last executing test programs: 37.087596325s ago: executing program 0 (id=299): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x380000000000004, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x1, "110100005c000000463300", 0x49433553}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000780)={0x1, @win={{0x3, 0xa, 0x3, 0x10}, 0x1, 0x2, &(0x7f0000000700)={{0x2040, 0x0, 0x400, 0xe}, &(0x7f00000006c0)={{0x10000, 0x9, 0x6, 0xf02}, &(0x7f0000000680)={{0xffff, 0x14000, 0x1, 0x5}}}}, 0x2c1, &(0x7f0000000740)="235ee69e4395dbf09d9b325a69fdcf35d636c02d0e5b830536", 0x4a}}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) (async) sendto(r2, &(0x7f0000001700)="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", 0x14b, 0x404c000, &(0x7f0000000600)=@sco, 0x80) (async) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000002000)=""/4101, 0x1005}, {&(0x7f0000000240)=""/11, 0xb}, {&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000340)=""/35, 0x23}], 0x4) ioctl$sock_netdev_private(r3, 0x894c, &(0x7f0000000240)) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000160051c31a2970000000000006"], 0x14}}, 0x4000000) (async, rerun: 64) setns(r3, 0x20000) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00030001"], 0xc041) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000914000326bd7000fcdbdf2508000100020000000800010000000000080001000100000008000100010000000800010002bf0000"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x2010) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async, rerun: 64) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001600), r7) (rerun: 64) sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r8, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 36.992693673s ago: executing program 0 (id=301): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1b, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff81", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 36.920375924s ago: executing program 0 (id=303): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ip6tnl0\x00'}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008001f00", @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448f4}, 0x4800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x600}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r7, @ANYBLOB="08000b000300000008000200ac"], 0x54}}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf6, 0x0, 0x1, 0xa, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4}}) write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fremovexattr(r11, &(0x7f0000000040)=@random={'system.', '\x00'}) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f000029c000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000002c0)="0f20e06635400000000f22e00f017b07670fc7ad0c00000066b9800000c00f326635004000000f3066b8050000000f23c80f21f866350400a0000f23f81ef082810dd000ba2100b8576aeff267670f0fc58e0fc72e561f", 0x57}], 0x1, 0x55, &(0x7f00000001c0), 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mmap$xdp(&(0x7f0000087000/0x4000)=nil, 0x4000, 0x0, 0x11, r9, 0x100000000) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 36.760771917s ago: executing program 0 (id=306): syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f00000011c0)='./file0\x00', 0x21) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) (async) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) (async) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, 0x0, 0x0, 0x0) (async) getpid() keyctl$session_to_parent(0x12) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x2, 0x2, 0x0, 0x2, 0xffff}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a691b2c6d61726b00"/76], 0x4c}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) (async) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x109e, &(0x7f0000001200)={@random, @empty, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @tcp={0xd, 0x6, "a12e01", 0x1064, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@srh={0x32, 0x8, 0x4, 0x4, 0xf, 0x58, 0x546, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @fragment={0x3b, 0x0, 0x8, 0x1, 0x0, 0x1, 0x68}], {{0x4e24, 0x4e23, r0, r6, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x81}, {"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"}}}}}}}, 0x0) 36.760029832s ago: executing program 0 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff2}, {0xfff3}}}, 0x24}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001500)={'syztnl1\x00', &(0x7f0000001480)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x77, 0x1, 0xc2, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x16}, 0x10, 0x8000, 0xfffffff4, 0x2}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000001580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000015c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001680)={'ip6tnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x8, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, @private0, 0x8, 0x80, 0x2, 0x89}}) (async) r12 = socket$packet(0x11, 0x3, 0x300) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r14, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00'/20, @ANYRES32=r15, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac14140006000300bf000000"], 0x40}}, 0x0) (async) sendto$packet(r12, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r15, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000018c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001880)={&(0x7f00000016c0)={0x1ac, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x1ac}}, 0xc800) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200000018000480140001800a0001007265646972000000040002800900010073797a30000000000900020073797a3200", @ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 36.472211438s ago: executing program 0 (id=315): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000088"]) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00003e7000/0x2000)=nil, 0x2000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030900000000000000000001e700060009000000080008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400"], 0x48}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) readv(r1, &(0x7f0000000000), 0x0) 36.392749393s ago: executing program 32 (id=315): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000088"]) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00003e7000/0x2000)=nil, 0x2000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030900000000000000000001e700060009000000080008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400"], 0x48}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) readv(r1, &(0x7f0000000000), 0x0) 6.275185143s ago: executing program 4 (id=652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0xa04c2, 0x0) setsockopt$sock_int(r0, 0x1, 0x43, &(0x7f00000000c0)=0xf0, 0x4) ioctl$CDROM_SEND_PACKET(r1, 0x5393, &(0x7f0000000480)={"4cfef472e555809a46ad5ebf", 0x0, 0x0, 0x4, &(0x7f0000000400)={0x7a, 0x0, 0x1c, 0x5, 0x0, 0x1, 0x0, "8e65f58a", 0x96, "03a2ca9d", 0x1, 0x3, 0x84, '?\'?', "aa2a6aebcb5af744b3ed53b566d440901a8f2243aeb2175dd792659dab856e8facf9109da836ae92547b54b45d68"}, 0x1, 0x81, 0x7, 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001909d1b6fc4de224a2e5fa803ce006772657c65d800000c000280080005e911321154e7c6b218f2403311f418bb253b2cb96498f15b63697d24237be2bd3b812a5a758e716363bf62cf81ca4f4b6b1ac8626acfb7426c41143e94e5c6eacc22b1336bea0a78f98e5a00f9508af1846cd3cba5691d54a3eba4d0ab182ba2c455bdf740920601be49cfd616db759bc47f3f4585"], 0x44}, 0x1, 0x0, 0x0, 0x24004880}, 0x40408d4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="351e00004831b1f0c5af38ac9c8f279c447bbba7df4bb2dcab6c2a9ad91e9f5861cbeeaa40da03430b7db3f347b3d6266d8dcf4c51a1af259b554a6a17705dd750241419fb944515b1c091590c8772c1f176aef3c18abddbe97e7e1e", @ANYRES16=r2, @ANYBLOB="00012cbd7000fbdbdf25260000001c003400069ee3ac9372d7f0064e2430c6419b403f3eff4c06ef508904009300"], 0x34}, 0x1, 0x0, 0x0, 0x40884}, 0x30000080) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000140), 0x4) 6.201465977s ago: executing program 4 (id=653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000081030000850000000e00000018010000646c6c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xffe0, 0x2}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newnexthop={0x30, 0x68, 0x521, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}]}, 0x30}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.062760422s ago: executing program 4 (id=657): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xae, 0x66}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7d, 0x2, 0xfffffffd, 0x40000000, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x2}}) 5.16217094s ago: executing program 4 (id=678): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x21c9c9a, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xac, r2, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e99019e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32691c7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dd57369}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7908920e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4545e5d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x81b5f1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d336069}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbd6ca14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x866dce6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000004}, 0x4850) umount2(&(0x7f0000000000)='./file0\x00', 0x0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900), &(0x7f0000000440)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 5.08601877s ago: executing program 4 (id=679): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x7, 0xff, 0x80000001, 0x9, 0xfffffffd}, &(0x7f0000000240)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000200000f0300000002000000010000000200000005000000020000000200000084bfffffff7f800000000f01000000d1005f"], 0x0, 0x4f, 0x0, 0x1}, 0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) fcntl$setflags(r3, 0x2, 0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000040)=0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000180)) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @pic={0x1, 0xa, 0x2, 0x9, 0x12, 0x9, 0x8, 0x2, 0x0, 0x6c, 0x0, 0x8, 0x1, 0xb, 0xa9, 0x7}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.869342894s ago: executing program 4 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c8058646500000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x100000005) close(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x24, r5, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="a9"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) 4.761392748s ago: executing program 33 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c8058646500000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x100000005) close(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x24, r5, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="a9"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) 2.266969008s ago: executing program 2 (id=724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"}) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000480)=0x1) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x8400, 0x1, 0x0, 0x10000, 0x1b, "4415264a88b82c521113fb235902af2556c6b6"}) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945ea", 0x18}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790", 0x3a}], 0x2}], 0x1, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80080) (async) close(0x3) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x4, 0xbb51) (async) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) fcntl$lock(r7, 0x410, &(0x7f0000000080)={0x2, 0x0, 0x9, 0x10003}) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="15000200000000f4ffff060000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) 2.264873395s ago: executing program 2 (id=725): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r1 = fsopen(&(0x7f0000000200)='cramfs\x00', 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x404808c}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000080), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) fsopen(&(0x7f0000000200)='cramfs\x00', 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x404808c}, 0x800) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000080), 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) 2.18124087s ago: executing program 2 (id=726): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4) getdents64(r0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000001c0)=@v3={0x3000000, [{0x4, 0x4}, {0x9, 0x2}], r1}, 0x18, 0x0) 2.041275962s ago: executing program 3 (id=729): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r0, 0xeb, 0x10, &(0x7f0000000140)=""/29, &(0x7f0000000400)=0x1d) (async) getsockopt(r0, 0xeb, 0x10, &(0x7f0000000140)=""/29, &(0x7f0000000400)=0x1d) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.040604186s ago: executing program 2 (id=730): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'macsec0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000020c0)=ANY=[@ANYBLOB="54000000100003052bbd00", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRESHEX=0x0], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000004c0)="02", 0x1, 0x40001, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)='|', 0x1, 0x20000000, 0x0, 0x0) writev(r3, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x400000f3, 0x0, 0x7}]}) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffff3f, 0x0, 0x2}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xfc, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "93f4b85d39e314afa532efab35df400578b4c2d5edd687a7"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xaa}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "c75ecfbc06b75c3ae6d096001f002944a8b70dd4b86e8da8cbc7658ae5122956f8"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdb9}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80007ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24004050}, 0x800) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x2020) getsockopt$EBT_SO_GET_INIT_INFO(r8, 0x0, 0x82, &(0x7f0000000400)={'nat\x00', 0x0, 0x0, 0x0, [0x8000000000000001, 0x80000001, 0x1, 0x3, 0x1, 0xf]}, &(0x7f0000000140)=0x78) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 2.040294967s ago: executing program 3 (id=731): r0 = socket(0xb, 0x3, 0x3) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) r1 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002740)={&(0x7f00000003c0)=[{0x8, 0xf401, 0x10a, &(0x7f0000000f00)="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"}], 0x1}) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x31d9, r0}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000100)={@private2, 0x0}, &(0x7f0000000140)=0x14) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0xa8681, 0x0) signalfd4(r5, &(0x7f0000000180), 0x8, 0x80800) r6 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x8, '\x00', r4, r6, 0x4, 0x3, 0x5}, 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) timer_delete(r7) timer_delete(r7) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r3) inotify_init() mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x4090, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESOCT=r0, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40010002, 0x0) 1.888324886s ago: executing program 3 (id=732): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.726562106s ago: executing program 5 (id=686): creat(&(0x7f0000000ac0)='./file0\x00', 0x0) (async) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x4}) (async) unlink(&(0x7f0000000080)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000060000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) (async, rerun: 64) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000020000000004da976c08862c0dd5a356a7f6ae200000000"], 0x50) (async) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) (async, rerun: 64) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) (async, rerun: 64) r2 = fsopen(&(0x7f0000001900)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) setresuid(0x0, 0xee00, 0x0) (async, rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=0x0) (rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"8e6801c9d7fe04c0fd864c8c8965406a", r3, 0x0, {0x2, 0x4}, {0x6343f108, 0x58}, 0x5, [0xd228, 0xfff, 0x2, 0xc9, 0xfffffffffffffe01, 0x7, 0x9, 0x4, 0x100000000, 0x40, 0x4, 0x3, 0x7f, 0x9, 0xf, 0x1]}) syz_open_dev$vbi(0x0, 0x2, 0x2) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) 1.004208466s ago: executing program 2 (id=741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000005c0)={{0xdddd2000, 0xf000, 0xd, 0xf6, 0x6, 0x4, 0x2, 0x6, 0x0, 0xf8, 0x7f, 0x29}, {0xdddd1000, 0x1000, 0xd, 0x0, 0x3, 0x0, 0x3, 0x1, 0xa, 0x70, 0xb, 0x1}, {0xeeee8000, 0xa002, 0x19, 0x8, 0x2, 0x40, 0xf5, 0x7, 0xf4, 0x3, 0x4, 0xe}, {0x4, 0xdddd1000, 0x1, 0xc, 0x1, 0x0, 0x7, 0x9, 0x9, 0x1, 0x1, 0x7}, {0xeeee0000, 0xeeee0000, 0xa, 0xba, 0x8, 0x4, 0xe, 0x2, 0x8, 0x6, 0x2, 0x14}, {0x4, 0xeeee0000, 0x10, 0x4, 0xfc, 0x3, 0x40, 0x81, 0x1, 0x4, 0x23, 0x81}, {0x166671ffa, 0x8080000, 0x0, 0x5, 0x9, 0xb1, 0x1, 0xef, 0x9, 0xa, 0x80, 0x3}, {0x26000, 0xb000, 0xc, 0x4, 0x5, 0x7, 0x2f, 0x0, 0x4, 0xd, 0x9, 0x3}, {0xffff1000}, {0xeeeeb000, 0x1}, 0x2, 0x0, 0x6000, 0x400, 0x7, 0x9801, 0x1000, [0x9, 0x8001, 0x1000, 0xd378]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) 1.003896191s ago: executing program 3 (id=742): r0 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000003c0)={0x2, 0x0, 0x10}) 925.660396ms ago: executing program 3 (id=743): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000040)) syz_open_dev$loop(0x0, 0x4, 0x40100) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a0012000a002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x200068c0, &(0x7f0000000180)={0x11, 0x888e, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) r5 = dup2(r0, r0) socket$inet_udp(0x2, 0x2, 0x0) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 864.704993ms ago: executing program 2 (id=744): syz_usb_connect(0x5, 0x286, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x80000000) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (rerun: 64) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) (async) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000300)={r4, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}}, [0x1, 0x400, 0x5cf, 0x4, 0x8, 0x1, 0x1, 0x993c, 0xa, 0x9, 0x200, 0x9, 0xfffffffffffffb1c, 0x0, 0x8]}, &(0x7f0000000140)=0x100) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x40202, 0x0) (async) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read(r6, &(0x7f0000000100)=""/157, 0x9d) (async, rerun: 32) read(r6, 0x0, 0x0) (async, rerun: 32) write$FUSE_WRITE(r5, &(0x7f0000002500)={0x18, 0x0, 0x0, {0x4}}, 0x18) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000004c0)={0x0, 0x7}) ioctl$SIOCAX25NOUID(r6, 0x89e3, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000c80)={0x2, 0x0, @start={r7, 0x0, "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", "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"}, [0x3ff, 0x7, 0x7fffffff, 0x8, 0x1, 0x8, 0x6, 0x9, 0x0, 0x7, 0x8, 0x8, 0x7, 0x1, 0xfabe, 0x4, 0x50e, 0xa1, 0x3, 0x2, 0x8000, 0x3ff, 0xb, 0x9, 0x8, 0x1, 0x3, 0x9, 0xffffffffffffffff, 0x1, 0x8, 0x3, 0x0, 0xffff, 0x9, 0x2, 0x80000000, 0x4, 0x3, 0x1, 0xe6, 0x1, 0x2, 0x7, 0x80000000, 0x2, 0x6, 0xfffffffffffffac1, 0x0, 0xffffffffffffffff, 0x80000001, 0xd81542c, 0x80000001, 0x5, 0xf2e0, 0x8, 0x3, 0x0, 0x0, 0x2, 0x4, 0x3, 0xe859, 0x8]}) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) (rerun: 64) 800.776622ms ago: executing program 1 (id=747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x48a, 0x0, 0x4}]}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0xe2, 0x8, 0x1004, 0x9, 0xc591, 0x5, 0x8, 0x1, 0x10e, 0x80000004000002, 0x1a], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000016000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000004200)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) syz_fuse_handle_req(r10, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) read$FUSE(r10, &(0x7f0000006380)={0x2020}, 0x2020) 459.637575ms ago: executing program 1 (id=748): syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x84, 0x40000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000440)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[0x0], 0x1, r4, r5, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) close(r0) socketpair(0x9, 0x100000005, 0x0, &(0x7f0000000000)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xf}}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r7, &(0x7f0000000040)='./file1\x00', r7, &(0x7f00000001c0)='./file0\x00', 0x0) unlink(&(0x7f00000002c0)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x109) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00000fc000/0x400000)=nil) 149.797342ms ago: executing program 1 (id=749): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001000010400000000fcffffff00000000f06d5b342dec6b83d68c99e91da0d9fbabe6c3a819026ccb376465ba6cb6ef539d31987cbd614b81b97c6a8f3f32659e01c81bd760bbb88e15c27dac032747f3564aaff3897f9b7bfc83848b261809fdc7ea338b24c58853af60024436e0bb8f5a8051d8064aef79ca791467df00be0f0d71575118dc28d03bc747607e4e2e9c6aed9b2a33f8f71a2300"/171, @ANYRES32=0x0, @ANYBLOB="8842000000000000280012800b00010067656e65766500001800028014000700fc0100000000000000000000000000001400030067656e65766531000000000000000000"], 0x5c}}, 0x26040090) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x684, 0x5, 0x8000099, 0x9, 0x9, 0x1, 0x57, 0x3ff, 0x7, 0x101, 0x10000, 0x401, 0x3, 0x100000001}}) 149.476892ms ago: executing program 1 (id=750): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0x9a090a, 0x937}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 96.438556ms ago: executing program 1 (id=751): r0 = open(&(0x7f0000000000)='./file0\x00', 0x101400, 0xc3) flock(r0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6004, 0x1) 96.034988ms ago: executing program 1 (id=752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002d000100fcffffff0000000008000000", @ANYRES32=0x0, @ANYBLOB="090000804100000000000000"], 0x24}], 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000000)='fd', 0x0, r1) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="cd597c1107e4e832770c6170494992556dc454bf5c64e72d5065abbc69bd242f161186fb5ca6e4", 0x27) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='geneve0\x00', 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) 0s ago: executing program 3 (id=753): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000cc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000c80)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1, 0xffffffffffffffff}, 0x4) r3 = socket$isdn_base(0x22, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000240)={0xb, 0x5, 0xdf4, 0x1, 0x9, 0x81}) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, @sco, @phonet={0x23, 0xff, 0x3, 0x5}, @xdp={0x2c, 0x0, r6, 0x37}, 0xc0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)='syz_tun\x00', 0x3, 0x7f, 0xffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r7, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg/0:0:0:0\x00', 0x262100, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000001c0)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000500)={0x0, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000080)={r5, r5, 0x0, 0x6, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000440)=[r5], &(0x7f0000000200), 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f0000000080)={r7, r7, 0x0, 0x6, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r6, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000440)=[r7], &(0x7f0000000200), 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[r5, r7], 0x0, 0x0, 0x40000123, 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001800010028bd7000fedbdf251d010700150003000100008007010000d3698ac660061306040000001500040002000000220300005e0203a76125485a004c0f0d"], 0x44}, 0x1, 0x0, 0x0, 0xde50a9659187563d}, 0x40000c0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) fcntl$getflags(r1, 0x400) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) kernel console output (not intermixed with test programs): [ 67.133346][ T60] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 67.138161][ T60] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 67.140721][ T60] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 67.143708][ T60] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 67.146677][ T60] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 67.153751][ T60] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 67.178330][ T60] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 67.181640][ T60] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 67.581859][ T6642] random: crng reseeded on system resumption [ 67.597784][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.602561][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.279327][ T34] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 68.285679][ T34] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 68.290270][ T34] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 68.408964][ T6120] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 68.537207][ T6120] usb 7-1: device descriptor read/64, error -32 [ 68.635502][ T6648] syzkaller0: entered promiscuous mode [ 68.638365][ T6648] syzkaller0: entered allmulticast mode [ 68.679864][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 68.679878][ T40] audit: type=1400 audit(1766778442.938:337): avc: denied { prog_load } for pid=6649 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.697240][ T40] audit: type=1400 audit(1766778442.948:338): avc: denied { prog_run } for pid=6649 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.727447][ T40] audit: type=1400 audit(1766778442.988:339): avc: denied { read } for pid=6655 comm="syz.1.173" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.783518][ T40] audit: type=1400 audit(1766778443.038:340): avc: denied { create } for pid=6660 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.804949][ T6663] netlink: get zone limit has 4 unknown bytes [ 68.866116][ T40] audit: type=1400 audit(1766778443.108:341): avc: denied { ioctl } for pid=6669 comm="syz.1.178" path="socket:[14581]" dev="sockfs" ino=14581 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.878800][ T40] audit: type=1400 audit(1766778443.118:342): avc: denied { execute } for pid=6675 comm="syz.3.180" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13854 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 68.901935][ T40] audit: type=1400 audit(1766778443.158:343): avc: denied { read } for pid=6677 comm="syz.0.181" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 68.910728][ T40] audit: type=1400 audit(1766778443.158:344): avc: denied { open } for pid=6677 comm="syz.0.181" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 68.920500][ T40] audit: type=1400 audit(1766778443.158:345): avc: denied { ioctl } for pid=6677 comm="syz.0.181" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 68.929246][ T40] audit: type=1400 audit(1766778443.168:346): avc: denied { allowed } for pid=6675 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.961551][ T6681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.183'. [ 68.976101][ T6681] fuse: Bad value for 'group_id' [ 68.979322][ T6681] fuse: Bad value for 'group_id' [ 69.127947][ T5933] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 69.128021][ T5933] Bluetooth: hci3: Injecting HCI hardware error event [ 69.129034][ T5948] Bluetooth: hci3: hardware error 0x00 [ 69.161834][ T6694] hugetlbfs: Unknown parameter 'usrquota' [ 69.258004][ T6705] tipc: Enabling of bearer rejected, media not registered [ 69.368367][ T6728] 9pnet_virtio: no channels available for device syz [ 69.420932][ T34] usb 7-1: USB disconnect, device number 10 [ 69.702617][ T6763] smc: adding net device bond0 with user defined pnetid SYZ2 [ 70.005714][ T6786] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 70.189069][ T6811] netlink: 'syz.3.221': attribute type 2 has an invalid length. [ 70.191948][ T6811] A link change request failed with some changes committed already. Interface 16aca0105 may have been left with an inconsistent configuration, please check. [ 70.249285][ T6814] ubi31: attaching mtd0 [ 70.252396][ T6814] ubi31: scanning is finished [ 70.253978][ T6814] ubi31: empty MTD device detected [ 70.345194][ T6814] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 70.355635][ T6814] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 70.358167][ T6814] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 70.360473][ T6814] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 70.362914][ T6814] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 70.365160][ T6814] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 70.368212][ T6814] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3530867755 [ 70.371714][ T6814] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 70.375722][ T6825] ubi31: background thread "ubi_bgt31d" started, PID 6825 [ 70.434158][ T6827] __nla_validate_parse: 7 callbacks suppressed [ 70.434174][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'. [ 70.753729][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.879790][ T6001] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.902339][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 71.061928][ T6001] usb 6-1: Using ep0 maxpacket: 32 [ 71.066159][ T6001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.070810][ T6001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.074281][ T6001] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 71.077208][ T6001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.081278][ T6001] usb 6-1: config 0 descriptor?? [ 71.113404][ T6860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.235'. [ 71.248878][ T6862] netlink: 'syz.3.236': attribute type 4 has an invalid length. [ 71.256780][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 71.308486][ T5948] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 71.372795][ T6874] netlink: 'syz.3.239': attribute type 1 has an invalid length. [ 71.372809][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 71.409088][ T6874] bond1: entered promiscuous mode [ 71.410966][ T6874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.414073][ T6874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=6874 comm=syz.3.239 [ 71.433736][ T34] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 71.437833][ T34] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 71.440653][ T34] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 71.443322][ T34] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 71.446062][ T34] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 71.468840][ T34] hid-generic 0005:00B6:0009.0003: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 71.520354][ T6886] fido_id[6886]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 71.527858][ T6001] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 71.600761][ T6893] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 71.665739][ T6895] misc userio: Begin command sent, but we're already running [ 71.805035][ T6833] bond0: entered promiscuous mode [ 71.807319][ T6833] bond_slave_0: entered promiscuous mode [ 71.810153][ T6833] bond_slave_1: entered promiscuous mode [ 71.814222][ T6833] batadv0: entered promiscuous mode [ 71.817961][ T6833] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 71.822323][ T6833] bond0: left promiscuous mode [ 71.824458][ T6833] bond_slave_0: left promiscuous mode [ 71.826920][ T6833] bond_slave_1: left promiscuous mode [ 71.830285][ T6833] batadv0: left promiscuous mode [ 71.910751][ T6001] usb 6-1: USB disconnect, device number 4 [ 72.026514][ T6913] binder: 6912:6913 ioctl 5608 0 returned -22 [ 72.030022][ T6913] binder: 6912:6913 ioctl c0306201 200000000c40 returned -14 [ 72.272659][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 72.275519][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 72.341978][ T6928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.530547][ T6946] netlink: 'syz.2.261': attribute type 12 has an invalid length. [ 72.533345][ T6946] netlink: 248 bytes leftover after parsing attributes in process `syz.2.261'. [ 72.609011][ T6950] overlayfs: maximum fs stacking depth exceeded [ 72.649129][ T6954] netlink: 'syz.2.264': attribute type 8 has an invalid length. [ 72.652899][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'. [ 72.705953][ T6961] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 72.709087][ T6961] PKCS7: Only support pkcs7_signedData type [ 72.748539][ T6964] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 72.751464][ T6968] 9p: Bad value for 'rfdno' [ 72.751721][ T6969] 9p: Bad value for 'rfdno' [ 72.785148][ T6973] trusted_key: syz.2.271 sent an empty control message without MSG_MORE. [ 72.917864][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.940808][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 72.946275][ T6992] openvswitch: netlink: Flow actions attr not present in new flow. [ 72.960490][ T6983] SELinux: failed to load policy [ 73.014459][ T7003] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 73.040934][ T7007] netlink: 'syz.3.281': attribute type 1 has an invalid length. [ 73.054310][ T7007] netlink: 'syz.3.281': attribute type 1 has an invalid length. [ 73.057906][ T7003] evm: overlay not supported [ 73.092312][ T6983] SELinux: failed to load policy [ 73.119655][ T7014] btrfs: Unknown parameter 'no0ary' [ 73.142396][ T7016] netlink: 'syz.3.286': attribute type 4 has an invalid length. [ 73.228254][ T7024] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 73.232364][ T6983] SELinux: failed to load policy [ 73.242837][ T1179] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.265632][ T1179] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.269029][ T7024] Bluetooth: hci4: Frame reassembly failed (-84) [ 73.282653][ T842] Bluetooth: hci4: Frame reassembly failed (-84) [ 73.333235][ T1179] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.336992][ T1179] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.338743][ T6983] SELinux: failed to load policy [ 73.420713][ T6983] SELinux: failed to load policy [ 73.461853][ T7029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7029 comm=syz.2.291 [ 73.529016][ T6983] SELinux: failed to load policy [ 73.529755][ T7033] autofs4:pid:7033:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 73.536013][ T7033] autofs4:pid:7033:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 73.631197][ T6983] SELinux: failed to load policy [ 73.710411][ T6983] SELinux: failed to load policy [ 73.796949][ T6983] SELinux: failed to load policy [ 73.910714][ T7059] sg_write: process 244 (syz.2.302) changed security contexts after opening file descriptor, this is not allowed. [ 73.993158][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 73.993174][ T40] audit: type=1400 audit(1766778447.975:448): avc: denied { read } for pid=7070 comm="syz.2.305" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 74.010543][ T40] audit: type=1400 audit(1766778447.975:449): avc: denied { open } for pid=7070 comm="syz.2.305" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 74.059836][ T40] audit: type=1400 audit(1766778448.040:450): avc: denied { map } for pid=7064 comm="syz.0.303" path="socket:[15182]" dev="sockfs" ino=15182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.068363][ T40] audit: type=1400 audit(1766778448.040:451): avc: denied { read } for pid=7064 comm="syz.0.303" path="socket:[15182]" dev="sockfs" ino=15182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.272992][ T7091] IPv6: addrconf: prefix option has invalid lifetime [ 74.278154][ T7091] IPv6: addrconf: prefix option has invalid lifetime [ 74.305181][ T40] audit: type=1400 audit(1766778448.265:452): avc: denied { accept } for pid=7095 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.411523][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.510191][ T40] audit: type=1400 audit(1766778448.452:453): avc: denied { execute } for pid=7107 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 74.519995][ T40] audit: type=1400 audit(1766778448.452:454): avc: denied { execute_no_trans } for pid=7107 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 74.577731][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.593887][ T7111] lo: entered promiscuous mode [ 74.595728][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.598072][ T6587] lo speed is unknown, defaulting to 1000 [ 74.599563][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.602767][ T6587] syz2: Port: 1 Link DOWN [ 74.605732][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.610519][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.615605][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.639880][ T7115] lo speed is unknown, defaulting to 1000 [ 74.662400][ T7118] x_tables: duplicate underflow at hook 2 [ 74.665553][ T7118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=7118 comm=syz.2.319 [ 74.667368][ T40] audit: type=1400 audit(1766778448.601:455): avc: denied { read } for pid=7119 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 74.710176][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.763548][ T7115] chnl_net:caif_netlink_parms(): no params data found [ 74.807404][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.862979][ T7115] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.868079][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.870373][ T7115] bridge_slave_0: entered allmulticast mode [ 74.873903][ T7115] bridge_slave_0: entered promiscuous mode [ 74.877061][ T7115] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.880086][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.882968][ T7115] bridge_slave_1: entered allmulticast mode [ 74.886303][ T7115] bridge_slave_1: entered promiscuous mode [ 74.910959][ T7140] nilfs2: Unknown parameter 'norecovery`' [ 74.920468][ T7115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.927278][ T7115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.958090][ T7115] team0: Port device team_slave_0 added [ 74.963199][ T7115] team0: Port device team_slave_1 added [ 75.000063][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.002476][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.011508][ T7115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.018733][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.021316][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.032895][ T7115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.048048][ T13] bridge_slave_1: left allmulticast mode [ 75.050193][ T13] bridge_slave_1: left promiscuous mode [ 75.052964][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.058536][ T13] bridge_slave_0: left allmulticast mode [ 75.061499][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.133232][ T40] audit: type=1400 audit(1766778449.031:456): avc: denied { view } for pid=7142 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 75.267247][ T13] smc: removing net device bond0 with user defined pnetid SYZ2 [ 75.270618][ T13] bond0 (unregistering): Released all slaves [ 75.306022][ T7115] hsr_slave_0: entered promiscuous mode [ 75.308871][ T7115] hsr_slave_1: entered promiscuous mode [ 75.311227][ T7115] debugfs: 'hsr0' already exists in 'hsr' [ 75.313256][ T7115] Cannot create hsr debugfs directory [ 75.320423][ T40] audit: type=1400 audit(1766778449.219:457): avc: denied { search } for pid=5647 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.423925][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.458649][ T7115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.490745][ T7115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.517991][ T7115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.585684][ T7162] Malformed UNC in devname [ 75.585684][ T7162] [ 75.591176][ T7115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.591294][ T7162] CIFS: VFS: Malformed UNC in devname [ 75.624240][ T7163] lo speed is unknown, defaulting to 1000 [ 75.645058][ T7177] i2c i2c-1: Invalid block write size 34 [ 75.772561][ T7115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.790053][ T7115] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.798679][ T6386] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.801121][ T6386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.808378][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.808946][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 75.810831][ T6386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.839861][ T7115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.868745][ T13] hsr_slave_0: left promiscuous mode [ 75.871370][ T13] hsr_slave_1: left promiscuous mode [ 75.875276][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.877746][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.881143][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.883668][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.900015][ T13] veth1_macvtap: left promiscuous mode [ 75.902125][ T13] veth0_macvtap: left promiscuous mode [ 75.904121][ T13] veth1_vlan: left promiscuous mode [ 75.906024][ T13] veth0_vlan: left promiscuous mode [ 75.984091][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.988231][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.995576][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.999439][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.006671][ T34] usb 6-1: config 0 descriptor?? [ 76.011713][ T34] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 76.177190][ T13] team0 (unregistering): Port device team_slave_1 removed [ 76.198565][ T13] team0 (unregistering): Port device team_slave_0 removed [ 76.453741][ T7115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.549980][ T7182] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.556433][ T7182] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.571005][ T7182] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.575126][ T7182] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.577163][ T7182] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.582808][ T7182] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.590466][ T7182] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.592565][ T7182] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.596016][ T7182] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.604217][ T7115] veth0_vlan: entered promiscuous mode [ 76.609331][ T7115] veth1_vlan: entered promiscuous mode [ 76.627091][ T7115] veth0_macvtap: entered promiscuous mode [ 76.638279][ T7115] veth1_macvtap: entered promiscuous mode [ 76.647465][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.657973][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.668936][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.672109][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.683232][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.688070][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.712318][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.715552][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.773953][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.776589][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.791115][ T6386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.794932][ T6386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.979623][ T7240] vcan0: entered allmulticast mode [ 77.277349][ T7255] 9p: Could not find request transport: xen [ 77.281016][ T7255] SELinux: Context +,.$*/ is not valid (left unmapped). [ 77.392419][ T7263] overlayfs: statfs failed on './file0' [ 77.395602][ T7263] __nla_validate_parse: 12 callbacks suppressed [ 77.395616][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 77.545325][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 77.548381][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 77.633391][ T7272] BIDI support in bsg has been removed. [ 77.660235][ T7276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.350'. [ 77.702243][ T7276] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7276 comm=syz.3.350 [ 77.810331][ T7286] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.353'. [ 77.868081][ T7288] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 77.871655][ T7288] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 77.876093][ T7288] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 77.878621][ T7288] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 77.921661][ T7296] netlink: 32 bytes leftover after parsing attributes in process `syz.4.357'. [ 77.977146][ T7301] netlink: 32 bytes leftover after parsing attributes in process `syz.3.358'. [ 78.729829][ T7293] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.732506][ T7293] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.735157][ T7293] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.778323][ T6032] usb 6-1: USB disconnect, device number 5 [ 78.809487][ T7344] lo speed is unknown, defaulting to 1000 [ 78.825730][ T7348] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 78.829912][ T7348] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 78.846684][ T7348] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 78.850161][ T7348] UDF-fs: Scanning with blocksize 2048 failed [ 78.922736][ T7348] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 78.926200][ T7348] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 78.929397][ T7348] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 78.932655][ T7348] UDF-fs: Scanning with blocksize 4096 failed [ 78.935539][ T7348] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1) [ 79.002301][ T7358] lo speed is unknown, defaulting to 1000 [ 80.128965][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 80.887831][ T5948] Bluetooth: hci0: command 0x041b tx timeout [ 80.887965][ T5933] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.342558][ T5933] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.112249][ T5933] Bluetooth: hci0: command 0x041b tx timeout [ 83.112288][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.566142][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.335920][ T5933] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.338486][ T5948] Bluetooth: hci0: command 0x041b tx timeout [ 87.570591][ T5948] Bluetooth: hci0: command 0x041b tx timeout [ 87.651070][ T53] cfg80211: failed to load regulatory.db [ 89.498594][ T7393] netlink: 'syz.1.368': attribute type 10 has an invalid length. [ 89.498930][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.501909][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.501955][ T7393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.506433][ T7393] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 89.507807][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 89.507815][ T40] audit: type=1400 audit(1766778462.490:485): avc: denied { getopt } for pid=7391 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.523389][ T40] audit: type=1400 audit(1766778462.499:486): avc: denied { map } for pid=7395 comm="syz.3.370" path="/dev/ttyS3" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 89.527538][ T7397] debugfs: 'ttyS3' already exists in 'caif_serial' [ 89.550732][ T7397] syz_tun: entered allmulticast mode [ 89.551510][ T7397] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 89.551553][ T7397] mroute: pending queue full, dropping entries [ 89.552472][ T7397] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 89.552483][ T7397] mroute: pending queue full, dropping entries [ 89.557989][ T7394] netlink: 'syz.2.369': attribute type 1 has an invalid length. [ 89.559597][ T7394] netlink: 'syz.2.369': attribute type 1 has an invalid length. [ 89.559617][ T7394] netlink: 224 bytes leftover after parsing attributes in process `syz.2.369'. [ 89.559625][ T7394] NCSI netlink: No device for ifindex 0 [ 89.614897][ T40] audit: type=1400 audit(1766778462.583:487): avc: denied { add_name } for pid=7402 comm="syz.3.371" name="blkio.bfq.io_wait_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.647781][ T40] audit: type=1400 audit(1766778462.593:488): avc: denied { create } for pid=7402 comm="syz.3.371" name="blkio.bfq.io_wait_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.654896][ T40] audit: type=1400 audit(1766778462.593:489): avc: denied { associate } for pid=7402 comm="syz.3.371" name="blkio.bfq.io_wait_time_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 89.662875][ T40] audit: type=1400 audit(1766778462.611:490): avc: denied { append open } for pid=7402 comm="syz.3.371" path="/92/file0/blkio.bfq.io_wait_time_recursive" dev="9p" ino=72351951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.673879][ T40] audit: type=1400 audit(1766778462.611:491): avc: denied { map } for pid=7402 comm="syz.3.371" path="/92/file0/blkio.bfq.io_wait_time_recursive" dev="9p" ino=72351951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.682880][ T40] audit: type=1400 audit(1766778462.611:492): avc: denied { write } for pid=7402 comm="syz.3.371" path="/92/file0/blkio.bfq.io_wait_time_recursive" dev="9p" ino=72351951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.691883][ T40] audit: type=1400 audit(1766778462.649:493): avc: denied { rename } for pid=7406 comm="syz.4.372" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 89.784224][ T5948] Bluetooth: hci0: command 0x041b tx timeout [ 89.787713][ T7421] netlink: 72 bytes leftover after parsing attributes in process `syz.4.374'. [ 89.817963][ T40] audit: type=1400 audit(1766778462.780:494): avc: denied { read } for pid=7428 comm="syz.3.376" dev="nsfs" ino=4026532969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.861487][ T7421] IPVS: length: 24 != 36888 [ 89.891565][ T7431] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.377' sets config #0 [ 89.894962][ T7431] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.377' sets config #1 [ 90.040577][ T6646] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 90.224545][ T6646] usb 7-1: not running at top speed; connect to a high speed hub [ 90.229232][ T6646] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 90.233891][ T6646] usb 7-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.238161][ T6646] usb 7-1: config 1 interface 0 has no altsetting 0 [ 90.242065][ T6646] usb 7-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.40 [ 90.245544][ T6646] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.248268][ T6646] usb 7-1: Product: syz [ 90.249705][ T6646] usb 7-1: Manufacturer: ⾧銵焓廚鰿㿣愰评 [ 90.251929][ T6646] usb 7-1: SerialNumber: syz [ 90.256280][ T7418] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.369666][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 90.374590][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 90.384651][ T7447] bridge0: port 3(syz_tun) entered blocking state [ 90.387950][ T7447] bridge0: port 3(syz_tun) entered disabled state [ 90.390895][ T7447] syz_tun: entered promiscuous mode [ 90.393251][ T7447] bridge0: port 3(syz_tun) entered blocking state [ 90.395565][ T7447] bridge0: port 3(syz_tun) entered forwarding state [ 90.511501][ T6646] usbhid 7-1:1.0: can't add hid device: -71 [ 90.515867][ T6646] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 90.528803][ T6646] usb 7-1: USB disconnect, device number 11 [ 90.775101][ T7480] netlink: 'syz.3.391': attribute type 29 has an invalid length. [ 90.855257][ T7484] usb usb8: usbfs: process 7484 (syz.3.393) did not claim interface 0 before use [ 90.913975][ T7491] netlink: 76 bytes leftover after parsing attributes in process `syz.3.395'. [ 90.918171][ T7492] Bluetooth: MGMT ver 1.23 [ 90.970674][ T6646] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 91.021775][ T7506] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 91.131487][ T6646] usb 7-1: Using ep0 maxpacket: 16 [ 91.139189][ T6646] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 91.145859][ T6646] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 91.149774][ T6646] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.153378][ T6646] usb 7-1: Product: syz [ 91.155171][ T6646] usb 7-1: Manufacturer: syz [ 91.157195][ T6646] usb 7-1: SerialNumber: syz [ 91.160999][ T6646] usb 7-1: config 0 descriptor?? [ 91.171567][ T6646] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 91.179375][ T6646] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 91.367429][ T7536] Invalid ELF header type: 0 != 1 [ 91.392239][ T7538] ip6erspan0: entered promiscuous mode [ 91.441424][ T6646] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 91.514385][ T6646] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 91.520017][ T6646] em28xx 7-1:0.0: board has no eeprom [ 91.591783][ T6646] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 91.595741][ T6646] em28xx 7-1:0.0: dvb set to bulk mode. [ 91.595869][ T7547] geneve2: entered promiscuous mode [ 91.600147][ T7547] geneve2: entered allmulticast mode [ 91.603486][ T7471] em28xx 7-1:0.0: reading from i2c device at 0x6 failed (error=-5) [ 91.608206][ T6587] em28xx 7-1:0.0: Binding DVB extension [ 91.620498][ T6646] usb 7-1: USB disconnect, device number 12 [ 91.625151][ T6646] em28xx 7-1:0.0: Disconnecting em28xx [ 91.646190][ T6587] em28xx 7-1:0.0: Registering input extension [ 91.652976][ T6646] em28xx 7-1:0.0: Closing input extension [ 91.723175][ T6646] em28xx 7-1:0.0: Freeing device [ 92.007892][ T5948] Bluetooth: hci0: command 0x041b tx timeout [ 92.066206][ T7556] binder: BINDER_SET_CONTEXT_MGR already set [ 92.068919][ T7556] binder: 7554:7556 ioctl 4018620d 200000000100 returned -16 [ 92.114180][ T7562] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.414'. [ 92.158151][ T7566] netlink: 'syz.4.415': attribute type 5 has an invalid length. [ 92.164067][ T7566] ip6erspan0: entered promiscuous mode [ 92.265151][ T7571] kvm: user requested TSC rate below hardware speed [ 92.305447][ T7577] netlink: 328 bytes leftover after parsing attributes in process `syz.2.419'. [ 92.321597][ T7576] netlink: 328 bytes leftover after parsing attributes in process `syz.2.419'. [ 92.547056][ T7606] overlayfs: conflicting options: userxattr,metacopy=on [ 92.603047][ T7612] SELinux: truncated policydb string identifier [ 92.605411][ T7612] SELinux: failed to load policy [ 92.643234][ T7615] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 92.645953][ T7615] overlayfs: missing 'lowerdir' [ 92.667108][ T7618] xt_hashlimit: size too large, truncated to 1048576 [ 92.674384][ T7612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7612 comm=syz.1.428 [ 92.713651][ T850] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 92.726982][ T7623] overlayfs: failed to resolve './file0': -2 [ 92.790188][ T7630] overlayfs: conflicting options: userxattr,redirect_dir=on [ 92.792979][ T7629] overlayfs: failed to resolve './file1': -2 [ 92.905981][ T850] usb 9-1: Using ep0 maxpacket: 32 [ 92.909646][ T850] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 92.913746][ T850] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 92.924551][ T850] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.930403][ T850] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 92.937624][ T850] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 92.942827][ T850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.945989][ T850] usb 9-1: Product: syz [ 92.947752][ T850] usb 9-1: Manufacturer: syz [ 92.959752][ T850] usb 9-1: SerialNumber: syz [ 92.973154][ C2] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 92.982691][ T850] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input9 [ 93.194770][ T850] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 93.197616][ T850] (id 0x00) [ 93.216255][ T837] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 93.258833][ T850] rc_core: IR keymap rc-imon-pad not found [ 93.260939][ T850] Registered IR keymap rc-empty [ 93.262936][ T850] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 93.267489][ T850] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 93.328654][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 93.333274][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 93.401064][ T837] usb 8-1: config index 0 descriptor too short (expected 30768, got 36) [ 93.404488][ T837] usb 8-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 93.408547][ T837] usb 8-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 93.409702][ T850] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 93.413051][ T837] usb 8-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 93.413091][ T837] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.419775][ T850] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input10 [ 93.422835][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.428859][ T850] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:2> initialized [ 93.609627][ T7592] imon:vfd_write: invalid payload size [ 93.612382][ T850] usb 9-1: USB disconnect, device number 2 [ 93.650062][ T7652] netlink: 'syz.3.443': attribute type 10 has an invalid length. [ 93.655573][ T7652] bridge0: port 3(syz_tun) entered disabled state [ 93.658134][ T7652] syz_tun: left promiscuous mode [ 93.660024][ T7652] bridge0: port 3(syz_tun) entered disabled state [ 93.666296][ T7652] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 94.017296][ T837] usb 8-1: string descriptor 0 read error: -71 [ 94.022071][ T837] usb 8-1: USB disconnect, device number 2 [ 94.214895][ T7687] fuse: Unknown parameter '0x0000000000000005' [ 94.404795][ T7697] QAT: Invalid ioctl -2144835806 [ 94.696221][ T7718] netlink: 'syz.4.465': attribute type 1 has an invalid length. [ 94.880126][ T7726] sp0: Synchronizing with TNC [ 95.053037][ T7747] __nla_validate_parse: 6 callbacks suppressed [ 95.053051][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 95.092949][ T7747] team0: Port device team_slave_0 removed [ 95.155981][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 95.259800][ T7760] sctp: [Deprecated]: syz.4.478 (pid 7760) Use of int in maxseg socket option. [ 95.259800][ T7760] Use struct sctp_assoc_value instead [ 95.309815][ T7766] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.373813][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 95.373823][ T40] audit: type=1400 audit(1766778467.961:544): avc: denied { ioctl } for pid=7767 comm="syz.3.482" path="socket:[19088]" dev="sockfs" ino=19088 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.385132][ T40] audit: type=1400 audit(1766778467.980:545): avc: denied { connect } for pid=7778 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.392653][ T40] audit: type=1400 audit(1766778467.980:546): avc: denied { bind } for pid=7778 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 95.399717][ T40] audit: type=1400 audit(1766778467.980:547): avc: denied { write } for pid=7778 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 95.413435][ T40] audit: type=1400 audit(1766778468.008:548): avc: denied { setopt } for pid=7783 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 95.454898][ T40] audit: type=1400 audit(1766778468.045:549): avc: denied { read } for pid=7780 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.513128][ T7792] input: syz0 as /devices/virtual/input/input11 [ 95.553111][ T40] audit: type=1400 audit(1766778468.139:550): avc: denied { name_bind } for pid=7793 comm="syz.3.489" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 95.563063][ T40] audit: type=1400 audit(1766778468.139:551): avc: denied { name_bind } for pid=7793 comm="syz.3.489" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 95.574004][ T7795] usb usb8: usbfs: process 7795 (syz.3.489) did not claim interface 0 before use [ 95.580204][ T40] audit: type=1326 audit(1766778468.167:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.3.489" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f376df8f7c9 code=0x40000 [ 95.617146][ T40] audit: type=1400 audit(1766778468.195:553): avc: denied { setopt } for pid=7802 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 95.710782][ T34] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 95.757163][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 95.762111][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 95.765162][ T7819] netlink: 'syz.3.495': attribute type 11 has an invalid length. [ 95.768273][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 95.771295][ T7819] netlink: 'syz.3.495': attribute type 11 has an invalid length. [ 95.817505][ T7822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.822359][ T7822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.834723][ T7822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.838631][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.838891][ T7822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.842526][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.878495][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 95.883236][ T34] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 95.887858][ T34] usb 9-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 95.892657][ T34] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 95.896543][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.081660][ T850] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 96.093810][ T7825] netlink: 'syz.1.497': attribute type 1 has an invalid length. [ 96.114562][ T7825] bond1: entered promiscuous mode [ 96.116999][ T7825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.119894][ T7784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.123482][ T7825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7825 comm=syz.1.497 [ 96.129522][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.176236][ T6587] usb 9-1: USB disconnect, device number 3 [ 96.231355][ T850] usb 8-1: device descriptor read/64, error -71 [ 96.498736][ T850] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 96.580097][ T7833] Cannot find add_set index 46338 as target [ 96.583290][ T7833] netlink: 'syz.2.499': attribute type 11 has an invalid length. [ 96.648403][ T850] usb 8-1: device descriptor read/64, error -71 [ 96.680426][ T7839] netlink: 'syz.1.500': attribute type 21 has an invalid length. [ 96.683083][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 96.690680][ T7839] netlink: 'syz.1.500': attribute type 21 has an invalid length. [ 96.691438][ T62] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.693773][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 96.696637][ T62] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.696660][ T62] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.696680][ T62] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.752797][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 96.767992][ T850] usb usb8-port1: attempt power cycle [ 96.818072][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'. [ 96.843480][ T7849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.503'. [ 96.866765][ T7853] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 96.898011][ T7858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.943528][ T7861] Invalid/unusable pipe [ 96.946721][ T7861] netlink: 'syz.4.507': attribute type 7 has an invalid length. [ 97.140237][ T850] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 97.172669][ T850] usb 8-1: device descriptor read/8, error -71 [ 97.439681][ T850] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 97.474882][ T850] usb 8-1: device descriptor read/8, error -71 [ 97.581207][ T7879] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 97.589993][ T850] usb usb8-port1: unable to enumerate USB device [ 97.891304][ T7889] hsr_slave_0: left promiscuous mode [ 97.894856][ T7889] hsr_slave_1: left promiscuous mode [ 97.994609][ T6120] Process accounting resumed [ 98.016744][ T7892] Process accounting resumed [ 98.207044][ T7909] tmpfs: Bad value for 'mpol' [ 98.209129][ T7909] tmpfs: Bad value for 'mpol' [ 98.220650][ T7909] tmpfs: Bad value for 'mpol' [ 98.222513][ T7909] tmpfs: Bad value for 'mpol' [ 98.224214][ T7909] tmpfs: Bad value for 'mpol' [ 98.761157][ T7917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.989267][ T7926] binder: 7925:7926 ioctl 4018620d 0 returned -22 [ 99.109008][ T7934] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 99.293164][ T7944] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (5681137492 ns) > initial count (657219872 ns). Using initial count to start timer. [ 99.316294][ T7956] vlan2: entered allmulticast mode [ 99.318241][ T7956] bond0: entered allmulticast mode [ 99.320249][ T7956] bond_slave_0: entered allmulticast mode [ 99.322284][ T7956] bond_slave_1: entered allmulticast mode [ 99.349429][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 99.506918][ T7971] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 99.524679][ T54] IPVS: starting estimator thread 0... [ 99.642431][ T7978] IPVS: using max 47 ests per chain, 112800 per kthread [ 99.685572][ T7988] tmpfs: Unknown parameter '< r-w:' [ 99.895307][ T8008] 0: renamed from hsr0 (while UP) [ 99.915117][ T8008] 0: entered allmulticast mode [ 99.917121][ T8008] hsr_slave_0: entered allmulticast mode [ 99.919090][ T8008] hsr_slave_1: entered allmulticast mode [ 99.925426][ T8008] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 99.999987][ T8023] overlayfs: invalid origin (0000) [ 100.147750][ T8027] hugetlbfs: Unknown parameter 'uidL_CIPSOv4' [ 100.151913][ T8035] kernel profiling enabled (shift: 0) [ 100.231262][ T8038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8038 comm=syz.2.559 [ 100.298444][ T8038] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 100.302659][ T8047] program syz.1.563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.302906][ T8038] overlayfs: missing 'lowerdir' [ 100.303247][ T34] kernel write not supported for file /radio5 (pid: 34 comm: kworker/3:0) [ 100.362586][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.522716][ T8060] /dev/nullb0: Can't lookup blockdev [ 100.605112][ T8074] syz.4.569 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 100.627573][ T8072] __nla_validate_parse: 15 callbacks suppressed [ 100.627587][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 100.672308][ T8072] tipc: Enabled bearer , priority 0 [ 100.678199][ T8072] syzkaller0: entered promiscuous mode [ 100.682728][ T8072] syzkaller0: entered allmulticast mode [ 100.690938][ T8072] tipc: Resetting bearer [ 100.700671][ T8071] tipc: Resetting bearer [ 100.725942][ T8071] tipc: Disabling bearer [ 100.829633][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 100.829651][ T40] audit: type=1804 audit(1766778473.067:591): pid=8093 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.576" name="file0" dev="ramfs" ino=22214 res=1 errno=0 [ 100.841976][ T40] audit: type=1400 audit(1766778473.086:592): avc: denied { execute } for pid=8092 comm="syz.3.576" path="/cpu.stat" dev="ramfs" ino=22657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 100.881339][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'. [ 100.889407][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.577'. [ 100.893077][ T8097] bridge: RTM_NEWNEIGH with invalid ether address [ 100.896015][ T8096] bridge: RTM_NEWNEIGH with invalid ether address [ 100.917672][ T40] audit: type=1400 audit(1766778473.151:593): avc: denied { read } for pid=8104 comm="syz.3.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.976071][ T8105] autofs: Unknown parameter '' [ 100.989634][ T5982] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 101.152964][ T5982] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.165876][ T5982] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 101.180611][ T5982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 101.184160][ T5982] usb 9-1: Product: syz [ 101.185872][ T5982] usb 9-1: Manufacturer: syz [ 101.187813][ T5982] usb 9-1: SerialNumber: syz [ 101.188208][ T40] audit: type=1400 audit(1766778473.404:594): avc: denied { module_load } for pid=8124 comm="syz.1.585" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 101.197786][ T8125] kernel read not supported for file /policy (pid: 8125 comm: syz.1.585) [ 101.248621][ T40] audit: type=1400 audit(1766778473.469:595): avc: denied { execute } for pid=8128 comm="syz.3.586" path="/dev/nullb0" dev="devtmpfs" ino=2911 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 101.267266][ T40] audit: type=1800 audit(1766778473.469:596): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.586" name="nullb0" dev="devtmpfs" ino=2911 res=0 errno=0 [ 101.325547][ T8135] netlink: 'syz.1.589': attribute type 2 has an invalid length. [ 101.328905][ T8135] netlink: 'syz.1.589': attribute type 1 has an invalid length. [ 101.355789][ T40] audit: type=1400 audit(1766778473.563:597): avc: denied { write } for pid=8137 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 101.364811][ T40] audit: type=1400 audit(1766778473.563:598): avc: denied { read } for pid=8137 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 101.394225][ T40] audit: type=1400 audit(1766778473.591:599): avc: denied { setattr } for pid=8141 comm="syz.1.592" name="" dev="pipefs" ino=21299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 101.394820][ T8142] openvswitch: netlink: EtherType 50a is less than min 600 [ 101.425303][ T5982] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 101.437029][ T5982] usb 9-1: USB disconnect, device number 4 [ 101.449804][ T5982] usblp0: removed [ 101.486376][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 101.493768][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 101.498451][ T40] audit: type=1400 audit(1766778473.694:600): avc: denied { open } for pid=8156 comm="syz.3.595" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 101.516721][ T8160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.596'. [ 101.533465][ T8162] program syz.4.593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.541105][ T8163] netlink: 48 bytes leftover after parsing attributes in process `syz.1.597'. [ 101.716087][ T5948] Bluetooth: hci0: Malformed LE Event: 0x0b [ 102.394817][ T8189] netlink: 'syz.2.604': attribute type 10 has an invalid length. [ 102.398754][ T8189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.604'. [ 102.410259][ T8189] team0: Port device geneve0 added [ 102.452135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.501470][ T54] Process accounting resumed [ 102.594712][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 102.661752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.774626][ T8210] binder: BINDER_SET_CONTEXT_MGR already set [ 102.777028][ T8210] binder: 8207:8210 ioctl 4018620d 200000004a80 returned -16 [ 102.818870][ T8214] binder: 8213:8214 ioctl c0306201 0 returned -14 [ 102.840670][ T8217] sit0: entered promiscuous mode [ 102.846654][ T8217] netlink: 'syz.1.611': attribute type 1 has an invalid length. [ 102.850913][ T8217] netlink: 1 bytes leftover after parsing attributes in process `syz.1.611'. [ 102.877012][ T8221] xt_l2tp: missing protocol rule (udp|l2tpip) [ 102.945363][ T8225] syzkaller0: entered promiscuous mode [ 102.948230][ T8225] syzkaller0: entered allmulticast mode [ 103.151780][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.191935][ T8233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.206569][ T8233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.244467][ T8235] ntfs3(sr0): try to read out of volume at offset 0x0 [ 103.282633][ T6386] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.285720][ T6386] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.288896][ T6386] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.292072][ T6386] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.320430][ T53] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 103.427581][ T8240] isofs_fill_super: bread failed, dev=sr0, iso_blknum=16, block=16 [ 103.482522][ T53] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.487549][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.492707][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.497391][ T53] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.503144][ T53] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.506943][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.514422][ T53] usb 9-1: config 0 descriptor?? [ 103.702754][ T8247] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 103.711940][ T8247] CIFS mount error: No usable UNC path provided in device string! [ 103.711940][ T8247] [ 103.716597][ T8247] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 103.734967][ T53] hid_parser_main: 4091 callbacks suppressed [ 103.734982][ T53] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 103.748009][ T53] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 103.758675][ T53] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 103.762804][ T53] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 103.766525][ T53] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 103.770677][ T53] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 103.773966][ T53] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 103.776830][ T53] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 103.778286][ T5948] Bluetooth: hci1: unexpected event for opcode 0x202d [ 103.779152][ T53] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 103.790273][ T53] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 103.801048][ T53] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 103.821755][ T53] usb 9-1: USB disconnect, device number 5 [ 103.859710][ T8265] fido_id[8265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb9/report_descriptor': No such file or directory [ 104.117722][ T8282] netlink: 'syz.1.636': attribute type 1 has an invalid length. [ 104.143613][ T8284] 9pnet_fd: p9_fd_create_tcp (8284): problem binding to privport [ 104.183490][ T5948] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 104.291880][ T8299] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 104.295525][ T8299] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 104.298319][ T8299] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 104.301017][ T8299] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 104.358031][ T8306] tmpfs: Unknown parameter 'n$IHոI' [ 104.507003][ T8310] EXT4-fs: Conflicting test_dummy_encryption options [ 104.686866][ T842] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.690321][ T842] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.695202][ T842] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.698871][ T842] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.795746][ T8337] netlink: 'syz.2.656': attribute type 29 has an invalid length. [ 104.800599][ T8337] netlink: 'syz.2.656': attribute type 29 has an invalid length. [ 104.810939][ T8342] netdevsim netdevsim4: Direct firmware load for } failed with error -2 [ 104.816686][ T8342] netdevsim netdevsim4: Falling back to sysfs fallback for: } [ 104.970743][ T8356] /dev/nullb0: Can't lookup blockdev [ 104.983345][ T8356] bond0: entered promiscuous mode [ 104.985723][ T8356] bond_slave_0: entered promiscuous mode [ 104.988437][ T8356] bond_slave_1: entered promiscuous mode [ 104.991676][ T8356] batadv0: entered promiscuous mode [ 104.994262][ T8356] debugfs: 'hsr0' already exists in 'hsr' [ 104.996748][ T8356] Cannot create hsr debugfs directory [ 104.999704][ T8356] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 105.003308][ T8356] bond0: left promiscuous mode [ 105.005335][ T8356] bond_slave_0: left promiscuous mode [ 105.007741][ T8356] bond_slave_1: left promiscuous mode [ 105.012615][ T8356] batadv0: left promiscuous mode [ 105.451793][ T8372] netlink: 'syz.2.668': attribute type 1 has an invalid length. [ 105.508942][ T8372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.518633][ T8381] bond1: (slave ip6erspan0): making interface the new active one [ 105.522461][ T8381] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 105.539019][ T8372] : entered promiscuous mode [ 105.556882][ T8383] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 105.591208][ T8383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.620938][ T8383] vlan2: entered promiscuous mode [ 105.622738][ T8383] bond2: entered promiscuous mode [ 105.626982][ T8383] [U] v3f"S/4:XTzWtlW= [ 105.629492][ T8383] [U] J"e:" [ 105.629544][ T8388] xfrm0 speed is unknown, defaulting to 1000 [ 105.634780][ T8383] gretap1: entered promiscuous mode [ 105.639384][ T8383] bond2: (slave gretap1): making interface the new active one [ 105.642601][ T8383] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 105.647055][ T8388] xfrm0 speed is unknown, defaulting to 1000 [ 105.650794][ T8388] xfrm0 speed is unknown, defaulting to 1000 [ 105.659022][ T8388] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 105.672350][ T8388] xfrm0 speed is unknown, defaulting to 1000 [ 105.680495][ T8388] xfrm0 speed is unknown, defaulting to 1000 [ 105.686826][ T8388] xfrm0 speed is unknown, defaulting to 1000 [ 105.690193][ T8388] xfrm0 speed is unknown, defaulting to 1000 [ 106.053223][ T8416] xt_ecn: cannot match TCP bits for non-tcp packets [ 106.097613][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.101675][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.204682][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.210458][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.220158][ T5933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.221980][ T8429] __nla_validate_parse: 14 callbacks suppressed [ 106.221990][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.691'. [ 106.223564][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.231820][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.235535][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.238341][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.262248][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 106.283126][ T8433] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.297043][ T8424] lo speed is unknown, defaulting to 1000 [ 106.300280][ T8424] xfrm0 speed is unknown, defaulting to 1000 [ 106.345050][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.348582][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.423621][ T8424] chnl_net:caif_netlink_parms(): no params data found [ 106.509015][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.512490][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.585681][ T8424] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.588125][ T8424] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.590478][ T8424] bridge_slave_0: entered allmulticast mode [ 106.593395][ T8424] bridge_slave_0: entered promiscuous mode [ 106.597929][ T8424] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.600281][ T8424] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.602733][ T8424] bridge_slave_1: entered allmulticast mode [ 106.606257][ T8424] bridge_slave_1: entered promiscuous mode [ 106.629455][ T8424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.657847][ T8424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.680503][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 106.680515][ T40] audit: type=1400 audit(1766778478.548:625): avc: denied { bind } for pid=8464 comm="syz.1.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 106.711246][ T8424] team0: Port device team_slave_0 added [ 106.734889][ T8424] team0: Port device team_slave_1 added [ 106.754816][ T13] bridge_slave_1: left allmulticast mode [ 106.757392][ T13] bridge_slave_1: left promiscuous mode [ 106.760103][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.771047][ T13] bridge_slave_0: left allmulticast mode [ 106.772898][ T13] bridge_slave_0: left promiscuous mode [ 106.784559][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.798844][ T8468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8468 comm=syz.3.701 [ 106.814187][ T8472] Bluetooth: MGMT ver 1.23 [ 106.891997][ T8470] netlink: 68 bytes leftover after parsing attributes in process `syz.3.701'. [ 107.149361][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.154254][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.157928][ T13] bond0 (unregistering): Released all slaves [ 107.162814][ T13] bond1 (unregistering): Released all slaves [ 107.198482][ T8424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.201533][ T8424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.213017][ T8424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.219820][ T8424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.222681][ T8424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.233599][ T8424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.287731][ T8424] hsr_slave_0: entered promiscuous mode [ 107.291128][ T8424] hsr_slave_1: entered promiscuous mode [ 107.293967][ T8424] debugfs: 'hsr0' already exists in 'hsr' [ 107.296301][ T8424] Cannot create hsr debugfs directory [ 107.336443][ T40] audit: type=1400 audit(1766778479.156:626): avc: denied { ioctl } for pid=8485 comm="syz.3.707" path="pid:[4026532874]" dev="nsfs" ino=4026532874 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.341966][ T8488] dvmrp6: entered allmulticast mode [ 107.503103][ T8499] x_tables: ip_tables: ipvs.0 match: invalid size 40 (kernel) != (user) 72 [ 107.511957][ T13] hsr_slave_0: left promiscuous mode [ 107.514706][ T13] hsr_slave_1: left promiscuous mode [ 107.517036][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.519695][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.524121][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.526973][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.553119][ T13] veth1_macvtap: left promiscuous mode [ 107.557908][ T13] veth0_macvtap: left promiscuous mode [ 107.559849][ T13] veth1_vlan: left promiscuous mode [ 107.561502][ T13] veth0_vlan: left promiscuous mode [ 107.563824][ T8491] block device autoloading is deprecated and will be removed. [ 107.988408][ T40] audit: type=1400 audit(1766778479.764:627): avc: denied { map } for pid=8520 comm="syz.3.717" path="socket:[23118]" dev="sockfs" ino=23118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 108.095336][ T8528] binder: binder_mmap: 8524 200000000000-200000003000 bad vm_flags failed -1 [ 108.105785][ T13] team0 (unregistering): Port device team_slave_1 removed [ 108.134662][ T13] team0 (unregistering): Port device team_slave_0 removed [ 108.338533][ T13] vcan0 (unregistering): left allmulticast mode [ 108.355165][ T8529] syzkaller0: entered promiscuous mode [ 108.358239][ T8529] syzkaller0: entered allmulticast mode [ 108.431416][ T5948] Bluetooth: hci0: command tx timeout [ 108.450788][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 108.456846][ T8540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.721'. [ 108.459308][ T8537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.719'. [ 108.465734][ T8424] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.480358][ T8424] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.485089][ T8424] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.510304][ T8424] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.542537][ T40] audit: type=1400 audit(1766778480.287:628): avc: denied { watch } for pid=8547 comm="syz.3.723" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 108.562046][ T40] audit: type=1400 audit(1766778480.287:629): avc: denied { watch_sb watch_reads } for pid=8547 comm="syz.3.723" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 108.614623][ T8424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.640425][ T8424] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.647309][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.650396][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.659727][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.662743][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.714278][ T40] audit: type=1400 audit(1766778480.446:630): avc: denied { mount } for pid=8569 comm="syz.2.726" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 108.717626][ T8570] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 108.725582][ T40] audit: type=1400 audit(1766778480.446:631): avc: denied { mounton } for pid=8569 comm="syz.2.726" path="/206/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 108.732216][ T8570] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 108.746892][ T40] audit: type=1400 audit(1766778480.474:632): avc: denied { read } for pid=8569 comm="syz.2.726" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 108.773658][ T40] audit: type=1400 audit(1766778480.474:633): avc: denied { read } for pid=8569 comm="syz.2.726" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 108.781945][ T40] audit: type=1400 audit(1766778480.474:634): avc: denied { read } for pid=8569 comm="syz.2.726" name="/" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 108.787261][ T8570] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 108.792433][ T8580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.728'. [ 108.846013][ T8424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.926387][ T8597] netlink: 52 bytes leftover after parsing attributes in process `syz.2.730'. [ 108.940704][ T8591] /dev/nullb0: Can't lookup blockdev [ 109.007609][ T8424] veth0_vlan: entered promiscuous mode [ 109.021992][ T8424] veth1_vlan: entered promiscuous mode [ 109.044606][ T8424] veth0_macvtap: entered promiscuous mode [ 109.049136][ T8424] veth1_macvtap: entered promiscuous mode [ 109.057918][ T8424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.065517][ T8424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.071369][ T6386] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.075754][ T6386] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.079711][ T6386] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.085038][ T6386] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.126710][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.130273][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.146649][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.152746][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.192631][ T8612] capability: warning: `syz.5.686' uses 32-bit capabilities (legacy support in use) [ 109.366294][ T8618] program syz.1.733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.665853][ T8635] pim6reg: entered allmulticast mode [ 109.799479][ T8649] netlink: 52 bytes leftover after parsing attributes in process `syz.1.740'. [ 109.914632][ T8656] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.742'. [ 110.281584][ T34] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 110.452325][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 110.508007][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 110.514027][ T34] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 110.517847][ T34] usb 7-1: can't read configurations, error -71 [ 110.666175][ T5948] Bluetooth: hci0: command tx timeout [ 110.739044][ T8679] Lens A: ================= START STATUS ================= [ 110.741780][ T8679] Lens A: Focus, Absolute: 1023 [ 110.744666][ T8679] Lens A: ================== END STATUS ================== [ 110.866525][ T8686] netlink: 'syz.3.753': attribute type 12 has an invalid length. [ 110.869344][ T8686] netlink: 'syz.3.753': attribute type 29 has an invalid length. [ 110.963243][ T8690] ------------[ cut here ]------------ [ 110.965165][ T8690] WARNING: mm/page_alloc.c:5186 at __alloc_frozen_pages_noprof+0x309/0x2430, CPU#2: syz.3.755/8690 [ 110.969496][ T8690] Modules linked in: [ 110.971789][ T8690] CPU: 2 UID: 0 PID: 8690 Comm: syz.3.755 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 110.975541][ T8690] Tainted: [L]=SOFTLOCKUP [ 110.977593][ T8690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.981294][ T8690] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430 [ 110.983516][ T8690] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d e9 4b 56 0e 00 75 0b c6 05 e0 4b 56 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 110.990572][ T8690] RSP: 0018:ffffc900033e77b8 EFLAGS: 00010246 [ 110.992767][ T8690] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 110.995388][ T8690] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 110.998644][ T8690] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 111.002175][ T8690] R10: 0000000000000015 R11: ffff8880579f8b30 R12: 0000000000040cc0 [ 111.005514][ T8690] R13: 1ffff9200067cf0d R14: ffffffff9ac42ac4 R15: 0000000000000015 [ 111.008259][ T8690] FS: 00007f376ee4b6c0(0000) GS:ffff8880d6af5000(0000) knlGS:0000000000000000 [ 111.011188][ T8690] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.013378][ T8690] CR2: 00007f376df73460 CR3: 000000004e4ed000 CR4: 0000000000352ef0 [ 111.016093][ T8690] Call Trace: [ 111.017259][ T8690] [ 111.018289][ T8690] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 111.020491][ T8690] ? is_bpf_text_address+0x94/0x1a0 [ 111.022230][ T8690] ? kernel_text_address+0x8d/0x100 [ 111.024258][ T8690] ? __kernel_text_address+0xd/0x40 [ 111.026045][ T8690] ? unwind_get_return_address+0x59/0xa0 [ 111.027996][ T8690] ? arch_stack_walk+0xa6/0x100 [ 111.029803][ T8690] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 111.031919][ T8690] ? stack_trace_save+0x8e/0xc0 [ 111.033556][ T8690] ? stack_depot_save_flags+0x29/0x9b0 [ 111.035600][ T8690] ? __lock_acquire+0x436/0x2890 [ 111.037286][ T8690] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.039274][ T8690] ? policy_nodemask+0xea/0x4e0 [ 111.041376][ T8690] alloc_pages_mpol+0x1fb/0x550 [ 111.043622][ T8690] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 111.045976][ T8690] ___kmalloc_large_node+0x10c/0x150 [ 111.048301][ T8690] __kmalloc_large_node_noprof+0x1c/0x70 [ 111.050829][ T8690] ? avc_has_extended_perms+0x47c/0x1090 [ 111.053431][ T8690] __kmalloc_noprof.cold+0xc/0x62 [ 111.055250][ T8690] ? drm_syncobj_array_find+0x35/0x3c0 [ 111.057094][ T8690] ? drm_syncobj_array_find+0x35/0x3c0 [ 111.058884][ T8690] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.060655][ T8690] drm_syncobj_array_find+0x35/0x3c0 [ 111.062790][ T8690] drm_syncobj_timeline_wait_ioctl+0x238/0x390 [ 111.064869][ T8690] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 111.067012][ T8690] ? find_held_lock+0x2b/0x80 [ 111.068700][ T8690] ? drm_dev_exit+0x41/0x60 [ 111.070215][ T8690] drm_ioctl_kernel+0x1f4/0x3e0 [ 111.071897][ T8690] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 111.074263][ T8690] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 111.076124][ T8690] drm_ioctl+0x5c9/0xc30 [ 111.077578][ T8690] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 111.079811][ T8690] ? __pfx_drm_ioctl+0x10/0x10 [ 111.081398][ T8690] ? selinux_file_ioctl+0x180/0x270 [ 111.083247][ T8690] ? selinux_file_ioctl+0xb4/0x270 [ 111.083377][ T6646] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 111.085176][ T8690] ? __pfx_drm_ioctl+0x10/0x10 [ 111.090460][ T8690] __x64_sys_ioctl+0x18e/0x210 [ 111.092542][ T8690] do_syscall_64+0xcd/0xf80 [ 111.094567][ T8690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.096617][ T8690] RIP: 0033:0x7f376df8f7c9 [ 111.098208][ T8690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.104605][ T8690] RSP: 002b:00007f376ee4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.107484][ T8690] RAX: ffffffffffffffda RBX: 00007f376e1e5fa0 RCX: 00007f376df8f7c9 [ 111.110074][ T8690] RDX: 0000200000000700 RSI: 00000000c03064ca RDI: 0000000000000006 [ 111.112663][ T8690] RBP: 00007f376e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.115896][ T8690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.118596][ T8690] R13: 00007f376e1e6038 R14: 00007f376e1e5fa0 R15: 00007ffec9540818 [ 111.121154][ T8690] [ 111.122202][ T8690] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.124617][ T8690] CPU: 2 UID: 0 PID: 8690 Comm: syz.3.755 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.128111][ T8690] Tainted: [L]=SOFTLOCKUP [ 111.129502][ T8690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.133016][ T8690] Call Trace: [ 111.134164][ T8690] [ 111.135133][ T8690] dump_stack_lvl+0x3d/0x1f0 [ 111.136659][ T8690] vpanic+0x640/0x6f0 [ 111.138026][ T8690] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 111.140058][ T8690] panic+0xca/0xd0 [ 111.141311][ T8690] ? __pfx_panic+0x10/0x10 [ 111.142805][ T8690] check_panic_on_warn+0xab/0xb0 [ 111.144500][ T8690] __warn+0x108/0x3c0 [ 111.145882][ T8690] __report_bug+0x2a0/0x520 [ 111.147412][ T8690] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 111.149422][ T8690] ? __pfx___report_bug+0x10/0x10 [ 111.151101][ T8690] ? __lock_acquire+0x436/0x2890 [ 111.152753][ T8690] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 111.154815][ T8690] report_bug+0xb2/0x220 [ 111.156240][ T8690] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 111.158228][ T8690] handle_bug+0x127/0x260 [ 111.159683][ T8690] exc_invalid_op+0x17/0x50 [ 111.161212][ T8690] asm_exc_invalid_op+0x1a/0x20 [ 111.162795][ T8690] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430 [ 111.164926][ T8690] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d e9 4b 56 0e 00 75 0b c6 05 e0 4b 56 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 111.171198][ T8690] RSP: 0018:ffffc900033e77b8 EFLAGS: 00010246 [ 111.173195][ T8690] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 111.175823][ T8690] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 111.178399][ T8690] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 111.180994][ T8690] R10: 0000000000000015 R11: ffff8880579f8b30 R12: 0000000000040cc0 [ 111.183966][ T8690] R13: 1ffff9200067cf0d R14: ffffffff9ac42ac4 R15: 0000000000000015 [ 111.187362][ T8690] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 111.189989][ T8690] ? is_bpf_text_address+0x94/0x1a0 [ 111.192205][ T8690] ? kernel_text_address+0x8d/0x100 [ 111.194335][ T8690] ? __kernel_text_address+0xd/0x40 [ 111.196607][ T8690] ? unwind_get_return_address+0x59/0xa0 [ 111.198461][ T8690] ? arch_stack_walk+0xa6/0x100 [ 111.200067][ T8690] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 111.202081][ T8690] ? stack_trace_save+0x8e/0xc0 [ 111.203657][ T8690] ? stack_depot_save_flags+0x29/0x9b0 [ 111.205425][ T8690] ? __lock_acquire+0x436/0x2890 [ 111.207045][ T8690] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.209104][ T8690] ? policy_nodemask+0xea/0x4e0 [ 111.210718][ T8690] alloc_pages_mpol+0x1fb/0x550 [ 111.212389][ T8690] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 111.214256][ T8690] ___kmalloc_large_node+0x10c/0x150 [ 111.216013][ T8690] __kmalloc_large_node_noprof+0x1c/0x70 [ 111.217940][ T8690] ? avc_has_extended_perms+0x47c/0x1090 [ 111.220469][ T8690] __kmalloc_noprof.cold+0xc/0x62 [ 111.222863][ T8690] ? drm_syncobj_array_find+0x35/0x3c0 [ 111.225311][ T8690] ? drm_syncobj_array_find+0x35/0x3c0 [ 111.227727][ T8690] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.229997][ T8690] drm_syncobj_array_find+0x35/0x3c0 [ 111.232350][ T8690] drm_syncobj_timeline_wait_ioctl+0x238/0x390 [ 111.235059][ T8690] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 111.237958][ T8690] ? find_held_lock+0x2b/0x80 [ 111.240075][ T8690] ? drm_dev_exit+0x41/0x60 [ 111.241912][ T8690] drm_ioctl_kernel+0x1f4/0x3e0 [ 111.243567][ T8690] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 111.245809][ T8690] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 111.247586][ T8690] drm_ioctl+0x5c9/0xc30 [ 111.248994][ T8690] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 111.251258][ T8690] ? __pfx_drm_ioctl+0x10/0x10 [ 111.252864][ T8690] ? selinux_file_ioctl+0x180/0x270 [ 111.255000][ T8690] ? selinux_file_ioctl+0xb4/0x270 [ 111.256979][ T8690] ? __pfx_drm_ioctl+0x10/0x10 [ 111.258582][ T8690] __x64_sys_ioctl+0x18e/0x210 [ 111.260235][ T8690] do_syscall_64+0xcd/0xf80 [ 111.262081][ T8690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.264548][ T8690] RIP: 0033:0x7f376df8f7c9 [ 111.266022][ T8690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.273497][ T8690] RSP: 002b:00007f376ee4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.276379][ T8690] RAX: ffffffffffffffda RBX: 00007f376e1e5fa0 RCX: 00007f376df8f7c9 [ 111.279717][ T8690] RDX: 0000200000000700 RSI: 00000000c03064ca RDI: 0000000000000006 [ 111.282458][ T8690] RBP: 00007f376e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.285787][ T8690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.288566][ T8690] R13: 00007f376e1e6038 R14: 00007f376e1e5fa0 R15: 00007ffec9540818 [ 111.291324][ T8690] [ 111.293326][ T8690] Kernel Offset: disabled [ 111.295154][ T8690] Rebooting in 86400 seconds..