200][ T5937] veth1_macvtap: entered promiscuous mode [ 65.033810][ T5931] veth0_vlan: entered promiscuous mode [ 65.048132][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.054823][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.060007][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.063425][ T5931] veth1_vlan: entered promiscuous mode [ 65.084077][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.090512][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.098323][ T5930] veth0_macvtap: entered promiscuous mode [ 65.102555][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.106446][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.121370][ T5930] veth1_macvtap: entered promiscuous mode [ 65.156975][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.176162][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.180618][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.195182][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.200735][ T5931] veth0_macvtap: entered promiscuous mode [ 65.223069][ T154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.231292][ T5931] veth1_macvtap: entered promiscuous mode [ 65.234723][ T154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.238889][ T154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.243187][ T5941] veth0_vlan: entered promiscuous mode [ 65.248924][ T154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.252064][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.254808][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.261446][ T5941] veth1_vlan: entered promiscuous mode [ 65.266720][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.281173][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.298654][ T154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.311278][ T5937] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.319679][ T154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.322998][ T154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.325861][ T154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.339934][ T5941] veth0_macvtap: entered promiscuous mode [ 65.346583][ T5941] veth1_macvtap: entered promiscuous mode [ 65.363165][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.365977][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.413660][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.415056][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.418918][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.440229][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.466333][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.470919][ T1149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.476619][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.476734][ T79] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.485775][ T79] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.493882][ T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.521888][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.524837][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.591719][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.595841][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.618225][ T6024] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 65.685838][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.689387][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.860001][ T6044] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.926815][ T6052] mmap: syz.2.10 (6052) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.944648][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 65.960012][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 65.962773][ T6016] libceph: connect (1)[c::]:6789 error -101 [ 65.964498][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 65.968129][ T6016] libceph: mon0 (1)[c::]:6789 connect error [ 65.971169][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 65.978644][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 65.986341][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 65.990579][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 65.993597][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 65.996714][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 66.000356][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 66.017460][ T54] libceph: connect (1)[b::]:6789 error -101 [ 66.020365][ T54] libceph: mon0 (1)[b::]:6789 connect error [ 66.112837][ T6069] xt_l2tp: v2 doesn't support IP mode [ 66.119321][ T6069] 9p: Bad value for 'version' [ 66.233056][ T6016] libceph: connect (1)[c::]:6789 error -101 [ 66.235888][ T6016] libceph: mon0 (1)[c::]:6789 connect error [ 66.287810][ T54] libceph: connect (1)[b::]:6789 error -101 [ 66.291066][ T54] libceph: mon0 (1)[b::]:6789 connect error [ 66.327412][ T5938] Bluetooth: hci2: command tx timeout [ 66.328028][ T5947] Bluetooth: hci1: command tx timeout [ 66.417146][ T5947] Bluetooth: hci0: command tx timeout [ 66.417181][ T5938] Bluetooth: hci3: command tx timeout [ 66.473345][ T6077] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 66.476593][ T6079] bridge0: entered promiscuous mode [ 66.480795][ T6079] macvlan2: entered promiscuous mode [ 66.573983][ T6086] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 66.577726][ T6086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.583946][ T6090] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 66.587223][ T6090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.591393][ T6088] overlay: filesystem on ./bus not supported as upperdir [ 66.718070][ T6101] Zero length message leads to an empty skb [ 66.747911][ T6016] libceph: connect (1)[c::]:6789 error -101 [ 66.750116][ T6016] libceph: mon0 (1)[c::]:6789 connect error [ 66.756198][ T6059] ceph: No mds server is up or the cluster is laggy [ 66.756580][ T6050] ceph: No mds server is up or the cluster is laggy [ 66.869354][ T10] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 66.900542][ T6115] trusted_key: encrypted_key: hex blob is missing [ 66.980388][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 66.980401][ T40] audit: type=1400 audit(1772432935.903:193): avc: denied { open } for pid=6118 comm="syz.3.30" path="/dev/ttyqb" dev="devtmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 67.015108][ T40] audit: type=1400 audit(1772432935.933:194): avc: denied { getopt } for pid=6120 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.019613][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.026768][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.031133][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.037244][ T40] audit: type=1400 audit(1772432935.953:195): avc: denied { create } for pid=6120 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 67.045718][ T40] audit: type=1400 audit(1772432935.953:196): avc: denied { sys_admin } for pid=6120 comm="syz.3.31" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 67.046192][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.189707][ T40] audit: type=1400 audit(1772432936.113:197): avc: denied { sys_module } for pid=6123 comm="syz.1.32" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.242786][ T6124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6124 comm=syz.1.32 [ 67.272418][ T40] audit: type=1400 audit(1772432936.193:198): avc: denied { create } for pid=6128 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.272765][ T10] usb 7-1: usb_control_msg returned -32 [ 67.282596][ T10] usbtmc 7-1:16.0: can't read capabilities [ 67.285066][ T40] audit: type=1400 audit(1772432936.203:199): avc: denied { setopt } for pid=6128 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.450738][ T40] audit: type=1400 audit(1772432936.373:200): avc: denied { read write } for pid=6139 comm="syz.0.37" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.466456][ T40] audit: type=1400 audit(1772432936.373:201): avc: denied { open } for pid=6139 comm="syz.0.37" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.477210][ T40] audit: type=1400 audit(1772432936.383:202): avc: denied { ioctl } for pid=6139 comm="syz.0.37" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x55c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.581868][ T6153] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 67.585702][ T6153] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.595715][ T6147] syzkaller0: entered promiscuous mode [ 67.600980][ T6147] syzkaller0: entered allmulticast mode [ 67.646580][ T838] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.655853][ T6156] usbtmc 7-1:16.0: usbtmc_ioctl_request failed -32 [ 67.661704][ T6153] geneve2: entered promiscuous mode [ 67.661760][ T5631] usb 7-1: USB disconnect, device number 2 [ 67.663511][ T6153] geneve2: entered allmulticast mode [ 67.779108][ T6153] process 'syz.3.40' launched '/dev/fd/6' with NULL argv: empty string added [ 67.787797][ T838] usb 6-1: device descriptor read/64, error -71 [ 68.036637][ T838] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 68.176683][ T838] usb 6-1: device descriptor read/64, error -71 [ 68.286993][ T838] usb usb6-port1: attempt power cycle [ 68.322906][ T6166] syzkaller0: entered promiscuous mode [ 68.325384][ T6166] syzkaller0: entered allmulticast mode [ 68.407312][ T5938] Bluetooth: hci1: command tx timeout [ 68.417604][ T5938] Bluetooth: hci2: command tx timeout [ 68.487351][ T5938] Bluetooth: hci3: command tx timeout [ 68.489691][ T5938] Bluetooth: hci0: command tx timeout [ 68.626730][ T838] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 68.647671][ T838] usb 6-1: device descriptor read/8, error -71 [ 68.676952][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 68.678491][ T6191] ======================================================= [ 68.678491][ T6191] WARNING: The mand mount option has been deprecated and [ 68.678491][ T6191] and is ignored by this kernel. Remove the mand [ 68.678491][ T6191] option from the mount to silence this warning. [ 68.678491][ T6191] ======================================================= [ 68.700128][ T6191] tipc: Started in network mode [ 68.702448][ T6191] tipc: Node identity ac1414aa, cluster identity 4711 [ 68.706383][ T6191] tipc: Enabled bearer , priority 10 [ 68.838265][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 68.842991][ T9] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 68.851323][ T9] usb 8-1: config 179 has no interface number 0 [ 68.854057][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 68.859441][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 68.863391][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 68.867494][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 68.875611][ T9] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 68.881720][ T9] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 68.886295][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.889799][ T838] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 68.898838][ T6177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 68.909864][ T838] usb 6-1: device descriptor read/8, error -71 [ 69.018208][ T838] usb usb6-port1: unable to enumerate USB device [ 69.119119][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input6 [ 69.122998][ T6212] xt_policy: output policy not valid in PREROUTING and INPUT [ 69.305786][ T6221] tmpfs: Bad value for 'mpol' [ 69.379663][ T34] usb 8-1: USB disconnect, device number 2 [ 69.379749][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 69.386992][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 69.422765][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.429505][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.433473][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.439228][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.449539][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.475816][ T6235] ata1.00: invalid cdb length 6 [ 69.479266][ T6235] comedi comedi1: rti800: a I/O base address must be specified [ 69.484967][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.533257][ T6242] capability: warning: `syz.0.60' uses deprecated v2 capabilities in a way that may be insecure [ 69.578791][ T6247] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 69.593117][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.684163][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.718111][ T1163] tipc: Node number set to 2886997162 [ 69.747047][ T6229] chnl_net:caif_netlink_parms(): no params data found [ 69.781450][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.822991][ T6260] netlink: 'syz.0.65': attribute type 10 has an invalid length. [ 69.833795][ T6229] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.837972][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.841198][ T6229] bridge_slave_0: entered allmulticast mode [ 69.845047][ T6229] bridge_slave_0: entered promiscuous mode [ 69.850729][ T6229] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.853612][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.856419][ T6229] bridge_slave_1: entered allmulticast mode [ 69.860527][ T6229] bridge_slave_1: entered promiscuous mode [ 69.916630][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 69.986907][ T6229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.994682][ T6229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.066673][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 70.070964][ T34] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 70.074809][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.079928][ T34] usb 8-1: config 0 has no interface number 0 [ 70.082623][ T34] usb 8-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.090939][ T34] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 70.095387][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.099346][ T34] usb 8-1: Product: syz [ 70.101333][ T34] usb 8-1: Manufacturer: syz [ 70.103648][ T34] usb 8-1: SerialNumber: syz [ 70.106220][ T6229] team0: Port device team_slave_0 added [ 70.112276][ T6229] team0: Port device team_slave_1 added [ 70.112541][ T34] usb 8-1: config 0 descriptor?? [ 70.124176][ T34] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input7 [ 70.155491][ T6229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.158739][ T6229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.174534][ T6229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.184133][ T6229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.189655][ T6229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.201561][ T6229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.276158][ T6229] hsr_slave_0: entered promiscuous mode [ 70.278891][ T6274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6274 comm=syz.0.66 [ 70.284299][ T6229] hsr_slave_1: entered promiscuous mode [ 70.286962][ T6229] debugfs: 'hsr0' already exists in 'hsr' [ 70.289009][ T6229] Cannot create hsr debugfs directory [ 70.313979][ T154] bridge_slave_1: left allmulticast mode [ 70.322283][ T154] bridge_slave_1: left promiscuous mode [ 70.326246][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.334048][ T154] bridge_slave_0: left allmulticast mode [ 70.336272][ T154] bridge_slave_0: left promiscuous mode [ 70.340223][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.486779][ T5947] Bluetooth: hci1: command tx timeout [ 70.525635][ T5947] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 70.526925][ T6296] netlink: 'syz.1.70': attribute type 10 has an invalid length. [ 70.576712][ T5947] Bluetooth: hci3: command tx timeout [ 70.665554][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.708417][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.747982][ T154] bond0 (unregistering): Released all slaves [ 70.764128][ T10] usb 8-1: USB disconnect, device number 3 [ 70.773285][ T6296] team0: Device vxcan1 is of different type [ 70.860620][ T154] tipc: Disabling bearer [ 70.862983][ T154] tipc: Left network mode [ 70.877772][ T6313] bridge_slave_0: left allmulticast mode [ 70.880369][ T6313] bridge_slave_0: left promiscuous mode [ 70.884287][ T6313] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.893186][ T6313] bridge_slave_1: left allmulticast mode [ 70.896111][ T6313] bridge_slave_1: left promiscuous mode [ 70.899336][ T6313] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.907926][ T6313] bond0: (slave bond_slave_0): Releasing backup interface [ 70.939803][ T6313] bond0: (slave bond_slave_1): Releasing backup interface [ 70.997916][ T6313] team0: Port device team_slave_0 removed [ 71.013264][ T6313] team0: Port device team_slave_1 removed [ 71.016428][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.020309][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.025154][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.029926][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.033584][ T6313] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 71.078063][ T6229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.083631][ T6229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.091842][ T6229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.100305][ T6229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.293862][ T6229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.314212][ T6229] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.324547][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.327862][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.337848][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.341158][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.358841][ T6339] netlink: 'syz.1.74': attribute type 83 has an invalid length. [ 71.419946][ T6346] tmpfs: Bad value for 'mpol' [ 71.422778][ T6346] dummy0: entered allmulticast mode [ 71.430431][ T6345] dummy0: left allmulticast mode [ 71.527051][ T5947] Bluetooth: hci2: command tx timeout [ 71.597420][ T6356] ip6gretap1: entered promiscuous mode [ 71.599770][ T6356] ip6gretap1: entered allmulticast mode [ 71.613783][ T6359] : entered promiscuous mode [ 71.685849][ T154] hsr_slave_0: left promiscuous mode [ 71.689958][ T154] hsr_slave_1: left promiscuous mode [ 71.693331][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.696783][ T54] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 71.700877][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.707182][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.711327][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.727134][ T154] veth1_macvtap: left promiscuous mode [ 71.729430][ T154] veth0_macvtap: left promiscuous mode [ 71.731443][ T154] veth1_vlan: left promiscuous mode [ 71.733372][ T154] veth0_vlan: left promiscuous mode [ 71.808909][ T6374] unsupported nla_type 4111 [ 71.825330][ T6375] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 71.833621][ T6375] Error validating options; rc = [-22] [ 71.846663][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 71.850539][ T54] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 71.853701][ T54] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 71.857458][ T54] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 71.861071][ T54] usb 8-1: config 250 has no interface number 0 [ 71.861466][ T154] team0 (unregistering): Port device team_slave_1 removed [ 71.863541][ T54] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 71.870989][ T54] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 71.875031][ T54] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 71.875448][ T154] team0 (unregistering): Port device team_slave_0 removed [ 71.879122][ T54] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 71.879170][ T54] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 71.879196][ T54] usb 8-1: config 250 interface 228 has no altsetting 0 [ 71.881564][ T54] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 71.901049][ T54] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 71.904339][ T54] usb 8-1: Product: syz [ 71.906071][ T54] usb 8-1: SerialNumber: syz [ 71.918174][ T54] hub 8-1:250.228: bad descriptor, ignoring hub [ 71.920911][ T54] hub 8-1:250.228: probe with driver hub failed with error -5 [ 72.006264][ T6229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.015800][ T40] kauditd_printk_skb: 76 callbacks suppressed [ 72.015816][ T40] audit: type=1400 audit(1772432940.933:279): avc: denied { mounton } for pid=6378 comm="syz.1.85" path="/15/file0" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.018477][ T6379] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 72.038265][ T6379] CIFS mount error: No usable UNC path provided in device string! [ 72.038265][ T6379] [ 72.042559][ T6379] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 72.069973][ T40] audit: type=1400 audit(1772432940.993:280): avc: denied { read write } for pid=6378 comm="syz.1.85" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.082137][ T40] audit: type=1400 audit(1772432940.993:281): avc: denied { open } for pid=6378 comm="syz.1.85" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.090083][ T40] audit: type=1400 audit(1772432940.993:282): avc: denied { ioctl } for pid=6378 comm="syz.1.85" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.169078][ T6390] xt_limit: Overflow, try lower: 271964/0 [ 72.206895][ T6391] xt_limit: Overflow, try lower: 271964/0 [ 72.258280][ T54] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 72.263997][ T6229] veth0_vlan: entered promiscuous mode [ 72.276149][ T6229] veth1_vlan: entered promiscuous mode [ 72.288130][ T54] usb 8-1: USB disconnect, device number 4 [ 72.306207][ T54] usblp0: removed [ 72.323418][ T6229] veth0_macvtap: entered promiscuous mode [ 72.327855][ T6229] veth1_macvtap: entered promiscuous mode [ 72.338680][ T6229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.346447][ T6229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.356553][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.379347][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.382383][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.385506][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.436575][ T40] audit: type=1400 audit(1772432941.353:283): avc: denied { block_suspend } for pid=6403 comm="syz.0.88" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.494218][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.500508][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.523218][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.526124][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.596227][ T40] audit: type=1400 audit(1772432941.513:284): avc: denied { setopt } for pid=6411 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.639351][ T5947] Bluetooth: Unexpected continuation frame (len 13) [ 72.687867][ T40] audit: type=1400 audit(1772432941.573:285): avc: denied { ioctl } for pid=6413 comm="syz.4.55" path="socket:[10209]" dev="sockfs" ino=10209 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.688916][ T6417] overlayfs: failed to resolve './file1': -2 [ 72.698443][ T40] audit: type=1400 audit(1772432941.593:286): avc: denied { create } for pid=6416 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.709395][ T40] audit: type=1400 audit(1772432941.593:287): avc: denied { write } for pid=6416 comm="syz.0.90" path="socket:[12581]" dev="sockfs" ino=12581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.717927][ T6417] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 72.717966][ T6417] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 72.725992][ T40] audit: type=1400 audit(1772432941.593:288): avc: denied { mount } for pid=6416 comm="syz.0.90" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 73.093384][ T6446] __nla_validate_parse: 30 callbacks suppressed [ 73.093398][ T6446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.97'. [ 73.152360][ T6450] warning: `syz.1.98' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.597041][ T6439] syz.3.95 (6439): drop_caches: 2 [ 73.601980][ T6465] 9p: Bad value for 'rfdno' [ 73.617068][ T5947] Bluetooth: hci2: command tx timeout [ 73.670249][ T6468] lo speed is unknown, defaulting to 1000 [ 73.672534][ T6468] lo speed is unknown, defaulting to 1000 [ 73.679357][ T6468] lo speed is unknown, defaulting to 1000 [ 73.683661][ T6468] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.691760][ T6468] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 73.728605][ T6468] lo speed is unknown, defaulting to 1000 [ 73.734199][ T6468] lo speed is unknown, defaulting to 1000 [ 73.755572][ T6468] lo speed is unknown, defaulting to 1000 [ 73.764066][ T6468] lo speed is unknown, defaulting to 1000 [ 73.829848][ T6479] program syz.1.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.870746][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 73.877117][ T6483] netlink: 'syz.0.108': attribute type 1 has an invalid length. [ 73.880682][ T6483] netlink: 'syz.0.108': attribute type 2 has an invalid length. [ 73.883986][ T6484] netlink: 'syz.0.108': attribute type 1 has an invalid length. [ 73.889078][ T6484] netlink: 'syz.0.108': attribute type 2 has an invalid length. [ 73.916697][ T1163] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 73.967799][ T6489] trusted_key: syz.1.110 sent an empty control message without MSG_MORE. [ 74.078273][ T1163] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 74.082076][ T1163] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.091494][ T1163] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 74.095567][ T1163] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 74.100163][ T1163] usb 8-1: Manufacturer: syz [ 74.118726][ T1163] usb 8-1: config 0 descriptor?? [ 74.186637][ T1163] rc_core: IR keymap rc-hauppauge not found [ 74.189328][ T1163] Registered IR keymap rc-empty [ 74.192976][ T1163] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 74.198999][ T1163] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input8 [ 74.377119][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.408269][ T54] usb 8-1: USB disconnect, device number 5 [ 74.556681][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 74.569251][ T10] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 74.573862][ T10] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 74.579352][ T10] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.584262][ T10] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 74.599729][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 74.603531][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.611870][ T10] usb 5-1: Product: syz [ 74.613800][ T10] usb 5-1: Manufacturer: syz [ 74.615821][ T10] usb 5-1: SerialNumber: syz [ 74.631066][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 74.638786][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input9 [ 74.836716][ T10] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 74.846656][ T10] (id 0x00) [ 74.896663][ T10] rc_core: IR keymap rc-imon-pad not found [ 74.899285][ T10] Registered IR keymap rc-empty [ 74.901620][ T10] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 74.906786][ T10] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 74.912214][ T10] imon:send_packet: packet tx failed (-71) [ 74.926977][ T10] imon 5-1:155.0: remote input dev register failed [ 74.936862][ T10] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 75.009565][ T6517] netlink: 16 bytes leftover after parsing attributes in process `syz.3.118'. [ 75.057826][ T6517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.118'. [ 75.069753][ T10] imon 5-1:155.0: unable to initialize intf0, err 0 [ 75.072778][ T10] imon:imon_probe: failed to initialize context! [ 75.075965][ T10] imon 5-1:155.0: unable to register, err -19 [ 75.094781][ T10] usb 5-1: USB disconnect, device number 2 [ 75.115976][ T6523] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size. [ 75.202223][ T6520] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 75.320955][ T6528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.121'. [ 75.686944][ T5947] Bluetooth: hci2: command tx timeout [ 75.756653][ T5998] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 76.739452][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.742223][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.968316][ T6574] bond1: Unable to set up delay as MII monitoring is disabled [ 76.987879][ T6574] bond1 (unregistering): Released all slaves [ 77.766956][ T5947] Bluetooth: hci2: command tx timeout [ 78.884947][ T6548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.931816][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 78.934944][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 78.934963][ T40] audit: type=1400 audit(1772432947.843:325): avc: denied { shutdown } for pid=6580 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.947302][ T40] audit: type=1400 audit(1772432947.853:326): avc: denied { write } for pid=6580 comm="syz.3.133" lport=60724 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 78.979504][ T5947] Bluetooth: Unexpected continuation frame (len 4) [ 78.993958][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 78.996908][ T6588] xt_l2tp: v2 doesn't support IP mode [ 78.997296][ T6590] netlink: 52 bytes leftover after parsing attributes in process `syz.3.133'. [ 79.037816][ T40] audit: type=1400 audit(1772432947.963:327): avc: denied { write } for pid=6582 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.158870][ T6601] binder: 6600:6601 ioctl c018620c 200000000240 returned -22 [ 79.181358][ T6603] FAULT_INJECTION: forcing a failure. [ 79.181358][ T6603] name failslab, interval 1, probability 0, space 0, times 1 [ 79.188315][ T6603] CPU: 3 UID: 0 PID: 6603 Comm: syz.3.141 Not tainted syzkaller #0 PREEMPT(full) [ 79.188331][ T6603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.188338][ T6603] Call Trace: [ 79.188342][ T6603] [ 79.188346][ T6603] dump_stack_lvl+0x100/0x190 [ 79.188369][ T6603] should_fail_ex.cold+0x5/0xa [ 79.188383][ T6603] should_failslab+0xc2/0x120 [ 79.188402][ T6603] __kmalloc_cache_noprof+0x7a/0x6f0 [ 79.188415][ T6603] ? kvm_uevent_notify_change.part.0+0x94/0x450 [ 79.188435][ T6603] kvm_uevent_notify_change.part.0+0x94/0x450 [ 79.188455][ T6603] ? __pfx_kvm_vm_release+0x10/0x10 [ 79.188469][ T6603] kvm_put_kvm+0xe4/0xb10 [ 79.188482][ T6603] ? lockdep_hardirqs_on+0x78/0x100 [ 79.188494][ T6603] ? _raw_spin_unlock_irq+0x2e/0x50 [ 79.188513][ T6603] ? __pfx_kvm_vm_release+0x10/0x10 [ 79.188526][ T6603] kvm_vm_release+0x3c/0x50 [ 79.188539][ T6603] __fput+0x3ff/0xb40 [ 79.188553][ T6603] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.188571][ T6603] task_work_run+0x150/0x240 [ 79.188584][ T6603] ? __pfx_task_work_run+0x10/0x10 [ 79.188599][ T6603] exit_to_user_mode_loop+0x100/0x4a0 [ 79.188619][ T6603] do_syscall_64+0x67c/0xf80 [ 79.188630][ T6603] ? clear_bhb_loop+0x40/0x90 [ 79.188643][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.188655][ T6603] RIP: 0033:0x7f0b9239c799 [ 79.188665][ T6603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.188675][ T6603] RSP: 002b:00007f0b932a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 79.188686][ T6603] RAX: 0000000000000000 RBX: 00007f0b92615fa0 RCX: 00007f0b9239c799 [ 79.188692][ T6603] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 79.188698][ T6603] RBP: 00007f0b932a4090 R08: 0000000000000000 R09: 0000000000000000 [ 79.188704][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.188710][ T6603] R13: 00007f0b92616038 R14: 00007f0b92615fa0 R15: 00007fff36af9978 [ 79.188723][ T6603] [ 79.325477][ T6613] netlink: 'syz.0.144': attribute type 1 has an invalid length. [ 79.361668][ T40] audit: type=1326 audit(1772432948.283:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.4.145" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6eb9c799 code=0x7ffc0000 [ 79.373325][ T40] audit: type=1326 audit(1772432948.293:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.4.145" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6eb9c799 code=0x7ffc0000 [ 79.374143][ T6613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.385085][ T6617] netlink: 'syz.4.145': attribute type 1 has an invalid length. [ 79.386336][ T40] audit: type=1326 audit(1772432948.293:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.4.145" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6eb9c799 code=0x7ffc0000 [ 79.391203][ T6617] netlink: 96 bytes leftover after parsing attributes in process `syz.4.145'. [ 79.398649][ T40] audit: type=1326 audit(1772432948.293:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.4.145" exe="/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f3f6eb9c799 code=0x7ffc0000 [ 79.398678][ T40] audit: type=1326 audit(1772432948.293:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.4.145" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6eb9c799 code=0x7ffc0000 [ 79.398701][ T40] audit: type=1326 audit(1772432948.293:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.4.145" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6eb9c799 code=0x7ffc0000 [ 79.398723][ T40] audit: type=1326 audit(1772432948.293:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.4.145" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6eb9c799 code=0x7ffc0000 [ 79.445723][ T6617] netlink: 658 bytes leftover after parsing attributes in process `syz.4.145'. [ 79.445745][ T6617] netlink: 1 bytes leftover after parsing attributes in process `syz.4.145'. [ 79.482504][ T6619] bond1: (slave veth3): Enslaving as an active interface with a down link [ 79.488904][ T6622] netlink: 'syz.0.144': attribute type 10 has an invalid length. [ 79.492433][ T6622] netlink: 40 bytes leftover after parsing attributes in process `syz.0.144'. [ 79.500086][ T6613] bond1: (slave dummy0): making interface the new active one [ 79.505170][ T6613] dummy0: entered promiscuous mode [ 79.508016][ T6613] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 79.514684][ T6622] bond1: (slave dummy0): Releasing active interface [ 79.646164][ T6626] input: syz0 as /devices/virtual/input/input12 [ 79.650462][ T6626] input: failed to attach handler leds to device input12, error: -6 [ 79.718127][ T6630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.149'. [ 79.854913][ T6636] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 79.861228][ T6636] SELinux: failed to load policy [ 79.863227][ T6637] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 79.867060][ T6637] SELinux: failed to load policy [ 79.876689][ T6637] IPv6: syztnl0: Disabled Multicast RS [ 79.888973][ T6636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.151'. [ 79.893249][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.151'. [ 79.905297][ T6636] ip6gre1: entered promiscuous mode [ 79.909211][ T6636] ip6gre1: entered allmulticast mode [ 79.975645][ T6641] bad cache= option: nonw [ 79.975645][ T6641] [ 79.981394][ T6641] CIFS: VFS: bad cache= option: nonw [ 79.984512][ T6641] nbd: illegal input index -2146435068 [ 79.988892][ T6641] bpf: Bad value for 'gid' [ 79.994080][ T6641] bad cache= option: nonw [ 79.994080][ T6641] [ 79.999736][ T6643] netlink: 'syz.1.153': attribute type 3 has an invalid length. [ 79.999769][ T6641] CIFS: VFS: bad cache= option: nonw [ 80.041782][ T6648] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 80.137027][ T6652] devtmpfs: Cannot change global quota limit on remount [ 80.419867][ T6672] IPv6: NLM_F_REPLACE set, but no existing node found! [ 80.542921][ T6674] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 80.997925][ T6705] overlayfs: missing 'workdir' [ 81.038066][ T6705] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 81.040586][ T6705] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 81.044790][ T6705] vhci_hcd vhci_hcd.0: Device attached [ 81.055967][ T6707] vhci_hcd: connection closed [ 81.060498][ T6711] netlink: 'syz.3.174': attribute type 3 has an invalid length. [ 81.061550][ T1149] vhci_hcd vhci_hcd.1: stop threads [ 81.062668][ T6711] netlink: 'syz.3.174': attribute type 3 has an invalid length. [ 81.066222][ T1149] vhci_hcd vhci_hcd.1: release socket [ 81.067723][ T6711] netlink: 'syz.3.174': attribute type 3 has an invalid length. [ 81.067746][ T6711] netlink: 'syz.3.174': attribute type 3 has an invalid length. [ 81.070578][ T1149] vhci_hcd vhci_hcd.1: disconnect device [ 81.072311][ T6711] netlink: 'syz.3.174': attribute type 3 has an invalid length. [ 81.093112][ T6711] futex_wake_op: syz.3.174 tries to shift op by -1; fix this program [ 81.163742][ T6714] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 81.261085][ T6718] FAULT_INJECTION: forcing a failure. [ 81.261085][ T6718] name failslab, interval 1, probability 0, space 0, times 0 [ 81.267772][ T6718] CPU: 0 UID: 0 PID: 6718 Comm: syz.3.177 Not tainted syzkaller #0 PREEMPT(full) [ 81.267796][ T6718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.267806][ T6718] Call Trace: [ 81.267813][ T6718] [ 81.267822][ T6718] dump_stack_lvl+0x100/0x190 [ 81.267867][ T6718] should_fail_ex.cold+0x5/0xa [ 81.267890][ T6718] should_failslab+0xc2/0x120 [ 81.267918][ T6718] __kmalloc_cache_noprof+0x7a/0x6f0 [ 81.267939][ T6718] ? kobject_uevent_env+0x263/0x18b0 [ 81.267978][ T6718] kobject_uevent_env+0x263/0x18b0 [ 81.268004][ T6718] ? kvm_uevent_notify_change.part.0+0x321/0x450 [ 81.268028][ T6718] ? kfree+0x1f6/0x6b0 [ 81.268048][ T6718] ? kvm_uevent_notify_change.part.0+0x2f4/0x450 [ 81.268075][ T6718] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 81.268099][ T6718] ? __pfx_kvm_vm_release+0x10/0x10 [ 81.268121][ T6718] kvm_put_kvm+0xe4/0xb10 [ 81.268141][ T6718] ? lockdep_hardirqs_on+0x78/0x100 [ 81.268160][ T6718] ? _raw_spin_unlock_irq+0x2e/0x50 [ 81.268188][ T6718] ? __pfx_kvm_vm_release+0x10/0x10 [ 81.268210][ T6718] kvm_vm_release+0x3c/0x50 [ 81.268230][ T6718] __fput+0x3ff/0xb40 [ 81.268253][ T6718] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.268282][ T6718] task_work_run+0x150/0x240 [ 81.268302][ T6718] ? __pfx_task_work_run+0x10/0x10 [ 81.268331][ T6718] exit_to_user_mode_loop+0x100/0x4a0 [ 81.268362][ T6718] do_syscall_64+0x67c/0xf80 [ 81.268380][ T6718] ? clear_bhb_loop+0x40/0x90 [ 81.268402][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.268420][ T6718] RIP: 0033:0x7f0b9239c799 [ 81.268436][ T6718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.268452][ T6718] RSP: 002b:00007f0b932a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 81.268469][ T6718] RAX: 0000000000000000 RBX: 00007f0b92615fa0 RCX: 00007f0b9239c799 [ 81.268480][ T6718] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 81.268489][ T6718] RBP: 00007f0b932a4090 R08: 0000000000000000 R09: 0000000000000000 [ 81.268499][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.268509][ T6718] R13: 00007f0b92616038 R14: 00007f0b92615fa0 R15: 00007fff36af9978 [ 81.268533][ T6718] [ 81.616758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.866260][ T6736] ntfs3(nbd4): try to read out of volume at offset 0x0 [ 81.906599][ T1163] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 82.060992][ T1163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.066018][ T1163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.069252][ T6736] /dev/sr0: Can't open blockdev [ 82.072986][ T1163] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.076876][ T6746] FAULT_INJECTION: forcing a failure. [ 82.076876][ T6746] name failslab, interval 1, probability 0, space 0, times 0 [ 82.081542][ T1163] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.091608][ T6746] CPU: 2 UID: 0 PID: 6746 Comm: syz.0.187 Not tainted syzkaller #0 PREEMPT(full) [ 82.091632][ T6746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.091642][ T6746] Call Trace: [ 82.091648][ T6746] [ 82.091655][ T6746] dump_stack_lvl+0x100/0x190 [ 82.091688][ T6746] should_fail_ex.cold+0x5/0xa [ 82.091709][ T6746] ? kobject_get_path+0xcf/0x2c0 [ 82.091730][ T6746] should_failslab+0xc2/0x120 [ 82.091758][ T6746] __kmalloc_noprof+0xe0/0x850 [ 82.091786][ T6746] kobject_get_path+0xcf/0x2c0 [ 82.091811][ T6746] kobject_uevent_env+0x287/0x18b0 [ 82.091838][ T1163] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.091838][ T6746] ? kvm_uevent_notify_change.part.0+0x321/0x450 [ 82.091863][ T6746] ? kfree+0x1f6/0x6b0 [ 82.091882][ T6746] ? kvm_uevent_notify_change.part.0+0x2f4/0x450 [ 82.091910][ T6746] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 82.091934][ T6746] ? __pfx_kvm_vm_release+0x10/0x10 [ 82.091955][ T6746] kvm_put_kvm+0xe4/0xb10 [ 82.091975][ T6746] ? lockdep_hardirqs_on+0x78/0x100 [ 82.092000][ T6746] ? _raw_spin_unlock_irq+0x2e/0x50 [ 82.092027][ T6746] ? __pfx_kvm_vm_release+0x10/0x10 [ 82.092048][ T6746] kvm_vm_release+0x3c/0x50 [ 82.092067][ T6746] __fput+0x3ff/0xb40 [ 82.092089][ T6746] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.092118][ T6746] task_work_run+0x150/0x240 [ 82.092138][ T6746] ? __pfx_task_work_run+0x10/0x10 [ 82.092163][ T6746] exit_to_user_mode_loop+0x100/0x4a0 [ 82.092193][ T6746] do_syscall_64+0x67c/0xf80 [ 82.092211][ T6746] ? clear_bhb_loop+0x40/0x90 [ 82.092233][ T6746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.092250][ T6746] RIP: 0033:0x7fad4f59c799 [ 82.092265][ T6746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.092281][ T6746] RSP: 002b:00007fad504fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 82.092298][ T6746] RAX: 0000000000000000 RBX: 00007fad4f815fa0 RCX: 00007fad4f59c799 [ 82.092308][ T6746] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 82.092318][ T6746] RBP: 00007fad504fe090 R08: 0000000000000000 R09: 0000000000000000 [ 82.092327][ T6746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.092337][ T6746] R13: 00007fad4f816038 R14: 00007fad4f815fa0 R15: 00007ffe813a46b8 [ 82.092360][ T6746] [ 82.199747][ T1163] usb 6-1: config 0 descriptor?? [ 82.347393][ T6737] /dev/sr0: Can't open blockdev [ 82.389198][ T6762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63777 sclass=netlink_route_socket pid=6762 comm=syz.0.189 [ 82.615770][ T6783] binder: BINDER_SET_CONTEXT_MGR already set [ 82.620801][ T6783] binder: 6778:6783 ioctl 4018620d 200000000280 returned -16 [ 82.624546][ T6782] binder: 6778:6782 ioctl c018620c 200000000100 returned -22 [ 82.624547][ T6780] binder: 6778:6780 ioctl c018620c 200000000100 returned -22 [ 82.635546][ T1163] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 82.737672][ T6787] exFAT-fs (nullb0): invalid boot record signature [ 82.740825][ T6787] exFAT-fs (nullb0): failed to read boot sector [ 82.743035][ T6787] exFAT-fs (nullb0): failed to recognize exfat type [ 82.832725][ T6791] FAULT_INJECTION: forcing a failure. [ 82.832725][ T6791] name failslab, interval 1, probability 0, space 0, times 0 [ 82.839576][ T6791] CPU: 1 UID: 0 PID: 6791 Comm: syz.4.197 Not tainted syzkaller #0 PREEMPT(full) [ 82.839599][ T6791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.839609][ T6791] Call Trace: [ 82.839615][ T6791] [ 82.839622][ T6791] dump_stack_lvl+0x100/0x190 [ 82.839654][ T6791] should_fail_ex.cold+0x5/0xa [ 82.839676][ T6791] ? kobject_get_path+0xcf/0x2c0 [ 82.839696][ T6791] should_failslab+0xc2/0x120 [ 82.839723][ T6791] __kmalloc_noprof+0xe0/0x850 [ 82.839746][ T6791] kobject_get_path+0xcf/0x2c0 [ 82.839772][ T6791] kobject_uevent_env+0x287/0x18b0 [ 82.839793][ T6791] ? kvm_uevent_notify_change.part.0+0x321/0x450 [ 82.839813][ T6791] ? kfree+0x1f6/0x6b0 [ 82.839828][ T6791] ? kvm_uevent_notify_change.part.0+0x2f4/0x450 [ 82.839850][ T6791] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 82.839870][ T6791] ? __pfx_kvm_vm_release+0x10/0x10 [ 82.839888][ T6791] kvm_put_kvm+0xe4/0xb10 [ 82.839904][ T6791] ? lockdep_hardirqs_on+0x78/0x100 [ 82.839920][ T6791] ? _raw_spin_unlock_irq+0x2e/0x50 [ 82.839943][ T6791] ? __pfx_kvm_vm_release+0x10/0x10 [ 82.839956][ T6791] kvm_vm_release+0x3c/0x50 [ 82.839971][ T6791] __fput+0x3ff/0xb40 [ 82.839990][ T6791] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.840015][ T6791] task_work_run+0x150/0x240 [ 82.840032][ T6791] ? __pfx_task_work_run+0x10/0x10 [ 82.840052][ T6791] exit_to_user_mode_loop+0x100/0x4a0 [ 82.840078][ T6791] do_syscall_64+0x67c/0xf80 [ 82.840093][ T6791] ? clear_bhb_loop+0x40/0x90 [ 82.840111][ T6791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.840148][ T6791] RIP: 0033:0x7f3f6eb9c799 [ 82.840159][ T6791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.840170][ T6791] RSP: 002b:00007f3f6fa7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 82.840180][ T6791] RAX: 0000000000000000 RBX: 00007f3f6ee15fa0 RCX: 00007f3f6eb9c799 [ 82.840187][ T6791] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 82.840192][ T6791] RBP: 00007f3f6fa7f090 R08: 0000000000000000 R09: 0000000000000000 [ 82.840198][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.840204][ T6791] R13: 00007f3f6ee16038 R14: 00007f3f6ee15fa0 R15: 00007fffbbe54018 [ 82.840218][ T6791] [ 82.937332][ T1343] usb 6-1: USB disconnect, device number 6 [ 83.657568][ T6837] fuse: Unknown parameter 'grd+M' [ 83.798061][ T6845] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 83.806222][ T6847] veth0_macvtap: left promiscuous mode [ 83.843814][ T6858] vivid-000: ================= START STATUS ================= [ 83.853426][ T6858] vivid-000: Test Pattern: 75% Colorbar [ 83.856429][ T6858] vivid-000: Fill Percentage of Frame: 100 [ 83.860086][ T6858] vivid-000: Horizontal Movement: No Movement [ 83.863085][ T6858] vivid-000: Vertical Movement: No Movement [ 83.865869][ T6858] vivid-000: OSD Text Mode: All [ 83.870401][ T6858] vivid-000: Show Border: false [ 83.873025][ T6858] vivid-000: Show Square: false [ 83.875010][ T6858] vivid-000: Sensor Flipped Horizontally: false [ 83.877906][ T6858] vivid-000: Sensor Flipped Vertically: false [ 83.879949][ T6858] vivid-000: Insert SAV Code in Image: false [ 83.882576][ T6858] vivid-000: Insert EAV Code in Image: false [ 83.884827][ T6858] vivid-000: Insert Video Guard Band: false [ 83.888706][ T6858] vivid-000: Reduced Framerate: false [ 83.890969][ T6858] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 83.893595][ T6858] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 83.897360][ T6858] vivid-000: Enable Capture Cropping: true grabbed [ 83.900017][ T6858] vivid-000: Enable Capture Composing: true grabbed [ 83.902190][ T6858] vivid-000: Enable Capture Scaler: true grabbed [ 83.905468][ T6858] vivid-000: Timestamp Source: End of Frame [ 83.908402][ T6858] vivid-000: Colorspace: sRGB [ 83.910191][ T6858] vivid-000: Transfer Function: Default [ 83.912140][ T6858] vivid-000: Y'CbCr Encoding: Default [ 83.914149][ T6858] vivid-000: HSV Encoding: Hue 0-179 [ 83.916224][ T6858] vivid-000: Quantization: Default [ 83.918325][ T6858] vivid-000: Apply Alpha To Red Only: false [ 83.920590][ T6858] vivid-000: Standard Aspect Ratio: 4x3 [ 83.922507][ T6858] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 83.925156][ T6858] vivid-000: DV Timings: 640x480p59 inactive [ 83.927264][ T6858] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 83.930499][ T6858] vivid-000: Maximum EDID Blocks: 2 [ 83.936841][ T6858] vivid-000: Limited RGB Range (16-235): false [ 83.942101][ T6858] vivid-000: Rx RGB Quantization Range: Automatic [ 83.944019][ T6869] syz.3.214 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 83.944936][ T6858] vivid-000: Power Present: 0x00000001 [ 83.952966][ T6858] tpg source WxH: 320x240 (Y'CbCr) [ 83.955227][ T6858] tpg field: 1 [ 83.958345][ T6858] tpg crop: (0,0)/320x240 [ 83.960273][ T6858] tpg compose: (0,0)/320x240 [ 83.962562][ T6858] tpg colorspace: 12 [ 83.964334][ T6858] tpg transfer function: 1/1 [ 83.966592][ T6858] tpg Y'CbCr encoding: 0/2 [ 83.968741][ T6858] tpg quantization: 0/2 [ 83.971803][ T6858] tpg RGB range: 0/2 [ 83.974183][ T6858] vivid-000: ================== END STATUS ================== [ 83.979604][ T6850] vivid-000: ================= START STATUS ================= [ 83.983236][ T6850] vivid-000: Test Pattern: 75% Colorbar [ 83.985860][ T6850] vivid-000: Fill Percentage of Frame: 100 [ 83.989009][ T6850] vivid-000: Horizontal Movement: No Movement [ 83.991756][ T6850] vivid-000: Vertical Movement: No Movement [ 83.996902][ T6850] vivid-000: OSD Text Mode: All [ 83.999607][ T6850] vivid-000: Show Border: false [ 84.002130][ T6850] vivid-000: Show Square: false [ 84.003837][ T6876] macvtap1: entered promiscuous mode [ 84.004370][ T6850] vivid-000: Sensor Flipped Horizontally: false [ 84.007989][ T6876] macvtap1: entered allmulticast mode [ 84.010014][ T6850] vivid-000: Sensor Flipped Vertically: false [ 84.013022][ T6876] dummy0: entered promiscuous mode [ 84.015462][ T6850] vivid-000: Insert SAV Code in Image: false [ 84.018363][ T6876] dummy0: entered allmulticast mode [ 84.021339][ T6850] vivid-000: Insert EAV Code in Image: false [ 84.024585][ T6876] team0: Device macvtap1 failed to register rx_handler [ 84.025244][ T6850] vivid-000: Insert Video Guard Band: false [ 84.028937][ T6876] dummy0: left allmulticast mode [ 84.031342][ T6850] vivid-000: Reduced Framerate: false [ 84.033664][ T6876] dummy0: left promiscuous mode [ 84.035398][ T6850] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 84.040532][ T6850] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 84.043298][ T6850] vivid-000: Enable Capture Cropping: true grabbed [ 84.046080][ T6850] vivid-000: Enable Capture Composing: true grabbed [ 84.049640][ T6850] vivid-000: Enable Capture Scaler: true grabbed [ 84.052529][ T6850] vivid-000: Timestamp Source: End of Frame [ 84.054680][ T6850] vivid-000: Colorspace: sRGB [ 84.058163][ T6850] vivid-000: Transfer Function: Default [ 84.060123][ T6850] vivid-000: Y'CbCr Encoding: Default [ 84.061991][ T6850] vivid-000: HSV Encoding: Hue 0-179 [ 84.063936][ T6850] vivid-000: Quantization: Default [ 84.066335][ T6850] vivid-000: Apply Alpha To Red Only: false [ 84.069501][ T6850] vivid-000: Standard Aspect Ratio: 4x3 [ 84.071711][ T6850] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 84.074602][ T6850] vivid-000: DV Timings: 640x480p59 inactive [ 84.077348][ T6850] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 84.079967][ T6850] vivid-000: Maximum EDID Blocks: 2 [ 84.081845][ T6850] vivid-000: Limited RGB Range (16-235): false [ 84.084041][ T6850] vivid-000: Rx RGB Quantization Range: Automatic [ 84.087084][ T6850] vivid-000: Power Present: 0x00000001 [ 84.089173][ T6850] tpg source WxH: 320x240 (Y'CbCr) [ 84.090963][ T6850] tpg field: 1 [ 84.092223][ T6850] tpg crop: (0,0)/320x240 [ 84.093747][ T6850] tpg compose: (0,0)/320x240 [ 84.095977][ T6850] tpg colorspace: 12 [ 84.098137][ T6850] tpg transfer function: 1/1 [ 84.099821][ T6850] tpg Y'CbCr encoding: 0/2 [ 84.101356][ T6850] tpg quantization: 0/2 [ 84.102823][ T6850] tpg RGB range: 0/2 [ 84.104192][ T6850] vivid-000: ================== END STATUS ================== [ 84.378511][ T40] kauditd_printk_skb: 5322 callbacks suppressed [ 84.378523][ T40] audit: type=1400 audit(2000000000.550:5657): avc: denied { create } for pid=6884 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.398078][ T40] audit: type=1400 audit(2000000000.550:5658): avc: denied { bind } for pid=6884 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.406293][ T40] audit: type=1326 audit(2000000000.550:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b88b9c799 code=0x50000 [ 84.416955][ T40] audit: type=1326 audit(2000000000.550:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b88b9c799 code=0x50000 [ 84.426384][ T40] audit: type=1326 audit(2000000000.550:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b88b9c799 code=0x50000 [ 84.436182][ T40] audit: type=1326 audit(2000000000.550:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b88b9c799 code=0x50000 [ 84.445953][ T40] audit: type=1326 audit(2000000000.550:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b88b9c799 code=0x50000 [ 84.452517][ T6887] FAULT_INJECTION: forcing a failure. [ 84.452517][ T6887] name failslab, interval 1, probability 0, space 0, times 0 [ 84.453878][ T40] audit: type=1326 audit(2000000000.560:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b88b9c799 code=0x50000 [ 84.459560][ T6887] CPU: 0 UID: 0 PID: 6887 Comm: syz.0.218 Not tainted syzkaller #0 PREEMPT(full) [ 84.459587][ T6887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.459598][ T6887] Call Trace: [ 84.459605][ T6887] [ 84.459612][ T6887] dump_stack_lvl+0x100/0x190 [ 84.459647][ T6887] should_fail_ex.cold+0x5/0xa [ 84.459672][ T6887] should_failslab+0xc2/0x120 [ 84.459702][ T6887] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 84.459727][ T6887] ? skb_clone+0x190/0x400 [ 84.459751][ T6887] skb_clone+0x190/0x400 [ 84.459772][ T6887] netlink_broadcast_filtered+0xb6a/0xf50 [ 84.459803][ T6887] ? __alloc_skb+0x5b7/0x710 [ 84.459820][ T6887] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 84.459842][ T6887] ? netlink_has_listeners+0x20f/0x430 [ 84.459861][ T6887] ? netlink_has_listeners+0x20f/0x430 [ 84.459886][ T6887] netlink_broadcast+0x39/0x50 [ 84.459909][ T6887] kobject_uevent_env+0xcdd/0x18b0 [ 84.459941][ T6887] ? kvm_uevent_notify_change.part.0+0x2f4/0x450 [ 84.459970][ T6887] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 84.459997][ T6887] ? __pfx_kvm_vm_release+0x10/0x10 [ 84.460019][ T6887] kvm_put_kvm+0xe4/0xb10 [ 84.460040][ T6887] ? lockdep_hardirqs_on+0x78/0x100 [ 84.460060][ T6887] ? _raw_spin_unlock_irq+0x2e/0x50 [ 84.460089][ T6887] ? __pfx_kvm_vm_release+0x10/0x10 [ 84.460111][ T6887] kvm_vm_release+0x3c/0x50 [ 84.460132][ T6887] __fput+0x3ff/0xb40 [ 84.460155][ T6887] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.460186][ T6887] task_work_run+0x150/0x240 [ 84.460207][ T6887] ? __pfx_task_work_run+0x10/0x10 [ 84.460233][ T6887] exit_to_user_mode_loop+0x100/0x4a0 [ 84.460264][ T6887] do_syscall_64+0x67c/0xf80 [ 84.460283][ T6887] ? clear_bhb_loop+0x40/0x90 [ 84.460305][ T6887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.460325][ T6887] RIP: 0033:0x7fad4f59c799 [ 84.460340][ T6887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.460356][ T6887] RSP: 002b:00007fad504fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 84.460373][ T6887] RAX: 0000000000000000 RBX: 00007fad4f815fa0 RCX: 00007fad4f59c799 [ 84.460383][ T6887] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 84.460393][ T6887] RBP: 00007fad504fe090 R08: 0000000000000000 R09: 0000000000000000 [ 84.460403][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.460412][ T6887] R13: 00007fad4f816038 R14: 00007fad4f815fa0 R15: 00007ffe813a46b8 [ 84.460437][ T6887] [ 84.569762][ T40] audit: type=1326 audit(2000000000.560:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b88b9c799 code=0x50000 [ 84.577886][ T40] audit: type=1326 audit(2000000000.560:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b88b9c799 code=0x50000 [ 84.972934][ T6898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=6898 comm=syz.3.221 [ 85.541563][ T6896] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.544602][ T6896] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.567856][ T6896] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.572566][ T6896] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.586555][ T6896] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.608230][ T6896] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.657601][ T6896] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.660183][ T6896] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.667792][ T6896] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.671600][ T6896] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.674084][ T6896] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.701760][ T6896] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.788442][ T6904] openvswitch: netlink: IP tunnel TTL not specified. [ 86.331612][ T5947] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 86.332321][ T6922] validate_nla: 53 callbacks suppressed [ 86.332331][ T6922] netlink: 'syz.0.228': attribute type 1 has an invalid length. [ 86.378572][ T6922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.506243][ T6926] fuse: Unknown parameter '@' [ 86.509771][ T6928] fuse: Bad value for 'rootmode' [ 86.654213][ T6935] __nla_validate_parse: 12 callbacks suppressed [ 86.654231][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 86.914720][ T6939] syzkaller0: entered promiscuous mode [ 86.922070][ T6939] syzkaller0: entered allmulticast mode [ 86.969058][ T24] cfg80211: failed to load regulatory.db [ 87.047939][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.136573][ T6409] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 87.296937][ T6409] usb 8-1: Using ep0 maxpacket: 32 [ 87.302101][ T6409] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 87.305466][ T6409] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 87.311213][ T6409] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.318593][ T6409] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 87.332613][ T6409] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 87.339810][ T6409] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.343159][ T6409] usb 8-1: Product: syz [ 87.346138][ T6409] usb 8-1: Manufacturer: syz [ 87.351265][ T6409] usb 8-1: SerialNumber: syz [ 87.377419][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 87.389515][ T6409] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input13 [ 87.607411][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.608250][ T6409] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 87.627443][ T6409] (id 0x00) [ 87.638431][ T6958] netlink: 71 bytes leftover after parsing attributes in process `syz.3.237'. [ 87.698861][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.708917][ T6409] rc_core: IR keymap rc-imon-pad not found [ 87.710879][ T6409] Registered IR keymap rc-empty [ 87.712528][ T6409] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 87.715858][ T6409] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 87.723382][ T6409] imon:send_packet: packet tx failed (-71) [ 87.736751][ T6409] imon 8-1:155.0: remote input dev register failed [ 87.739209][ T6409] imon 8-1:155.0: imon_init_intf0: rc device setup failed [ 87.838384][ T6409] imon 8-1:155.0: unable to initialize intf0, err 0 [ 87.840771][ T6409] imon:imon_probe: failed to initialize context! [ 87.843108][ T6409] imon 8-1:155.0: unable to register, err -19 [ 87.847482][ T6409] usb 8-1: USB disconnect, device number 6 [ 87.892100][ T6964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'. [ 87.978877][ T6967] syz.1.240 uses obsolete (PF_INET,SOCK_PACKET) [ 88.037407][ T5947] Bluetooth: hci0: connection err: -111 [ 88.127154][ T6973] netlink: 'syz.4.241': attribute type 11 has an invalid length. [ 88.723403][ T6995] xt_hashlimit: size too large, truncated to 1048576 [ 88.724101][ T6993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'. [ 88.755680][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.761082][ T6993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.764270][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.769172][ T6993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.777177][ T6991] FAULT_INJECTION: forcing a failure. [ 88.777177][ T6991] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.785686][ T6991] CPU: 0 UID: 0 PID: 6991 Comm: syz.3.246 Not tainted syzkaller #0 PREEMPT(full) [ 88.785703][ T6991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.785709][ T6991] Call Trace: [ 88.785713][ T6991] [ 88.785718][ T6991] dump_stack_lvl+0x100/0x190 [ 88.785741][ T6991] should_fail_ex.cold+0x5/0xa [ 88.785756][ T6991] _copy_to_user+0x32/0xd0 [ 88.785774][ T6991] simple_read_from_buffer+0xcb/0x170 [ 88.785793][ T6991] proc_fail_nth_read+0x1af/0x230 [ 88.785815][ T6991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.785831][ T6991] ? rw_verify_area+0xce/0x6d0 [ 88.785846][ T6991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.785861][ T6991] vfs_read+0x1e4/0xb30 [ 88.785879][ T6991] ? __pfx_vfs_read+0x10/0x10 [ 88.785895][ T6991] ? __fget_files+0x215/0x3d0 [ 88.785909][ T6991] ? __fget_files+0x21f/0x3d0 [ 88.785924][ T6991] ksys_read+0x12a/0x250 [ 88.785940][ T6991] ? __pfx_ksys_read+0x10/0x10 [ 88.785960][ T6991] do_syscall_64+0x106/0xf80 [ 88.785972][ T6991] ? clear_bhb_loop+0x40/0x90 [ 88.785985][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.785996][ T6991] RIP: 0033:0x7f0b9235cfce [ 88.786006][ T6991] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.786016][ T6991] RSP: 002b:00007f0b932a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.786026][ T6991] RAX: ffffffffffffffda RBX: 00007f0b932a46c0 RCX: 00007f0b9235cfce [ 88.786033][ T6991] RDX: 000000000000000f RSI: 00007f0b932a40a0 RDI: 0000000000000008 [ 88.786039][ T6991] RBP: 00007f0b932a4090 R08: 0000000000000000 R09: 0000000000000000 [ 88.786045][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.786051][ T6991] R13: 00007f0b92616038 R14: 00007f0b92615fa0 R15: 00007fff36af9978 [ 88.786065][ T6991] [ 88.867344][ T6996] 9: renamed from bridge_slave_0 (while UP) [ 89.107620][ T1122] sr 2:0:0:0: [sr0] tag#25 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 89.111994][ T1122] sr 2:0:0:0: [sr0] tag#25 Sense Key : Illegal Request [current] [ 89.115468][ T1122] sr 2:0:0:0: [sr0] tag#25 Add. Sense: Invalid command operation code [ 89.121362][ T1122] sr 2:0:0:0: [sr0] tag#25 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 89.125432][ T1122] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 89.130446][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.135099][ T1122] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 89.340364][ T7045] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 89.349533][ T7045] NILFS (nbd3): device size too small [ 89.408822][ T7050] binder: 7042:7050 ioctl 8008f513 200000003880 returned -22 [ 89.419519][ T7049] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 89.432979][ T40] kauditd_printk_skb: 38684 callbacks suppressed [ 89.432991][ T40] audit: type=1400 audit(2000000005.610:44351): avc: denied { getopt } for pid=7051 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.490183][ T40] audit: type=1400 audit(2000000005.670:44352): avc: denied { map } for pid=7051 comm="syz.3.265" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 89.634783][ T7067] 9pnet_fd: p9_fd_create_tcp (7067): problem connecting socket to 127.0.0.1 [ 89.649253][ T40] audit: type=1400 audit(2000000005.830:44353): avc: denied { ioctl } for pid=7066 comm="syz.3.268" path="socket:[17684]" dev="sockfs" ino=17684 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.667699][ T7069] tmpfs: Bad value for 'huge' [ 89.696875][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.748621][ T40] audit: type=1400 audit(2000000005.920:44354): avc: denied { sqpoll } for pid=7061 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.766667][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.784486][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.788667][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.800155][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 89.804112][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 89.809410][ T7062] /dev/sr0: Can't open blockdev [ 90.016646][ T6409] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 90.134638][ T7072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.140515][ T7072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.156638][ T6409] usb 5-1: device descriptor read/64, error -71 [ 90.408745][ T6409] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 90.566652][ T6409] usb 5-1: device descriptor read/64, error -71 [ 90.677088][ T6409] usb usb5-port1: attempt power cycle [ 90.752219][ T154] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.757313][ T154] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.766218][ T154] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.779409][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.783389][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.784752][ T154] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.790796][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.795994][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.800626][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.804291][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.810456][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.814202][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.818882][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.822860][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.827076][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.830791][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.834476][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.839101][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.843003][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.847073][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.851553][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.856424][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.863341][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.868179][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.873183][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.877666][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.881510][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.885330][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.889937][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.893604][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.901814][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.907559][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.913085][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.919870][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.925482][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.931612][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.937178][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.039085][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 91.043448][ T7113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.279'. [ 91.047143][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 91.049851][ T6409] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 91.077318][ T6409] usb 5-1: device descriptor read/8, error -71 [ 91.145355][ T40] audit: type=1400 audit(2000000007.320:44355): avc: denied { create } for pid=7120 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 91.178064][ T40] audit: type=1400 audit(2000000007.360:44356): avc: denied { ioctl } for pid=7120 comm="syz.4.282" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x6409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 91.207077][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.295139][ T40] audit: type=1400 audit(2000000007.470:44357): avc: denied { listen } for pid=7130 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.311707][ T40] audit: type=1400 audit(2000000007.490:44358): avc: denied { ioctl } for pid=7130 comm="syz.4.285" path="socket:[18936]" dev="sockfs" ino=18936 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.338279][ T6409] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 91.357339][ T6409] usb 5-1: device descriptor read/8, error -71 [ 91.466997][ T6409] usb usb5-port1: unable to enumerate USB device [ 91.692754][ T40] audit: type=1400 audit(2000000007.870:44359): avc: denied { append } for pid=7162 comm="syz.3.296" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.706710][ T40] audit: type=1400 audit(2000000007.880:44360): avc: denied { map } for pid=7162 comm="syz.3.296" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.781407][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.857808][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.027696][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 92.237812][ T7184] xt_hashlimit: size too large, truncated to 1048576 [ 92.675212][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'. [ 92.830363][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.835532][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.839554][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.843611][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.848004][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.952111][ T7192] chnl_net:caif_netlink_parms(): no params data found [ 93.025086][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.028373][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.031978][ T7192] bridge_slave_0: entered allmulticast mode [ 93.035994][ T7192] bridge_slave_0: entered promiscuous mode [ 93.041829][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.044715][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.048021][ T7192] bridge_slave_1: entered allmulticast mode [ 93.052095][ T7192] bridge_slave_1: entered promiscuous mode [ 93.092417][ T7192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.104859][ T7192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.125458][ T7192] team0: Port device team_slave_0 added [ 93.130192][ T7192] team0: Port device team_slave_1 added [ 93.161082][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.171054][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.191992][ T7192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.204397][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.208818][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.221519][ T7192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.262108][ T7192] hsr_slave_0: entered promiscuous mode [ 93.264569][ T7192] hsr_slave_1: entered promiscuous mode [ 93.384145][ T7192] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.393918][ T7192] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.400186][ T7192] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.405037][ T7192] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.435941][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.438807][ T7192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.441295][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.443601][ T7192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.479893][ T7192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.502608][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.508212][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.531269][ T7192] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.542725][ T7213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.308'. [ 93.580846][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.583932][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.589503][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.591961][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.622133][ T7213] batman_adv: batadv0: Adding interface: dummy0 [ 93.624319][ T7213] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.636928][ T7213] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 93.756685][ T838] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.836707][ T7192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.927326][ T838] usb 5-1: Using ep0 maxpacket: 16 [ 93.930816][ T838] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 93.934931][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.947631][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.955225][ T838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 93.962908][ T838] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 93.971580][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.978113][ T838] usb 5-1: config 0 descriptor?? [ 94.099614][ T7192] veth0_vlan: entered promiscuous mode [ 94.110272][ T7192] veth1_vlan: entered promiscuous mode [ 94.150643][ T7192] veth0_macvtap: entered promiscuous mode [ 94.160302][ T7192] veth1_macvtap: entered promiscuous mode [ 94.189702][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.199970][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.212356][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.216005][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.225819][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.237563][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.286733][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.290326][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.311479][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.314047][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.400292][ T838] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5013.0003/input/input15 [ 94.476610][ T838] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5013.0003/input/input16 [ 94.499390][ T838] kye 0003:0458:5013.0003: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 94.538470][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 94.538487][ T40] audit: type=1400 audit(2000000010.719:44366): avc: denied { setattr } for pid=7236 comm="syz.5.313" name="/" dev="9p" ino=74973325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.561033][ T40] audit: type=1400 audit(2000000010.729:44367): avc: denied { getopt } for pid=7236 comm="syz.5.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.566080][ T7239] binfmt_misc: register: failed to install interpreter file ./file1 [ 94.579436][ T7239] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 94.583371][ T40] audit: type=1400 audit(2000000010.749:44368): avc: denied { read } for pid=7238 comm="syz.4.314" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 94.603703][ T40] audit: type=1400 audit(2000000010.749:44369): avc: denied { open } for pid=7238 comm="syz.4.314" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 94.634607][ T40] audit: type=1400 audit(2000000010.759:44370): avc: denied { ioctl } for pid=7238 comm="syz.4.314" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x4808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 94.652779][ T40] audit: type=1400 audit(2000000010.789:44371): avc: denied { remount } for pid=7211 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.676280][ T34] usb 5-1: USB disconnect, device number 8 [ 94.713453][ T7244] bond0: entered promiscuous mode [ 94.715381][ T7244] bond_slave_0: entered promiscuous mode [ 94.719740][ T7244] bond_slave_1: entered promiscuous mode [ 94.722055][ T7244] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 94.730025][ T7244] batadv0: entered promiscuous mode [ 94.734337][ T7244] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 94.739532][ T7244] bond0: left promiscuous mode [ 94.741345][ T7244] bond_slave_0: left promiscuous mode [ 94.743618][ T7244] bond_slave_1: left promiscuous mode [ 94.745986][ T7244] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 94.766584][ T7244] batadv0: left promiscuous mode [ 94.848518][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.320'. [ 94.851906][ T7255] netlink: 'syz.5.320': attribute type 26 has an invalid length. [ 94.896759][ T5938] Bluetooth: hci0: command tx timeout [ 94.945434][ T7259] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 95.183662][ T7266] MINIX-fs: unable to read superblock [ 95.190066][ T7266] netlink: 20 bytes leftover after parsing attributes in process `syz.5.325'. [ 95.199396][ T7266] MINIX-fs: unable to read superblock [ 95.227218][ T55] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 95.231380][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 95.244086][ T40] audit: type=1400 audit(2000000011.419:44372): avc: denied { name_bind } for pid=7270 comm="syz.0.326" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 95.249508][ T7271] netlink: 'syz.0.326': attribute type 21 has an invalid length. [ 95.267976][ T7271] Bluetooth: MGMT ver 1.23 [ 95.396616][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 95.399175][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 95.417910][ T55] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 95.424624][ T34] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 95.428984][ T55] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 95.433923][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.444625][ T55] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.451238][ T34] usb 9-1: config 0 descriptor?? [ 95.458527][ T55] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.465184][ T55] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.470193][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.480446][ T40] audit: type=1400 audit(2000000011.659:44373): avc: denied { append } for pid=7283 comm="syz.0.330" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.660168][ T34] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 95.670903][ T7290] netlink: 10 bytes leftover after parsing attributes in process `syz.5.331'. [ 95.674128][ T7289] netlink: 10 bytes leftover after parsing attributes in process `syz.5.331'. [ 95.680616][ T55] usb 8-1: GET_CAPABILITIES returned 0 [ 95.682552][ T55] usbtmc 8-1:16.0: can't read capabilities [ 95.730904][ T40] audit: type=1400 audit(2000000011.909:44374): avc: denied { write } for pid=7293 comm="syz.0.333" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.772600][ T7298] netlink: 'syz.5.334': attribute type 29 has an invalid length. [ 95.779510][ T7298] netlink: 'syz.5.334': attribute type 29 has an invalid length. [ 95.839239][ T7301] netlink: 524 bytes leftover after parsing attributes in process `syz.5.334'. [ 96.041048][ T40] audit: type=1400 audit(2000000012.219:44375): avc: denied { setattr } for pid=7304 comm="syz.0.338" name="UDPLITEv6" dev="sockfs" ino=16836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.041788][ T7305] sctp: [Deprecated]: syz.0.338 (pid 7305) Use of int in max_burst socket option. [ 96.041788][ T7305] Use struct sctp_assoc_value instead [ 96.054602][ T39] usb 9-1: USB disconnect, device number 2 [ 96.137964][ T7309] vivid-000: disconnect [ 96.161318][ T7308] vivid-000: reconnect [ 96.476779][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 96.657647][ T7333] netlink: 'syz.4.348': attribute type 1 has an invalid length. [ 96.668510][ T7331] binder: BINDER_SET_CONTEXT_MGR already set [ 96.671360][ T7331] binder: 7329:7331 ioctl 4018620d 200000004a80 returned -16 [ 96.672293][ T7333] bond1: entered promiscuous mode [ 96.677165][ T7333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.683820][ T7333] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 96.689975][ T7333] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 96.693521][ T7333] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 96.732808][ T7336] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input17 [ 96.860155][ T7348] program syz.4.352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.916014][ T7348] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 96.924319][ T7348] netlink: 'syz.4.352': attribute type 3 has an invalid length. [ 96.966627][ T5938] Bluetooth: hci0: command tx timeout [ 97.015907][ T7359] netlink: 100 bytes leftover after parsing attributes in process `syz.4.355'. [ 97.086581][ T55] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 97.246628][ T55] usb 5-1: Using ep0 maxpacket: 32 [ 97.250995][ T55] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 97.259300][ T55] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 97.263459][ T55] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 97.266644][ T55] usb 5-1: Product: syz [ 97.268068][ T55] usb 5-1: Manufacturer: syz [ 97.269599][ T55] usb 5-1: SerialNumber: syz [ 97.273924][ T55] usb 5-1: config 0 descriptor?? [ 97.276860][ T7346] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 97.280349][ T55] hub 5-1:0.0: bad descriptor, ignoring hub [ 97.282320][ T55] hub 5-1:0.0: probe with driver hub failed with error -5 [ 97.349416][ T7370] program syz.4.358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.493397][ T7346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.497683][ T7346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.502507][ T7346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'. [ 97.507321][ T7346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=7346 comm=syz.0.351 [ 97.534201][ T7374] ALSA: mixer_oss: invalid OSS volume '' [ 97.570317][ T5938] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 97.616903][ T10] usb 5-1: USB disconnect, device number 9 [ 97.630989][ T7379] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 2, id = 0 [ 97.775296][ T7383] 9p: Could not find request transport: virro%tio [ 97.825532][ T7386] netlink: 'syz.4.364': attribute type 2 has an invalid length. [ 97.942493][ T10] usb 8-1: USB disconnect, device number 7 [ 98.037591][ T7392] netlink: 'syz.3.366': attribute type 7 has an invalid length. [ 98.090867][ T7397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.368'. [ 98.329693][ T7410] mkiss: ax0: crc mode is auto. [ 98.568892][ T7417] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 98.568931][ T7416] netlink: 488 bytes leftover after parsing attributes in process `syz.5.374'. [ 98.575991][ T7416] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.374'. [ 98.831218][ T7427] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 98.835149][ T7427] SELinux: failed to load policy [ 98.838031][ T7429] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 98.842324][ T7429] SELinux: failed to load policy [ 99.037907][ T7439] netlink: 'syz.3.381': attribute type 10 has an invalid length. [ 99.041565][ T7439] team0: Cannot enslave team device to itself [ 99.048432][ T5938] Bluetooth: hci0: command tx timeout [ 99.125886][ T7443] netlink: 'syz.3.382': attribute type 25 has an invalid length. [ 99.130471][ T7443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.382'. [ 99.152976][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 99.158463][ T7435] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 99.161950][ T7448] netlink: 40 bytes leftover after parsing attributes in process `syz.5.380'. [ 99.290975][ T7450] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 99.417553][ T7458] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 99.795594][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 99.795609][ T40] audit: type=1400 audit(2000000015.969:44392): avc: denied { append } for pid=7492 comm="syz.3.395" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 99.816925][ T40] audit: type=1400 audit(2000000015.989:44393): avc: denied { map } for pid=7492 comm="syz.3.395" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 99.826653][ T40] audit: type=1400 audit(2000000015.989:44394): avc: denied { execute } for pid=7492 comm="syz.3.395" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 99.872065][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 99.877380][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.396'. [ 99.890103][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.396'. [ 99.945019][ T40] audit: type=1400 audit(2000000016.119:44395): avc: denied { accept } for pid=7497 comm="syz.5.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.066672][ T7507] random: crng reseeded on system resumption [ 100.080107][ T40] audit: type=1400 audit(2000000016.259:44396): avc: denied { bind } for pid=7508 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.090071][ T40] audit: type=1400 audit(2000000016.259:44397): avc: denied { ioctl } for pid=7506 comm="syz.5.400" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 100.121221][ T40] audit: type=1400 audit(2000000016.299:44398): avc: denied { mount } for pid=7508 comm="syz.3.401" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 100.163459][ T40] audit: type=1400 audit(2000000016.339:44399): avc: denied { map } for pid=7515 comm="syz.5.403" path="socket:[17079]" dev="sockfs" ino=17079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 100.205259][ T40] audit: type=1400 audit(2000000016.379:44400): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 100.250327][ T40] audit: type=1400 audit(2000000016.429:44401): avc: denied { listen } for pid=7521 comm="syz.3.404" lport=60073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.647273][ T7550] tmpfs: Bad value for 'mpol' [ 100.706662][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 100.752590][ T7563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.858420][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.862072][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.876712][ T10] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.885388][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.889518][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.892350][ T10] usb 10-1: Product: syz [ 100.893845][ T10] usb 10-1: Manufacturer: syz [ 100.895521][ T10] usb 10-1: SerialNumber: syz [ 100.902324][ T10] hub 10-1:1.0: bad descriptor, ignoring hub [ 100.904801][ T10] hub 10-1:1.0: probe with driver hub failed with error -5 [ 101.109259][ T10] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 101.136858][ T5938] Bluetooth: hci0: command tx timeout [ 101.427497][ T39] usb 10-1: USB disconnect, device number 2 [ 101.431387][ T39] usblp0: removed [ 101.625011][ T7592] program syz.0.427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.756643][ T29] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 101.769498][ T7598] bond2: entered promiscuous mode [ 101.772185][ T7598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.774279][ T7601] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 101.783313][ T7601] tmpfs: Bad value for 'nr_inodes' [ 101.792215][ T7598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.795673][ T7598] bond2: (slave sit2): The slave device specified does not support setting the MAC address [ 101.801082][ T7598] bond2: (slave sit2): Error -95 calling set_mac_address [ 101.856923][ T7602] bond3: (slave bond_slave_1): Device is not our slave [ 101.860335][ T7602] bond3: option active_slave: invalid value (bond_slave_1) [ 101.865449][ T7602] bond3 (unregistering): Released all slaves [ 101.918475][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.923135][ T29] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.931845][ T29] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 101.935361][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.938459][ T29] usb 10-1: Product: ဌ [ 101.940024][ T29] usb 10-1: Manufacturer: Ҟ娵䋅狨뇧禾禟䯳ﲢዕᦊ⓽톜⠷ୱ䌉㢅㊑痭嶳❬ꨘ柑ௗ庇㨶驐媀䯆♃꫈웝ذ샱鮓졗澎ⱳნ龌ꑝ阮亰Nj땡瓊ՠ똪넬븉㟡钗䲮Ⱃぼ릻聉⇜贡⬐᛭䯦ᓅ䗘韰檋某咅ힻ䫌Ḕ됯澚⭿폘̏굺⋕⬳컞铞⶜铈季蚖钸蜫︦︀㿶푋귋 [ 101.950807][ T29] usb 10-1: SerialNumber: ఇ [ 101.960393][ T29] hub 10-1:1.0: bad descriptor, ignoring hub [ 101.962976][ T29] hub 10-1:1.0: probe with driver hub failed with error -5 [ 102.158003][ T29] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 102.204594][ T7619] ------------[ cut here ]------------ [ 102.208604][ T7619] 1 [ 102.208619][ T7619] WARNING: mm/page_alloc.c:5226 at __alloc_frozen_pages_noprof+0x23ea/0x2ba0, CPU#0: syz.4.436/7619 [ 102.214520][ T7619] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 102.216773][ T7619] CPU: 0 UID: 0 PID: 7619 Comm: syz.4.436 Not tainted syzkaller #0 PREEMPT(full) [ 102.221200][ T7619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.226113][ T7619] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 102.229259][ T7619] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 94 ab 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 102.238003][ T7619] RSP: 0018:ffffc90003237790 EFLAGS: 00010246 [ 102.240688][ T7619] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 102.244165][ T7619] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040cc0 [ 102.247928][ T7619] RBP: 0000000000000014 R08: 0000000000000005 R09: 0000000000000009 [ 102.251760][ T7619] R10: 0000000000000014 R11: 0000000000000000 R12: 0000000000040cc0 [ 102.255434][ T7619] R13: 1ffff92000646f41 R14: 0000000000000014 R15: 1ffff92000646f0b [ 102.258944][ T7619] FS: 00007f3f6fa7f6c0(0000) GS:ffff8880d6344000(0000) knlGS:0000000000000000 [ 102.262973][ T7619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.266030][ T7619] CR2: 0000001b31b63fff CR3: 0000000058e60000 CR4: 0000000000352ef0 [ 102.270153][ T7619] Call Trace: [ 102.271725][ T7619] [ 102.273080][ T7619] ? is_bpf_text_address+0x8a/0x1a0 [ 102.275410][ T7619] ? bpf_ksym_find+0x128/0x1c0 [ 102.277718][ T7619] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.280441][ T7619] ? is_bpf_text_address+0x94/0x1a0 [ 102.282768][ T7619] ? kernel_text_address+0x8d/0x100 [ 102.285086][ T7619] ? __kernel_text_address+0xd/0x30 [ 102.288047][ T7619] ? unwind_get_return_address+0x59/0xa0 [ 102.290856][ T7619] ? arch_stack_walk+0xa6/0xf0 [ 102.293123][ T7619] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 102.295883][ T7619] ? tomoyo_path_number_perm+0x46d/0x580 [ 102.298544][ T7619] ? stack_trace_save+0x8e/0xc0 [ 102.300655][ T7619] ? stack_depot_save_flags+0x27/0x9d0 [ 102.303101][ T7619] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.305766][ T7619] ? policy_nodemask+0xed/0x4f0 [ 102.308209][ T7619] alloc_pages_mpol+0x1fb/0x550 [ 102.310675][ T7619] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 102.313126][ T7619] ? find_held_lock+0x2b/0x80 [ 102.315228][ T7619] ? avc_has_extended_perms+0x33a/0x1080 [ 102.317920][ T7619] ? drm_syncobj_array_find+0x34/0x3b0 [ 102.320383][ T7619] ___kmalloc_large_node+0x104/0x150 [ 102.322846][ T7619] __kmalloc_large_node_noprof+0x1c/0x70 [ 102.325584][ T7619] __kmalloc_noprof+0x5be/0x850 [ 102.328619][ T7619] ? __lock_acquire+0x4a5/0x2630 [ 102.331178][ T7619] drm_syncobj_array_find+0x34/0x3b0 [ 102.333505][ T7619] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 102.336099][ T7619] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 102.338405][ T7619] ? find_held_lock+0x2b/0x80 [ 102.340013][ T7619] ? drm_dev_exit+0x41/0x60 [ 102.341688][ T7619] ? drm_dev_exit+0x41/0x60 [ 102.343518][ T7619] drm_ioctl_kernel+0x1f3/0x3e0 [ 102.345305][ T7619] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 102.347651][ T7619] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 102.349425][ T7619] drm_ioctl+0x5e6/0xc60 [ 102.350814][ T7619] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 102.353015][ T7619] ? __pfx_drm_ioctl+0x10/0x10 [ 102.354604][ T7619] ? selinux_file_ioctl+0x139/0x290 [ 102.356332][ T7619] ? selinux_file_ioctl+0xb4/0x290 [ 102.358153][ T7619] ? __pfx_drm_ioctl+0x10/0x10 [ 102.359801][ T7619] __x64_sys_ioctl+0x18e/0x210 [ 102.361498][ T7619] do_syscall_64+0x106/0xf80 [ 102.363186][ T7619] ? clear_bhb_loop+0x40/0x90 [ 102.364901][ T7619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.367034][ T7619] RIP: 0033:0x7f3f6eb9c799 [ 102.368520][ T7619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.374856][ T7619] RSP: 002b:00007f3f6fa7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.377877][ T7619] RAX: ffffffffffffffda RBX: 00007f3f6ee15fa0 RCX: 00007f3f6eb9c799 [ 102.380525][ T7619] RDX: 0000200000000200 RSI: 00000000c03064ca RDI: 0000000000000003 [ 102.383140][ T7619] RBP: 00007f3f6ec32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 102.385728][ T7619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.388482][ T7619] R13: 00007f3f6ee16038 R14: 00007f3f6ee15fa0 R15: 00007fffbbe54018 [ 102.391231][ T7619] [ 102.392354][ T7619] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.394941][ T7619] CPU: 0 UID: 0 PID: 7619 Comm: syz.4.436 Not tainted syzkaller #0 PREEMPT(full) [ 102.397980][ T7619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.401563][ T7619] Call Trace: [ 102.402794][ T7619] [ 102.403847][ T7619] dump_stack_lvl+0x100/0x190 [ 102.405510][ T7619] vpanic+0x552/0x970 [ 102.407006][ T7619] ? __pfx_vpanic+0x10/0x10 [ 102.408667][ T7619] panic+0xd1/0xe0 [ 102.410068][ T7619] ? __pfx_panic+0x10/0x10 [ 102.411796][ T7619] ? check_panic_on_warn+0x1f/0x90 [ 102.413580][ T7619] check_panic_on_warn.cold+0x19/0x34 [ 102.415466][ T7619] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 102.417728][ T7619] __warn.cold+0x191/0x348 [ 102.419611][ T7619] __report_bug+0x296/0x3d0 [ 102.421731][ T7619] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 102.424560][ T7619] ? __pfx___report_bug+0x10/0x10 [ 102.426463][ T7619] ? __lock_acquire+0x4a5/0x2630 [ 102.428221][ T7619] ? __lock_acquire+0x4a5/0x2630 [ 102.429883][ T7619] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 102.431959][ T7619] report_bug+0xb2/0x220 [ 102.433481][ T7619] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 102.435553][ T7619] handle_bug+0x166/0x2a0 [ 102.436898][ T7619] exc_invalid_op+0x17/0x50 [ 102.438261][ T7619] asm_exc_invalid_op+0x1a/0x20 [ 102.439913][ T7619] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 102.442186][ T7619] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 94 ab 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 102.450345][ T7619] RSP: 0018:ffffc90003237790 EFLAGS: 00010246 [ 102.452605][ T7619] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 102.455803][ T7619] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040cc0 [ 102.458886][ T7619] RBP: 0000000000000014 R08: 0000000000000005 R09: 0000000000000009 [ 102.461818][ T7619] R10: 0000000000000014 R11: 0000000000000000 R12: 0000000000040cc0 [ 102.465385][ T7619] R13: 1ffff92000646f41 R14: 0000000000000014 R15: 1ffff92000646f0b [ 102.468844][ T7619] ? is_bpf_text_address+0x8a/0x1a0 [ 102.471009][ T7619] ? bpf_ksym_find+0x128/0x1c0 [ 102.472773][ T7619] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.475222][ T7619] ? is_bpf_text_address+0x94/0x1a0 [ 102.477053][ T7619] ? kernel_text_address+0x8d/0x100 [ 102.478764][ T7619] ? __kernel_text_address+0xd/0x30 [ 102.480600][ T7619] ? unwind_get_return_address+0x59/0xa0 [ 102.482598][ T7619] ? arch_stack_walk+0xa6/0xf0 [ 102.484348][ T7619] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 102.486452][ T7619] ? tomoyo_path_number_perm+0x46d/0x580 [ 102.488393][ T7619] ? stack_trace_save+0x8e/0xc0 [ 102.489972][ T7619] ? stack_depot_save_flags+0x27/0x9d0 [ 102.491799][ T7619] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.493925][ T7619] ? policy_nodemask+0xed/0x4f0 [ 102.495586][ T7619] alloc_pages_mpol+0x1fb/0x550 [ 102.497283][ T7619] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 102.499170][ T7619] ? find_held_lock+0x2b/0x80 [ 102.500771][ T7619] ? avc_has_extended_perms+0x33a/0x1080 [ 102.502625][ T7619] ? drm_syncobj_array_find+0x34/0x3b0 [ 102.504428][ T7619] ___kmalloc_large_node+0x104/0x150 [ 102.506253][ T7619] __kmalloc_large_node_noprof+0x1c/0x70 [ 102.508239][ T7619] __kmalloc_noprof+0x5be/0x850 [ 102.510008][ T7619] ? __lock_acquire+0x4a5/0x2630 [ 102.511747][ T7619] drm_syncobj_array_find+0x34/0x3b0 [ 102.513503][ T7619] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 102.515548][ T7619] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 102.517756][ T7619] ? find_held_lock+0x2b/0x80 [ 102.519340][ T7619] ? drm_dev_exit+0x41/0x60 [ 102.520901][ T7619] ? drm_dev_exit+0x41/0x60 [ 102.522634][ T7619] drm_ioctl_kernel+0x1f3/0x3e0 [ 102.524500][ T7619] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 102.526786][ T7619] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 102.528534][ T7619] drm_ioctl+0x5e6/0xc60 [ 102.529975][ T7619] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 102.532164][ T7619] ? __pfx_drm_ioctl+0x10/0x10 [ 102.533747][ T7619] ? selinux_file_ioctl+0x139/0x290 [ 102.535488][ T7619] ? selinux_file_ioctl+0xb4/0x290 [ 102.537224][ T7619] ? __pfx_drm_ioctl+0x10/0x10 [ 102.538819][ T7619] __x64_sys_ioctl+0x18e/0x210 [ 102.540530][ T7619] do_syscall_64+0x106/0xf80 [ 102.542232][ T7619] ? clear_bhb_loop+0x40/0x90 [ 102.543948][ T7619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.545941][ T7619] RIP: 0033:0x7f3f6eb9c799 [ 102.547549][ T7619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.554462][ T7619] RSP: 002b:00007f3f6fa7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.557641][ T7619] RAX: ffffffffffffffda RBX: 00007f3f6ee15fa0 RCX: 00007f3f6eb9c799 [ 102.560552][ T7619] RDX: 0000200000000200 RSI: 00000000c03064ca RDI: 0000000000000003 [ 102.563874][ T7619] RBP: 00007f3f6ec32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 102.566768][ T7619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.569474][ T7619] R13: 00007f3f6ee16038 R14: 00007f3f6ee15fa0 R15: 00007fffbbe54018 [ 102.572883][ T7619] [ 102.575201][ T7619] Kernel Offset: disabled [ 102.577055][ T7619] Rebooting in 86400 seconds..