last executing test programs: 3.581707793s ago: executing program 2 (id=96): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8=r1], 0x118) ioctl$BSG_GET_TIMEOUT(r1, 0x2202, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfcc00000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0xfffffffc, 0x100, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x7}, @IFLA_ADDRESS={0xa, 0x1, @random="0e1d6c77e161"}]}, 0x34}}, 0x0) 3.510997518s ago: executing program 2 (id=97): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x3, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002080)=ANY=[@ANYBLOB="e0000000150021"], 0xe0}], 0x1, 0x0, 0x0, 0x41}, 0x4000800) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, 0x0, &(0x7f0000000080)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r6, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) (async) recvfrom$inet6(r6, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r6, 0x0, r1, 0x0, 0x10000008ebc, 0x0) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f0000000480)=ANY=[@ANYBLOB="64796e2c7375626a5f757365723d74d0ffffff25c22f9ced51e58264d9dfc0b46c72858657feaa4d46abde602c7365c72df862656c2c666f776e65723d000000", @ANYRESDEC=r7, @ANYBLOB=',dont_hash,\x00']) (async) mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f0000000480)=ANY=[@ANYBLOB="64796e2c7375626a5f757365723d74d0ffffff25c22f9ced51e58264d9dfc0b46c72858657feaa4d46abde602c7365c72df862656c2c666f776e65723d000000", @ANYRESDEC=r7, @ANYBLOB=',dont_hash,\x00']) r8 = socket$rds(0x15, 0x5, 0x0) mknodat(r1, &(0x7f0000000180)='./file0\x00', 0x80, 0x2) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000080)={@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, {&(0x7f0000000000)=""/44, 0x2c}, &(0x7f0000000040), 0x10}, 0xa0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000080)={@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, {&(0x7f0000000000)=""/44, 0x2c}, &(0x7f0000000040), 0x10}, 0xa0) 1.840800463s ago: executing program 0 (id=113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018004000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000000000000000000100000a"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x44, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) close(r2) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f00000001c0)={'virt_wifi0\x00', @random="0100"}) (rerun: 64) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async) r4 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) (async, rerun: 32) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) connect$x25(r5, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x3ff}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000fedbdf250700000006001a004e0004000000000000240000"], 0x24}, 0x1, 0x0, 0x0, 0x8000044}, 0x40) write$P9_RXATTRCREATE(r2, &(0x7f0000000480)={0x7, 0x21, 0x1}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000e22000/0xe000)=nil, 0xe000, 0x1000004, 0x1010, r2, 0x0) 1.040623036s ago: executing program 3 (id=119): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) pread64(r0, &(0x7f0000000040)=""/29, 0x1d, 0x3ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20000084) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x58, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @random="f04b218283be"}, {0xa, 0x0, @default_ibss_ssid}, {0x7, 0x0, @random="8ea272"}, {0x1a, 0x0, @random="1ddac83fb5a4fda15959ca59fcc929dd17b58a93c208"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8080}, 0x840) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000380)="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") r5 = socket$caif_seqpacket(0x25, 0x5, 0x0) r6 = accept$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000004c0)=0x1c) sendmsg$inet(r6, &(0x7f0000001680)={&(0x7f0000000500)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000540)="b0d64ea1287cee2a78a855552f412e58d38e54", 0x13}, {&(0x7f0000000580)="6cfbc42fd7797f9add73dc01f6ed3a74d20983f9b6b1ef81d6626064430c9c51af7b4de67aec7518adb49c1b86f6c12cdf05a234b90d861573feac971bd830566c41a9b5042005538ad901d4e061d88648fd1fdaabdf0723770e98c25017d3b93df0f033", 0x64}, {&(0x7f0000000600)="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", 0x1000}], 0x3, &(0x7f0000001640)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x18}, 0x81) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x44, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2e}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4054}, 0x4028004) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000001800)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000001840)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001980)={&(0x7f00000018c0)=""/157, 0x9d, 0x5, 0x25c}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000019c0)={0x21, 0x8001, 0x7, 0x0, 0x4, 0x0, [{0x4, 0x71, 0xfffffffffffffff4, '\x00', 0x2180}, {0x101, 0x1, 0xfd2, '\x00', 0x2809}, {0x7, 0x4, 0x7, '\x00', 0x2800}, {0x4, 0x2, 0xe42, '\x00', 0xa}]}) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, &(0x7f0000001ac0)="83550b2200a37f550cacd9515eb75dd8eb53322f0fa407fff71245f7dab630d185b123dddaa1c3a62ac046e7c88cb3140ec78e1f0e49de942bc4d5592f21b13de017c93714085f2e02b6f3413bfdc3c7c9e63bded0a0b6ce760421bd1e81b0f5688f1f3765d5eb4d218e3feac80475c41f156467eb92aa94f3142280db53c969556def2c7ece257c52c64cd244e006587fef62f3dc9267cafc57f5e3052d40929a502374c393e5ec195623b379023c2e41a6a7d417f7fba20a75fe776320b5b111e02a1a3194c73e08f5deb93171c87ade703d51b1ea", 0xd6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x30, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x76}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4088805) mq_timedreceive(r0, &(0x7f0000001d00)=""/145, 0x91, 0xaa5, &(0x7f0000001dc0)={0x77359400}) r10 = fcntl$dupfd(r8, 0x0, r5) accept4$vsock_stream(r10, &(0x7f0000001e00)={0x28, 0x0, 0xffffd8ef, @hyper}, 0x10, 0x80000) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x17) read$rfkill(r10, &(0x7f0000001e40), 0x8) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001e80)={'comedi_parport\x00', [0x5, 0x8, 0x97e6, 0x0, 0x5, 0x5, 0xb7, 0xd, 0x9a0a1db7, 0x9, 0x7, 0x7f, 0x1, 0x4, 0x1, 0xffffffff, 0x8001, 0x2, 0x5, 0x401, 0x11, 0x7e, 0x3479, 0x3ff, 0x5, 0x9, 0x2, 0x9, 0x7, 0x10, 0x9, 0x571d3847]}) ioctl$FIONCLEX(r6, 0x5450) getsockopt(r5, 0x2a34, 0x3, &(0x7f0000001f40)=""/59, &(0x7f0000001f80)=0x3b) setsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, &(0x7f0000001fc0)=0x2, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002000)={{{@in6, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000002100)=0xe8) 959.711426ms ago: executing program 3 (id=122): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41, 0x0, 0x1}) close(0x3) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000046c0)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x403a1810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) 958.891624ms ago: executing program 3 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'bond_slave_1\x00', 0x53fa}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r1, &(0x7f0000000080)=""/115, 0x73, 0x10022, &(0x7f0000000100)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x763, @empty, 0x5}}, 0x24) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000140)={0xa, 0x0, 0x4, @private1, 0x8}, 0x20) r4 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000200)={0x6}, 0x4) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockname$l2tp6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000300)=0x20) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000c4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000480)) r7 = signalfd4(r3, &(0x7f00000004c0)={[0xfec]}, 0x8, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000500), 0x20000, 0x0) getsockname$l2tp6(r8, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000580)=0x20) writev(r8, &(0x7f0000000780)=[{&(0x7f00000005c0)="1dcf5333908523fd7f96ebf825409e7245e50098eabe630166e719e27cc78dc90d5576005a48f4162b6b3d6ac307cd0aa24fe4e2b0fcac1bf4f613a85fa90ca7d06daf42e9c22ec97b62c63be1ea06b526473275a0c7c4ee7091a3b59aee77b300b085282bdaf331446231ce60c0563e2673bd6c0f9b55341bd6aaf378072a0f408b69032b6c0050ca777328bb30393721a634235ba8a479", 0x98}, {&(0x7f0000000680)="4430d26b7b70ea5b91102db497386f6c3e2a81613e9eb52ece72b2db29715de9cd8cb3bdc3d3fda29e217b6256398def801da7d8664cf86cc1028de63e208a7588be35bc7ccacee3d37d0cfc72cd950c7ee6491fbeeb777487", 0x59}, {&(0x7f0000000700)="089ae477ec0da18004f6b0b8f8c88156526462cc1cdd59b9c492ed8cfddd4f910ebde941971886d990876cb8531038744416b0e1d4fbf638dfef6cf9f30c195919667c8e55e1c04ebeaa8e6d252f663bd05de83ba78332cf5a2f9dd7f9cfafcaf4c671acb491ff73977fd07192593d7140240e143e184bf9d432cc", 0x7b}], 0x3) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x100010, r7, 0x83000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000007c0)={{0x46, 0x4}, 0x0, 0x7, 0x7, {0x64, 0xc}, 0x3, 0xbbe}) r9 = ioctl$KVM_GET_STATS_FD_cpu(r7, 0xaece) r10 = accept4$bt_l2cap(r7, &(0x7f0000000a80)={0x1f, 0x0, @none}, &(0x7f0000000ac0)=0xe, 0x40000) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000b00)={0x9, 0x6, {}, {0x0}, 0x3, 0x9}) statx(r8, &(0x7f0000000b40)='./file0\x00', 0x100, 0x400, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)="2488973e089500262a18075cf84c1ddc7d79b390e2a5cdf8c7c0246eadc5cab9f4aa29b266ec1909c534ca6961c87fc6774104fc0d2abdcba72ef6d3c61f15", 0x3f}, {&(0x7f0000000880)="5242b538e3c51ab383ea8137e6a566a8561cc57533c9db5b63bc6c1bf70a08df9310b5aab10553cab1a0fdac13897b305dcb322b43b0d00e0fac6bcf6dcaed2983d1677ff2ac4a8ab26ad1f52f72b87c80685b51bd3fd8273df09005a514072aa9cc6ccc3666a362d4a7f9a0c47f1fe9475ff73707d23f3c71109c3a7d17542884bedceb072d45442fcb781c3f2eb34b508f153b57b5c0faf20f1eff815c7416ba462205c653a1305df0968d581e0ce87e5af3192588363cf39767ced12f32b55310e199e06bdb80651f9787e07760cabcbb99b0397a2222724b8ccbb8984c68d545a10f596531362c63992f27", 0xed}, {&(0x7f0000000980)="d9f72519c7437a231d97f51485439975e4a31e898c1404341d77f16df87ba951591444431e22e6a4290ca8b7f4636f348b299ad272a6967067e1a3b63ab6f57f531b5e3a26b99f38419dae9f2d187f2be85693b481961433da2b8ac488315cdab580afb710006933cc498258cec0fa2535d37994c50255880912eb863d850473249cd985264fcd1ff12a89baee8229ae566d8f5d72d73027771994ce09d847f2ff7d8d8cb5fbf3b7f0e4", 0xaa}], 0x3, &(0x7f0000001080)=[@rights={{0x30, 0x1, 0x1, [r2, r4, r4, r1, r4, r9, r10, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [r3, r7]}}, @rights={{0x24, 0x1, 0x1, [r4, r8, r5, r5, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r12}}}, @rights={{0x1c, 0x1, 0x1, [r8, r8, r3]}}, @rights={{0x30, 0x1, 0x1, [r4, r7, r4, r0, 0xffffffffffffffff, r1, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r3, r2]}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x150, 0x40844}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001200)="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", 0x1000}], 0x1, &(0x7f00000023c0)=[@rights={{0x24, 0x1, 0x1, [r1, r2, r5, r5, r3]}}, @rights={{0x28, 0x1, 0x1, [r8, r1, r1, r7, r5, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x38, 0x1, 0x1, [r7, r4, 0xffffffffffffffff, r7, r0, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0, 0x804}}], 0x2, 0x801) 900.738837ms ago: executing program 3 (id=124): r0 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'rose0\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x18a) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, 0x0, &(0x7f0000000240)}, 0x20) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x5, 0x0, [{0x9a7, 0x0, 0x100}, {0xb65, 0x0, 0x2}, {0x37d, 0x0, 0x3}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x86, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{0x1}, {0xfffffffd}, {}, {0x0, 0x8, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) write$qrtrtun(r1, &(0x7f0000000600)="00000000040035", 0x7) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000640)={@remote, @multicast2, 0x0}, &(0x7f0000000680)=0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYRES32=r2], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x39, '\x00', r7, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) setsockopt(r10, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r10, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001800000100000000000000001d010000150004000400006005000000acd0c4c83f08113d999fd7c50100b4cd6e03be225ce445e152efae41bc00000000006949d30f8ac07a370c75024db693b55baed339123f5dbc2c919c9a28c94d"], 0x2c}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)={0xc, 0x0, '\x00', {0x0, @reserved}}) 722.028299ms ago: executing program 3 (id=126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f080, 0x6}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8006) 721.83188ms ago: executing program 3 (id=127): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}}, 0x0, 0x32}, 0x28) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x40c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x2674, 0x4, 0x8000000}) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x174}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 597.019675ms ago: executing program 1 (id=129): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x7, 0x810401) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x11) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) socket$rds(0x15, 0x5, 0x0) 494.527551ms ago: executing program 1 (id=130): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCEXCL(r0, 0x540c) (async, rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x129002, 0x0) (rerun: 64) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0xe7) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000004c0)={0x1, 0x0, 0x18, 0x12, 0x3a, &(0x7f00000000c0)}) (async) write(r2, &(0x7f0000000500)="b6c88ff2a13f0d330b84937bea699034dec97d4154aa0976045eccf6e8596a04f40639b4378a7baf814ba817b9a94a7d91cfc007eddb5cbe9eb2ad13eb01ab30cc9c539b2f7735c095e6d2fb5e8107f9e288356d9e249233a19e96cdf03909088e28a725e96455943d770cd4a3e289974df4b9ae5000a9d3bfc8f7d90a3dd689a24bf3e84f895d5c8c6dd6e9679228df98fcffec84eefd0c7b53a43944b40c68717c649c90f69e04bc8e1b21b8c47b6d97fad5c684c822b2a4feb83717fbbb", 0xbf) (async) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f00000005c0)={0xffffffffffffffff}) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$TIOCEXCL(r4, 0x540c) (async) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000640)) (async, rerun: 64) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000680), 0x1c3802, 0x0) (async, rerun: 64) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCSIG(r1, 0x40045436, 0x8) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000006c0)={0x4, {{0xa, 0x4e20, 0x5d, @empty, 0x8}}, 0x0, 0x2, [{{0xa, 0x4e23, 0x18468463, @private0={0xfc, 0x0, '\x00', 0x1}, 0x70}}, {{0xa, 0x4e23, 0x3, @empty}}]}, 0x190) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x40080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000008c0)={0x2, "df4231aa33b0f08520e25608a20a7d781de6b19c4a397b8cdae58ce9cca90671", 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000900)={0x0, @adiantum, 0x0, @desc4}) socket$kcm(0x29, 0x5, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000940)="fb0234e89130634a4313936f144a063529461e4c69cc089a0aac0fb7dfb2fd59da19e914095fc7b6d228f5a0115a9ffd237eaaca05813df3031c81ba0fcc5e2e87d943a65aa8e7eb0e88727166f1d3ab9e318412bfc0d93ce63c40169cd2d71f0e8dbf3b54807d5a10f54a7f28896ad2e9a9fb6944ef50c709a4210d3d26c5aa99450a095287001f5efd09a8bf06fc9fdb398f426371563648447ba453") ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000a00)=0xb) ioctl$TIOCSCTTY(r5, 0x540e, 0x93b8) listen(r4, 0x4) (async) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000a40)) (async, rerun: 64) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000a80)={0x81, 0x0, 0x2}) (async, rerun: 64) fchmod(r6, 0x278) (async) socket$kcm(0x29, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b00)=""/2, 0x2}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000000c00)=""/111, 0x6f}, {&(0x7f0000000c80)=""/43, 0x2b}], 0x4) 494.091995ms ago: executing program 2 (id=131): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x107140, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) ioctl$CDROMREADTOCENTRY(r0, 0x5306, &(0x7f0000000040)={0x1, 0x4, 0x5, 0x1, @msf={0x81, 0xeb, 0x4a}, 0x86}) 490.407017ms ago: executing program 1 (id=132): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/59, 0x3b, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dmmidi(&(0x7f0000000140), 0xfffffffffffffffd, 0x181100) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd28, 0x25dfdbff, {0xa, 0x10, 0x100, 0x9, 0x0, 0x0, 0xff, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x2800c008}, 0x4000045) 421.816481ms ago: executing program 2 (id=133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x2400000, 0xff, 0x0, 0x6, 0x7f, 0x1, 0x6, 0x9, 0x7, 0x7, 0x0, 0x36, 0x36e5, 0x7, 0x9, 0x1, 0x3, 0x2, 0x9b, 0x2, 0x2, 0x0, 0x5f, 0x800d00, 0x4, 0xcd9, 0x84c7, 0x2, 0x4, 0x1, 0xfff, 0x8, 0x5, 0x2, 0xa, 0x6, 0x9, 0xd6, 0x0, 0x5, 0x8, 0x8, 0x9a, 0x1, 0x0, 0x7f, 0x3, 0x7, 0x7, 0xb7, 0x8, 0x8000, 0x800, 0x78, 0x4, 0x4, 0x10000, 0x555, 0x93c, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x4, 0x3, 0x7b4f, 0x1, 0x200, 0x80, 0x610b, 0x6, 0x7ff, 0x6ce1, 0x98, 0x404000, 0x1, 0x0, 0xaac, 0x53, 0x3, 0x2, 0x7, 0x1, 0x1, 0xdbf4, 0xfffffffe, 0x80000000, 0x2, 0x0, 0x59b55464, 0x2, 0x4, 0xe7f, 0xba5, 0x10000, 0xfffffffb, 0x8, 0x3ff, 0xb85, 0x8, 0x3, 0xdd, 0x800, 0xbac6, 0x4, 0x93, 0x8, 0x3, 0x40, 0xffff, 0x6, 0xfffffffb, 0x5f, 0x0, 0x0, 0x0, 0x6, 0x3ff, 0x7, 0x1ff, 0xc8c, 0x7, 0x5, 0x2, 0x80000801, 0x2, 0x4]}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x230000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000280)="da1a0f38f15c00ba2000ed642e0f01c5360f01df0fc701dfdfad000f00d0baf80c0f98dbe1efbafc0c66edd9ee0f01c3", 0x30}], 0x40, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair(0x25, 0x1, 0x5bc, &(0x7f0000000000)={0xffffffffffffffff}) accept4$tipc(r6, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x81000) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r8 = socket$inet(0x2, 0x5, 0x466e) getsockname(r8, &(0x7f0000000340)=@ethernet={0x0, @link_local}, &(0x7f0000000440)=0x80) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 421.612659ms ago: executing program 1 (id=134): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0xabf4, 0x8}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x40) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0xabf4, 0x8}) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x2) (async) 328.159676ms ago: executing program 1 (id=135): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000002000000000000000000000008500b2cf00701c69e1730000a0000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd8c, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)=""/4096, 0x102, 0x1000, 0x0, 0x2ea, 0x10000}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) flistxattr(r9, &(0x7f0000000640)=""/137, 0x89) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0xfff2}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) setrlimit(0x0, &(0x7f00000001c0)={0x7fffffff, 0x7}) 270.98828ms ago: executing program 2 (id=136): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000440)={'comedi_parport\x00', [0x4e27, 0x1f, 0x3, 0x7fffffff, 0xe7, 0x8, 0x8, 0xa82, 0xff46, 0x100, 0xcf3, 0xb, 0x400, 0x2, 0x3, 0xffffffea, 0x10001, 0x10087, 0x2, 0x0, 0x2, 0x289c, 0xf23, 0x2000007, 0xb, 0xbfd, 0x3c, 0x5, 0x6, 0x0, 0x80000000]}) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="780000005500000026bd7000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01fb0300488149b0b316e4bba3d7c756f57839620000000000000000", @ANYRES32=r2, @ANYBLOB="00010000ac1414bb000000000000000000000000436e000020000100", @ANYRES32=r2, @ANYBLOB="000001002001000000000000000000000000000086dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f9}, {0x6, 0x11, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="20010000", @ANYRES16=r5, @ANYBLOB="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"], 0x12c}}, 0xce0b952691324dbc) syz_emit_ethernet(0xfc0, &(0x7f00000024c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010526", 0xf8a, 0x3a, 0x0, @private0, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x1f, 0x19, "9df8869c24c505b7d471402a31e6ea98307116e5d84627360d9f4ded8e743b0a5631de7eb2af6781b38261e2ca88016e2bf001896cdfa7fc8170ab9adb87a391d8e02124fa9dfc4d572402ea66f17f88eeb6f25953faff57b27820bfe984332773e6f52bd686cf5e7bd0796180260e419b51620df7e8d9a8fc812c38cde15d9ae250850e519b044586e7bd0537f0b62ff3ee6e1b592140da9cef727f98361e77ad3c9c574dc00f3813d78ec38bf0639a73f5620eb2712015d39bbf81edc0ee2334608a65cd2fa59aa2f8"}, {0x22, 0x5, "0e8ea79a6ce39825120e696373c2cb5b842a188554365fcc7635f93b6b0cf7183c1473add686df2b883aed0b5a"}, {0x18, 0x16, "164812996b35d1b9e2f009bfa0918189ad27dd4a3d46585c7d16ce907c5504011d36dea981a80b504f997c2ed526ad05711a33c9b09415e65278bdb063fd5588fc70a76509a5aa4aab42b570d3da4dc3da6880bc1677389dae6d0f72189dd3807350da1da304211d879a6b952cc3ae70ff339f7dc3891b890464a8f8e817e7dfb439eb3e220f99e7be4abd1954d0e48cbcb2f991a0669584e702c34c2675ed3952a32e09d61359fbc7edb7dfd1d1c780"}, {0x0, 0x11, "b5fbe47cdb0b36345cc09f83e901dae4e362a963a13d4e5a77cd4635f762afac9637356d83e8410668207a283af51ec73dcccd5e34b888c9d6caf39b588d14ba163d0397375dfb1cb3f3a525b67095c43745f91ac908c1af4a0e62cc0730bb558e8a52746023e8f17ff22a41f825a7acb5902c8b2983e30fa5c18e28bcbc5ef7151c720cb0bf141365"}, {0xe, 0x19, "37ee356bee650bdd6af02cea4cad621cf827ed7ecb805aac800dcc61eae89f6d389087b862cf9558a7a289b4b959ba78102a42520fabfcd675eb5da12d23af9b213046ebfe548c661623d918704b93e0e8c093bb33c345ed4ef134f209875aae46e8c5687fead9814b3add68478c4ca286bb4e3419e54c20df53b7c7f256093a0e04867445fd011a78cfad22ac7ad2db83e0648fe231839ae93cc75254879267f4327ef43aa4739e70f9578f96825c35f9642d3f4df76bd6ff7612674ae9189c4cceedccc72228c1"}, {0x5, 0x1b, "2890ab98d2047b0789f6e5e4ab99c79937d655f7876ca184567615000e9ac4aedcbeccbec4fa8ffeec4e3e94d0da137df21b2b6d4b16ae78bcb72d4f797d51192b56f4bf2922764899880660eedc0194bffc872df8a661bb891a4d118f560e11c5eaab7fe8e436799d26d5fda68bd1ef3763f9b93693a2a8282aab9b9962124857784bb5462c3d76113cc913796214e0f2f9ea8e6bde667578b5c1293ff8cc710816c5be206317edfa4b99e90e5ddc976669468bdd6cbbb350e24da20228c725f686fe97201078aaa5f9028fb68cd6e66610fe937a4c4e2d"}, {0x1f, 0xa, "0f078023085bc803dc3c68c0c4e6e790e139b1650b0dbd28073aae4aa7d13e92eab598a25147b369a7d2585c1d562f2c40b6b20c730e4236a6b856e36eb32ae0902a49e36d8c2cf4ef89c55cde367a37d5bacda3"}, {0x1f, 0x9, "87b62409876b32a091ad326971e24d0c74d96b20f59e34c1afef8d39b944eb7f0a49d314c3bbe43250158a11806d0784a37b9a3f3bd14e34b971a03cab740eb95caccb968bcf478e"}, {0x1, 0x160, "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"}]}}}}}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) (async) sched_setscheduler(0x0, 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000003480)=[{{&(0x7f0000000780)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c1151ce75c71727f7709d7488006a7dd4340eef9b6345be590835473409befd00c3c6fd26cd2290513abe76056160988797b595e2b0cb32300c6386a06416b0fb153c4d9dcec224b694ad6ce6f8c2f987b75ec39a6ab1a437b83177bae9cfa2af02dac8bf1f0680336d8b61bea295902f6f583e7f76fa3efd523bd3420a5c036d7da34c15883ef3f78c113a04b3c625e415e0495f666ffa8d59986516558c81d67ff59a5ad28959f134ac8b422b33b69e3a9ed2de14342ec7fd7ca6c8d9852dd1414061822f7285c7f2dc81ef3a3204d2e32081f10", 0xd5}], 0x1, &(0x7f0000000900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x21}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010100, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}], 0xb8}}, {{&(0x7f00000009c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000a00)="0346f94aad22aa3fefd2d6ac44f99a3cfe3fe55a72e80f92cb97b66a38dc9bc5114b0fefca06ee17e04cfdd8b664638a56e51b0c0ebe4cfe51e894e200675dc27a", 0x41}, {&(0x7f0000000a80)="f60d7393da76427b062ee778309d0eb5bb0e237ad9abdd74f9d8ea6b5b8b14c65a47fd1d051cd744a52259148cb3c586c1d795d25b4b95249568c8ad52", 0x3d}, {&(0x7f0000000ac0)="cb0687bfa0f070b924ca812eed8780c6ea66fa61c89612449a6e05991d1cf3377401d58ead39fbb703afc4000b12c7c3a391f993c2de728d1316adccade09d123e856dbba42519f6ea0a9a50f657ae07d3420e6dc927583b97b8ef1a733294f890b703302dd6a8c4d48690d60b04f9250584f23ca90aa8b9918bcc1a8e97d9ef58422ad434c9cbf956c5a9de3640f610cee63e084dd0953f41ac4043bafc489aa74f66bfe91b08f439a6c1759bd2612cd6277760975856d521376a0b6899250a05c4f2a7e4e16be95640034d9287c6320f62e09c98ee2129", 0xd8}, {&(0x7f0000000bc0)="f101a9186814e61ad69eda7115deff1a557a0ddfd8a0363420686e66ad1215af88ad0828b1bf6783b016d7ceada04305c2d74245ba64bdf6efc3d7c927d40ff3da31e47d", 0x44}, {&(0x7f0000000c40)="d59e509dbacf78bb13c5d0f4f727f8cd84c4cd25fa0f584fec275e4d70cb599af7f83b9878f9de796f76ea14e0f7b8ecae035ab770e1ab0dbed5bad9009c35b585515948fe22a7245141f888469b10b2af2c8dac0471e3c72ab12439370245162a2fc9948297278fe0f7990246b00d2685e8721bbd9d2c5b805a589ee3c30573cf2cffce1021f8305d0835e8ad6833b0cebc3696610ff66ba85a4b865b8a3ddc2680e77c36b97710215b30e8def5a1b87cfd48399607211c8106948cd27355baa2cf6f6f9a662276994230e6048b512479e66d5444a9f279c42ba18afcaade8e4e", 0xe1}, {&(0x7f0000000d40)="471d12759f056ec914376f0c65d498aabace15fd06804c9a803bc8d750d1660553cf55bc8724773f9a3812d15caf492d11b3a763266f51e4bb516ff6ea89e0a569a031b26378da23d332a3ef6d5344d1bd0d61a626c28ff8ecabfd3fab4ff3cb7094ab2d3bab", 0x66}, {&(0x7f0000000dc0)="ea0230164de76b8d9991adbe6f5eebbfbb9ce6405c6689640820a7c736c3ebfdda933ea9ed0d3b2195aed45c8dd7361585357be1290d8c12a7a7c6ab76b107a6b70514e09854570aa8d9e74ad13bcae13d1f36e1fc93df5a35968741b35f45ab610e2f19cf8b9036c844442ab0f209d73637cb8db0c71432eccccbfbb7478a9da05a94c2ef9f05aedc1362b9533f7981acdab8e3620175497d50b4ef5ffe02b6", 0xa0}, {&(0x7f0000000e80)="efe56cc43c68557d81089f93d31afb62b34ab50494100e184b990712cd909ea874e9c0872f2f2c9aad89cd90a8ae1f2da7fa89bb43f0b2c2b9a17c30bc5b88a41753f847537bb5e03b118103d59399269f832b127e", 0x55}, {&(0x7f0000000f00)="69fe04d5b35169f32f6f26bdf245a49f076c8fda3f4eccd8ce66eba23a0555a4728e645613b88921aa0e816098bd570cce258334b656748b37e5868634000e1e4b46a2b72dcd71e37e3be07d6dbeb4669c6650b1a3dc6c8a653ae1537ab1cc2a2942598265f1", 0x66}], 0x9, &(0x7f0000001040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}}, {{&(0x7f0000001080)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001240)=[{&(0x7f00000010c0)="bcb400cc84b15f484c2653562b4ea31329c0c2beb026a60c706bee3cede1b45ca9741af8628540e9f80f3be55a8cf3aff7d6d661a37db37876d8b1f17d8874d3785ffc834c0bb52d901edf26d986224a4178e4585bed51a5c5ddde6f", 0x5c}, {&(0x7f0000001140)="d29813144fcd64366a77ed5a2b79da9aead6b884ba3f6465f155e6a9da963a459ffffb382ee5e0945b57e6b69885107b29bac595757a8c48022cc37fac2913521f28871794fd55e2697c13c4721fa883af74aa8bb3eb01ca6fba85a94956665a46e1df7bb6439396a735e0db3e8f632b0c1d327206511219ebf011faa1f09ca60c82d84da56fec0b5e8b99882e193e02d7312bc9f80c9f70e5c4f6fd51eb71da2f21276c1d86a3d632b5b212fac8beef603ee5c18cdf2c5926f4c3d75bfde253b7f4c2151ac858008e5742a7b91d2a01eb3da507f953981bc72bac6e8091bb9b23c8c76166976cc1f7a227cbbbc8b4c04060292610b539d781", 0xf9}], 0x2}}, {{&(0x7f0000001280)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002380)=[{&(0x7f00000012c0)}, {&(0x7f0000001300)="1c57f17ef7b1b6fa158a984bb5ea5ad7ec5ce24dacf0d9bb2548f6a8bae2735d853dadb036a7534ab13cc2f6efaca6f1edc96616af249da3851ca4a9b9e2b0b5911055d83280c62311d2d8ed08a4221d90f52e7b3027c6c7a3d20667b7abaacb06ad1eea0080e5650a8e35a0e5fc1133e5b0f2e0cd1f3b8c592ff996b7b9f25ca1d5e13f687edbe9c4efe07542b0d119fede41d2c723823fad2a90caf77db4ea7a310742e5666706adf35287b2f47dfb54ca28952fd2de79c63ffa9de0bfc25a1489ffda4fde1d2ea468947a252bb7999b291f0f1bd04eac4e9f499095dc01909904c78233d482aa2c6f8ef4c5e63366da0475ae117df460f5abc2148124a77c9f91b8668d0a77cfefc710ad44711f4e560939a5dba026d1f27810d834aef996bd46e8d6fca3c7b01dc9c6a92031bb254e03c62283af074fcdfd48782380cb8617c6508861f09c81fbe10af54f7fbf8e25632c4eabca94db72df370e5880927c480ad0c96507e04b81e3376b590c9253a69de76389007b1e94f06ec9fb3ce3c8cc6bc16d0987e4d101d4bc4299e47c7209cbe8335e9106f37dc145c2debec3958b1d86c5813bce0df2992b5b39b1035d33d0986288c745e2bdf087e82ee7d4583ae32d53a14c05508017521388d1d1bcfb0426a5e6d1b76ad31354a0d8b0c540c8b56821e74cfc17a45b3fba755ad2fee28575a2b254fbefc8b31264267a994660a2c3640e4f63b6ecd5d71c3a75e87fd79c740b1e81cd8ce9b81f113c9bb3c60773343a9019462eca45102ba05f5b68164f0283f9c56b2817b43688a1c35886e017b88663e4d82e60833720f94bc831f1da40313e6e21b46b02190aaaae98dbe616e2230062c4a9660a2aedf9b3587fd82b577cba3fc30694778bf14ecc6a1790534d1e0bdc4a2d5b56e65e76a22ed09132817092a62a6aeda57e7524499a0d825ea31ab325b418c655af4e6700db538aba99b7ec480371e0f800e206e47d0a0a52ba99e26d2d5071f2916ce5401aba092cc4fa72ddd95f807aad09cd7b2d7291dc448f24c2bb7b5ab4889750a9c9c31e0a872f45698ca9423525363729444c30eac75b08195ba9e21a3ac459a476ee108837f337edc929f5e672b7dcfdcffc09d776c3ea3baf72f47e32453cf4354ff027834f0adec695cd13d6a607a1f0f56cded235587c709797a5a8fb6ed52a328b56c5c9045744ced92297b844a0c767c3aa41cd3cb53e117c7caf5d7cc9fcefe520bcbdc42733b72176e35f9cf24915c5c101531f81efe0cf5a21ac2209f1b91b5776d1cd122c172aa3cf09de41294597e2bae2612f28264bf79bcdf4e4d8bf71afad4fe5480126f7fe6408cffa7d245d5a84ffbecc938455176459ef983723a7f2b544995e8cc140e0bc8ca9c808e725ca9acd8256aeda333cbc47ed49ee373d7a10a2202ab5383da0776755143e55e1a5cf086b13767f436d915fe83b87771dc84c4f234efc1899690369ac2efdb1d23ddcd93f3d3e4a4047fafb88adbacb012f7c5d95a1a68385491f0af50234fe0458486a9c06f66bf00dcd4c00daa0d27ae281848a546c384aaa0acf75081b8ad44fbbd419670d31a3b03fd22e2c1f9f0437b65f4e0a4127ca9c8debf92f900462195a4cd70b55fdfd32a283bff75a5f64c744fb198baa069406e2c3707b90d2d1d3ddd9b5a5408c9a62c3c855a7731a20d714f95183e394286402457c8cc0bed653d3aeb1a9f1683122eb5dbb2779564fb4d63f3e81d227fce009b2265ab0c877f510c021e48be718263e322fd7989a19a63b2d74acc19c80b1b1e19087577195e194c4c8d4427b8eecefdf683067c9107a5cbb506e85567743509743664591c9d8612fbd509e6e0b2bd6e8a9c7e806dd96384eb7199cbec4ee51c777b6204ca745bea11f501c01370ee070b4bfc552088b888ed329b038a0164405764527d0bc413d899ee6fd4e53856f6474ecf62b130c42f2c1e391031816681bd0fe2829767bfaa09bfd7c36a6fce1cadf2f7e812be669652b9da02311d4d9aa25afecc73e36fd9d77892242ac3d0151989aad1c29979de230fa7319af321a08691d0f36c461a551ae8f955f10d8c27f0f797ba5de921198d5e46113df14818750043c3f175108f6c02e61a2811e8c2cbc1813cc20edc6ddd34dfcb68ae7301d74591c307dd4899c5c9dd30c941b7fa5c56847c82043307a0ccafa3a79f3f4bed9e555c52395791a87e4f3da6edc9d40307b89ed837f1dfb8d4911de4ec7b87fb0b2ae0ed07864baa565f3cffa81353f1166ee5ec6b8e8decbd58959a1ae753584f314a6f7d794f3a14aa8f3a632752d41fdbd4599089060d79bfe97b856ee1b92719dc969efe5822fff2dd24b1312f1c98aca2958f3d98f414180027fc607d6cc142d82da7450066c22089130de20da84c68266a9bfbb87f1e3c26decb70d775ab424826be46bb6493e2b17caee05493589bd146d7ac1f35bf0b75ffb9ec4bcaea07edebe39dfe8a42ae15f468198407eab64a1075c4c22816b34f6a864e2fda74debe5a0fdc67c8313da96184eaf86c5e7733c0791cdda204031fb719761fc3285271e1cf4f1e124fe322c5c6550b0e5533ba57afad4b89b5a0befba788fc49be14401e294403edf193029058cfae756494cc7b50ba5d96766027481ab62c6c669d7843f5b7cb0b30e501846908ddd66ecbc25215492e56126a02037f7cab893878f871dfb374db176090ac28e3e98e27b787b5fa23d9c9bcbbdf1c19cda8aa8e9d7726f1794f9e05d43b7105f36bb959266350e6202242f1c5ba9a775e4961fab973fa7e7495a6dee3216f35c1b816350df378faed62d99da42432d3209d5485eb2338f681a5cf1d7265d5bdd69a4eb2d21a9c5289e0b85454df333202bbdf06b72a2d804f9c3aca4ade133a9b57a975569147c3ddff777f72d89c9335719a3d41d389eace27c6ab59f42d433167075ae2a06b12d8dc6c685121140deeda0b4229252f683f095e6fdfc8d0e47a54bdcafae64eea972148cdbd0bb1136aa6e407379c99c3ea802763a73968f0050272e0e32f8c770d5887bae49ca0b3a4f67c3bbb2e0ba9b6e1ac954010ffcd438fa331d7413063bf7c597c25457d17a0def4a908948f3c45de3028f9bb773f7dbecf096479d2a57f660ce69b7e4668695baaeaa395e0da255a36ed71002db1ca22593ddf13047384821f66c85ea6ce177aef2001a49277530062dc7ad8d564024d26012880a2769f75c9e71daa52363b335b819affb1e152e0a2d8dd67ed153fab08473d11c62938ceaa76f129a9941210f2fbbd8d5f8e7f42936a20ef878cf7d8ca261e88bb35fa03e6c21149be098f0c410f48de93f901531f0a8e45893d81f6c4b18c39aaf42a672001bf3a5f1f0444d98c7944e62b526f5286672e90ac0bc6f55b4b0815b6919c842a836e52df0fc83ac552c4eecb851f986aedaa6305beb35bafe612cda8e530a75d544bb878b98d3dc771e57a74779d7dfc7ec59e4cc61643896583e54999dc44a04031c63d5bda255c71b87f9a608a96f1f82fd75f364fba76bcf5bb2a088b7ca0ef847faa5d535ad23640e2c7f86f99700764779ab7a5a296a7b79eb6511ccd2eab96e2a31cacdbc3784f722bc62d8b9e129ea055a1f48c81f4fbe5e203a5d2789377ef3b6ea1a5c1bb27904aceefad9d98505f6b4c284600ef36784cf158e0478e63c2b81a4c5ea549578f3cebc9116937f7078493ddbf2329e5211de9c9b763e9b1878bf9610d7bebb9b9ea8065216aefd274fa76bdca202dc108b42ac9dec55f03c1d61da604473ed4f2e3de5837de2ea0b1944617231d75cde7b797f187f98c01b841dfc9f574d5157b0cb243a08726252032cd775838bdc0c01195b06b2b083fd908f3aa2d8b160f47dfd9c13ffbe9b931db4fcecb187c0e2f7cf2e8358b8ea8d38c45a27b7594b89f621ba520ccb1ef41c33a0095221366b4a23451dbcec5748c1879bc4ebb2b36f3e4848145c6da22c65051eba6303d4ae4e181c304170c690719a14cef2027e5c61b3c4a835378b139b95dc7ef74d4cf9b14ccee4665ec4f1e76d63b5857a581bdcb4d54255b1053d7c4f5404d8725fbce1eb2a5b03f039a3d32c7ff5f5a12dbc6840e9c9284dbc6d6b736f1a83a8da1e2f2a93adc12848966970b79a977bd8d5f8806be240fb4e680b9bed7cc12cffa1aece7b52a5927ecba309097266bec09b6e91ab6fc064f153f3a48948b81be7009a563d2556fc1753424879703d17d93ec1270f836c259a8dbe4cff90578833bb5e96c5debc36a3c8841937a841ded6ad9b49c8b532325f1ae923f91526188626184a2c30275087a680b4077d817079ddb3c3fa25e5a9463c1423ecd35b43f10809db0d93195f8a050123a873827f8ace5556c28b50c36d3b84d596bc39c25d30fce96b8fb72d7e86b870ca89a15c5c7879384665e4dda63e9d61c88c2000f44380ee81a82d0e20306f461c103b5c69817843c3e43c2ddb3efdf375481544608cdda29d105260cbaf23568dcc363521deca1d256c87462e3e4b2bf417a98be35ca50d0e705b273779eaaf61d8d056a5f26f6b6092e62402f615e1e5fba40411d27a0a2c21ae5b7c6a138ab4600674b685a9a0a954d3532466fbad241c72192865806ec5fbd95d61b8ef98ac430345d761f9441a43c0a641bc0ce58c69809dbc52271a61484ef24ee338e5c25162787036f13d8434a289a28bd2582a8a085d7d7af60fc9add668a6d6cc4fc6c485bb386e06a5ef0d51b4f2a7bafd0f59fb4261829d84da1b443a51a500dffd4e15844b5352b73b775bd5229ab9597a1dabd7c7a69cbf5503523c2668c53825b33fd470328cc903dd15cf3a86358d018014100bb89a9474055503be4cd912c1684a93a0c13fa14ad348de73674400d48519822fd32b98028bcb4c3815acaee07a9201a6c0117b4f63226164b3c93fb4394b2f1286de9ac664821fc7d62295d6da9dd2c0791263d4556e6ac8e8dd82a53809e192e6b03d4e6a7d1be98dd6b248bc984aef20e5ec5106f628c66d53dd156d7002e6862f7596bfd53e72e5c61557f22840392be3d28a21ac40454288c12d7b6c4a790b8d2e62db30b9dde5d44cc867a1e19b3fa2069336d370f66522cbdf1d4db8779604cb83ab43f47c76c1f1a65138d1effdcb65390c4ea3543ac9faf424679caa649d7ee762c7e27ba24fc0d6fb8d24b47a6a97e53bac98793b8bb10c80f730dc790e9a5c1c3da0d53ca9de0084ff9fde600f5d20c4c9c23e422270cefa2aa7c49daaab310100c6642cd80f8975e176faa90b72fee769718ad677743b017a874527af92237c724291d4fae54ff096b4b18bcaa17f03915d5ec4c998ddec1ffd5e9d1cb07427b63a19eb3e6b4edb6d2bbf5d04d5a9d6b1ab5a35b8cbcaf1487ba7942ef35cac2d2ea1b01db4b5e5c415f556f190077ce3d83588c6ab11fbf63913b33610f4387c28aa59cc3d2234ef23d023ab3683362e5520d893f9693b81c9461bad68016c943528e5fecf0ee363251970da1e0f445285b1895c4d5a26eff42316182dad88ff9c878c208c4b579cd7d29ca122b389ec6a6e4efb794adf580b9fab893445bba4536f458a5276913c309ee31efda7add02f488f39b838fbc661217be4ea7865ff1a683f2120bee47f76fa1654e6228cd722611d85522c354ca91c9768617551238fd9500f9c277ad5eabad1f0b270394cacc9c761fc666400a26d4c203fa6d4064faa37d78a00287fbfbe9e3f6783bc0629a15eec12f1685d9dffebf506617423eac106e399455cf2ee3cb8", 0x1000}, {&(0x7f0000002300)="7f0d92e26aefd1ee0015d69cd3f1b8f4899babae581d9d85aeceb7b325170a6562a3441188db72752b1581098160faa1005218e2f68adbb5018670ea2c08ff6ef8945aa27cc2133d7ee649ac49e571dee483c56a779fb3", 0x57}], 0x3, &(0x7f00000023c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @dev={0xac, 0x14, 0x14, 0x23}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @local}}}], 0x70}}], 0x4, 0x408c5) (async) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x400) (async, rerun: 64) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x5) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) (async) syz_io_uring_setup(0x7bcf, &(0x7f0000000080)={0x0, 0xb4e0, 0x2000, 0x0, 0x20a, 0x0, r6}, &(0x7f0000000100), &(0x7f0000000140)) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="043e0b06c90006000800000771e343b8da16715b86bde25b2edf511b2f50dc9465db6a32fc8815ab60315562788f8839cb6761926a58237b478e273662bf8529b67a0c00"/79], 0xe) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000600)={0x0, 0x4, 0x7, 0x7, @vifc_lcl_ifindex=r2, @remote}, 0x10) 270.670925ms ago: executing program 2 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000005c0)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {}, 0xfd}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x3333}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004000) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 221.257497ms ago: executing program 0 (id=138): r0 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) write$binfmt_misc(r1, &(0x7f0000000180)="58a416ddbb91c7e36c3f46db68b7d45d7b97dcc361580ff4973c9289e4deaab3f577ca13a72d5dc3e9a98f7db5207f24a8aff28380e2b4dbe2555cb44b6e63276fe4", 0x42) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 220.899707ms ago: executing program 1 (id=139): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xd, 0x1010, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xd, 0x1010, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701fefeffff00006b00017c0000040042801400018806000600800a000006000b00800a000004000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(0x0, r4) socket$nl_netfilter(0x10, 0x3, 0xc) 220.029435ms ago: executing program 0 (id=140): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x48, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x20000845) (async) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000280)=[@acquire_done], 0x0, 0x0, 0x0}) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') (async) creat(&(0x7f00000000c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 151.325267ms ago: executing program 0 (id=141): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r0, 0x0) accept(r0, 0x0, 0x0) shutdown(r0, 0x0) 1.441613ms ago: executing program 0 (id=142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000feffffffb704000000000000850000008200000095000000000000004167ddbf8777207bd73a28"], &(0x7f0000000200)='GPL\x00'}, 0x90) 0s ago: executing program 0 (id=143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) close(0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000), 0xffffffffffffff50, 0x20800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}}) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000d80)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) (async) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000d00)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000e86dd6100272400383a00fe8000000000000900000000000000bbff02000000000000000000001fd937506c34104ba7af422a0dd38a8800000001030090789d0000006057269200023a00fc0000000000000000000005000000017c010000000000000000000000000000d8be966753d2e95f"], 0x0) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000019080)=0x30) syz_emit_ethernet(0x8a, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x4, 0x104, 0x0, 0x0, {[@md5sig={0x13, 0x12, "5a213255fc14f131de9a65cf2bec6042"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x13, 0xf989, "3cca39fd810b37fec0a178de23ac97"}, @fastopen={0x22, 0x12, "2864064811009748a452859b6abf7349"}]}}}}}}}}, 0x0) recvmmsg(r4, &(0x7f0000000140)=[{{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000005c0)=""/241, 0xf1}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f00000007c0)=""/187, 0xbb}, {&(0x7f0000000a40)=""/204, 0xcc}, {&(0x7f0000000880)=""/183, 0xb7}, {&(0x7f0000000b40)=""/194, 0xc2}], 0x6, &(0x7f0000000c40)=""/140, 0x8c}, 0xffffffdb}], 0x1, 0x20, &(0x7f00000001c0)={0x0, 0x989680}) (async) recvmmsg(r4, &(0x7f0000000140)=[{{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000005c0)=""/241, 0xf1}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f00000007c0)=""/187, 0xbb}, {&(0x7f0000000a40)=""/204, 0xcc}, {&(0x7f0000000880)=""/183, 0xb7}, {&(0x7f0000000b40)=""/194, 0xc2}], 0x6, &(0x7f0000000c40)=""/140, 0x8c}, 0xffffffdb}], 0x1, 0x20, &(0x7f00000001c0)={0x0, 0x989680}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) fstat(r2, &(0x7f00000000c0)) fallocate(r1, 0x0, 0xfea000, 0x2000402) pwritev2(r1, &(0x7f00000013c0), 0x0, 0xa, 0xb, 0x0) lseek(r1, 0x5, 0x3) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000003c0)={0x1, 0x100, 0x2, 0x9, 0x1ff}) (async) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000003c0)={0x1, 0x100, 0x2, 0x9, 0x1ff}) 0s ago: executing program 0 (id=144): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)={r1, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000140)=[r1, r1, r1, r3, r1, r1], 0x0, 0x4000010a}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) fanotify_init(0x4, 0x1000) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 44.061583][ T40] audit: type=1400 audit(1766251289.791:60): avc: denied { rlimitinh } for pid=5837 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.068529][ T40] audit: type=1400 audit(1766251289.791:61): avc: denied { siginh } for pid=5837 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:42877' (ED25519) to the list of known hosts. [ 46.011322][ T40] audit: type=1400 audit(1766251291.761:62): avc: denied { name_bind } for pid=5855 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.038952][ T40] audit: type=1400 audit(1766251291.781:63): avc: denied { execute } for pid=5856 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.050206][ T40] audit: type=1400 audit(1766251291.781:64): avc: denied { execute_no_trans } for pid=5856 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.920535][ T40] audit: type=1400 audit(1766251293.671:65): avc: denied { mounton } for pid=5856 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.929907][ T40] audit: type=1400 audit(1766251293.681:66): avc: denied { mount } for pid=5856 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.932286][ T5856] cgroup: Unknown subsys name 'net' [ 48.107072][ T5856] cgroup: Unknown subsys name 'cpuset' [ 48.112825][ T5856] cgroup: Unknown subsys name 'rlimit' [ 48.277428][ T5910] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.971219][ T5856] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.426111][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 52.426125][ T40] audit: type=1400 audit(1766251298.171:86): avc: denied { execmem } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.568637][ T40] audit: type=1400 audit(1766251298.311:87): avc: denied { create } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.578817][ T40] audit: type=1400 audit(1766251298.311:88): avc: denied { read write } for pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.588260][ T40] audit: type=1400 audit(1766251298.311:89): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.595834][ T40] audit: type=1400 audit(1766251298.331:90): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="socket:[2479]" dev="sockfs" ino=2479 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.606528][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.614746][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.617139][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.620845][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.623387][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.625866][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.628424][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.629022][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.631023][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.633320][ T65] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.635908][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.638284][ T65] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.640297][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.642367][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.644640][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.646409][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.648850][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.651280][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.654150][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.659418][ T5937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.669426][ T40] audit: type=1400 audit(1766251298.411:91): avc: denied { read } for pid=5934 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.677058][ T40] audit: type=1400 audit(1766251298.411:92): avc: denied { open } for pid=5934 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.689545][ T40] audit: type=1400 audit(1766251298.411:93): avc: denied { mounton } for pid=5934 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.911558][ T40] audit: type=1400 audit(1766251298.661:94): avc: denied { module_request } for pid=5934 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.956075][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 52.977702][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 53.018458][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 53.141928][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 53.181840][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.184815][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.187770][ T5931] bridge_slave_0: entered allmulticast mode [ 53.190536][ T5931] bridge_slave_0: entered promiscuous mode [ 53.198862][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.201292][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.203609][ T5934] bridge_slave_0: entered allmulticast mode [ 53.206365][ T5934] bridge_slave_0: entered promiscuous mode [ 53.209919][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.212262][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.214575][ T5934] bridge_slave_1: entered allmulticast mode [ 53.217340][ T5934] bridge_slave_1: entered promiscuous mode [ 53.233093][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.235440][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.238338][ T5931] bridge_slave_1: entered allmulticast mode [ 53.242182][ T5931] bridge_slave_1: entered promiscuous mode [ 53.289558][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.292634][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.295683][ T5932] bridge_slave_0: entered allmulticast mode [ 53.299628][ T5932] bridge_slave_0: entered promiscuous mode [ 53.305631][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.317249][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.320164][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.323033][ T5932] bridge_slave_1: entered allmulticast mode [ 53.326334][ T5932] bridge_slave_1: entered promiscuous mode [ 53.330771][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.335930][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.357616][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.396772][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.401416][ T5934] team0: Port device team_slave_0 added [ 53.412387][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.414906][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.417681][ T5941] bridge_slave_0: entered allmulticast mode [ 53.421557][ T5941] bridge_slave_0: entered promiscuous mode [ 53.427716][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.432489][ T5934] team0: Port device team_slave_1 added [ 53.436362][ T5931] team0: Port device team_slave_0 added [ 53.438942][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.441907][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.444935][ T5941] bridge_slave_1: entered allmulticast mode [ 53.448796][ T5941] bridge_slave_1: entered promiscuous mode [ 53.466852][ T5931] team0: Port device team_slave_1 added [ 53.502536][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.505028][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.515614][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.531111][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.533420][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.541545][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.560360][ T5932] team0: Port device team_slave_0 added [ 53.563373][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.565960][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.575818][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.580767][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.582959][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.592821][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.598318][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.602884][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.607290][ T5932] team0: Port device team_slave_1 added [ 53.678842][ T5931] hsr_slave_0: entered promiscuous mode [ 53.681751][ T5931] hsr_slave_1: entered promiscuous mode [ 53.688475][ T5934] hsr_slave_0: entered promiscuous mode [ 53.691617][ T5934] hsr_slave_1: entered promiscuous mode [ 53.694370][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 53.696715][ T5934] Cannot create hsr debugfs directory [ 53.700329][ T5941] team0: Port device team_slave_0 added [ 53.702911][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.705628][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.714339][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.719633][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.721807][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.730910][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.740334][ T5941] team0: Port device team_slave_1 added [ 53.843745][ T5932] hsr_slave_0: entered promiscuous mode [ 53.846369][ T5932] hsr_slave_1: entered promiscuous mode [ 53.849037][ T5932] debugfs: 'hsr0' already exists in 'hsr' [ 53.851350][ T5932] Cannot create hsr debugfs directory [ 53.853710][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.856366][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.866005][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.886715][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.889017][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.897592][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.039055][ T5941] hsr_slave_0: entered promiscuous mode [ 54.041373][ T5941] hsr_slave_1: entered promiscuous mode [ 54.043538][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 54.045361][ T5941] Cannot create hsr debugfs directory [ 54.169062][ T5931] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.189416][ T5931] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.211744][ T5931] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.228238][ T5931] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.272433][ T5934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.278648][ T5934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.286339][ T5934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.291822][ T5934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.366922][ T5932] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.375751][ T5932] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.382996][ T5932] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.396719][ T5932] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.444908][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.451788][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.459519][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.466627][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.472839][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.521501][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.538953][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.546092][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.549267][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.573407][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.575895][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.601960][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.605436][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.620377][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.623165][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.637768][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.640087][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.655092][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.667401][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.670595][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.672867][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.684365][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.686679][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.699952][ T5943] Bluetooth: hci2: command tx timeout [ 54.709695][ T5943] Bluetooth: hci0: command tx timeout [ 54.709738][ T5937] Bluetooth: hci3: command tx timeout [ 54.710130][ T5294] Bluetooth: hci1: command tx timeout [ 54.714966][ T40] audit: type=1400 audit(1766251300.461:95): avc: denied { sys_module } for pid=5931 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.719254][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.733317][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.735815][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.748116][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.750497][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.826664][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.844358][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.885151][ T5934] veth0_vlan: entered promiscuous mode [ 54.897532][ T5934] veth1_vlan: entered promiscuous mode [ 54.915950][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.926179][ T5931] veth0_vlan: entered promiscuous mode [ 54.935910][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.940941][ T5931] veth1_vlan: entered promiscuous mode [ 54.971785][ T5934] veth0_macvtap: entered promiscuous mode [ 54.983427][ T5934] veth1_macvtap: entered promiscuous mode [ 55.002761][ T5932] veth0_vlan: entered promiscuous mode [ 55.013842][ T5931] veth0_macvtap: entered promiscuous mode [ 55.018084][ T5941] veth0_vlan: entered promiscuous mode [ 55.024238][ T5931] veth1_macvtap: entered promiscuous mode [ 55.028578][ T5932] veth1_vlan: entered promiscuous mode [ 55.032608][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.037564][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.048641][ T5941] veth1_vlan: entered promiscuous mode [ 55.057587][ T1243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.060778][ T1243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.065302][ T1243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.073715][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.076757][ T1243] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.087240][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.107335][ T95] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.111120][ T95] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.116629][ T5932] veth0_macvtap: entered promiscuous mode [ 55.121858][ T95] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.124671][ T95] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.137837][ T5932] veth1_macvtap: entered promiscuous mode [ 55.151975][ T5941] veth0_macvtap: entered promiscuous mode [ 55.175061][ T5941] veth1_macvtap: entered promiscuous mode [ 55.185858][ T1243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.189395][ T1243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.192981][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.213836][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.220684][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.221617][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.223226][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.231006][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.240837][ T1243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.243666][ T1243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.254496][ T1243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.257958][ T1243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.267123][ T1243] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.272955][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.277975][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.278796][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.283536][ T5934] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.285926][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.299945][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.354146][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.357001][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.374596][ T6022] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.385655][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.388459][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.431735][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.434406][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.439541][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.443515][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.465829][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.469197][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.640989][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 55.644116][ T6045] team0: Device gtp0 is up. Set it down before adding it as a team port [ 55.706116][ T6048] xfs: Unknown parameter 'norecoveryeq' [ 55.708477][ T6048] syz.2.8: vmalloc error: size 3618816000, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 55.713584][ T6048] CPU: 1 UID: 0 PID: 6048 Comm: syz.2.8 Not tainted syzkaller #0 PREEMPT(full) [ 55.713596][ T6048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.713602][ T6048] Call Trace: [ 55.713606][ T6048] [ 55.713609][ T6048] dump_stack_lvl+0x16c/0x1f0 [ 55.713626][ T6048] warn_alloc+0x248/0x3a0 [ 55.713638][ T6048] ? __pfx_warn_alloc+0x10/0x10 [ 55.713647][ T6048] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 55.713660][ T6048] ? lockdep_hardirqs_on+0x7c/0x110 [ 55.713673][ T6048] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 55.713688][ T6048] ? kasan_save_stack+0x42/0x60 [ 55.713699][ T6048] ? kasan_save_stack+0x33/0x60 [ 55.713710][ T6048] ? kasan_save_track+0x14/0x30 [ 55.713722][ T6048] ? vb2_vmalloc_alloc+0x135/0x410 [ 55.713739][ T6048] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 55.713754][ T6048] ? __x64_sys_ioctl+0x18e/0x210 [ 55.713765][ T6048] ? do_syscall_64+0xcd/0xf80 [ 55.713777][ T6048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.713791][ T6048] ? vb2_vmalloc_alloc+0x135/0x410 [ 55.713809][ T6048] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 55.713830][ T6048] ? vb2_vmalloc_alloc+0x135/0x410 [ 55.713845][ T6048] vmalloc_user_noprof+0x9e/0xe0 [ 55.713874][ T6048] ? vb2_vmalloc_alloc+0x135/0x410 [ 55.713889][ T6048] vb2_vmalloc_alloc+0x135/0x410 [ 55.713905][ T6048] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 55.713921][ T6048] __vb2_queue_alloc+0x8c9/0x1280 [ 55.713942][ T6048] vb2_core_create_bufs+0x559/0xab0 [ 55.713960][ T6048] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 55.713977][ T6048] ? lock_acquire+0x179/0x330 [ 55.713992][ T6048] vb2_create_bufs+0x5e8/0x840 [ 55.714036][ T6048] ? __pfx_vb2_create_bufs+0x10/0x10 [ 55.714052][ T6048] ? __pfx___mutex_lock+0x10/0x10 [ 55.714067][ T6048] vb2_ioctl_create_bufs+0x244/0x3e0 [ 55.714083][ T6048] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.714096][ T6048] vidioc_create_bufs+0x7d/0xf0 [ 55.714109][ T6048] v4l_create_bufs+0x151/0x260 [ 55.714127][ T6048] __video_do_ioctl+0xb77/0xf00 [ 55.714140][ T6048] ? __might_fault+0xe3/0x190 [ 55.714149][ T6048] ? __pfx___video_do_ioctl+0x10/0x10 [ 55.714165][ T6048] video_usercopy+0x4d0/0x16c0 [ 55.714178][ T6048] ? __pfx___video_do_ioctl+0x10/0x10 [ 55.714189][ T6048] ? selinux_kernel_read_file+0x80/0x120 [ 55.714203][ T6048] ? __pfx_video_usercopy+0x10/0x10 [ 55.714223][ T6048] v4l2_ioctl+0x1bd/0x250 [ 55.714234][ T6048] ? __pfx_v4l2_ioctl+0x10/0x10 [ 55.714245][ T6048] __x64_sys_ioctl+0x18e/0x210 [ 55.714257][ T6048] do_syscall_64+0xcd/0xf80 [ 55.714271][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.714281][ T6048] RIP: 0033:0x7f223e78f7c9 [ 55.714289][ T6048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.714299][ T6048] RSP: 002b:00007f223f626038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.714308][ T6048] RAX: ffffffffffffffda RBX: 00007f223e9e6090 RCX: 00007f223e78f7c9 [ 55.714314][ T6048] RDX: 00002000000013c0 RSI: 00000000c100565c RDI: 000000000000000a [ 55.714320][ T6048] RBP: 00007f223e813f91 R08: 0000000000000000 R09: 0000000000000000 [ 55.714330][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.714335][ T6048] R13: 00007f223e9e6128 R14: 00007f223e9e6090 R15: 00007ffe21eb4428 [ 55.714348][ T6048] [ 55.714352][ T6048] Mem-Info: [ 55.714836][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'. [ 55.717199][ T6048] active_anon:7289 inactive_anon:0 isolated_anon:0 [ 55.717199][ T6048] active_file:984 inactive_file:40984 isolated_file:0 [ 55.717199][ T6048] unevictable:1768 dirty:1684 writeback:0 [ 55.717199][ T6048] slab_reclaimable:11732 slab_unreclaimable:64373 [ 55.717199][ T6048] mapped:24495 shmem:2392 pagetables:1120 [ 55.717199][ T6048] sec_pagetables:301 bounce:0 [ 55.717199][ T6048] kernel_misc_reclaimable:0 [ 55.717199][ T6048] free:476182 free_pcp:19291 free_cma:0 [ 55.717233][ T6048] Node 0 active_anon:29156kB inactive_anon:0kB active_file:3936kB inactive_file:163740kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:97980kB dirty:6692kB writeback:0kB shmem:6032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12736kB pagetables:4284kB sec_pagetables:1204kB all_unreclaimable? no Balloon:0kB [ 55.785729][ T6047] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 55.786720][ T6048] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:44kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 55.855897][ T6059] ntfs3(sr0): Primary boot signature is not NTFS. [ 55.866204][ T6048] Node 0 [ 55.870894][ T6047] bond1 (unregistering): Released all slaves [ 55.879196][ T6048] DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 55.879291][ T6059] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 55.909407][ T6048] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 55.911848][ T6048] Node 0 DMA32 free:286760kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29280kB inactive_anon:0kB active_file:3936kB inactive_file:163740kB unevictable:3536kB writepending:6692kB zspages:0kB present:2080628kB managed:1265192kB mlocked:0kB bounce:0kB free_pcp:58912kB local_pcp:19192kB free_cma:0kB [ 55.922775][ T6048] lowmem_reserve[]: 0 0 0 0 0 [ 55.924307][ T6048] Node 1 Normal free:1600276kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB writepending:44kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:20176kB local_pcp:5168kB free_cma:0kB [ 55.935542][ T6048] lowmem_reserve[]: 0 0 0 0 0 [ 55.937116][ T6048] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 55.942769][ T6048] Node 0 DMA32: 0*4kB 114*8kB (UM) 82*16kB (ME) 41*32kB (ME) 8*64kB (UME) 25*128kB (UME) 35*256kB (ME) 13*512kB (UM) 5*1024kB (M) 0*2048kB 63*4096kB (M) = 286032kB [ 55.948842][ T6048] Node 1 Normal: 8*4kB (UME) 8*8kB (UE) 13*16kB (UME) 11*32kB (ME) 10*64kB (UME) 12*128kB (UME) 2*256kB (E) 3*512kB (M) 0*1024kB 1*2048kB (M) 389*4096kB (M) = 1600272kB [ 55.954470][ T6048] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 55.958942][ T6048] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 55.960650][ T6063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11'. [ 55.963292][ T6048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 55.965461][ T6059] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11'. [ 55.968355][ T6048] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 55.974632][ T6048] 44387 total pagecache pages [ 55.976087][ T6048] 0 pages in swap cache [ 55.977505][ T6048] Free swap = 124996kB [ 55.978777][ T6063] ntfs3(sr0): Primary boot signature is not NTFS. [ 55.978940][ T6048] Total swap = 124996kB [ 55.982593][ T6063] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 55.984432][ T6048] 1048443 pages RAM [ 55.986396][ T6048] 0 pages HighMem/MovableOnly [ 55.987849][ T6048] 282834 pages reserved [ 55.989164][ T6048] 0 pages cma reserved [ 56.028746][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 56.036485][ T6024] hid (null): report_id 3171940996 is invalid [ 56.038560][ T6024] hid (null): unknown global tag 0xe [ 56.044442][ T6024] hid-generic 7FFF:07FF:0002.0002: unknown main item tag 0x3 [ 56.046899][ T6024] hid-generic 7FFF:07FF:0002.0002: unknown main item tag 0x7 [ 56.049263][ T6024] hid-generic 7FFF:07FF:0002.0002: unexpected long global item [ 56.052859][ T6024] hid-generic 7FFF:07FF:0002.0002: probe with driver hid-generic failed with error -22 [ 56.084200][ T6077] netlink: 'syz.2.18': attribute type 16 has an invalid length. [ 56.086697][ T6077] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.18'. [ 56.090588][ T6077] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 56.138775][ T6081] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.155477][ T6081] netlink: 124 bytes leftover after parsing attributes in process `syz.1.20'. [ 56.163166][ T6088] netlink: 68 bytes leftover after parsing attributes in process `syz.0.22'. [ 56.167878][ T6088] ata1.00: invalid multi_count 1 ignored [ 56.275358][ T6098] netlink: 'syz.1.26': attribute type 1 has an invalid length. [ 56.447386][ T6102] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 56.545355][ T6022] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.669768][ T6024] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.779488][ T5937] Bluetooth: hci3: command tx timeout [ 56.781470][ T5937] Bluetooth: hci1: command tx timeout [ 56.783594][ T5937] Bluetooth: hci0: command tx timeout [ 56.785262][ T5943] Bluetooth: hci2: command tx timeout [ 56.824055][ T6024] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 56.827959][ T6024] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.831623][ T6024] usb 7-1: Product: syz [ 56.833489][ T6024] usb 7-1: Manufacturer: syz [ 56.835478][ T6024] usb 7-1: SerialNumber: syz [ 57.025496][ T6022] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.609830][ T40] kauditd_printk_skb: 110 callbacks suppressed [ 57.609840][ T40] audit: type=1400 audit(1766251303.361:206): avc: denied { create } for pid=6113 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.618137][ T40] audit: type=1400 audit(1766251303.361:207): avc: denied { accept } for pid=6113 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.817367][ T40] audit: type=1400 audit(1766251303.561:208): avc: denied { ioctl } for pid=6115 comm="syz.1.32" path="/dev/input/event0" dev="devtmpfs" ino=941 ioctlcmd=0x4511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.879714][ T40] audit: type=1400 audit(1766251303.631:209): avc: denied { ioctl } for pid=6118 comm="syz.0.33" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.886312][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.911960][ T40] audit: type=1400 audit(1766251303.661:210): avc: denied { connect } for pid=6120 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.918322][ T40] audit: type=1400 audit(1766251303.661:211): avc: denied { ioctl } for pid=6120 comm="syz.1.34" path="socket:[11623]" dev="sockfs" ino=11623 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.920037][ T59] hid-generic 0005:10CF:5D05.0003: item fetching failed at offset 0/1 [ 57.921482][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 57.933004][ T59] hid-generic 0005:10CF:5D05.0003: probe with driver hid-generic failed with error -22 [ 57.957081][ T6124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6124 comm=syz.1.35 [ 58.047972][ T6022] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.066713][ T6126] netlink: 'syz.1.36': attribute type 6 has an invalid length. [ 58.077370][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 58.084962][ T6126] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 58.118914][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.126333][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.133917][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.142824][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.186965][ T40] audit: type=1400 audit(1766251303.931:212): avc: denied { create } for pid=6128 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.195980][ T40] audit: type=1400 audit(1766251303.931:213): avc: denied { getopt } for pid=6128 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.202114][ T40] audit: type=1400 audit(1766251303.931:214): avc: denied { ioctl } for pid=6128 comm="syz.3.37" path="socket:[9582]" dev="sockfs" ino=9582 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.210272][ T40] audit: type=1400 audit(1766251303.961:215): avc: denied { setopt } for pid=6129 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.427221][ T6144] MINIX-fs: unable to read superblock [ 58.487294][ T6145] process 'syz.0.41' launched './file2' with NULL argv: empty string added [ 58.859805][ T5943] Bluetooth: hci1: command tx timeout [ 58.859981][ T5947] Bluetooth: hci2: command tx timeout [ 58.861344][ T5937] Bluetooth: hci3: command tx timeout [ 58.861371][ T5937] Bluetooth: hci0: command tx timeout [ 59.092329][ T6149] warning: `syz.1.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.140773][ T6154] tmpfs: Bad value for 'mpol' [ 59.142603][ T6154] netlink: 'syz.3.44': attribute type 6 has an invalid length. [ 59.215075][ T6024] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 59.222668][ T6024] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 59.226339][ T6024] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 59.231258][ T6156] Sensor A: ================= START STATUS ================= [ 59.231514][ T6024] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 59.233734][ T6156] Sensor A: Test Pattern: 75% Colorbar [ 59.233762][ T6156] Sensor A: Show Information: All [ 59.233773][ T6156] Sensor A: Vertical Flip: [ 59.240592][ T6024] usb 7-1: USB disconnect, device number 2 [ 59.243279][ T6156] false [ 59.245062][ T6156] Sensor A: Horizontal Flip: false [ 59.246826][ T6156] Sensor A: Brightness: 128 [ 59.248299][ T6156] Sensor A: Contrast: 128 [ 59.249763][ T6156] Sensor A: Hue: 0 [ 59.251001][ T6156] Sensor A: Saturation: 128 [ 59.252470][ T6156] Sensor A: ================== END STATUS ================== [ 59.287950][ T6168] vlan2: entered promiscuous mode [ 59.298860][ T6168] bridge0: entered promiscuous mode [ 59.599391][ T6019] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.747646][ T6198] fuse: Bad value for 'fd' [ 59.749428][ T6019] usb 5-1: Using ep0 maxpacket: 16 [ 59.753333][ T6019] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 59.756620][ T6019] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 52, changing to 9 [ 59.761230][ T6019] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8241, setting to 1024 [ 59.765070][ T6019] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.769495][ T6019] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 59.772883][ T6019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.775400][ T6019] usb 5-1: Product: syz [ 59.776710][ T6019] usb 5-1: Manufacturer: syz [ 59.778149][ T6019] usb 5-1: SerialNumber: syz [ 59.782632][ T6019] usb 5-1: config 0 descriptor?? [ 59.802444][ T6201] Zero length message leads to an empty skb [ 59.995103][ T6019] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 60.213189][ T6024] usb 5-1: USB disconnect, device number 2 [ 60.263704][ T6233] netlink: 'syz.1.67': attribute type 10 has an invalid length. [ 60.275655][ T6231] Bluetooth: MGMT ver 1.23 [ 60.460416][ T6253] openvswitch: netlink: Flow actions attr not present in new flow. [ 60.472494][ T6252] syz.3.75 uses obsolete (PF_INET,SOCK_PACKET) [ 60.606775][ T6266] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 60.627889][ T6268] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 60.749448][ T6019] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.808989][ T6279] __nla_validate_parse: 17 callbacks suppressed [ 60.809020][ T6279] netlink: 27 bytes leftover after parsing attributes in process `syz.1.82'. [ 60.931121][ T6019] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.935642][ T6019] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.939502][ T5943] Bluetooth: hci1: command tx timeout [ 60.939941][ T5937] Bluetooth: hci3: command tx timeout [ 60.943938][ T5294] Bluetooth: hci0: command tx timeout [ 60.946419][ T6019] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 60.950506][ T5937] Bluetooth: hci2: command tx timeout [ 60.953675][ T6019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.966454][ T6019] usb 7-1: config 0 descriptor?? [ 61.379739][ T6019] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 61.382319][ T6019] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 61.387964][ T6019] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0004/input/input6 [ 61.403177][ T6019] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 61.593560][ T850] usb 7-1: USB disconnect, device number 3 [ 61.634556][ T6310] F2FS-fs: Conflicting test_dummy_encryption options [ 62.154845][ T6338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.96'. [ 62.297292][ T6340] afs: Unknown parameter 'subj_user' [ 62.297432][ T6344] afs: Unknown parameter 'subj_user' [ 62.300883][ T5947] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 62.612798][ T6346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6346 comm=syz.3.98 [ 62.666524][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 62.666539][ T40] audit: type=1400 audit(1766251308.411:308): avc: denied { read } for pid=6351 comm="syz.3.101" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.678550][ T40] audit: type=1400 audit(1766251308.411:309): avc: denied { open } for pid=6351 comm="syz.3.101" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.687941][ T40] audit: type=1400 audit(1766251308.411:310): avc: denied { ioctl } for pid=6351 comm="syz.3.101" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.696713][ T40] audit: type=1400 audit(1766251308.421:311): avc: denied { set_context_mgr } for pid=6351 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.703257][ T40] audit: type=1400 audit(1766251308.421:312): avc: denied { map } for pid=6351 comm="syz.3.101" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.760788][ T40] audit: type=1400 audit(1766251308.511:313): avc: denied { bind } for pid=6357 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.766879][ T40] audit: type=1400 audit(1766251308.511:314): avc: denied { name_bind } for pid=6357 comm="syz.3.104" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 62.774726][ T6020] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 62.780362][ T40] audit: type=1400 audit(1766251308.511:315): avc: denied { node_bind } for pid=6357 comm="syz.3.104" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 62.999609][ T6086] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.029504][ T5947] Bluetooth: hci2: command 0x0401 tx timeout [ 63.150696][ T6086] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 63.154273][ T6086] usb 6-1: config 0 interface 0 has no altsetting 0 [ 63.158949][ T6086] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 63.163665][ T6086] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 63.167020][ T6086] usb 6-1: Product: syz [ 63.168769][ T6086] usb 6-1: Manufacturer: syz [ 63.170782][ T6086] usb 6-1: SerialNumber: syz [ 63.174557][ T6086] usb 6-1: config 0 descriptor?? [ 63.181437][ T6086] usb 6-1: selecting invalid altsetting 0 [ 63.393411][ T6086] usb 6-1: USB disconnect, device number 2 [ 63.767215][ T40] audit: type=1400 audit(1766251309.511:316): avc: denied { write } for pid=6371 comm="syz.1.107" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.768372][ T6370] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.784800][ T40] audit: type=1400 audit(1766251309.521:317): avc: denied { ioctl } for pid=6371 comm="syz.1.107" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.826876][ T6383] mmap: syz.0.110 (6383) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.867593][ T6387] trusted_key: syz.0.112 sent an empty control message without MSG_MORE. [ 63.872345][ T6387] netlink: 76 bytes leftover after parsing attributes in process `syz.0.112'. [ 63.900719][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 63.914135][ T6390] : entered promiscuous mode [ 64.033656][ T6396] netlink: 'syz.3.109': attribute type 5 has an invalid length. [ 64.196139][ T6402] Bluetooth: MGMT ver 1.23 [ 64.198098][ T6402] netlink: 72 bytes leftover after parsing attributes in process `syz.1.115'. [ 64.653130][ T6411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.118'. [ 64.658046][ T6411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.118'. [ 64.684829][ T6414] netlink: 328 bytes leftover after parsing attributes in process `syz.1.120'. [ 64.776029][ T6419] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 65.154658][ T6444] bond0: entered promiscuous mode [ 65.156896][ T6444] bond_slave_0: entered promiscuous mode [ 65.159792][ T6444] bond_slave_1: entered promiscuous mode [ 65.375035][ T6463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.135'. [ 65.430959][ T6466] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 65.504639][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 65.547261][ T6476] openvswitch: netlink: Flow key attr not present in new flow. [ 65.828732][ T6496] ------------[ cut here ]------------ [ 65.830869][ T6496] WARNING: mm/page_alloc.c:5186 at __alloc_frozen_pages_noprof+0x309/0x2430, CPU#3: syz.0.144/6496 [ 65.834338][ T6496] Modules linked in: [ 65.835744][ T6496] CPU: 3 UID: 0 PID: 6496 Comm: syz.0.144 Not tainted syzkaller #0 PREEMPT(full) [ 65.838975][ T6496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.842568][ T6496] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430 [ 65.844631][ T6496] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 01 40 60 09 83 fe 0a 0f 86 0c fe ff ff 80 3d 49 4a 56 0e 00 75 0b c6 05 40 4a 56 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 65.853069][ T6496] RSP: 0018:ffffc900067877a8 EFLAGS: 00010246 [ 65.855194][ T6496] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 65.858592][ T6496] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 65.861673][ T6496] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 65.864345][ T6496] R10: 0000000000000015 R11: ffff888029762ff0 R12: 0000000000040cc0 [ 65.867638][ T6496] R13: 1ffff92000cf0f0b R14: ffffffff9ac42ac4 R15: 0000000000000015 [ 65.871354][ T6496] FS: 00007ff3759fc6c0(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000 [ 65.874862][ T6496] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.877165][ T6496] CR2: 00007ff374b73460 CR3: 000000005a217000 CR4: 0000000000352ef0 [ 65.880735][ T6496] Call Trace: [ 65.882134][ T6496] [ 65.883128][ T6496] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 65.885051][ T6496] ? is_bpf_text_address+0x94/0x1a0 [ 65.886752][ T6496] ? kernel_text_address+0x8d/0x100 [ 65.888446][ T6496] ? __kernel_text_address+0xd/0x40 [ 65.890181][ T6496] ? unwind_get_return_address+0x59/0xa0 [ 65.891950][ T6496] ? arch_stack_walk+0xa6/0x100 [ 65.893508][ T6496] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 65.895513][ T6496] ? stack_depot_save_flags+0x29/0x9b0 [ 65.897598][ T6496] ? __lock_acquire+0x436/0x2890 [ 65.899612][ T6496] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.901456][ T6496] ? policy_nodemask+0xea/0x4e0 [ 65.902983][ T6496] alloc_pages_mpol+0x1fb/0x550 [ 65.904836][ T6496] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 65.907116][ T6496] ___kmalloc_large_node+0x10c/0x150 [ 65.909229][ T6496] ? avc_has_extended_perms+0x33a/0x1090 [ 65.911717][ T6496] __kmalloc_large_node_noprof+0x1c/0x70 [ 65.914029][ T6496] __kmalloc_noprof.cold+0xc/0x62 [ 65.915616][ T6496] ? drm_syncobj_array_find+0x35/0x3c0 [ 65.917359][ T6496] ? drm_syncobj_array_find+0x35/0x3c0 [ 65.919079][ T6496] drm_syncobj_array_find+0x35/0x3c0 [ 65.920798][ T6496] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.922539][ T6496] drm_syncobj_timeline_signal_ioctl+0x226/0x870 [ 65.924477][ T6496] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 65.926718][ T6496] ? drm_dev_exit+0x41/0x60 [ 65.928668][ T6496] drm_ioctl_kernel+0x1f4/0x3e0 [ 65.930938][ T6496] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 65.933514][ T6496] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 65.935711][ T6496] drm_ioctl+0x5c9/0xc30 [ 65.937396][ T6496] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 65.940421][ T6496] ? __pfx_drm_ioctl+0x10/0x10 [ 65.942460][ T6496] ? selinux_file_ioctl+0x180/0x270 [ 65.944676][ T6496] ? selinux_file_ioctl+0xb4/0x270 [ 65.946869][ T6496] ? __pfx_drm_ioctl+0x10/0x10 [ 65.948923][ T6496] __x64_sys_ioctl+0x18e/0x210 [ 65.951084][ T6496] do_syscall_64+0xcd/0xf80 [ 65.953060][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.955461][ T6496] RIP: 0033:0x7ff374b8f7c9 [ 65.957367][ T6496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.966274][ T6496] RSP: 002b:00007ff3759fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.970701][ T6496] RAX: ffffffffffffffda RBX: 00007ff374de5fa0 RCX: 00007ff374b8f7c9 [ 65.974129][ T6496] RDX: 0000200000000200 RSI: 00000000c01864cd RDI: 0000000000000003 [ 65.977224][ T6496] RBP: 00007ff374c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 65.986295][ T6496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.988846][ T6496] R13: 00007ff374de6038 R14: 00007ff374de5fa0 R15: 00007ffc4ac56048 [ 65.991396][ T6496] [ 65.992386][ T6496] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 65.994661][ T6496] CPU: 3 UID: 0 PID: 6496 Comm: syz.0.144 Not tainted syzkaller #0 PREEMPT(full) [ 65.997477][ T6496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.000803][ T6496] Call Trace: [ 66.001869][ T6496] [ 66.002840][ T6496] dump_stack_lvl+0x3d/0x1f0 [ 66.004309][ T6496] vpanic+0x640/0x6f0 [ 66.005584][ T6496] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 66.007503][ T6496] panic+0xca/0xd0 [ 66.008700][ T6496] ? __pfx_panic+0x10/0x10 [ 66.010140][ T6496] check_panic_on_warn+0xab/0xb0 [ 66.011711][ T6496] __warn+0x108/0x3c0 [ 66.012993][ T6496] __report_bug+0x2a0/0x520 [ 66.014452][ T6496] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 66.016362][ T6496] ? __pfx___report_bug+0x10/0x10 [ 66.017973][ T6496] ? __lock_acquire+0x436/0x2890 [ 66.019536][ T6496] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 66.021443][ T6496] report_bug+0xb2/0x220 [ 66.022809][ T6496] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 66.024711][ T6496] handle_bug+0x127/0x260 [ 66.026104][ T6496] exc_invalid_op+0x17/0x50 [ 66.027547][ T6496] asm_exc_invalid_op+0x1a/0x20 [ 66.029087][ T6496] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430 [ 66.031163][ T6496] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 01 40 60 09 83 fe 0a 0f 86 0c fe ff ff 80 3d 49 4a 56 0e 00 75 0b c6 05 40 4a 56 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 66.037149][ T6496] RSP: 0018:ffffc900067877a8 EFLAGS: 00010246 [ 66.039062][ T6496] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 66.041528][ T6496] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 66.044010][ T6496] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 66.046480][ T6496] R10: 0000000000000015 R11: ffff888029762ff0 R12: 0000000000040cc0 [ 66.048938][ T6496] R13: 1ffff92000cf0f0b R14: ffffffff9ac42ac4 R15: 0000000000000015 [ 66.051746][ T6496] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 66.054199][ T6496] ? is_bpf_text_address+0x94/0x1a0 [ 66.056332][ T6496] ? kernel_text_address+0x8d/0x100 [ 66.058471][ T6496] ? __kernel_text_address+0xd/0x40 [ 66.060650][ T6496] ? unwind_get_return_address+0x59/0xa0 [ 66.062979][ T6496] ? arch_stack_walk+0xa6/0x100 [ 66.064970][ T6496] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 66.067589][ T6496] ? stack_depot_save_flags+0x29/0x9b0 [ 66.069876][ T6496] ? __lock_acquire+0x436/0x2890 [ 66.071989][ T6496] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.074509][ T6496] ? policy_nodemask+0xea/0x4e0 [ 66.076575][ T6496] alloc_pages_mpol+0x1fb/0x550 [ 66.078648][ T6496] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 66.080915][ T6496] ___kmalloc_large_node+0x10c/0x150 [ 66.083145][ T6496] ? avc_has_extended_perms+0x33a/0x1090 [ 66.085512][ T6496] __kmalloc_large_node_noprof+0x1c/0x70 [ 66.087891][ T6496] __kmalloc_noprof.cold+0xc/0x62 [ 66.090025][ T6496] ? drm_syncobj_array_find+0x35/0x3c0 [ 66.092166][ T6496] ? drm_syncobj_array_find+0x35/0x3c0 [ 66.094465][ T6496] drm_syncobj_array_find+0x35/0x3c0 [ 66.096678][ T6496] ? lockdep_hardirqs_on+0x7c/0x110 [ 66.098754][ T6496] drm_syncobj_timeline_signal_ioctl+0x226/0x870 [ 66.101079][ T6496] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 66.103615][ T6496] ? drm_dev_exit+0x41/0x60 [ 66.105315][ T6496] drm_ioctl_kernel+0x1f4/0x3e0 [ 66.107136][ T6496] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 66.109366][ T6496] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 66.111066][ T6496] drm_ioctl+0x5c9/0xc30 [ 66.112409][ T6496] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 66.114598][ T6496] ? __pfx_drm_ioctl+0x10/0x10 [ 66.116115][ T6496] ? selinux_file_ioctl+0x180/0x270 [ 66.117750][ T6496] ? selinux_file_ioctl+0xb4/0x270 [ 66.119587][ T6496] ? __pfx_drm_ioctl+0x10/0x10 [ 66.121106][ T6496] __x64_sys_ioctl+0x18e/0x210 [ 66.122648][ T6496] do_syscall_64+0xcd/0xf80 [ 66.124097][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.125972][ T6496] RIP: 0033:0x7ff374b8f7c9 [ 66.127388][ T6496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.133488][ T6496] RSP: 002b:00007ff3759fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.136094][ T6496] RAX: ffffffffffffffda RBX: 00007ff374de5fa0 RCX: 00007ff374b8f7c9 [ 66.138548][ T6496] RDX: 0000200000000200 RSI: 00000000c01864cd RDI: 0000000000000003 [ 66.140988][ T6496] RBP: 00007ff374c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 66.143447][ T6496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.145901][ T6496] R13: 00007ff374de6038 R14: 00007ff374de5fa0 R15: 00007ffc4ac56048 [ 66.148372][ T6496] [ 66.150034][ T6496] Kernel Offset: disabled [ 66.151397][ T6496] Rebooting in 86400 seconds..