last executing test programs: 49.305002068s ago: executing program 1 (id=86): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='fd', 0x0, r1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='fd', 0x0, r1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) 49.22056201s ago: executing program 1 (id=88): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x8000000000000000, 0x40) ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x8}}, 0x14}}, 0x4004804) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1e}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000010301080000000000000000000000000c0002"], 0x20}}, 0x0) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x4000000) (async) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x6, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x8, 0x1}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x98}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x40080c0) 49.07013809s ago: executing program 1 (id=91): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000c73000/0x3000)=nil, 0x3000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x11a, 0x4, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0xa, 0x2ebad4, 0x16e992}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x1c}}, 0x60004000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000c73000/0x3000)=nil, 0x3000}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x11a, 0x4, 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0xa, 0x2ebad4, 0x16e992}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x1c}}, 0x60004000) (async) 49.068664218s ago: executing program 1 (id=92): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, &(0x7f00000000c0), 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@bridge_getlink={0x1f, 0x12, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x886b, 0x956b4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, 0x0, 0x0, 0x40000ffffffff8) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="c00000000102030000000000000000000300000308000b00736970009800038006000340000400002c00018014002300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000011400018008000100ac1414bb08000200ac1414360c00028005000100880000002c00018014000300fe8a000000002f080000000000ff0200000000000000000000000000011400018008000100ac1414aa080002000a01010008000440000100010400028000000000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x880}, 0x4008071) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x8000) 48.78117119s ago: executing program 1 (id=95): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0xc0200, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x18, 0x2f, 0x9, 0x70bd24, 0x0, {0x4}, [@typed={0x4, 0x1e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 48.510705923s ago: executing program 1 (id=98): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/203, 0xcb) r1 = gettid() (async) r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x1f, &(0x7f0000000080)={0x1000d, 0x23, 0x2}) (async) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x40, 0x3, 0x5}}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 48.439651705s ago: executing program 32 (id=98): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) read$snddsp(r0, &(0x7f0000000240)=""/203, 0xcb) r1 = gettid() (async) r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x1f, &(0x7f0000000080)={0x1000d, 0x23, 0x2}) (async) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x40, 0x3, 0x5}}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 44.660027467s ago: executing program 0 (id=163): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x40, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) ioctl$BSG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)="10ce81134fc4fed52c", 0x1, 0x0, 0x200, 0xef, 0x60, &(0x7f00000000c0), 0x0, 0x62, 0x0, 0x24, &(0x7f0000000140)="f10be59cfb52f5e46a052bbc8abbe6b9d55f38401532b0a5853cc2324b679047cd62100027e9b056d7a6b9d1ed50b2d12e7e08e56dccef9f24899528495c0ed9002a815e62bbcc0877c39c342341bc7f7358f6f2d7ba6b58e6b974ec7d1c3464eeb7", &(0x7f00000001c0)=""/36, 0x1, 0x10, &(0x7f0000000200)="9272645cf83758c97ab5152e6e5ed0e30c47a02c8b9303bd63d2cf2734af2e77449456315c7b41452baf8eefdbb2418c6091a1abae9914d0de4dd7c15390c2271603223d7e2947700fdde353da40010b9346947c6db7690e533ac9febb68145a560498126d28188f0b95eda583941d45605f875e27b41a69212cfbe3a604f8a5c32d9d33be8091331b749d32", 0xe9}) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000380)) socketpair(0x18, 0x3, 0x77e, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @ioapic={0xf000, 0x8, 0x37, 0x9, 0x0, [{0xcd, 0x9, 0xa, '\x00', 0x16}, {0x3, 0x6f, 0x2, '\x00', 0x2}, {0x0, 0xff, 0x7}, {0x1, 0x7, 0x14, '\x00', 0xe}, {0x9, 0x40, 0x4, '\x00', 0xd}, {0x9, 0x2, 0x4, '\x00', 0x9e}, {0x6, 0x9, 0x7, '\x00', 0x81}, {0x9, 0x4, 0xfa, '\x00', 0x2}, {0x4, 0x10, 0xcf, '\x00', 0x3d}, {0x40, 0x2, 0xf, '\x00', 0xb5}, {0x0, 0x6, 0x8, '\x00', 0x16}, {0x0, 0x5, 0x6}, {0x0, 0xb5, 0x83, '\x00', 0xe0}, {0x9, 0x92, 0x7c, '\x00', 0xc}, {0x7, 0x4, 0x4, '\x00', 0x2d}, {0x8, 0x67, 0x8, '\x00', 0x3a}, {0x4, 0xf, 0x6, '\x00', 0x80}, {0xb, 0x3, 0xfe, '\x00', 0x2}, {0x9, 0x1, 0x30, '\x00', 0x7}, {0x9, 0x9, 0x0, '\x00', 0xd1}, {0xf, 0x8, 0x2, '\x00', 0xfb}, {0x1, 0x0, 0x3, '\x00', 0x3}, {0xfa, 0x1d, 0x4, '\x00', 0x4}, {0x9, 0x9c, 0x98, '\x00', 0x2}]}}) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000640)) r3 = syz_open_dev$evdev(&(0x7f0000000680), 0xffffffffffffffff, 0x800) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000006c0)={0x0, 0x2, 0x1, {0x5, 0x4}, {0x3, 0xc}, @rumble={0x800}}) syz_usb_connect$cdc_ecm(0x3, 0x55, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0xf0, 0x0, 0xf7, "", [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x10, {{0x8, 0x24, 0x6, 0x0, 0x0, "130d95"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0x3, 0xff}, [@obex={0x5, 0x24, 0x15, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x7ff, 0x4, 0x6, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xfc, 0x6, 0x80}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x110, 0x0, 0xfd, 0x2, 0x20, 0x9}, 0x48, &(0x7f00000007c0)={0x5, 0xf, 0x48, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x101, 0xf, 0x47, [0xff00f0, 0xffff3f, 0x0, 0xff00f0, 0xff00c0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x16, 0x0, 0x81, 0x4, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x5, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2a, 0x7, 0x5, 0x4, 0x8}]}}) r4 = openat2(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x111000, 0x162, 0x24}, 0x18) ioctl$I2C_RETRIES(r4, 0x701, 0x5dbfd565) read$eventfd(0xffffffffffffffff, &(0x7f0000000900), 0x8) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f0000000980)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b40), 0x80000, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, &(0x7f0000000b80)) r7 = syz_open_dev$sndpcmp(&(0x7f0000000bc0), 0x2, 0x721000) ioctl$SNDRV_PCM_IOCTL_LINK(r7, 0x40044160, &(0x7f0000000c00)=0x31fc) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000c40)=0x40) ioctl$BSG_IO(r5, 0x2285, &(0x7f0000001e40)={0x51, 0x0, 0x1, 0x10, &(0x7f0000000c80)="68203e54386c1577b92b0f8cc0f42cc5", 0x7fff, 0x0, 0x8, 0xcb3, 0x60, &(0x7f0000000cc0), 0x0, 0x43, 0x0, 0x78, &(0x7f0000000d40)="e559fc2a7139c9001f0bfd9356da7392ef8f12b25d50f02e80c0000e87056985d4369c0f4d8d18aec6483e5df88277a5cd4e28428d9f4c5f6a6e956e35b5e155bf9760", &(0x7f0000000dc0)=""/120, 0x1, 0x10, &(0x7f0000000e40)="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", 0x3}) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000001f00)={0x7, 0x3}, 0x2) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000001f40)=""/139, &(0x7f0000002000)=0x8b) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000002040)) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000002180)=0x8, 0x4) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8800) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000022c0)='/sys/power/image_size', 0x101000, 0x0) ioctl$UI_SET_LEDBIT(r9, 0x40045569, 0xf) 41.590882047s ago: executing program 0 (id=206): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_POLL(r0, 0x640f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f0000000180)=[{r4, 0x4}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_PMK={0xfffffffffffffe87}]]}, 0x2c}}, 0x24044040) 40.650696801s ago: executing program 0 (id=211): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r0, &(0x7f0000000340)=""/82, 0x52) getdents(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0x6) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x0, r2}) 40.589313403s ago: executing program 0 (id=212): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x140b, 0xec1b8206d0f99c1b, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4810) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="001100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54ddf, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10000}]}, 0x24}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="0f08191c870fc76d38b9a00a0000b890f20000ba000000000f300f797930b97f030000b800780000ba000000000f3074b70f01cbc4c1fd2b0a0f20c035000000400f22c0", 0x44}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) close(0x3) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r8, r8}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r7}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r9 = open(&(0x7f0000000080)='./bus\x00', 0x14b145, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f00000003c0)={0xd8}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r12 = memfd_create(&(0x7f0000000240)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x00\x00\x00\x00\xa9t\xa24>X@\rq@\xf2\xe9[\x05N\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\a`\xf0\xc728\xfc\xfc\x1c1?\x86\xac\xd4\f\x00\x00\x00\x00\x00\x80\f\xed{u[\xbd\x9d^\xffj\xa0\x14\xb7\xb6\x8b\x1d*1\xe8\xb0\x00\x00\x00\x00\x00\x00\t\x00\x003F\xf1 \x17-\x964C?]\xdfe;\xc0w\xad\xef\xa3r\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s3\xd7s\xef\xb3\x9f#\x15$\x97I\xf0LC\xfc\xe7\xdf\x86\x9d\xd3[i\x1b|{4)\xd8\xa2\xb8\x8f\xa2\x84_k\xe5\xf0\x05a2)\x8d\xec\xf0(!\xf0\xb5-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x1a5\x8c\xa6\xfbq\xa9\x87\x9f\xe1\xfa\xb5\x92\xb1\x00\x00\x00\x00\xd6\xce\xab\x1d%\xb0\xaa\xed\x10\xe9Z\"\x7f\xb2\xde\x00\x00\x00\x00\x00y\xd8\xdf\xc8R\x8b0Bs\x95N\xfa\x02\xe9\xf6\xa20\f1L\v\xdf8W{P\xab\x82\x84\xf0w\x9c\t\xf8\x85\x98S)M*\x88\xf8\xbaC\xa2\xf8\xc3\xe0\xb2)\xf8\x9da%\xd7\x8c\x03\xa9\xb6\x15\x8c\xdd\xaf\xeb\xfa\x1bV\x1c\fJ\xe6n\x19\x94\xea\xb7\xcc\x12q\x06\xbab\xda\xfa\xf7\xe4\x85U:\x1e\xeaC\x9b\xa5\xbb:\xe8\x04\xd9\xb2|\x85\a\x93\xa1a\r\xf0R\x8f\xac\xbc]\xc6\x1a\x86RK\xb3\x95\xbaz\xb7I\a\xd6j,pI\xb07\xc4\x82G\xd2u\x8a\xfc\x10\xffs5\xfd\x99\xdc\x9e\xdf\x86\x11~0+\xa7\x11\x13\xbb5\xc8\x8aW\xfd{\xe1QN\xef\xce~k7\xd9\x02\xac#n\xc3\xdd\x9a\xdaeJ7\x9f5\xae4\x9aoJ\xdcZf\xd4\x7f\x01}\'\x1f\x8e\xee_Q\xb4\xad@\x1a(>\x88\xd2F\x14r\x8c\x1aq@n6~1WP\xc8\xb5\x82\x02*\xcf\x95I\xc01\"\x8c_\x8d\xcb-X\x1f:bOmgTC\xe16\xef\xed\x87\xe42\b\xe5)\x99\x1dt\x17\x8d\xdc\xc2\aL\xb9\x90\xdc~\xf4\x12eXR\x89\x14E\x06\xeb<\x1b-\x955\xb4U\xceN\xf4\xb4l\xd5\xd0\xbfc\xa0\xb4{\xa9\\JL@tW\xa8\xf5\x8b\x9a\x9cF\xf5\xe0\xf4\xeeR#\x16r\x80\x91]c\x99\xd0o\x81b.\x82\xcf4\x01j\xe8\xaf[\xc1\b\xc5@n\x8a(qC\x16\x9e\xf8\x11l\xdbLM\xf9\xb7\xd1\xd5\xa1^\xcb=X\xe56\xc4FW\x0f\xe3\xe0\xa0\xb5JBE\xb5F(\t\xd8\x87\xf7\x92id\x8b\xcf\x846Z\x00\x80\x94\x999\xc2\xc7_\xb0\x02\xcb\xa2k\nB\x8a\'s95\x93Z\xf0\xf1\x9d\n\xf1$N\x03\f\x04Z\xfeX6\xf1\xe0\x95\x80(AV\x91\xd8\xa3\xc4?\xebhh|\xe0\xad2#\xcdF\xd8\x89akF\x05\xb5r6Ueh\x03\x82\x91@\xba\x84\xf5\x84\xaa\x1fZ\x11\n\xb9Y\xba;\xf27\xb9\xd3e1\xe5\xf9\xb3\xeb\x82V\x12\xebO\x02\x81\xd0\xfc1\xf5\x9c|\xfc\x1e_\x00\xa7\x89\x9e\xbe@\xcd\a\x82\xa8`\xa4e\xb7\xb8d\xb45>\xd5o\x1a[d\x04t\xb9\xc2Q T]j~\xa5\x12Lo\xfbP\x1fH*\xe5\a|\x1c/\xc3\x84\x01.F6\xba+\x90/\xc5\xc7\x95Tu\xacH\xbd\xb8\xe9\x04\xe6\xaf\xe7\xa6\x10\xb6\xde', 0x7) copy_file_range(r12, 0x0, r12, &(0x7f0000000040)=0xfffffffffffffffd, 0x10, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getnetconf={0x4c, 0x52, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x99f}, @NETCONFA_IFINDEX={0x8, 0x1, r11}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x80000000}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x200}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @NETCONFA_FORWARDING={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 40.41523768s ago: executing program 0 (id=216): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) r4 = fanotify_init(0x0, 0x0) fanotify_mark(r4, 0x1, 0x48001013, r3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) ioctl$OTPERASE(r1, 0x400c4d19, &(0x7f0000000200)={0x7fff, 0xfffffffc, 0x335}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0x24, 0x4a, {0x4a, 0x11, "0e52a518317469026d868581b57f2e1aa8ee9c85baa382726624ef95268e452f8b8aa259f6ddb0bf13eda22af3096542532ffcf74c4693b9705e4defe02020cc7e59df8685b61d7c"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, &(0x7f0000000580)={0x34, &(0x7f00000002c0)={0x0, 0x1, 0xca, "77811f8f92665c9f6a8bba5f5adef3823125f324ce0f7fdb6344c432a8a010321be7d9836b7fcb80eeb383a8142cc03463ce4e9d3707f44ace527bdb657a1dcf5ab6a84e54413c9a39a40cc8293df6b4cec3dc73cdc41256f854c9d46b6c1a882817a6bd7b8b8dafe65276e5e9589f47e0365e9e404518256bc461b39f12d15df204dda0c05c733fc9b5aef6befb81d5413ab2179071148e260dc528e810815ce50bf459d923505a6b852aaa75f6281ef0694afd1d31169c04e7e8a8340bee1be4dda00c35c414eab9ab"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x82, {0x80, "a98c28467246ab4d423e3cd6cfc839c10414f63f118d68ff16480ee380cc9361a01dcd429c7f5c993a2d1d5a2247fa807821e2427d11b3df34316731e7ad585bb82f1a7df5591ba9e71487d4fc674e90ab064b0ac050ef2e73a9dd1f0d000213ecdf8dfeecc324545a1f8dc9944789fb1994604ef6246ac74a787a62bc68de9a"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0xa}}) close_range(r5, 0xffffffffffffffff, 0x0) 38.778012806s ago: executing program 0 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r3, 0x8010aebb, &(0x7f0000000100)={0xeeef0000, 0x4000}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r3, 0x8010aebb, &(0x7f0000000100)={0xeeef0000, 0x4000}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) 23.743845015s ago: executing program 33 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r3, 0x8010aebb, &(0x7f0000000100)={0xeeef0000, 0x4000}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r3, 0x8010aebb, &(0x7f0000000100)={0xeeef0000, 0x4000}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) 18.229472571s ago: executing program 4 (id=437): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0) (async) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) r9 = dup(r7) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0xc000) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc103, 0x20, 0x1000000, 0x4, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6237, 0x800, 0x2, 0x146, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x3, 0x9d7c}}], 0x1, &(0x7f0000000480)={0x2e, 0x68, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) (async) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r12, 0x40047451, &(0x7f0000000200)=0x97) (async) ioctl$PPPIOCSFLAGS1(r12, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r12, &(0x7f0000000040)=[{&(0x7f0000000b00)="00214717a707000000030600710a5e31163ceb9d0671", 0x16}], 0x1, 0x4, 0x9) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r13 = socket(0x10, 0x3, 0x0) recvmmsg(r13, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2000, 0x0) (async) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f0000000880)=@disckey={0x2, 0x1, "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"}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110a1a440000102030109023b00010101408009040005240007000d240701ffffffff0700ff00060905820200040990010905030240002a0b0800"/77], 0x0) (async) close(0x3) (async) r14 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x440840, 0x0) ioctl$CDROMPLAYTRKIND(r14, 0x5304, &(0x7f0000000080)={0x9, 0x8}) 18.14009397s ago: executing program 4 (id=438): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$qrtrtun(r1, &(0x7f00000014c0)="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", 0x1000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) (async) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x2) (async) r5 = fsmount(r3, 0x0, 0x2) fchdir(r5) (async) fchdir(r5) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x9, 0x70bd2a, 0x25dfdbbe, {0x0, 0x0, 0x0, r7, 0x4706, 0x37eba}, [@IFLA_CARRIER={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc00088d}, 0x24068000) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0x9360, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r9, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r9, 0x4) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x28, r10, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x60048024) 17.997725417s ago: executing program 4 (id=440): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000080)={0x1}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r3], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r1, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03080000000040"}}}}, 0x3f) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40405515, &(0x7f00000001c0)={0x3, 0x5, 0xbd48, 0xffff451f, 'syz0\x00', 0x7}) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) 17.986878347s ago: executing program 4 (id=444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0xb7c, &(0x7f0000000140)=""/96) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r3, 0x0) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0xb7c, &(0x7f0000000140)=""/96) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) (async) umount2(&(0x7f0000000100)='./file0\x00', 0x4) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 17.680325232s ago: executing program 4 (id=448): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) socket$phonet(0x23, 0x2, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r4 = syz_io_uring_setup(0x6f0b, &(0x7f0000001340)={0x0, 0x595f, 0x80, 0x0, 0x17e}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x6030}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x9, 0xffffffffffffffff, 0x2, {0xfffffffffffffffb, 0xfffffffffffffc01}, 0x1}, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000183aff3e800000000000000000000000000000ff0200000000000000000000000000018800907808000000ff0200000000000000000000000000013f02a7134b12e00312f6a1fd535e7fcc292a00a874f0c1bd8acbdea73d6f51326ab1f4d04e665f82f6d91d3c8a996517ad"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x2f, @rand_addr=0x64010101, 0x4e20, 0x2, 'wrr\x00', 0x10, 0x8, 0xad}, 0x2c) 17.370441392s ago: executing program 4 (id=454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000a00000011000300686173683a69702c6d61726b00000000050004000300000014000780050015000c0100000800114000000000050005000a0000000900020073797a32000000000500010007"], 0x60}}, 0x84000) (async) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000000)={0xffffffffffff8001, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xf58c}}, './file0\x00'}) sendmsg$nl_generic(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, 0x13, 0x8, 0x70bd2b, 0x25dfdbfc, {0x1a}, [@generic="efa2ccd0b9b296738bded3e0246b0a3a3c4d5c52a0dd429afe213b8ef432d87cfb5ceb084782f1c9140a206dc8c377a704257f83aec937347b6b85d664e6fae7d115d9886d41b814628fb140f1", @typed={0xf, 0x15d, 0x0, 0x0, @str='/dev/iommu\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x804}, 0x1) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x3) (async) shutdown(r1, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) (async) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x4, {{0x2, 0x4e23, @local}}}, 0x88) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet6(r1, 0x0, 0x3d, 0x4088010, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) (async) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x10, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26, 0x0, 0x1, 0x7, 0x10000}, 0x28) (async, rerun: 32) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x53564d41, 0x0, r8, 0x0, &(0x7f0000000180)) (async) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 17.310469765s ago: executing program 34 (id=454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000a00000011000300686173683a69702c6d61726b00000000050004000300000014000780050015000c0100000800114000000000050005000a0000000900020073797a32000000000500010007"], 0x60}}, 0x84000) (async) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000000)={0xffffffffffff8001, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xf58c}}, './file0\x00'}) sendmsg$nl_generic(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, 0x13, 0x8, 0x70bd2b, 0x25dfdbfc, {0x1a}, [@generic="efa2ccd0b9b296738bded3e0246b0a3a3c4d5c52a0dd429afe213b8ef432d87cfb5ceb084782f1c9140a206dc8c377a704257f83aec937347b6b85d664e6fae7d115d9886d41b814628fb140f1", @typed={0xf, 0x15d, 0x0, 0x0, @str='/dev/iommu\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x804}, 0x1) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x3) (async) shutdown(r1, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) (async) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x4, {{0x2, 0x4e23, @local}}}, 0x88) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet6(r1, 0x0, 0x3d, 0x4088010, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) (async) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x10, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26, 0x0, 0x1, 0x7, 0x10000}, 0x28) (async, rerun: 32) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x53564d41, 0x0, r8, 0x0, &(0x7f0000000180)) (async) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.117589167s ago: executing program 3 (id=655): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0xf}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@struct={0xf, 0x4, 0x0, 0x4, 0x0, 0x8, [{0x4, 0x5, 0x1}, {0x7, 0x0, 0xd}, {0x8, 0x4, 0xfffffff7}, {0x10, 0x0, 0x3}]}, @func={0xc, 0x0, 0x0, 0xc, 0x2}, @float={0x3, 0x0, 0x0, 0x10, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x7}}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f0000000180)=""/166, 0x89, 0xa6, 0x1, 0xff, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x1, 0xbf29, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 2.116738538s ago: executing program 3 (id=656): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0x11, 0x0, 0x0, [{}]}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x35}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c7a, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23, 0x0, r3}) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x1, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x40, 0xfe, 0x0, 0x0, 0x0, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x240, 0x81, 0x4}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r5, 0x4004550e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.609741651s ago: executing program 2 (id=667): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0xfffffffffffff000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0004010a0000000d0085a168216b46d32345653600648d040012000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004d1ddf66ed538f252325000"/120, 0x78, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = accept$packet(r0, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r6, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x88}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000000000000001}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x1a}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x800) bind$packet(r4, &(0x7f0000000340)={0x11, 0x1c, r5, 0x1, 0xaa, 0x6, @local}, 0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @local}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0xc, 0x3bc1, 0x2, 0x1, 0x4, 0x1c, 0x2, 0x1ff, r3}, 0x20) 1.550110476s ago: executing program 2 (id=668): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x40002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x20004, r4, 0x2}) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r6, r7, &(0x7f0000000780)={0x0, 0x280f, 0x1000, 0x2, 0x102, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe30b, 0x10000, 0x0, 0x10002de, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf845, 0x40000, 0x2, 0x1e3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5432, 0x4, 0x4, 0x174}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1be3, 0x4, 0x2, 0x6f, 0x0, r6}}], 0x4, 0x0, 0x0) 1.548591016s ago: executing program 2 (id=670): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x4000000000200004) 1.477530676s ago: executing program 6 (id=671): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/kexec_crash_loaded', 0x80, 0x3) read$msr(r0, &(0x7f0000000280)=""/210, 0xd2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/hardlockup_count', 0x40, 0x100) read$eventfd(r2, &(0x7f0000002700), 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="040004000004000000002b80000003000400000000000100f6328446632a5c4828fcaeb14b86466fa31ff3bec96b31728ec5393ad281023f03303e54efeaddd249bfe164bb9bbf6274ebf91884ca82cb9f5ac483bcce65b31a16b62380da2cc054f16134617c4b62247cc1", @ANYRESOCT, @ANYBLOB="000000001300000826bd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x40000) 1.476856359s ago: executing program 6 (id=672): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x100) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000200)={0x2f, &(0x7f0000000080)=[{0x4, '\x00', @st={0x4, [{0x2, @svalue=0x8}, {0x0, @uvalue=0x3}, {0x3, @svalue=0x9}, {0x2, @svalue=0x77f75780}]}}]}) r2 = socket(0x10, 0x3, 0x0) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000cc0)={0x6, &(0x7f0000000a40)=[{0x2f, '\x00', @data=0x5, 0x6}, {0x2c, '\x00', @data=0x5, 0x160e}, {0x12, '\x00', @buffer={"492ac8d6a92d2d3e83172b67fa168774fd0d9fa6631a093f08f4c7cf406f4974", 0x20}, 0x9}, {0x15, '\x00', @buffer={"c624bd48530e27a998523591c28a7acfe91fc7b9cba18f2103f41f48ebbfa27a", 0x20}, 0x9}, {0x20, '\x00', @buffer={"f725abba2200cab92a7e88511eb69871faae574ea0901707254a6b4000ef12cd", 0x20}}, {0x2c, '\x00', @buffer={"f1792062441f2caa8ab0938083dc3e8eaf5e987fdede330058d3318271dde877", 0x20}, 0x5}, {0x25, '\x00', @buffer={"d14a944894ab076e580f311da782de6a852370a73fb7924a5166d03be78b233a", 0x20}, 0x200}, {0x27, '\x00', @data=0x1, 0x4}]}) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) close(r4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x208, 0x23, 0x200000b, r8}}], 0x20, 0x404a055}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000940)={r8, @in={{0x2, 0x4e20, @remote}}, 0x9, 0x7}, &(0x7f0000000a00)=0x90) sendmsg$sock(r2, &(0x7f0000000900)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x2, 0x1, 0x2, {0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x3}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000300)="074f661cbeaa16b1c610f79558d84a38f1921345828cc76b6bd550f3b1542999012282b21d0857e56f06832e582b38769fa3dda08982ce334cb38cc3b1995ead683739d468b6a27f5e328fff6638547e0204462cc7834eabb07800be72ec601c765393241e44a7ef72e056d76bba00ab3e7a368c866f46b2f94030aebc6e761ce7dc064d1ac803f6ae3d8bd2d47cf5d468e59bc4ba6d391c505d964c7e335a91fc468e4e38ad6f775df573720103484f5d5dda13118c55434afc161e7d03118aa6b66d54", 0xc4}, {&(0x7f00000004c0)="a8e3160dc6b4592456dc71da41236c05dd5b6018ed936c736c997b97e7284731d3e87070fed367e57064ccc1120da60130f2455087e839c6a132ca6edd599481e8e7c8aa777a54f63bc5b190a8b3821c12703f0444c24910dd95f87eb9fb812acabbec71a5607e3de33a9c32174fbea69cd22bbcf4fe4e2719c2b69e7a06803105a8888775d7f0c3e7e9bc782b9c8334eaabf7a8365f48bd77a5d0973ef3a29fc579d668b242f7ccef73bb0eb9c97dc6", 0xb0}, {&(0x7f0000000580)="3d295ae8603a5c717e11c337a2822d2090ff97ba7e03552bcf4ab1f9b15ff8c03c74637ead0f3c87f3608fb356a775477c545759f9611f515d392c3b754c76fc823e9130349035888db024918bac0e6ede698e7bd4187521b2f56bf43b76f2e8ab363567ea6e0d132dcd9c613a4f0d1448ebc861eec7e279fe7a98cd8358e017981dd2d1dcab8e024b4038e63abae1bb279b2d0318f26246b73d288cdc0cf6f06cddbb470a2c8d153e9ad69d50952cd7e0f5045b9a427b2d5249fd58c6887b6588d864402fb956df9ac4", 0xca}, {&(0x7f0000000680)="ff4e5fdaab484270a59387d1a683", 0xe}, {&(0x7f00000006c0)="d8c15355053cb5cb3750d836d6b234fafaa38c010faa80af0ab9161acbbb0e0a9acac91a076c91cd11f56d2cc2216235233df99555935fffdd3a110793916aef35b9e44198f568e63b8eff370153790f9187bfa3acb7fdaf1482b3bae3de5f071f7505ee40b7756fb4b3757b7ed42ae72ccdd4eef992db720a6b1413206a4484ed3f1c9bd80597bcf47c6fccbd6febe9b47dba80b32b3b5254a8d8e83bd57d8aada461c61f22f2eb0e70c836280744e14e548a9a211a20390868155ccc8e2985b6f8daa49f3e8ebea8d09b7ad4d835bf2303", 0xd2}], 0x5, &(0x7f0000000840)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0x4c2}}], 0x90}, 0x4810) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000200)='c:\xcaZS\x91:D\x00]\"T\x94D\xfd\x90\x1bK\x8der\x89\xd6\xef<\xbb\x9a_$\xb9\xa5\xcd\xd9\xf7\xaf\xcb\xf66-p:\xe1\x90\\\xfdG\x95\xe7\xca}\xca.\x92\x81s\xc3\xac\x84\x059\xe9\x81d\"\xeb\xde\xe7\xb5+\x10\x1f\xdcq|\x18\n\x04\xa6\x9b\x1d`\xeb\xa1\'N\xa6\xdf\x17\x84\xf2=ev\xf7&\x13\x82-\xb9\xc0P\x81\xe9\x05ng\x92\xeb\xd7\xdd\xed~\xc1\xe6d\x06\x80\xa0\xa3\x9br\xcd\xd8A.\xaf\x81[\xc4', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 1.33567241s ago: executing program 6 (id=673): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf80e2fb5d2b3f56d18ba2c8b06e00435e4b4dc", 0x30) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={&(0x7f0000000180), 0x0, 0x0, 0x0, 0xb11, r3}, 0x38) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0}, 0x0) 1.188401972s ago: executing program 6 (id=674): madvise(&(0x7f0000beb000/0x4000)=nil, 0x4000, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(tea)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000bed000/0x3000)=nil, 0x3000) 827.407117ms ago: executing program 3 (id=678): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x88581, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {0x6, 0xfff1}, {0xfff5}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c8}, 0x20004804) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x1c5}]}) (async) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xc90f28b4348c1aae, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r12, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r12}}, './file0\x00'}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="c34995a8836175fc4b23231a754f9496753d9941c0e1d87122744383c9d3d48d0fa6529cb1de8eb95c23c9f258360045f7c98c96d42a8d07799c859d9e644b36eb1a6b5552d1c36fbfb9d9c4204ecbc96f508108789d83a11b6bc1c348969d26f4f59df22190f44dc8cbf4d52694a0d2b2c135e7c69d79e83b13d58c63ec959398ddb53147ac870615d1c98de34b6dbfd85e59b618698d7b2b759769b2dcf2885b2fa6864e53e621a08bcb4f0c4f9c48538c39effc66a35202657131f184b5f7f238e0471141133b6dfe54d7c50e6a04ec83d1306bf4f810be5f", 0xda}, {&(0x7f00000004c0)="344c82a0b9b8d49d5ef0fe3c24370df57ec2ea317a1b045b07e8de793e04b1a862de53866c6a2e0c5c5307bb8202485626a3a874e22b085476f407d43669195575ffb6d9b84b1da98fefad6102ad871faddf387a96da19d1d2b5cb616823927d4107dd9b51823c7275e93f5c0ba436256978d6d97d8b17d7339072f9f12d0980aaccf5e7e7b86bda9e9bdc8ec4e9a6b5b51f068677931d46770a70e41aa2ad03", 0xa0}, {&(0x7f0000000580)="7f7097f0b19278142b055ac3ced34a0bc4be9ae0aabf54d674e9d9500a087127dcfcce505e8c7856ff3e480db2b670cf3510", 0x32}, {&(0x7f00000005c0)="a17c115b2e42b740a75f271abfa4e9e8ed9de8f866267c5519c02103537cbccbff10142decb6b26448d66e8da2aa413bc7c31e6c4529aca5661f0f453c05e3225bba1d6418bfa038d331615119a42c7f71dda2f1e7b5a0e1ca6570ec075c05ab672f77d62fb784c135a657f5a6fe1678ac0c70d95f5ff9bf40f922c02a6d89abb5562ec2fdcd68335020c32c43", 0x8d}], 0x4, &(0x7f0000001c40)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0xd8, 0x117, 0x2, 0xbf, "15fc86939fbf8cc854cc9dc99494dfcab5019e4ed0fc1ced27aebf4304182dd6eca7b160b33bcc58895b424fe7ae6412474e58de5f9fc6be6931b9b29e4d4abb35d9369daf80d4fb00e72c16e14a620ebb4cd17d54b8b0573611553bde5697146178adcc8715afa5cf9f7f142b1e802772ef2dc634cae651e1b153b990717175a6076d8117e23227bdcedf26b3035f40b25dda2c6a879dc0909cd0d252585ec9aa98c774175ff5794c0e26e5e687cc8fb388687dc930aaca783878bc7713ec"}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x1120}], 0x1, 0x4001) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) listen(r1, 0x0) (async, rerun: 64) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async, rerun: 32) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$KVM_SET_FPU(r13, 0x41a0ae8d, &(0x7f00000006c0)={'\x00', 0x101, 0x7, 0x20, 0x0, 0x2, 0x28000, 0x54000, '\x00', 0x800}) (async) sendmsg$NL80211_CMD_FRAME(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, r16, 0x1, 0x70bd25, 0x0, {{0x2}, {@void, @void}}, [@chandef_params]}, 0x14}, 0x1, 0x0, 0x0, 0x2004c814}, 0x4040000) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f00000001c0)='\x18\xbd@\xbd\xc9e2\x0e\xb2\xe2OAq\xa7\xa8\xadcz::\x00', 0x0) 730.21366ms ago: executing program 3 (id=681): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) fadvise64(r2, 0x4, 0x3, 0x1) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) (async) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000a00)=""/114, &(0x7f0000000a80)=0x72) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r5, &(0x7f0000001800)={&(0x7f0000000340)={0xa, 0x4e22, 0x5, @local, 0x3}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000380)="517aa40182e6f15251efc8e6bfebbb9734c6b9bb541a06454115320b2fd19ce1a5557eb990f5d731e27d989e794432338b13f59c8c8d126f07d25f845b1ffedec79f921fb1b16d9c2b98c9030d154ce4fef51e7702c90bfd126d001f6ddf4503b30fd8aa066206f5f4de3be42b6d2ff52898aa7754ff3e0eb5f08c151a7c05", 0x7f}, {&(0x7f0000000440)="1b756d7deb4eb37fabf173b729b89332634069c7235f9db601712d7d4f28618e5437b7eee110c2960d708a4197a1cc95b059079f8c27c127bf5dc7e05cc058f0e699a5d007c61d94bfd49302ba1fc7b805f92edb3682ddeeb63cbf798b125f1dc3e16da3fcc8600d84bd2404485ac9e7f7fe69752f88b7febe02784a654f38ee91380e2c44408fdbb0b2defd964a32f1dbd720869ef469c582b7f5e0e4695af52a28d645eb5ff49c3f313227f2852f49d4d320d3864b5a1339aa6f4b4539a9332c5a0f45c07604ec913a5b56f928e83106ad6c2d7797f9704d306bbc4d3b21e51908ea4dedef54d29f63137e359e3f8627", 0xf1}, {&(0x7f0000000540)="b21f1abac23c2a48a97e8fd2fc1440756ec05752e88f954ac192c5e4ab4d057821c08ba489dc7303800e2e6f", 0x2c}, {&(0x7f0000000600)="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", 0x3dd}], 0x4, &(0x7f0000001780)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x67, 0x3, '\x00', [@enc_lim, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x1000}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x50}, 0x20000040) fgetxattr(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="73797374656d2e004cd8c8cfe89e6bab170749d618acf6fa8560d1d17fc7bb7f5b932bcb0f7899f132420dbab48ce64507ba72a46cc19437227371a5fcc6fdb7a08ba102feeb7d2c9a883ab83d300300d1ea3c6299c8"], &(0x7f0000000280)=""/145, 0x91) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000f, 0x8041) ioctl$USBDEVFS_REAPURB(r7, 0x4004550c, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0xfd}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 729.827434ms ago: executing program 5 (id=682): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_format(r0, &(0x7f00000000c0)='-1\x00', 0x3) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x122) write$rfkill(r1, &(0x7f0000000100)={0x5, 0x3, 0x5, 0xff}, 0x8) syz_io_uring_setup(0x4ddc, &(0x7f0000000100)={0x0, 0xaffc, 0x2000, 0x1, 0x217, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 660.133789ms ago: executing program 2 (id=683): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket(0x400000000010, 0x3, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x51}}, 0x8) listen(r2, 0x5) accept4(r2, 0x0, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xfff3}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}}, 0x4c840) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x13, 0x80000000, 0x0, 0xd, 0x11, 0x3, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x5, 0xff, 0x0, 0x5, [0xffffffff, 0x1]}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f0000000100)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a0000000800", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x40) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 569.9159ms ago: executing program 5 (id=684): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000001c0)={0x8023, {0x0, 0x9, 0x6, 0x566a, 0xfffffff6, 0x10001}}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r3, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r3, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) ptrace(0x10, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x44}, 0x1, 0x0, 0x0, 0xbdc2e088030412d1}, 0x44000) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESHEX=r5]) 490.078261ms ago: executing program 5 (id=685): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000180)=0x90000000, 0x4) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff2}, {}, {0xb, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x405}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500250000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000180)=0x90000000, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff2}, {}, {0xb, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x405}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (async) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500250000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) 359.769637ms ago: executing program 3 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0xc, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x77, 0x6a8, 0x102, 0xe, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xffffffff, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x0, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x3, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x2b00000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) gettid() (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000980)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002780)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05581f000000000000000600000008000300e9f4c6de633dfc966bfe66a1bb99ace61cda8e2e6361244f671e41ffd96f9e91575d0f791a862fdb69b0dc550ddc0974d93d5faf0b87039700aaa48c19dcf18f4a334df38e975b8dad5cff8138e892f41cb4608e6828d567fac6940255fe386fc7f05aada7", @ANYRES32=r9, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) 358.870302ms ago: executing program 2 (id=687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x149080, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xb1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7d, &(0x7f0000000040)={0x0, 0xa172, 0x1f280, 0x0, 0x399}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000020601030000000000000000000000000900020073795931000000000500040000000000050005000000000005000400000000000c00078008000840000000000900020073797a3100000000"], 0x50}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 358.231217ms ago: executing program 6 (id=688): getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000100)) 357.79445ms ago: executing program 5 (id=689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40345410, &(0x7f00000004c0)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40345410, &(0x7f00000004c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x80605414, 0xffffffffffffffff) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x80605414, 0xffffffffffffffff) openat2(0xffffffffffffffff, 0x0, 0x0, 0x68) (async) openat2(0xffffffffffffffff, 0x0, 0x0, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000400)="2ae0", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24040010}, 0x4) 280.056422ms ago: executing program 6 (id=690): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r2) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0xa65, 0x0, 0xb2, 0x3, 0x6, 0xffff3427, 0x8000}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000000000/0x13000)=nil, 0x13000}, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 209.949938ms ago: executing program 2 (id=691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x2, 0x2, 0x0) getsockopt$inet_opts(r2, 0x0, 0x5, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x1, 0x5, 0x2, &(0x7f00000003c0)={r3, r4+60000000}, &(0x7f0000000400), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)={0x54, r6, 0x1, 0xffffffff, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x1ff}}]}, 0x54}}, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[@rdmsr={0x66, 0x18, {0x40000101}}], 0x18}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 209.321877ms ago: executing program 3 (id=692): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}]}, 0x30}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r3, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbd2238e34000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8882) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x14, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x0, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r10, &(0x7f0000001300)={0x2020}, 0x2020) ioctl$UI_ABS_SETUP(r10, 0x401c5504, &(0x7f0000000000)={0x14, {0x3, 0x7f, 0x0, 0x1b0, 0x101, 0x6}}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r1, 0x5501) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002100f7ffffffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x0) 113.298212ms ago: executing program 5 (id=693): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000000010104000508000c40000000040c001880080001400000000b00"/40], 0x28}}, 0x20000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000004100070328bd7000fbdbdf2503"], 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x2000c080) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d40)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000000010104000508000c40000000040c001880080001400000000b00"/40], 0x28}}, 0x20000800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000004100070328bd7000fbdbdf2503"], 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x2000c080) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d40)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) 0s ago: executing program 5 (id=694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0xfffffffe}}, 0x5, 0x0, 0xfd}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x462242, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000000)="ad", 0x1}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000002000/0x1000)=nil}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0xa, &(0x7f0000000080)=""/35) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) prlimit64(0x0, 0xb, &(0x7f00000001c0)={0x2, 0x10000}, &(0x7f0000000280)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="26410f320f01f7450f79dc66baf80cb8b4792087ef66bafc0cb88a9f0000ef660f388132f3460fc730660f3880aa8c1d85980f229e26260f6a22850e", 0x3c}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 3 (id=696): r0 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) io_destroy(0x0) memfd_create(&(0x7f00000003c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\x97\xb0[\xf2\x84j\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xb6\xe4\xce31\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3d\xa7\x05Y\xab\xf3\x9c\xf9\xa9\x0fa\xc20x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000040)=[r6], &(0x7f0000000080), 0x40000217, 0x1}) fanotify_mark(r4, 0x1, 0x48001028, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): s for dt282x driver are: [ 67.731574][ T6075] dt2821 [ 67.732804][ T6075] dt2821-f [ 67.734131][ T6075] dt2821-g [ 67.735707][ T6075] dt2823 [ 67.736974][ T6075] dt2824-pgh [ 67.738397][ T6075] dt2824-pgl [ 67.739742][ T6075] dt2825 [ 67.740963][ T6075] dt2827 [ 67.742166][ T6075] dt2828 [ 67.743391][ T6075] dt2829 [ 67.744830][ T6075] dt21-ez [ 67.746315][ T6075] dt23-ez [ 67.748048][ T6075] dt24-ez [ 67.749447][ T6075] dt24-ez-pgl [ 67.750950][ T6075] comedi: valid board names for dt2817 driver are: [ 67.753499][ T6075] dt2817 [ 67.754807][ T6075] comedi: valid board names for dt2815 driver are: [ 67.757507][ T6075] dt2815 [ 67.758726][ T6075] comedi: valid board names for dt2814 driver are: [ 67.761701][ T6075] dt2814 [ 67.762735][ T6075] comedi: valid board names for dt2811 driver are: [ 67.764994][ T6075] dt2811-pgh [ 67.766215][ T6075] dt2811-pgl [ 67.767484][ T6075] comedi: valid board names for dt2801 driver are: [ 67.769750][ T6075] dt2801 [ 67.770708][ T6075] comedi: valid board names for das6402 driver are: [ 67.772820][ T6075] das6402-12 [ 67.773846][ T6075] das6402-16 [ 67.774958][ T6075] comedi: valid board names for das1800 driver are: [ 67.776930][ T6075] das-1701st [ 67.778000][ T6075] das-1701st-da [ 67.779127][ T6075] das-1702st [ 67.780197][ T6075] das-1702st-da [ 67.781335][ T6075] das-1702hr [ 67.782392][ T6075] das-1702hr-da [ 67.783491][ T6075] das-1701ao [ 67.784723][ T6075] das-1702ao [ 67.785757][ T6075] das-1801st [ 67.786833][ T6075] das-1801st-da [ 67.787933][ T6075] das-1802st [ 67.788967][ T6075] das-1802st-da [ 67.790101][ T6075] das-1802hr [ 67.791308][ T6075] das-1802hr-da [ 67.792659][ T6075] das-1801hc [ 67.794009][ T6075] das-1802hc [ 67.795673][ T6075] das-1801ao [ 67.796919][ T6075] das-1802ao [ 67.798113][ T6075] comedi: valid board names for das800 driver are: [ 67.800460][ T6075] das-800 [ 67.801561][ T6075] cio-das800 [ 67.802690][ T6075] das-801 [ 67.803751][ T6075] cio-das801 [ 67.805082][ T6075] das-802 [ 67.806429][ T6075] cio-das802 [ 67.807714][ T6075] cio-das802/16 [ 67.808972][ T6075] comedi: valid board names for isa-das08 driver are: [ 67.811308][ T6075] isa-das08 [ 67.812565][ T6075] das08-pgm [ 67.813737][ T6075] das08-pgh [ 67.815093][ T6075] das08-pgl [ 67.816385][ T6075] das08-aoh [ 67.817784][ T6075] das08-aol [ 67.818860][ T6075] das08-aom [ 67.820059][ T6075] das08/jr-ao [ 67.821241][ T6075] das08jr-16-ao [ 67.822492][ T6075] pc104-das08 [ 67.823683][ T6075] das08jr/16 [ 67.825278][ T6075] comedi: valid board names for das16m1 driver are: [ 67.828288][ T6075] das16m1 [ 67.830047][ T6075] comedi: valid board names for dac02 driver are: [ 67.830313][ T6079] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 67.832483][ T6086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.834630][ T6075] dac02 [ 67.834645][ T6075] comedi: valid board names for rti802 driver are: [ 67.834654][ T6075] rti802 [ 67.834660][ T6075] comedi: valid board names for rti800 driver are: [ 67.834668][ T6075] rti800 [ 67.834675][ T6075] rti815 [ 67.834682][ T6075] comedi: valid board names for pcm3724 driver are: [ 67.834691][ T6075] pcm3724 [ 67.834698][ T6075] comedi: valid board names for pcl818 driver are: [ 67.834706][ T6075] pcl818l [ 67.834713][ T6075] pcl818h [ 67.834719][ T6075] pcl818hd [ 67.834725][ T6075] pcl818hg [ 67.834730][ T6075] pcl818 [ 67.834736][ T6075] pcl718 [ 67.834742][ T6075] pcm3718 [ 67.834748][ T6075] comedi: valid board names for pcl816 driver are: [ 67.834755][ T6075] pcl816 [ 67.834761][ T6075] pcl814b [ 67.834767][ T6075] comedi: valid board names for pcl812 driver are: [ 67.834774][ T6075] pcl812 [ 67.834780][ T6075] pcl812pg [ 67.834786][ T6075] acl8112pg [ 67.834792][ T6075] acl8112dg [ 67.834798][ T6075] acl8112hg [ 67.834803][ T6075] a821pgl [ 67.834806][ T6075] a821pglnda [ 67.834810][ T6075] a821pgh [ 67.834814][ T6075] a822pgl [ 67.834818][ T6075] a822pgh [ 67.834822][ T6075] a823pgl [ 67.834825][ T6075] a823pgh [ 67.834829][ T6075] pcl813 [ 67.834833][ T6075] pcl813b [ 67.834836][ T6075] acl8113 [ 67.834840][ T6075] iso813 [ 67.834844][ T6075] acl8216 [ 67.834847][ T6075] a826pg [ 67.834851][ T6075] comedi: valid board names for pcl730 driver are: [ 67.834856][ T6075] pcl730 [ 67.834860][ T6075] iso730 [ 67.834864][ T6075] acl7130 [ 67.834867][ T6075] pcm3730 [ 67.834871][ T6075] pcl725 [ 67.834874][ T6075] p8r8dio [ 67.834878][ T6075] acl7225b [ 67.834882][ T6075] p16r16dio [ 67.834885][ T6075] pcl733 [ 67.834889][ T6075] pcl734 [ 67.834893][ T6075] opmm-1616-xt [ 67.834897][ T6075] pearl-mm-p [ 67.834900][ T6075] ir104-pbf [ 67.834906][ T6075] comedi: valid board names for pcl726 driver are: [ 67.834913][ T6075] pcl726 [ 67.834919][ T6075] pcl727 [ 67.834925][ T6075] pcl728 [ 67.834931][ T6075] acl6126 [ 67.834937][ T6075] acl6128 [ 67.834949][ T6075] comedi: valid board names for pcl724 driver are: [ 67.834957][ T6075] pcl724 [ 67.834963][ T6075] pcl722 [ 67.834969][ T6075] pcl731 [ 67.834975][ T6075] acl7122 [ 67.834981][ T6075] acl7124 [ 67.834987][ T6075] pet48dio [ 67.834993][ T6075] pcmio48 [ 67.834999][ T6075] onyx-mm-dio [ 67.835006][ T6075] comedi: valid board names for pcl711 driver are: [ 67.835013][ T6075] pcl711 [ 67.835020][ T6075] pcl711b [ 67.835026][ T6075] acl8112hg [ 67.835032][ T6075] acl8112dg [ 67.835039][ T6075] comedi: valid board names for amplc_pc263 driver are: [ 67.835047][ T6075] pc263 [ 67.835053][ T6075] comedi: valid board names for amplc_pc236 driver are: [ 67.835061][ T6075] pc36at [ 67.835065][ T6075] comedi: valid board names for amplc_dio200 driver are: [ 67.835071][ T6075] pc212e [ 67.835075][ T6075] pc214e [ 67.835079][ T6075] pc215e [ 67.835083][ T6075] pc218e [ 67.835087][ T6075] pc272e [ 67.835091][ T6075] comedi: valid board names for comedi_parport driver are: [ 67.835096][ T6075] comedi_parport [ 67.835100][ T6075] comedi: valid board names for comedi_test driver are: [ 67.835106][ T6075] comedi_test [ 67.835110][ T6075] comedi: valid board names for comedi_bond driver are: [ 67.835115][ T6075] comedi_bond [ 67.998280][ T6116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.064849][ T64] Bluetooth: hci2: command tx timeout [ 68.065671][ T5738] Bluetooth: hci3: command tx timeout [ 68.074649][ T5738] Bluetooth: hci0: command tx timeout [ 68.074886][ T64] Bluetooth: hci1: command tx timeout [ 68.082989][ T6129] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 68.133557][ T6138] netlink: 'syz.0.73': attribute type 1 has an invalid length. [ 68.142795][ T6138] binder: 6136:6138 ioctl c0306201 0 returned -14 [ 68.144106][ T6140] binder: 6136:6140 ioctl c0306201 0 returned -14 [ 68.149368][ T6138] netlink: 56 bytes leftover after parsing attributes in process `syz.0.73'. [ 68.165497][ T6144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 68.182343][ T6146] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 68.238054][ T6151] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 68.241028][ T6151] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 68.244058][ T6151] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 68.248338][ T6151] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 68.291087][ T6156] input: syz0 as /devices/virtual/input/input6 [ 68.303325][ T6139] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 68.336263][ T6162] netlink: 'syz.2.79': attribute type 1 has an invalid length. [ 68.772237][ T6170] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 68.991964][ T34] libceph: connect (1)[c::]:6789 error -101 [ 68.994354][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 68.998796][ T6175] ceph: No mds server is up or the cluster is laggy qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 69.124486][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 69.146296][ T6183] affs: No valid root block on device sr0 [ 69.155589][ T6181] netlink: 'syz.0.84': attribute type 21 has an invalid length. [ 69.159529][ T6184] affs: No valid root block on device sr0 [ 69.300114][ T6198] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.350240][ T6205] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 69.418048][ T6207] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 69.441902][ T6198] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.486833][ T6209] binder_alloc: 6208: binder_alloc_buf, no vma [ 69.527730][ T6198] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.651262][ T6198] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.879082][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.890656][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.904085][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.923323][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.965900][ T848] cfg80211: failed to load regulatory.db [ 70.007366][ T6229] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 70.014452][ T6232] kAFS: No cell specified [ 70.098415][ T6240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.103'. [ 70.107361][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.113783][ T5738] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.118356][ T5738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.125501][ T5738] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.132941][ T5738] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.145605][ T5738] Bluetooth: hci0: command tx timeout [ 70.147641][ T5749] Bluetooth: hci1: command tx timeout [ 70.147833][ T5744] Bluetooth: hci2: command tx timeout [ 70.183947][ T6252] binder: BINDER_SET_CONTEXT_MGR already set [ 70.192028][ T6252] binder: 6250:6252 ioctl 4018620d 200000000480 returned -16 [ 70.512122][ T6288] dlm: Unknown command passed to DLM device : 33 [ 70.512122][ T6288] [ 70.669724][ T6300] netlink: 'syz.3.118': attribute type 4 has an invalid length. [ 70.901067][ T6320] dns_resolver: Unsupported server list version (0) [ 70.971047][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.974142][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.979282][ T6241] bridge_slave_0: entered allmulticast mode [ 70.983353][ T6241] bridge_slave_0: entered promiscuous mode [ 70.989923][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.993071][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.996640][ T6241] bridge_slave_1: entered allmulticast mode [ 71.001963][ T6241] bridge_slave_1: entered promiscuous mode [ 71.064908][ T6241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.076542][ T6241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.112350][ T6241] team0: Port device team_slave_0 added [ 71.122426][ T6241] team0: Port device team_slave_1 added [ 71.166300][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.170327][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.184199][ T6241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.191794][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.194017][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.204231][ T6338] netlink: 'syz.3.126': attribute type 61 has an invalid length. [ 71.204460][ T6241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.251458][ T6241] hsr_slave_0: entered promiscuous mode [ 71.252690][ T6341] ======================================================= [ 71.252690][ T6341] WARNING: The mand mount option has been deprecated and [ 71.252690][ T6341] and is ignored by this kernel. Remove the mand [ 71.252690][ T6341] option from the mount to silence this warning. [ 71.252690][ T6341] ======================================================= [ 71.254202][ T6241] hsr_slave_1: entered promiscuous mode [ 71.266515][ T6241] debugfs: 'hsr0' already exists in 'hsr' [ 71.268617][ T6241] Cannot create hsr debugfs directory [ 71.394794][ T6241] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.399289][ T6241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.402006][ T6241] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.405899][ T6241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.409962][ T6241] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.415102][ T6241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.418794][ T6241] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.425486][ T6241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.484695][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.539012][ T6241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.546617][ T6241] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.549547][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.549603][ T6088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.555262][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.555306][ T6088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.576975][ T6354] openvswitch: netlink: Missing key (keys=40, expected=100) [ 71.595761][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.693674][ T6364] __nla_validate_parse: 2 callbacks suppressed [ 71.693739][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 71.704033][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.777239][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.802087][ T42] kauditd_printk_skb: 74 callbacks suppressed [ 71.802132][ T42] audit: type=1400 audit(1783265448.533:375): avc: denied { remount } for pid=6372 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.900917][ T6241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.901658][ T42] audit: type=1400 audit(1783265448.633:376): avc: denied { search } for pid=5444 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.920003][ T42] audit: type=1400 audit(1783265448.633:377): avc: denied { search } for pid=5444 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.921000][ T13] bridge_slave_1: left allmulticast mode [ 71.929748][ T42] audit: type=1400 audit(1783265448.633:378): avc: denied { search } for pid=5444 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.941059][ T13] bridge_slave_1: left promiscuous mode [ 71.948630][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.956671][ T42] audit: type=1400 audit(1783265448.683:379): avc: denied { append } for pid=6386 comm="syz.3.137" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.975827][ T13] bridge_slave_0: left allmulticast mode [ 71.981072][ T13] bridge_slave_0: left promiscuous mode [ 71.984191][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.990658][ T42] audit: type=1400 audit(1783265448.723:380): avc: denied { execute } for pid=6386 comm="syz.3.137" name="file0" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.007430][ T42] audit: type=1400 audit(1783265448.743:381): avc: denied { read } for pid=6394 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.025255][ T42] audit: type=1400 audit(1783265448.743:382): avc: denied { read open } for pid=6394 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.038818][ T42] audit: type=1400 audit(1783265448.743:383): avc: denied { getattr } for pid=6394 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.046580][ T42] audit: type=1400 audit(1783265448.753:384): avc: denied { write } for pid=6390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.169172][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.178004][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.182341][ T13] bond0 (unregistering): Released all slaves [ 72.199996][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 72.237281][ T5744] Bluetooth: hci3: command tx timeout [ 72.399198][ T6241] veth0_vlan: entered promiscuous mode [ 72.404446][ T6241] veth1_vlan: entered promiscuous mode [ 72.422110][ T6241] veth0_macvtap: entered promiscuous mode [ 72.430721][ T6241] veth1_macvtap: entered promiscuous mode [ 72.438688][ T6422] gretap0: entered allmulticast mode [ 72.462005][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 72.481659][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.517802][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.527158][ T6424] netlink: 'syz.3.144': attribute type 7 has an invalid length. [ 72.529877][ T6424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.144'. [ 72.542857][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.546745][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.552065][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.556521][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.619962][ T13] hsr_slave_0: left promiscuous mode [ 72.626499][ T13] hsr_slave_1: left promiscuous mode [ 72.629313][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.632174][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.637583][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.640004][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.648679][ T13] veth1_macvtap: left promiscuous mode [ 72.653831][ T13] veth0_macvtap: left promiscuous mode [ 72.656035][ T13] veth1_vlan: left promiscuous mode [ 72.658079][ T13] veth0_vlan: left promiscuous mode [ 72.813067][ T13] team0 (unregistering): Port device team_slave_1 removed [ 72.822163][ T13] team0 (unregistering): Port device team_slave_0 removed [ 72.923545][ T6432] IPv6: sit1: Disabled Multicast RS [ 72.925848][ T6432] sit1: entered allmulticast mode [ 72.944199][ T6433] IPv6: sit1: Disabled Multicast RS [ 72.948416][ T6433] sit1: entered allmulticast mode [ 72.993946][ T6108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.006139][ T6108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.074750][ T6088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.075043][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 73.081491][ T6088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.093546][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.151'. [ 73.178094][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 73.254053][ T6466] netlink: 'syz.4.105': attribute type 1 has an invalid length. [ 73.262236][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 73.434110][ T6482] pim6reg1: entered promiscuous mode [ 73.436142][ T6482] pim6reg1: entered allmulticast mode [ 73.469552][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5 [ 73.493659][ T6489] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 73.664066][ T6496] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 73.695165][ T6503] syz.0.162 uses obsolete (PF_INET,SOCK_PACKET) [ 73.929517][ T6532] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 73.950869][ T6532] cgroup: Unknown subsys name 'net' [ 74.005892][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.017423][ T6548] ip6t_srh: unknown srh invflags 51E8 [ 74.020161][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 74.023814][ T6548] netlink: 32 bytes leftover after parsing attributes in process `syz.4.173'. [ 74.135660][ T9] usb 5-1: device descriptor read/64, error -71 [ 74.168846][ T6568] netlink: 'syz.3.180': attribute type 23 has an invalid length. [ 74.269820][ T6578] Invalid source name [ 74.271667][ T6578] UBIFS error (pid: 6578): cannot open "/dev/md0", error -22 [ 74.302244][ T6583] SELinux: Context system_u:object_r:zero_device_t:s0 is not valid (left unmapped). [ 74.304919][ T5744] Bluetooth: hci3: command tx timeout [ 74.375429][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.430412][ T6595] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 74.435066][ T6595] tmpfs: Bad value for 'nr_blocks' [ 74.514638][ T9] usb 5-1: device descriptor read/64, error -71 [ 74.637544][ T9] usb usb5-port1: attempt power cycle [ 74.997609][ T6601] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 75.014663][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.015669][ T6601] netlink: 'syz.4.190': attribute type 7 has an invalid length. [ 75.030323][ T6601] netlink: 'syz.4.190': attribute type 7 has an invalid length. [ 75.037151][ T9] usb 5-1: device descriptor read/8, error -71 [ 75.038149][ T6601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.190'. [ 75.052545][ T6601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.190'. [ 75.184627][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 75.284868][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.317463][ T9] usb 5-1: device descriptor read/8, error -71 [ 75.447439][ T9] usb usb5-port1: unable to enumerate USB device [ 75.547387][ T6621] program syz.2.198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.854668][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 76.004652][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 76.009698][ T29] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 76.012957][ T29] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 76.017678][ T29] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.021077][ T29] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 76.029503][ T29] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 76.032297][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.035388][ T29] usb 7-1: Product: syz [ 76.036705][ T29] usb 7-1: Manufacturer: syz [ 76.038281][ T29] usb 7-1: SerialNumber: syz [ 76.050984][ T6635] netlink: 'syz.4.202': attribute type 7 has an invalid length. [ 76.053580][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 76.060847][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input8 [ 76.228685][ T6594] gfs2: error -5 reading superblock [ 76.294790][ T29] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 76.298277][ T29] (id 0x00) [ 76.344653][ T29] rc_core: IR keymap rc-imon-pad not found [ 76.346953][ T29] Registered IR keymap rc-empty [ 76.350406][ T29] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 76.354036][ T29] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 76.396197][ T5744] Bluetooth: hci3: command tx timeout [ 76.497465][ T29] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 76.503576][ T29] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input9 [ 76.514409][ T29] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:2> initialized [ 76.564802][ T1350] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 76.629243][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.632707][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.686580][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.691565][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.702394][ T848] usb 7-1: USB disconnect, device number 2 [ 76.714618][ T1350] usb 8-1: Using ep0 maxpacket: 8 [ 76.718979][ T1350] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 76.721661][ T1350] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.724991][ T1350] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.727982][ T1350] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.730981][ T1350] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.737238][ T1350] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.740247][ T1350] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.940695][ T42] kauditd_printk_skb: 10594 callbacks suppressed [ 76.940740][ T42] audit: type=1400 audit(1783265453.673:10979): avc: denied { block_suspend } for pid=6653 comm="syz.0.206" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.956018][ T6648] __nla_validate_parse: 2 callbacks suppressed [ 76.956033][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.205'. [ 76.958034][ T1350] usb 8-1: usb_control_msg returned -32 [ 76.972476][ T1350] usbtmc 8-1:16.0: can't read capabilities [ 77.040171][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 77.331983][ T6659] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 77.461509][ T6660] batadv_slave_1: entered promiscuous mode [ 77.476253][ T6660] 8021q: adding VLAN 0 to HW filter on device eth0 [ 77.482116][ T6660] 8021q: adding VLAN 0 to HW filter on device eth1 [ 77.489133][ T6660] 8021q: adding VLAN 0 to HW filter on device eth2 [ 77.493508][ T6660] 8021q: adding VLAN 0 to HW filter on device eth3 [ 77.652343][ T42] audit: type=1400 audit(1783265454.383:10980): avc: denied { create } for pid=6664 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.858547][ T42] audit: type=1400 audit(1783265454.593:10981): avc: denied { prog_run } for pid=6677 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.907588][ T6686] openvswitch: netlink: IP tunnel dst address not specified [ 77.910651][ T6685] ALSA: mixer_oss: invalid OSS volume ';' [ 77.986745][ T42] audit: type=1400 audit(1783265454.723:10982): avc: denied { ioctl } for pid=6687 comm="syz.2.215" path="socket:[15762]" dev="sockfs" ino=15762 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.088681][ T42] audit: type=1400 audit(1783265454.823:10983): avc: denied { create } for pid=6696 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.095597][ T42] audit: type=1400 audit(1783265454.833:10984): avc: denied { accept } for pid=6696 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.146313][ T6699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.204513][ T6701] bond1: (slave ipvlan1): Device is not bonding slave [ 78.206814][ T6701] bond1: option active_slave: invalid value (ipvlan1) [ 78.210070][ T6701] bond1 (unregistering): Released all slaves [ 78.244684][ T5826] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.365496][ T42] audit: type=1400 audit(1783265455.103:10985): avc: denied { bind } for pid=6704 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.372347][ T42] audit: type=1400 audit(1783265455.103:10986): avc: denied { map } for pid=6704 comm="syz.2.221" path="socket:[14155]" dev="sockfs" ino=14155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.372898][ T6705] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 78.380648][ T42] audit: type=1400 audit(1783265455.103:10987): avc: denied { read write } for pid=6704 comm="syz.2.221" path="socket:[14155]" dev="sockfs" ino=14155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.395421][ T5826] usb 5-1: Using ep0 maxpacket: 32 [ 78.397836][ T5826] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 78.401538][ T5826] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 78.406486][ T5826] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.410361][ T5826] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 78.419566][ T5826] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 78.422702][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.426120][ T5826] usb 5-1: Product: syz [ 78.427672][ T5826] usb 5-1: Manufacturer: syz [ 78.429355][ T5826] usb 5-1: SerialNumber: syz [ 78.448093][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 78.449836][ T6707] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 78.456147][ T5826] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input10 [ 78.464765][ T5744] Bluetooth: hci3: command tx timeout [ 78.620054][ T42] audit: type=1400 audit(1783265455.353:10988): avc: denied { ioctl } for pid=6716 comm="syz.2.224" path="socket:[14175]" dev="sockfs" ino=14175 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.684665][ T5826] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 78.688961][ T5826] (id 0x00) [ 78.744623][ T5826] rc_core: IR keymap rc-imon-pad not found [ 78.746502][ T5826] Registered IR keymap rc-empty [ 78.748091][ T5826] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 78.751336][ T5826] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 78.886580][ T5826] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 78.891855][ T5826] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input11 [ 78.899223][ T5826] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:6> initialized [ 79.061683][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.066340][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.075521][ T5826] usb 5-1: USB disconnect, device number 6 [ 79.331367][ T1350] usb 8-1: USB disconnect, device number 2 [ 79.447846][ T6729] pim6reg1: entered promiscuous mode [ 79.450191][ T6729] pim6reg1: entered allmulticast mode [ 79.456368][ T6729] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 79.465203][ T6729] CIFS mount error: No usable UNC path provided in device string! [ 79.465203][ T6729] [ 79.469801][ T6729] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 79.745138][ T6782] binder: 6765:6782 ioctl c018620c 200000000000 returned -22 [ 80.047589][ T6789] loop6: detected capacity change from 0 to 8 [ 80.119199][ T6789] loop6: detected capacity change from 8 to 7 [ 80.121218][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.131523][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.135765][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.170403][ T6794] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 80.177252][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.181202][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.185895][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.189668][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.193891][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.197841][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.201861][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.205800][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.209985][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.213884][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.218327][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.222089][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.225685][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.229600][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.233157][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.237074][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.240696][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.244512][ T6789] ldm_validate_partition_table(): Disk read failed. [ 80.249942][ T6789] Dev loop6: unable to read RDB block 0 [ 80.252985][ T6789] loop6: unable to read partition table [ 80.255716][ T6789] loop6: partition table beyond EOD, truncated [ 80.258454][ T6789] loop_reread_partitions: partition scan of loop6 (uG ܱ.:0 [ 80.258454][ T6789] 咁 initialized [ 83.224725][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 83.251627][ T6890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.256116][ T6890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.259650][ T5890] usb 9-1: USB disconnect, device number 2 [ 83.375883][ T34] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.380461][ T34] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 83.384599][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 83.388968][ T34] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 83.391852][ T34] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 83.394380][ T34] usb 7-1: Product: syz [ 83.395787][ T34] usb 7-1: Manufacturer: syz [ 83.397244][ T34] usb 7-1: SerialNumber: syz [ 83.400225][ T34] usb 7-1: config 0 descriptor?? [ 83.407846][ T34] usb 7-1: selecting invalid altsetting 0 [ 83.465021][ T42] audit: type=1400 audit(1783265460.203:11016): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 83.667067][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 83.672418][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.675919][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.678589][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.682016][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.686268][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.689226][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.693419][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.697068][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.699771][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.702558][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.705472][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.708006][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.710503][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.713291][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.717207][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.719813][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.722369][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.725248][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.729736][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.732999][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.735905][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.738613][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.741348][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.744614][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.752099][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.757767][ T6919] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 83.776906][ T5843] usb 7-1: USB disconnect, device number 3 [ 83.783752][ T6919] usb 7-1: cannot submit urb 0, error -19: no device [ 83.796690][ T6919] usb 7-1: cannot submit urb 0, error -19: no device [ 83.800021][ T6919] usb 7-1: cannot submit urb 0, error -19: no device [ 83.802966][ T6919] usb 7-1: cannot submit urb 0, error -19: no device [ 83.830177][ T42] audit: type=1400 audit(1783265460.563:11017): avc: denied { create } for pid=6930 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.838063][ T42] audit: type=1400 audit(1783265460.573:11018): avc: denied { write } for pid=6930 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.858643][ T42] audit: type=1400 audit(1783265460.593:11019): avc: denied { read } for pid=6930 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.966753][ T6942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.283'. [ 84.220227][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 84.824613][ T5843] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 84.994611][ T5843] usb 8-1: Using ep0 maxpacket: 32 [ 84.997739][ T5843] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 85.001090][ T5843] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 85.004746][ T5843] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.008166][ T5843] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 85.016137][ T5843] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 85.019065][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.021580][ T5843] usb 8-1: Product: syz [ 85.022951][ T5843] usb 8-1: Manufacturer: syz [ 85.024446][ T5843] usb 8-1: SerialNumber: syz [ 85.032837][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 85.044889][ T5843] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input15 [ 85.254705][ T5843] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 85.261851][ T5843] (id 0x00) [ 85.336550][ T5843] rc_core: IR keymap rc-imon-pad not found [ 85.338450][ T5843] Registered IR keymap rc-empty [ 85.340566][ T5843] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 85.343848][ T5843] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 85.455904][ T5843] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 85.461061][ T5843] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input16 [ 85.471316][ T5843] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:5> initialized [ 85.618769][ T7019] trusted_key: syz.4.291 sent an empty control message without MSG_MORE. [ 85.636546][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.645480][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.657732][ T5841] usb 8-1: USB disconnect, device number 5 [ 85.670836][ T7021] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 85.706159][ T7024] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 85.711043][ T7024] bond1 (unregistering): Released all slaves [ 85.832123][ T7031] binder: 7030:7031 ioctl c0306201 200000000640 returned -14 [ 85.859682][ T7031] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.921449][ T7037] atomic_op ffff888058870998 conn xmit_atomic 0000000000000000 [ 85.962322][ T7039] bond0: option ad_select: unable to set because the bond device is up [ 86.407465][ T7069] program syz.4.306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.464745][ T848] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 86.477725][ T7074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7074 comm=syz.4.308 [ 86.626540][ T848] usb 8-1: unable to get BOS descriptor or descriptor too short [ 86.629578][ T848] usb 8-1: not running at top speed; connect to a high speed hub [ 86.632885][ T848] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 86.635609][ T848] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 86.638239][ T848] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 86.641461][ T848] usb 8-1: config 14 has no interface number 0 [ 86.643432][ T848] usb 8-1: config 14 has no interface number 1 [ 86.645545][ T848] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 86.648942][ T848] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 86.652636][ T848] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.656174][ T848] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 86.659624][ T848] usb 8-1: config 14 interface 57 has no altsetting 0 [ 86.661817][ T848] usb 8-1: config 14 interface 228 has no altsetting 0 [ 86.665979][ T848] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 86.668939][ T848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.671504][ T848] usb 8-1: Product: syz [ 86.672878][ T848] usb 8-1: Manufacturer: syz [ 86.674382][ T848] usb 8-1: SerialNumber: syz [ 86.724663][ T1350] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 86.874734][ T1350] usb 9-1: Using ep0 maxpacket: 8 [ 86.878794][ T1350] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.883525][ T1350] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.887657][ T1350] usb 9-1: config 0 interface 0 has no altsetting 0 [ 86.890457][ T1350] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 86.894118][ T1350] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.899893][ T1350] usb 9-1: config 0 descriptor?? [ 87.089940][ T848] legousbtower 8-1:14.57: interrupt endpoints not found [ 87.325737][ T848] legousbtower 8-1:14.228: get version request failed: -71 [ 87.328072][ T848] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 87.335187][ T848] usb 8-1: USB disconnect, device number 6 [ 87.511259][ T7074] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 87.534679][ T5826] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 87.543779][ T7074] netlink: 'syz.4.308': attribute type 13 has an invalid length. [ 87.549790][ T1350] usbhid 9-1:0.0: can't add hid device: -71 [ 87.552408][ T1350] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 87.558404][ T1350] usb 9-1: USB disconnect, device number 3 [ 87.684796][ T5826] usb 7-1: Using ep0 maxpacket: 32 [ 87.689056][ T5826] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 87.693579][ T5826] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 87.698257][ T5826] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.702886][ T5826] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 87.711469][ T5826] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 87.715463][ T5826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.718906][ T5826] usb 7-1: Product: syz [ 87.720593][ T5826] usb 7-1: Manufacturer: syz [ 87.722552][ T5826] usb 7-1: SerialNumber: syz [ 87.731921][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 87.736689][ T5826] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input17 [ 87.918816][ T7090] bridge0: port 3(syz_tun) entered blocking state [ 87.921800][ T7090] bridge0: port 3(syz_tun) entered disabled state [ 87.924377][ T7090] syz_tun: entered allmulticast mode [ 87.927647][ T7090] syz_tun: entered promiscuous mode [ 87.930080][ T7090] bridge0: port 3(syz_tun) entered blocking state [ 87.932258][ T7090] bridge0: port 3(syz_tun) entered forwarding state [ 87.938533][ T7090] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 87.944616][ T5826] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 87.947921][ T5826] (id 0x00) [ 87.995865][ T5826] rc_core: IR keymap rc-imon-pad not found [ 87.998058][ T5826] Registered IR keymap rc-empty [ 87.999861][ T5826] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 88.003279][ T5826] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 88.148509][ T5826] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 88.155089][ T5826] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input18 [ 88.162576][ T5826] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:4> initialized [ 88.343714][ T5826] usb 7-1: USB disconnect, device number 4 [ 88.417557][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 88.417596][ T42] audit: type=1400 audit(1783265465.153:11048): avc: denied { write } for pid=7101 comm="syz.3.316" lport=52750 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 88.450752][ T42] audit: type=1400 audit(1783265465.183:11049): avc: denied { read write } for pid=7101 comm="syz.3.316" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 88.458718][ T42] audit: type=1400 audit(1783265465.183:11050): avc: denied { open } for pid=7101 comm="syz.3.316" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 88.570443][ T42] audit: type=1400 audit(1783265465.303:11051): avc: denied { ioctl } for pid=7112 comm="syz.4.321" path="socket:[18752]" dev="sockfs" ino=18752 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 88.592456][ T42] audit: type=1400 audit(1783265465.323:11052): avc: denied { create } for pid=7111 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 88.601348][ T42] audit: type=1400 audit(1783265465.323:11053): avc: denied { checkpoint_restore } for pid=7112 comm="syz.4.321" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.610576][ T42] audit: type=1400 audit(1783265465.333:11054): avc: denied { sys_admin } for pid=7111 comm="syz.3.320" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 88.719574][ T42] audit: type=1400 audit(1783265465.453:11055): avc: denied { name_bind 0x1000000 } for pid=7125 comm="syz.4.324" path="socket:[18016]" dev="sockfs" ino=18016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.733346][ T7126] netlink: 'syz.4.324': attribute type 1 has an invalid length. [ 88.738325][ T7126] netlink: 756 bytes leftover after parsing attributes in process `syz.4.324'. [ 88.771633][ T7128] xt_hashlimit: size too large, truncated to 1048576 [ 89.181132][ T7162] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.695711][ T42] audit: type=1400 audit(1783265466.433:11056): avc: denied { create } for pid=7171 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.029333][ T42] audit: type=1400 audit(1783265466.763:11057): avc: denied { read } for pid=7174 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.208229][ T7181] binder: 7180:7181 ioctl c018620b 0 returned -14 [ 90.494725][ T5819] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 90.561882][ T7185] netlink: 'syz.4.338': attribute type 21 has an invalid length. [ 90.565135][ T7185] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.644676][ T5819] usb 8-1: Using ep0 maxpacket: 32 [ 90.648625][ T5819] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 90.652982][ T5819] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 90.657927][ T5819] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.662297][ T5819] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 90.670263][ T5819] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 90.676021][ T5819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.679477][ T5819] usb 8-1: Product: syz [ 90.681211][ T5819] usb 8-1: Manufacturer: syz [ 90.683204][ T5819] usb 8-1: SerialNumber: syz [ 90.695247][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 90.700176][ T5819] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input19 [ 90.914659][ T5819] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 90.917321][ T5819] (id 0x00) [ 90.964677][ T5819] rc_core: IR keymap rc-imon-pad not found [ 90.966887][ T5819] Registered IR keymap rc-empty [ 90.968873][ T5819] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 90.972129][ T5819] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 91.116465][ T5819] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 91.121504][ T5819] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input20 [ 91.128860][ T5819] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:7> initialized [ 91.300781][ T5819] usb 8-1: USB disconnect, device number 7 [ 91.848283][ T7228] netlink: 40 bytes leftover after parsing attributes in process `syz.3.347'. [ 91.918417][ T7232] binder: BINDER_SET_CONTEXT_MGR already set [ 91.922211][ T7232] binder: 7231:7232 ioctl 4018620d 200000000140 returned -16 [ 92.030864][ T7238] netlink: 'syz.3.350': attribute type 2 has an invalid length. [ 92.035311][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 92.310460][ T7252] loop3: detected capacity change from 0 to 7 [ 92.315650][ T7252] loop3: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 92.318619][ T7252] loop3: partition table partially beyond EOD, truncated [ 92.324264][ T7252] loop3: p1 size 1905483274 extends beyond EOD, truncated [ 92.329951][ T7252] loop3: p2 start 121280928 is beyond EOD, truncated [ 92.795802][ T7237] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 92.798385][ T7237] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 92.808117][ T7237] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 92.813641][ T7237] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.815912][ T7237] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 92.820550][ T7237] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 92.823710][ T7237] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 92.825842][ T7237] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 92.828462][ T7237] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 92.950448][ T7264] EXT4-fs (nbd4): unable to read superblock [ 93.074621][ T5890] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 93.224675][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 93.228004][ T5890] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 93.231708][ T5890] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 93.236751][ T5890] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.241514][ T5890] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 93.249501][ T5890] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 93.253498][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.254633][ T5819] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 93.257329][ T5890] usb 7-1: Product: syz [ 93.262045][ T5890] usb 7-1: Manufacturer: syz [ 93.264075][ T5890] usb 7-1: SerialNumber: syz [ 93.276098][ C2] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 93.281355][ T5890] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input21 [ 93.404625][ T5819] usb 9-1: Using ep0 maxpacket: 32 [ 93.408690][ T5819] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 93.415817][ T5819] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 93.419360][ T5819] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 93.422779][ T5819] usb 9-1: Product: syz [ 93.424750][ T5819] usb 9-1: Manufacturer: syz [ 93.426718][ T5819] usb 9-1: SerialNumber: syz [ 93.430978][ T5819] usb 9-1: config 0 descriptor?? [ 93.433953][ T7269] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 93.439539][ T5819] hub 9-1:0.0: bad descriptor, ignoring hub [ 93.442133][ T5819] hub 9-1:0.0: probe with driver hub failed with error -5 [ 93.504704][ T5890] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 93.508318][ T5890] (id 0x00) [ 93.554644][ T5890] rc_core: IR keymap rc-imon-pad not found [ 93.557311][ T5890] Registered IR keymap rc-empty [ 93.559572][ T5890] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 93.564028][ T5890] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 93.679731][ T5890] imon:send_packet: packet tx failed (-71) [ 93.694716][ T5890] imon 7-1:155.0: remote input dev register failed [ 93.697434][ T5890] imon 7-1:155.0: imon_init_intf0: rc device setup failed [ 93.729073][ T5890] imon 7-1:155.0: unable to initialize intf0, err 0 [ 93.731949][ T5890] imon:imon_probe: failed to initialize context! [ 93.734990][ T5890] imon 7-1:155.0: unable to register, err -19 [ 93.740204][ T5890] usb 7-1: USB disconnect, device number 5 [ 93.740807][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 93.740818][ T42] audit: type=1400 audit(1783265470.473:11076): avc: denied { append } for pid=7272 comm="syz.3.362" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.744386][ T7273] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 93.753005][ T7274] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 94.064682][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.267319][ T5744] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 94.503496][ T6762] raw-gadget.1 gadget.4: failed to queue suspend event [ 94.509797][ T7271] raw-gadget.1 gadget.4: failed to queue disconnect event [ 94.536387][ T5819] usb 9-1: USB disconnect, device number 4 [ 94.583661][ T7289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=7289 comm=syz.2.367 [ 94.664652][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 94.689111][ T42] audit: type=1400 audit(1783265471.423:11077): avc: denied { setattr } for pid=7292 comm="syz.2.369" path="socket:[19784]" dev="sockfs" ino=19784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.692208][ T5744] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 94.700188][ T5744] Bluetooth: hci2: unexpected event for opcode 0x202f [ 94.701412][ T42] audit: type=1400 audit(1783265471.433:11078): avc: denied { create } for pid=7292 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 94.711765][ T5744] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 94.714314][ T5744] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 94.731507][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.763248][ T5738] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.768756][ T5738] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.772886][ T5738] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.778990][ T5738] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.781949][ T5738] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.837110][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 94.841254][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.845501][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.850089][ T34] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.853763][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.864475][ T34] usb 8-1: config 0 descriptor?? [ 94.864641][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.064623][ T5826] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 95.113744][ T34] usbhid 8-1:0.0: can't add hid device: -71 [ 95.118947][ T34] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 95.126693][ T34] usb 8-1: USB disconnect, device number 8 [ 95.234764][ T5826] usb 7-1: Using ep0 maxpacket: 32 [ 95.239991][ T5826] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 95.243993][ T5826] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 95.248135][ T5826] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.251595][ T5826] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 95.255668][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.255887][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.260771][ T5826] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 95.261166][ T7299] bridge_slave_0: entered allmulticast mode [ 95.264093][ T5826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.268377][ T7299] bridge_slave_0: entered promiscuous mode [ 95.269141][ T5826] usb 7-1: Product: syz [ 95.272985][ T5826] usb 7-1: Manufacturer: syz [ 95.274461][ T5826] usb 7-1: SerialNumber: syz [ 95.275629][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.279116][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.282329][ T7299] bridge_slave_1: entered allmulticast mode [ 95.285555][ T7299] bridge_slave_1: entered promiscuous mode [ 95.287756][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 95.295279][ T5826] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input23 [ 95.314335][ T7299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.319138][ T7299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.335741][ T7299] team0: Port device team_slave_0 added [ 95.338860][ T7299] team0: Port device team_slave_1 added [ 95.352716][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.354944][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.363076][ T7299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.369368][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.371581][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.379549][ T7299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.403316][ T7299] hsr_slave_0: entered promiscuous mode [ 95.405817][ T7299] hsr_slave_1: entered promiscuous mode [ 95.487662][ T5826] imon:send_packet: packet tx failed (-71) [ 95.519741][ T5826] imon 7-1:155.0: panel buttons/knobs setup failed [ 95.524123][ T5826] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 95.528254][ T5826] (id 0x00) [ 95.535135][ T42] audit: type=1400 audit(1783265472.263:11079): avc: denied { mounton } for pid=7322 comm="syz.3.373" path="/proc/357/task/359/net/netfilter" dev="proc" ino=4026533308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 95.541009][ T7299] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.549799][ T7299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.553053][ T7299] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.558843][ T7299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.561751][ T7299] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.566002][ T7299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.568802][ T7299] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.572434][ T7299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.585085][ T5826] rc_core: IR keymap rc-imon-pad not found [ 95.588471][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.588641][ T5826] Registered IR keymap rc-empty [ 95.590767][ T7299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.592452][ T5826] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 95.595238][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.598553][ T5826] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 95.600417][ T7299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.603951][ T5826] imon:send_packet: packet tx failed (-71) [ 95.636355][ T5826] imon 7-1:155.0: remote input dev register failed [ 95.639906][ T5826] imon 7-1:155.0: imon_init_intf0: rc device setup failed [ 95.642818][ T7299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.656264][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.661965][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.663542][ T5826] imon 7-1:155.0: unable to initialize intf0, err 0 [ 95.666864][ T5826] imon:imon_probe: failed to initialize context! [ 95.669030][ T5826] imon 7-1:155.0: unable to register, err -19 [ 95.673850][ T5826] usb 7-1: USB disconnect, device number 6 [ 95.676616][ T7299] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.686716][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.689708][ T6767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.701742][ T6767] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.704749][ T6767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.898125][ T7344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.375'. [ 95.901586][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 95.981905][ T7299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.019981][ T42] audit: type=1400 audit(1783265472.753:11080): avc: denied { create } for pid=7353 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 96.020875][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 96.029036][ T42] audit: type=1400 audit(1783265472.753:11081): avc: denied { write } for pid=7353 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 96.058580][ T7355] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7355 comm=syz.3.377 [ 96.134907][ T42] audit: type=1400 audit(1783265472.873:11082): avc: denied { shutdown } for pid=7365 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.145041][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.169058][ T7355] veth3: entered allmulticast mode [ 96.209068][ T7355] bond1: (slave veth3): Enslaving as an active interface with an up link [ 96.237853][ T7369] bond1 (unregistering): (slave veth3): Releasing backup interface [ 96.243468][ T7369] bond1 (unregistering): Released all slaves [ 96.244828][ T7372] process 'syz.2.380' launched './file0' with NULL argv: empty string added [ 96.248337][ T42] audit: type=1400 audit(1783265472.983:11083): avc: denied { execute_no_trans } for pid=7371 comm="syz.2.380" path="/96/file0" dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.288974][ T7299] veth0_vlan: entered promiscuous mode [ 96.298358][ T7299] veth1_vlan: entered promiscuous mode [ 96.315239][ T7299] veth0_macvtap: entered promiscuous mode [ 96.325950][ T7299] veth1_macvtap: entered promiscuous mode [ 96.344757][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.351267][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.359898][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.363270][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.368217][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.371068][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.474505][ T6764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.480608][ T6764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.507870][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.511276][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.535061][ T42] audit: type=1400 audit(1783265473.273:11084): avc: denied { mounton } for pid=7299 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 96.564695][ T42] audit: type=1400 audit(1783265473.293:11085): avc: denied { ioctl } for pid=7389 comm="syz.3.384" path="socket:[20101]" dev="sockfs" ino=20101 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.571390][ T7390] tmpfs: Cannot change global quota limit on remount [ 96.864985][ T5744] Bluetooth: hci4: command tx timeout [ 96.904700][ T5890] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 96.944925][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.030531][ T7415] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 97.066910][ T5890] usb 10-1: Using ep0 maxpacket: 32 [ 97.070235][ T5890] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 97.074656][ T5890] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 97.079443][ T5890] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.083643][ T5890] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 97.091925][ T5890] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 97.095624][ T5890] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.098562][ T5890] usb 10-1: Product: syz [ 97.099863][ T5890] usb 10-1: Manufacturer: syz [ 97.101769][ T5890] usb 10-1: SerialNumber: syz [ 97.113270][ C2] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 97.122032][ T5890] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input25 [ 97.172864][ T7420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.394'. [ 97.185526][ T7420] vlan0: entered promiscuous mode [ 97.187657][ T7420] gretap0: entered promiscuous mode [ 97.319595][ T5890] imon:send_packet: packet tx failed (-71) [ 97.334611][ T5890] imon 10-1:155.0: panel buttons/knobs setup failed [ 97.337364][ T5890] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 97.340738][ T5890] (id 0x00) [ 97.384633][ T5890] rc_core: IR keymap rc-imon-pad not found [ 97.386795][ T5890] Registered IR keymap rc-empty [ 97.388763][ T5890] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 97.392981][ T5890] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 97.398746][ T5890] imon:send_packet: packet tx failed (-71) [ 97.424755][ T5890] imon 10-1:155.0: remote input dev register failed [ 97.428661][ T5890] imon 10-1:155.0: imon_init_intf0: rc device setup failed [ 97.444170][ T5890] imon 10-1:155.0: unable to initialize intf0, err 0 [ 97.447056][ T5890] imon:imon_probe: failed to initialize context! [ 97.449626][ T5890] imon 10-1:155.0: unable to register, err -19 [ 97.454659][ T5890] usb 10-1: USB disconnect, device number 2 [ 97.473379][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 97.805249][ T7455] tipc: MTU too low for tipc bearer [ 97.903847][ T7463] fuse: Bad value for 'user_id' [ 97.905404][ T7463] fuse: Bad value for 'user_id' [ 98.090823][ T7474] Error: Device magic number does not match. [ 98.174023][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.409'. [ 98.177148][ T7477] netlink: 48 bytes leftover after parsing attributes in process `syz.5.409'. [ 98.224751][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.243313][ T7482] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!`l1&b0xUϔr$G [ 98.316970][ T7492] tmpfs: Bad value for 'huge' [ 98.372670][ T7494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.477140][ T7498] netlink: 'syz.3.417': attribute type 11 has an invalid length. [ 98.573514][ T7501] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 98.574773][ T5890] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 98.585537][ T7500] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 98.587722][ T7500] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 98.592586][ T7500] vhci_hcd vhci_hcd.0: Device attached [ 98.754691][ T5890] usb 10-1: Using ep0 maxpacket: 32 [ 98.759410][ T5890] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 98.763218][ T5890] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 98.767289][ T5890] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.771087][ T5890] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 98.778485][ T5890] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 98.782035][ T5890] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.785519][ T5890] usb 10-1: Product: syz [ 98.787230][ T5890] usb 10-1: Manufacturer: syz [ 98.789112][ T5890] usb 10-1: SerialNumber: syz [ 98.794821][ T34] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 98.798362][ C2] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 98.802484][ T5890] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input27 [ 98.864710][ T5819] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 98.867979][ T34] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 98.940337][ T7509] openvswitch: netlink: IP tunnel dst address not specified [ 98.944681][ T5744] Bluetooth: hci4: command tx timeout [ 98.970813][ T7509] kvm: pic: single mode not supported [ 98.970982][ T7509] kvm: pic: level sensitive irq not supported [ 99.001833][ T5890] imon:send_packet: packet tx failed (-71) [ 99.024691][ T5890] imon 10-1:155.0: panel buttons/knobs setup failed [ 99.025954][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.026692][ T5890] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 99.026701][ T5890] (id 0x00) [ 99.036347][ T5819] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 99.039725][ T5819] usb 8-1: config 1 has no interface number 0 [ 99.042400][ T5819] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 99.047291][ T5819] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 99.051337][ T5819] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 99.055989][ T5819] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.062589][ T5819] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 99.066496][ T5819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.069729][ T5819] usb 8-1: Product: syz [ 99.071538][ T5819] usb 8-1: Manufacturer: syz [ 99.073538][ T5819] usb 8-1: SerialNumber: syz [ 99.074733][ T5890] rc_core: IR keymap rc-imon-pad not found [ 99.078863][ T5890] Registered IR keymap rc-empty [ 99.080573][ T5890] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 99.084036][ T7500] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 99.089366][ T5890] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 99.092551][ T7500] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 99.096494][ T5890] imon:send_packet: packet tx failed (-71) [ 99.115322][ T5890] imon 10-1:155.0: remote input dev register failed [ 99.118274][ T5890] imon 10-1:155.0: imon_init_intf0: rc device setup failed [ 99.129750][ T5890] imon 10-1:155.0: unable to initialize intf0, err 0 [ 99.132231][ T5890] imon:imon_probe: failed to initialize context! [ 99.134274][ T5890] imon 10-1:155.0: unable to register, err -19 [ 99.138113][ T5890] usb 10-1: USB disconnect, device number 3 [ 99.297907][ T7502] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 99.301980][ T5819] usb 8-1: Error in usbnet_get_endpoints (-71) [ 99.308358][ T13] vhci_hcd vhci_hcd.3: stop threads [ 99.309142][ T5819] usb 8-1: USB disconnect, device number 9 [ 99.314764][ T13] vhci_hcd vhci_hcd.3: release socket [ 99.318112][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 99.636623][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 99.636642][ T42] audit: type=1400 audit(1783265476.373:11106): avc: denied { load_policy } for pid=7534 comm="syz.5.428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 99.640684][ T7535] SELinux: ebitmap start bit (202309632) is beyond the end of the bitmap (1472) [ 99.651923][ T7535] SELinux: invalid class [ 99.657638][ T7535] SELinux: failed to load policy [ 99.772609][ T42] audit: type=1400 audit(1783265476.503:11107): avc: denied { write } for pid=7542 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.780117][ T42] audit: type=1400 audit(1783265476.503:11108): avc: denied { read } for pid=7542 comm="syz.2.429" lport=58684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.796632][ T7543] program syz.2.429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.977920][ T7548] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 99.982940][ T42] audit: type=1400 audit(1783265476.713:11109): avc: denied { relabelto } for pid=7547 comm="syz.5.431" name="9" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 99.993087][ T42] audit: type=1400 audit(1783265476.713:11110): avc: denied { associate } for pid=7547 comm="syz.5.431" name="9" dev="tmpfs" ino=58 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 100.001578][ T42] audit: type=1400 audit(1783265476.713:11111): avc: denied { write } for pid=7547 comm="syz.5.431" name="9" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 100.012531][ T42] audit: type=1400 audit(1783265476.713:11112): avc: denied { add_name } for pid=7547 comm="syz.5.431" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 100.022616][ T42] audit: type=1400 audit(1783265476.713:11113): avc: denied { associate } for pid=7547 comm="syz.5.431" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 100.033854][ T42] audit: type=1400 audit(1783265476.713:11114): avc: denied { read append open } for pid=7547 comm="syz.5.431" path="/9/memory.events" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.041743][ T42] audit: type=1400 audit(1783265476.713:11115): avc: denied { map } for pid=7547 comm="syz.5.431" path="/9/memory.events" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.051770][ T7557] netlink: 'syz.5.433': attribute type 1 has an invalid length. [ 100.096274][ T7563] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=104 sclass=netlink_tcpdiag_socket pid=7563 comm=syz.5.434 [ 100.126154][ T7567] netlink: 'syz.5.435': attribute type 1 has an invalid length. [ 100.245693][ T7577] team0: entered allmulticast mode [ 100.247477][ T7577] team_slave_0: entered allmulticast mode [ 100.249339][ T7577] team_slave_1: entered allmulticast mode [ 100.302877][ T7583] netlink: 64 bytes leftover after parsing attributes in process `syz.4.440'. [ 100.423323][ T7596] batadv_slave_1: entered allmulticast mode [ 100.492965][ T7595] batadv_slave_1: left allmulticast mode [ 100.800386][ T7612] vcan1: entered allmulticast mode [ 101.019034][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.024710][ T5744] Bluetooth: hci4: command tx timeout [ 101.109142][ T7634] netlink: 144 bytes leftover after parsing attributes in process `syz.2.453'. [ 101.175692][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.202242][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.210165][ T5738] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.214064][ T5738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.218114][ T5738] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.223255][ T5738] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.273796][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.401001][ T7658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7658 comm=syz.2.460 [ 101.406393][ T7658] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 101.422177][ T7658] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 101.459084][ T7665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.461'. [ 101.632076][ T13] bridge_slave_1: left allmulticast mode [ 101.633978][ T13] bridge_slave_1: left promiscuous mode [ 101.640212][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.647635][ T13] bridge_slave_0: left allmulticast mode [ 101.650051][ T13] bridge_slave_0: left promiscuous mode [ 101.652131][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.812983][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.817443][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.821390][ T13] bond0 (unregistering): Released all slaves [ 101.828549][ T13] bond1 (unregistering): Released all slaves [ 101.845880][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 102.057562][ T7712] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 102.063515][ T7712] bridge0: port 3(syz_tun) entered disabled state [ 102.066778][ T7712] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.069918][ T7712] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.073083][ T7712] bridge0: entered allmulticast mode [ 102.103411][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 102.135717][ T7636] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.138811][ T7636] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.141923][ T7636] bridge_slave_0: entered allmulticast mode [ 102.148046][ T7636] bridge_slave_0: entered promiscuous mode [ 102.151841][ T7636] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.154585][ T7636] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.156975][ T7636] bridge_slave_1: entered allmulticast mode [ 102.159979][ T7636] bridge_slave_1: entered promiscuous mode [ 102.164692][ T5826] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 102.193053][ T7636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.200698][ T13] hsr_slave_0: left promiscuous mode [ 102.202802][ T13] hsr_slave_1: left promiscuous mode [ 102.205540][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.208636][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.214079][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.217819][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.226898][ T13] veth1_macvtap: left promiscuous mode [ 102.229190][ T13] veth0_macvtap: left promiscuous mode [ 102.231448][ T13] veth1_vlan: left promiscuous mode [ 102.233630][ T13] veth0_vlan: left promiscuous mode [ 102.288942][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 102.334588][ T5826] usb 10-1: Using ep0 maxpacket: 8 [ 102.337882][ T5826] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 102.341450][ T5826] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 102.344504][ T5826] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.351580][ T5826] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.357396][ T5826] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.360360][ T5826] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.461309][ T13] team_slave_1 (unregistering): left allmulticast mode [ 102.464326][ T13] team0 (unregistering): Port device team_slave_1 removed [ 102.477619][ T13] team_slave_0 (unregistering): left allmulticast mode [ 102.481504][ T13] team0 (unregistering): Port device team_slave_0 removed [ 102.568922][ T5826] usb 10-1: GET_CAPABILITIES returned 0 [ 102.570790][ T5826] usbtmc 10-1:16.0: can't read capabilities [ 102.609965][ T7636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.631835][ T7636] team0: Port device team_slave_0 added [ 102.635512][ T7636] team0: Port device team_slave_1 added [ 102.675900][ T7636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.681446][ T7636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.690960][ T7636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.699419][ T7636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.701693][ T7636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.710086][ T7636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.768515][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 102.785311][ T29] usb 10-1: USB disconnect, device number 4 [ 102.829892][ T7636] hsr_slave_0: entered promiscuous mode [ 102.842414][ T7636] hsr_slave_1: entered promiscuous mode [ 102.845049][ T7636] debugfs: 'hsr0' already exists in 'hsr' [ 102.847315][ T7636] Cannot create hsr debugfs directory [ 102.980717][ T7636] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.986347][ T7636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.989311][ T7636] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.993384][ T7636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.997502][ T7636] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 103.003381][ T7636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.006944][ T7636] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 103.012353][ T7636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.054369][ T7636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.067261][ T7636] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.073839][ T6750] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.076649][ T6750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.082159][ T6750] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.084429][ T6750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.106324][ T5744] Bluetooth: hci4: command tx timeout [ 103.112250][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 103.264741][ T5744] Bluetooth: hci3: command tx timeout [ 103.380359][ T7636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.416640][ T7781] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.602825][ T7636] veth0_vlan: entered promiscuous mode [ 103.611696][ T7636] veth1_vlan: entered promiscuous mode [ 103.641606][ T7636] veth0_macvtap: entered promiscuous mode [ 103.658243][ T7636] veth1_macvtap: entered promiscuous mode [ 103.673215][ T7802] Bluetooth: MGMT ver 1.23 [ 103.676160][ T7636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.680627][ T7636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.715862][ T5789] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.722247][ T7802] netlink: 'syz.2.483': attribute type 1 has an invalid length. [ 103.727784][ T5789] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.749534][ T7802] bond1: entered promiscuous mode [ 103.752110][ T7802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.756247][ T5789] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.759913][ T5789] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.761231][ T7802] capability: warning: `syz.2.483' uses deprecated v2 capabilities in a way that may be insecure [ 103.770903][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.483'. [ 103.777073][ T7802] bond1: entered allmulticast mode [ 103.805690][ T7802] bond1: (slave bridge3): making interface the new active one [ 103.808871][ T7802] bridge3: entered promiscuous mode [ 103.811157][ T7802] bridge3: entered allmulticast mode [ 103.816550][ T7802] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 103.912671][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.918795][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.950613][ T5842] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105) [ 103.957717][ T7818] netlink: 156 bytes leftover after parsing attributes in process `syz.2.488'. [ 103.961552][ T6743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.964052][ T6743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.977157][ T34] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 104.116896][ T7830] netlink: 'syz.6.455': attribute type 5 has an invalid length. [ 104.154778][ T7830] ip6erspan0: entered promiscuous mode [ 104.158996][ T7834] overlayfs: upper fs does not support file handles, falling back to index=off. [ 104.164107][ T7834] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 104.315591][ T7857] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.318471][ T7859] netlink: 32 bytes leftover after parsing attributes in process `syz.6.499'. [ 104.322276][ T7859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.325633][ T7859] IPv6: NLM_F_CREATE should be set when creating new route [ 104.351190][ T7863] xt_hashlimit: size too large, truncated to 1048576 [ 104.362301][ T7865] CIFS mount error: No usable UNC path provided in device string! [ 104.362301][ T7865] [ 104.374253][ T7865] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 104.406573][ T7868] dlm: no locking on control device [ 104.411521][ T7868] gfs2: error -5 reading superblock [ 104.529866][ T7878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7878 comm=syz.6.503 [ 104.546015][ T7880] sctp: [Deprecated]: syz.5.504 (pid 7880) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.546015][ T7880] Use struct sctp_sack_info instead [ 104.586863][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.506'. [ 104.590575][ T7889] comedi comedi3: c6xdigio: I/O port conflict (0x20007c,3) [ 104.593880][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.506'. [ 104.961538][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.513'. [ 104.971913][ T7911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.287673][ T42] kauditd_printk_skb: 1817 callbacks suppressed [ 105.287718][ T42] audit: type=1400 audit(1783265482.023:12933): avc: denied { mount } for pid=7928 comm="syz.6.517" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 105.352540][ T7929] ceph: No mds server is up or the cluster is laggy [ 105.397483][ T7927] trusted_key: encrypted_key: insufficient parameters specified [ 105.405866][ T7927] loop8: detected capacity change from 0 to 7 [ 105.410584][ C0] blk_print_req_error: 16 callbacks suppressed [ 105.410596][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.416610][ C0] buffer_io_error: 15 callbacks suppressed [ 105.416623][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 105.423076][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.426526][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 105.430478][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.433590][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 105.436795][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.439697][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 105.442523][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.445415][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 105.448139][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.451089][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 105.455497][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.458694][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 105.465723][ T7927] ldm_validate_partition_table(): Disk read failed. [ 105.469053][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.471868][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 105.474433][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.477324][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 105.479731][ T42] audit: type=1400 audit(1783265482.213:12934): avc: denied { connect } for pid=7936 comm="syz.6.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.479772][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.490257][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 105.492798][ T7927] Dev loop8: unable to read RDB block 0 [ 105.498167][ T7927] loop8: unable to read partition table [ 105.499961][ T7927] loop8: partition table beyond EOD, truncated [ 105.501991][ T7927] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 105.565327][ T42] audit: type=1326 audit(1783265482.303:12935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7938 comm="syz.6.520" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9bb39de59 code=0x0 [ 105.574277][ T42] audit: type=1326 audit(1783265482.303:12936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7938 comm="syz.6.520" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9bb39de59 code=0x0 [ 106.347617][ T7978] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 106.350551][ T7978] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 106.354631][ T7978] vhci_hcd vhci_hcd.0: Device attached [ 106.358002][ T7979] usbip_core: unknown command [ 106.360318][ T7979] vhci_hcd: unknown pdu 795108726 [ 106.362064][ T7979] usbip_core: unknown command [ 106.364119][ T5789] vhci_hcd vhci_hcd.2: stop threads [ 106.366653][ T5789] vhci_hcd vhci_hcd.2: release socket [ 106.369078][ T5789] vhci_hcd vhci_hcd.2: disconnect device [ 106.631059][ T7989] netlink: 16 bytes leftover after parsing attributes in process `syz.5.533'. [ 106.635411][ T7989] netlink: 92 bytes leftover after parsing attributes in process `syz.5.533'. [ 106.795057][ T5744] Bluetooth: hci3: command tx timeout [ 106.893924][ T8012] netlink: 28 bytes leftover after parsing attributes in process `syz.6.539'. [ 106.929798][ T8015] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.935434][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.6.540'. [ 106.953814][ T8015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.966461][ T8015] bond1: (slave hsr0): The slave device specified does not support setting the MAC address [ 106.970849][ T8015] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 106.975457][ T8015] bond1: (slave hsr0): Error -22 calling dev_set_mtu [ 107.264687][ T5843] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 107.439894][ T5843] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.444196][ T5843] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 107.447926][ T5843] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.452655][ T5843] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.460775][ T8021] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 107.471738][ T5843] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.584286][ T42] audit: type=1400 audit(1783265484.313:12937): avc: denied { relabelfrom } for pid=8038 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 107.593971][ T42] audit: type=1400 audit(1783265484.313:12938): avc: denied { relabelto } for pid=8038 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 107.657302][ T42] audit: type=1400 audit(1783265484.393:12939): avc: denied { ioctl } for pid=8038 comm="syz.2.548" path="/135/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 107.694968][ T8021] fuse: Unknown parameter 'fd0x0000000000000004' [ 107.735062][ T56] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 107.747281][ T42] audit: type=1400 audit(1783265484.483:12940): avc: denied { write } for pid=8044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.796744][ T42] audit: type=1400 audit(1783265484.533:12941): avc: denied { write } for pid=8047 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.880479][ T42] audit: type=1400 audit(1783265484.613:12942): avc: denied { write } for pid=8049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.907170][ T56] usb 11-1: Using ep0 maxpacket: 16 [ 107.913466][ T56] usb 11-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.917305][ T56] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 107.922851][ T56] usb 11-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 107.926450][ T56] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.929545][ T56] usb 11-1: Product: 렶궧팳㉄憺绗궵龇鎦ë搊≍㢭緹탁旍ᶻ⿪Ṙ潱Ỗ魯䌲橧䎴귍楳封潲Ǘ㵠䔝ⵡ뛙峨꒚딦鬥ﺝﶮ촯㪈螦晖䪯쪀翙䟪颼⡸စ骣挊핇栄ポꇇ鈮钌嘳ꝼ끟꫹ꖘ㾷彂꒱䩻煭兰緶誤ಏ띟碴ᆜ驼삨ꛚ壥盳ά쒒﫵貈箟씄繜棷幃䶯༥ﰲ⨾流鴑⸧ሧ햮罶⽤쥣阰㬶휭碯뚞㙛ᆓ [ 107.947148][ T56] usb 11-1: Manufacturer: 轳ۂ뙳풪찞֕眗湔़ꘑ龼듽뫀䌑ퟆ籣哃쿪ύ [ 107.955948][ T56] usb 11-1: SerialNumber: ᰿ῷ䒟丽඙뵞ピ◿ᐆ햶팜诿똨滓괡ꄚ㿓쮄刍과ԫ䋏贠⠯⮆إ﨓닿튆雌覣昿ꕷࡸ੆齴䣽䲛⿯㦥鎶࿲횠崜옿싨Ⓔꋏ浫糇퇡꼳㚼㈅⯘芵웞잔饝폙Ｉ䔃ﻈ幥悄ᦌ﷛骏炏㬾蛂劬抦㻓䚬䥁鱵蝵프¼聠ｏ馬㴾㱇兝롦๗ᙥꮴ჊峟隊㙮뫪ཐ榼졔塴굁邌倕寳⶙ꊱ慿礷舟⦬蜑 [ 107.970845][ T8057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.550'. [ 108.180397][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.184141][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.197433][ T56] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.200392][ T56] usb 11-1: MIDIStreaming interface descriptor not found [ 108.285021][ T56] usb 11-1: USB disconnect, device number 2 [ 108.351620][ T5744] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 108.375003][ T5843] usb 10-1: USB disconnect, device number 5 [ 108.410899][ T8071] udevd[8071]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 108.473194][ T8085] netlink: 'syz.5.559': attribute type 1 has an invalid length. [ 108.506893][ T8085] bond1: entered promiscuous mode [ 108.509219][ T8085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.539408][ T8085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.541673][ T8085] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 108.545231][ T8085] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 108.549859][ T8085] bond1: (slave vti0): making interface the new active one [ 108.552062][ T8085] vti0: entered promiscuous mode [ 108.555428][ T8085] bond1: (slave vti0): Enslaving as an active interface with an up link [ 108.645666][ T8099] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 108.755276][ T8108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.567'. [ 108.866137][ T5744] Bluetooth: hci3: command tx timeout syzkaller syzkaller login: [ 109.104197][ T8126] kvm: pic: non byte write [ 109.577969][ T8146] sctp: [Deprecated]: syz.3.576 (pid 8146) Use of int in max_burst socket option. [ 109.577969][ T8146] Use struct sctp_assoc_value instead [ 109.721578][ T8153] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.824578][ T8153] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.979999][ T8153] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.023488][ T8167] netlink: 132 bytes leftover after parsing attributes in process `syz.6.582'. [ 110.064735][ T5738] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 110.096278][ T8153] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.216132][ T5789] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.226335][ T5828] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.234148][ T5828] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.246912][ T5828] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.412422][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 110.412441][ T42] audit: type=1400 audit(1783265487.143:12983): avc: denied { write } for pid=8196 comm="syz.2.592" name="/" dev="9p" ino=77072313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.491219][ T42] audit: type=1400 audit(1783265487.223:12984): avc: denied { ioctl } for pid=8191 comm="syz.6.591" path="socket:[30313]" dev="sockfs" ino=30313 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 110.501865][ T42] audit: type=1400 audit(1783265487.233:12985): avc: denied { setopt } for pid=8191 comm="syz.6.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 110.571332][ T42] audit: type=1400 audit(1783265487.303:12986): avc: denied { ioctl } for pid=8202 comm="syz.6.594" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30326 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 110.585953][ T42] audit: type=1400 audit(1783265487.303:12987): avc: denied { wake_alarm } for pid=8202 comm="syz.6.594" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.593847][ T42] audit: type=1400 audit(1783265487.323:12988): avc: denied { compute_member } for pid=8201 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 110.965509][ T8222] netlink: 260 bytes leftover after parsing attributes in process `syz.2.596'. [ 110.968735][ T8222] netlink: 1886 bytes leftover after parsing attributes in process `syz.2.596'. [ 110.972155][ T8222] netlink: 1886 bytes leftover after parsing attributes in process `syz.2.596'. [ 111.026412][ T42] audit: type=1400 audit(1783265487.763:12989): avc: denied { write } for pid=8230 comm="syz.3.600" name="/" dev="9p" ino=77072313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.036748][ T42] audit: type=1400 audit(1783265487.763:12990): avc: denied { unlink } for pid=8230 comm="syz.3.600" name="file0" dev="9p" ino=77072345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 111.047952][ T42] audit: type=1400 audit(1783265487.783:12991): avc: denied { write } for pid=8230 comm="syz.3.600" name="/" dev="9p" ino=77072313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.055747][ T42] audit: type=1400 audit(1783265487.783:12992): avc: denied { create } for pid=8230 comm="syz.3.600" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 111.177472][ T8241] syzkaller0: entered promiscuous mode [ 111.179775][ T8241] syzkaller0: entered allmulticast mode [ 111.435408][ T8265] fuse: Bad value for 'user_id' [ 111.438426][ T8265] fuse: Bad value for 'user_id' [ 111.488721][ T8269] bond2: option arp_all_targets: invalid value (67108865) [ 111.492266][ T8269] bond2 (unregistering): Released all slaves [ 111.561351][ T9] IPVS: starting estimator thread 0... [ 111.654654][ T8278] IPVS: using max 45 ests per chain, 108000 per kthread [ 111.677762][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.6.614'. [ 111.703343][ T8286] bond2: entered promiscuous mode [ 111.706926][ T8286] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.339006][ T8310] fuse: Unknown parameter '' [ 112.465503][ T8317] binder: 8314:8317 ioctl c0306201 200000000640 returned -22 [ 112.478117][ T8317] binder: 8314:8317 ioctl c0205867 200000000b00 returned -22 [ 112.481518][ T8317] mmap: syz.2.624 (8317) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.489854][ T8317] binder: 8314:8317 ioctl 80045006 200000000100 returned -22 [ 112.697494][ T5828] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.700329][ T5828] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.709311][ T8329] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 112.713866][ T8329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.720948][ T5828] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.726763][ T5828] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.294811][ T9] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 115.337436][ T8383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.634'. [ 115.341162][ T8383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.634'. [ 115.397547][ T8392] bpf: Bad value for 'uid' [ 115.403859][ T8315] binder: 8314:8315 ioctl c0306201 200000000040 returned -14 [ 115.409004][ T8396] tipc: Enabling of bearer rejected, media not registered [ 115.432111][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.636'. [ 115.441593][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.5.636'. [ 115.454844][ T9] usb 11-1: Using ep0 maxpacket: 8 [ 115.460106][ T9] usb 11-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.466085][ T9] usb 11-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 528 [ 115.470597][ T9] usb 11-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 16 [ 115.475749][ T9] usb 11-1: config 1 interface 0 has no altsetting 0 [ 115.481371][ T9] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.485999][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.489882][ T9] usb 11-1: Product:   [ 115.492261][ T9] usb 11-1: Manufacturer: ဧ [ 115.494301][ T9] usb 11-1: SerialNumber: х [ 115.500601][ T8367] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 115.503900][ T8367] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 115.560385][ T8409] netlink: 'syz.5.641': attribute type 1 has an invalid length. [ 115.565974][ T8403] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 115.613366][ T8409] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.623982][ T8413] bond2: entered allmulticast mode [ 115.640435][ T8409] bond2: (slave ip6gretap2): making interface the new active one [ 115.642948][ T8409] ip6gretap2: entered allmulticast mode [ 115.646125][ T8409] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 115.738684][ T9] cdc_ether 11-1:1.0: probe with driver cdc_ether failed with error -71 [ 115.742232][ T5744] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 115.743161][ T8421] binder_alloc: binder_alloc_mmap_handler: 8417 200000ffe000-200001000000 already mapped failed -16 [ 115.752584][ T9] usb 11-1: USB disconnect, device number 3 [ 115.910923][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 115.910963][ T42] audit: type=1400 audit(1783265492.643:13020): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 115.927216][ T42] audit: type=1400 audit(1783265492.663:13021): avc: denied { bind } for pid=8431 comm="syz.5.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.969468][ T8434] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 115.972319][ T8434] UDF-fs: Scanning with blocksize 2048 failed [ 115.976636][ T8434] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 115.978947][ T8434] UDF-fs: Scanning with blocksize 4096 failed [ 115.983420][ T42] audit: type=1400 audit(1783265492.713:13022): avc: denied { map } for pid=8435 comm="syz.5.649" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.535651][ T8470] netlink: 40 bytes leftover after parsing attributes in process `syz.2.662'. [ 116.542742][ T8470] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 116.549139][ T8471] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 116.591381][ T42] audit: type=1800 audit(1783265493.323:13023): pid=8473 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.663" name="file0" dev="tmpfs" ino=252 res=0 errno=0 [ 116.604747][ T42] audit: type=1804 audit(1783265493.323:13024): pid=8473 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.663" name="/newroot/44/file0" dev="tmpfs" ino=252 res=1 errno=0 [ 116.753093][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 116.756500][ T8477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.664'. [ 116.781587][ T42] audit: type=1400 audit(1783265493.513:13025): avc: denied { create } for pid=8486 comm="syz.6.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 116.798684][ T42] audit: type=1400 audit(1783265493.533:13026): avc: denied { accept } for pid=8489 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 116.806379][ T8490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8490 comm=syz.2.667 [ 116.835575][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 116.961531][ T8506] netlink: 20 bytes leftover after parsing attributes in process `syz.6.672'. [ 116.985307][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 117.021511][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 117.032111][ T9] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 117.040290][ T9] usb 8-1: can't read configurations, error -71 [ 117.132128][ T6546] udevd[6546]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 117.509954][ T42] audit: type=1400 audit(1783265494.243:13027): avc: denied { bind } for pid=8525 comm="syz.5.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.677852][ T8547] netlink: 'syz.3.681': attribute type 1 has an invalid length. [ 117.709335][ T8547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.729815][ T8551] bond1: (slave geneve2): making interface the new active one [ 117.733353][ T8551] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 117.752015][ T42] audit: type=1400 audit(1783265494.483:13028): avc: denied { read } for pid=8554 comm="syz.2.683" dev="nsfs" ino=4026533152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 117.766834][ T42] audit: type=1400 audit(1783265494.483:13029): avc: denied { open } for pid=8554 comm="syz.2.683" path="net:[4026533152]" dev="nsfs" ino=4026533152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 117.779275][ T8553] netlink: 'syz.5.682': attribute type 4 has an invalid length. [ 117.850979][ T8557] ptrace attach of "/syz-executor exec"[7299] was attempted by ""[8557] [ 117.921538][ T8560] netlink: 28 bytes leftover after parsing attributes in process `syz.5.685'. [ 117.928872][ T8560] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.931682][ T8560] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.112579][ T8572] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.689'. [ 118.117175][ T8572] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.689'. [ 118.135950][ T8574] netlink: 'syz.3.686': attribute type 11 has an invalid length. [ 118.319032][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.693'. [ 118.327104][ T8594] binder_alloc: 8593: binder_alloc_buf size 1024 failed, no address space [ 118.332005][ T8594] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 118.343016][ T8596] binder: BINDER_SET_CONTEXT_MGR already set [ 118.347142][ T8596] binder: 8593:8596 ioctl 4018620d 2000000000c0 returned -16 [ 118.367356][ T8587] input: syz1 as /devices/virtual/input/input31 [ 118.397186][ T8587] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 118.518491][ T8603] ------------[ cut here ]------------ [ 118.520373][ T8603] 1 [ 118.520445][ T8603] WARNING: mm/page_alloc.c:5280 at __alloc_frozen_pages_noprof+0x2427/0x2dc0, CPU#0: syz.3.696/8603 [ 118.525073][ T8603] Modules linked in: [ 118.526488][ T8603] CPU: 0 UID: 0 PID: 8603 Comm: syz.3.696 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.529801][ T8603] Tainted: [L]=SOFTLOCKUP [ 118.531285][ T8603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.534397][ T8603] RIP: 0010:__alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 118.536587][ T8603] Code: e9 8d fb ff ff 31 d2 be 28 12 00 00 48 c7 c7 a0 64 e1 8b e8 4b ae 68 ff 2e 2e 2e 31 c0 e9 02 ed ff ff c6 05 5c 86 9d 0e 01 90 <0f> 0b 90 e9 6f df ff ff 48 c7 c7 80 9b d3 8e 45 89 f7 44 8b 74 24 [ 118.542379][ T8603] RSP: 0018:ffffc90020eef6d0 EFLAGS: 00010246 [ 118.544204][ T8603] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 118.546901][ T8603] RDX: 0000000000000000 RSI: 1ffff920041ddef4 RDI: 0000000000040cc0 [ 118.549339][ T8603] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 118.551822][ T8603] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 118.554208][ T8603] R13: 1ffff920041ddf32 R14: ffffffff9b74e444 R15: 0000000000000001 [ 118.556649][ T8603] FS: 00007f8dfdcd46c0(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000 [ 118.559415][ T8603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.561542][ T8603] CR2: 00007f8dfcd87480 CR3: 0000000065c3b000 CR4: 0000000000352ef0 [ 118.563958][ T8603] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 118.566449][ T8603] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 118.568943][ T8603] Call Trace: [ 118.570029][ T8603] [ 118.571301][ T8603] ? find_held_lock+0x2b/0x80 [ 118.572876][ T8603] ? is_bpf_text_address+0x8a/0x1a0 [ 118.574501][ T8603] ? is_bpf_text_address+0x8a/0x1a0 [ 118.576209][ T8603] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 118.578182][ T8603] ? is_bpf_text_address+0x94/0x1a0 [ 118.579836][ T8603] ? kernel_text_address+0x8d/0x100 [ 118.581578][ T8603] ? __pfx_widen_string+0x10/0x10 [ 118.583324][ T8603] ? __kernel_text_address+0xd/0x30 [ 118.585025][ T8603] ? unwind_get_return_address+0x59/0xa0 [ 118.586783][ T8603] ? arch_stack_walk+0xa6/0xf0 [ 118.588340][ T8603] ? tomoyo_path_number_perm+0x46d/0x580 [ 118.590254][ T8603] ? stack_trace_save+0x8e/0xc0 [ 118.591788][ T8603] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.593621][ T8603] ? policy_nodemask+0xed/0x4f0 [ 118.595251][ T8603] alloc_pages_mpol+0x1fb/0x540 [ 118.596790][ T8603] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 118.598513][ T8603] ? tomoyo_path_number_perm+0x46d/0x580 [ 118.600364][ T8603] ? __x64_sys_ioctl+0xb7/0x210 [ 118.601937][ T8603] ? do_syscall_64+0x115/0x870 [ 118.603497][ T8603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.605627][ T8603] ___kmalloc_large_node+0xe5/0x120 [ 118.607557][ T8603] __kmalloc_large_node_noprof+0x1c/0x70 [ 118.609326][ T8603] __kmalloc_noprof+0x5a1/0x820 [ 118.610878][ T8603] ? drm_syncobj_array_find+0x34/0x3a0 [ 118.613091][ T8603] drm_syncobj_array_find+0x34/0x3a0 [ 118.615039][ T8603] ? __lock_acquire+0x49f/0x1a40 [ 118.616624][ T8603] drm_syncobj_query_ioctl+0x25d/0xa90 [ 118.618339][ T8603] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 118.620238][ T8603] ? find_held_lock+0x2b/0x80 [ 118.621739][ T8603] ? drm_dev_exit+0x41/0x60 [ 118.623212][ T8603] ? drm_dev_exit+0x41/0x60 [ 118.624800][ T8603] drm_ioctl_kernel+0x1f3/0x3e0 [ 118.626336][ T8603] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 118.628216][ T8603] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 118.629905][ T8603] drm_ioctl+0x5e6/0xc60 [ 118.631282][ T8603] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 118.633143][ T8603] ? __pfx_drm_ioctl+0x10/0x10 [ 118.634703][ T8603] ? selinux_file_ioctl+0x13b/0x290 [ 118.636345][ T8603] ? selinux_file_ioctl+0xb6/0x290 [ 118.637965][ T8603] ? __pfx_drm_ioctl+0x10/0x10 [ 118.639494][ T8603] __x64_sys_ioctl+0x18e/0x210 [ 118.641213][ T8603] do_syscall_64+0x115/0x870 [ 118.642941][ T8603] ? clear_bhb_loop+0x40/0x90 [ 118.644866][ T8603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.647172][ T8603] RIP: 0033:0x7f8dfcd9de59 [ 118.648918][ T8603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.655064][ T8603] RSP: 002b:00007f8dfdcd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.657670][ T8603] RAX: ffffffffffffffda RBX: 00007f8dfd025fa0 RCX: 00007f8dfcd9de59 [ 118.660188][ T8603] RDX: 0000200000000100 RSI: 00000000c01864cb RDI: 000000000000000a [ 118.662648][ T8603] RBP: 00007f8dfce33e6f R08: 0000000000000000 R09: 0000000000000000 [ 118.665171][ T8603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.667598][ T8603] R13: 00007f8dfd026038 R14: 00007f8dfd025fa0 R15: 00007ffcce57e948 [ 118.670112][ T8603] [ 118.671158][ T8603] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.673406][ T8603] CPU: 0 UID: 0 PID: 8603 Comm: syz.3.696 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.676685][ T8603] Tainted: [L]=SOFTLOCKUP [ 118.678040][ T8603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.681484][ T8603] Call Trace: [ 118.682555][ T8603] [ 118.683489][ T8603] dump_stack_lvl+0x100/0x190 [ 118.685021][ T8603] vpanic+0x552/0x970 [ 118.686290][ T8603] ? __pfx_vpanic+0x10/0x10 [ 118.687731][ T8603] panic+0xd1/0xe0 [ 118.688921][ T8603] ? __pfx_panic+0x10/0x10 [ 118.690379][ T8603] ? check_panic_on_warn+0x1f/0x90 [ 118.691986][ T8603] check_panic_on_warn.cold+0x19/0x34 [ 118.693642][ T8603] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 118.695562][ T8603] __warn.cold+0x191/0x318 [ 118.696949][ T8603] __report_bug+0x30f/0x440 [ 118.698375][ T8603] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 118.700345][ T8603] ? __pfx___report_bug+0x10/0x10 [ 118.701924][ T8603] ? __kernel_text_address+0xd/0x30 [ 118.703539][ T8603] ? unwind_get_return_address+0x59/0xa0 [ 118.705293][ T8603] ? arch_stack_walk+0xa6/0xf0 [ 118.706795][ T8603] ? __lock_acquire+0x49f/0x1a40 [ 118.708348][ T8603] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 118.710264][ T8603] report_bug+0xb2/0x220 [ 118.711589][ T8603] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 118.713534][ T8603] handle_bug+0x16a/0x2a0 [ 118.714963][ T8603] exc_invalid_op+0x17/0x50 [ 118.716589][ T8603] asm_exc_invalid_op+0x1a/0x20 [ 118.718145][ T8603] RIP: 0010:__alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 118.720263][ T8603] Code: e9 8d fb ff ff 31 d2 be 28 12 00 00 48 c7 c7 a0 64 e1 8b e8 4b ae 68 ff 2e 2e 2e 31 c0 e9 02 ed ff ff c6 05 5c 86 9d 0e 01 90 <0f> 0b 90 e9 6f df ff ff 48 c7 c7 80 9b d3 8e 45 89 f7 44 8b 74 24 [ 118.726559][ T8603] RSP: 0018:ffffc90020eef6d0 EFLAGS: 00010246 [ 118.728584][ T8603] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 118.731348][ T8603] RDX: 0000000000000000 RSI: 1ffff920041ddef4 RDI: 0000000000040cc0 [ 118.733969][ T8603] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 118.736694][ T8603] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 118.739490][ T8603] R13: 1ffff920041ddf32 R14: ffffffff9b74e444 R15: 0000000000000001 [ 118.742156][ T8603] ? find_held_lock+0x2b/0x80 [ 118.743685][ T8603] ? is_bpf_text_address+0x8a/0x1a0 [ 118.745457][ T8603] ? is_bpf_text_address+0x8a/0x1a0 [ 118.747169][ T8603] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 118.749252][ T8603] ? is_bpf_text_address+0x94/0x1a0 [ 118.751252][ T8603] ? kernel_text_address+0x8d/0x100 [ 118.753074][ T8603] ? __pfx_widen_string+0x10/0x10 [ 118.754649][ T8603] ? __kernel_text_address+0xd/0x30 [ 118.756284][ T8603] ? unwind_get_return_address+0x59/0xa0 [ 118.758049][ T8603] ? arch_stack_walk+0xa6/0xf0 [ 118.759557][ T8603] ? tomoyo_path_number_perm+0x46d/0x580 [ 118.761379][ T8603] ? stack_trace_save+0x8e/0xc0 [ 118.762911][ T8603] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.764752][ T8603] ? policy_nodemask+0xed/0x4f0 [ 118.766276][ T8603] alloc_pages_mpol+0x1fb/0x540 [ 118.767808][ T8603] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 118.769546][ T8603] ? tomoyo_path_number_perm+0x46d/0x580 [ 118.771321][ T8603] ? __x64_sys_ioctl+0xb7/0x210 [ 118.772857][ T8603] ? do_syscall_64+0x115/0x870 [ 118.774356][ T8603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.776248][ T8603] ___kmalloc_large_node+0xe5/0x120 [ 118.777888][ T8603] __kmalloc_large_node_noprof+0x1c/0x70 [ 118.779632][ T8603] __kmalloc_noprof+0x5a1/0x820 [ 118.781179][ T8603] ? drm_syncobj_array_find+0x34/0x3a0 [ 118.782956][ T8603] drm_syncobj_array_find+0x34/0x3a0 [ 118.784651][ T8603] ? __lock_acquire+0x49f/0x1a40 [ 118.786275][ T8603] drm_syncobj_query_ioctl+0x25d/0xa90 [ 118.788025][ T8603] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 118.789943][ T8603] ? find_held_lock+0x2b/0x80 [ 118.791466][ T8603] ? drm_dev_exit+0x41/0x60 [ 118.792937][ T8603] ? drm_dev_exit+0x41/0x60 [ 118.794391][ T8603] drm_ioctl_kernel+0x1f3/0x3e0 [ 118.795984][ T8603] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 118.798154][ T8603] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 118.799869][ T8603] drm_ioctl+0x5e6/0xc60 [ 118.801295][ T8603] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 118.803201][ T8603] ? __pfx_drm_ioctl+0x10/0x10 [ 118.804781][ T8603] ? selinux_file_ioctl+0x13b/0x290 [ 118.806441][ T8603] ? selinux_file_ioctl+0xb6/0x290 [ 118.808107][ T8603] ? __pfx_drm_ioctl+0x10/0x10 [ 118.809662][ T8603] __x64_sys_ioctl+0x18e/0x210 [ 118.811241][ T8603] do_syscall_64+0x115/0x870 [ 118.812744][ T8603] ? clear_bhb_loop+0x40/0x90 [ 118.814275][ T8603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.816153][ T8603] RIP: 0033:0x7f8dfcd9de59 [ 118.817751][ T8603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.823883][ T8603] RSP: 002b:00007f8dfdcd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.826525][ T8603] RAX: ffffffffffffffda RBX: 00007f8dfd025fa0 RCX: 00007f8dfcd9de59 [ 118.829081][ T8603] RDX: 0000200000000100 RSI: 00000000c01864cb RDI: 000000000000000a [ 118.831619][ T8603] RBP: 00007f8dfce33e6f R08: 0000000000000000 R09: 0000000000000000 [ 118.834126][ T8603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.836715][ T8603] R13: 00007f8dfd026038 R14: 00007f8dfd025fa0 R15: 00007ffcce57e948 [ 118.839294][ T8603] [ 118.841102][ T8603] Kernel Offset: disabled [ 118.842526][ T8603] Rebooting in 86400 seconds..