last executing test programs: 2m40.730733488s ago: executing program 1 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x40000}, 0xc) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000a7a30e001a4711297afc80056264d89e791eee3b9e943abf0de0e7e9c5db1d2c42c76eff4bafb5dfef9c214afc039eca17214333bed9329d73b6399e724cad8fa3f85c9b58e05ad0c00ccd2291db9f73e6fa8e0041574743c15d", @ANYRES16=r4, @ANYBLOB="0805ffffffff004000000200000008000300", @ANYRES32=r1, @ANYBLOB='\b\x00&\x00l\t\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x80) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000d40)=0xfffffffe, 0x4) poll(&(0x7f0000000200)=[{r5, 0xe000}], 0x1, 0x4) 2m40.640704752s ago: executing program 1 (id=36): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x30240) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x7b5f) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000000080)={0x9, 0x2}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000000c0)={[0x1776d014, 0x5, 0x400, 0x0, 0x3, 0xfffffffffffeffff, 0xb480, 0x3ff, 0x9, 0x6, 0xa, 0x9b, 0x5, 0xffffffffffffffff, 0xe, 0x7], 0x0, 0x80002}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000240)={&(0x7f0000000180), &(0x7f00000001c0)=""/92, 0x5c}) ioctl$VHOST_VDPA_SET_CONFIG(r0, 0x4008af74, &(0x7f0000000280)={0x1000, 0x66, "00709217bc62805323259ba843c4c015d3b754e794c85f630978cd90f7209c59c8f668f9ef6ced28c1651001776700795ea69c8d5d4ec3305456817b99bbf3fa92780b9e21363f68c09e39ab41064c6c8140f77b42dc0ca5c94544ed241aeba42832bc7eaa4f"}) read$fb(r0, &(0x7f0000000300)=""/4096, 0x1000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001300)={"66e5b5271c9e9e2cfbedf807f0801784", 0x0, 0x0, {0x32, 0xbab}, {0x40, 0x6}, 0xc, [0x6, 0x9, 0xfff, 0x1, 0x4, 0xc, 0x8001, 0x100000000, 0x1, 0x60, 0x100000001, 0x5, 0x6, 0x5, 0x192440e7, 0x5f7]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001400)={{r0}, r2, 0x8, @unused=[0x9, 0x10, 0xffffffff, 0x2], @name="09ece938b7ec2251fe3160d9997be136d0769b75939a11148e269147840ee1d1d9fa788cdb26ad3170d890ade455a2d8d6136ed2e243504fd993dec9114e8fc5cb244575e55b9970fedb99d830be4ce5465cbcf9e245baf6497944861582a20b4cf3a22267127562fa8fd0ef9cbe961290184cdb50a91600f7fab2b23ad1427650571a504f578e89ac7b5b9c021577cb3e6c6170029c1397fbd0584be15c1002a905801f72f518d0cb0d661236745e4fb14393420640913db49ac9d999e92433fb17bd29509ebf03090c1712a62fe87ffa28ef72f1e5bb3ebbbe5408ab01c62460d41988bf8f42cc31462d4d7afd27df36cda98cd6640b1ceff0b40fa7f1fd3c02ad23d59da7df63943abbfd489d6e0ce28dd39c3b28dd7aad663b0f27eabea02b976ea076fee77714feb9a903e78f35f4fe9621cfa0e7c304282c7841acb405e14ee1fec903dfa918cffbd7b87e3cb886303447ec4c5c12cfa57827367e827d3a9dde38929e38b588c285e2a84bc10acbeb2d4d646d5ee2e43b874c3179ca3bdbd55c3aff6a95bb292ab7315d89d9bc548219be681ef6d5162b968e9272e60084a070be8b0a5fed6b503264b1c612371e47a3ad1b60ee1fc14b25ea886c2ec40a6af89a1bf0d103c634211b66fa75576c6c6e3bf0d418c75f74238578439cad47f0507f42d8c8808fa1c71eba8b4c571ffdb6e95b5d2fbf1fe8800cd38556da146c83a5efbc59af01bdfb819110f21cf02683e156e4fbc78b78c9fd6ef7d9f34c52beb3fa8e6befceb0af05e14ab9c9745212e31cb0f889574830b36686529ac85d886c652f3481bd62e959250423ae816356a69baf8098dfcad59502e3c546a46f69eb340e9d5a442f7f11a217b552f3d51271d3a3b2c7dc1a090af1891d9a0544770874129fceba75e86ba2d351a14f4aa73e7d50ba6e4f08f3c880ec4fa4e09af8ff19018ff4b0af03c64cde582c5d419952034601a867afd647e753d25e2ac06a0abf90c2e8af923ac2a81e7fbedc5645484432f1c9fe79e75beda870c6ae87bcbd927f5dc543ba11269bef0eda19a860531b566fc351e7eda87bca8df55ca01c29de742dfacd86fab78032d5071da8ae8ae581fa0e49cb96946ab644ed34ad4fd48015e804d3a38a702d5677d31b3bc4af99b5cd27ae23b95b07a76e1a9e8edad1735e7d2acf8596aab18e66886772ea5fd1714c24727271914b2341255ca438f44e7a1214d39ac71e3371efa7d3770ca51411894bc17f3ea7fc60b8e1e962758970ba1bc7c595c30df180bf11999b6547a95bd5a4f6e6ed291857d933ef314871415df9d23e4bdfac47bda5d5d515e1e54b76135e9a29d73a45cf5c92c93b792bf03cfb8a6bec927e92a95e9d4a570ecf781e72a72336de6b3c735a5a94399045b3d9ee1bf4b5aa44e5c665c549c84524dc885474f0d949a39981f0937a8967ec5e7a44db13834c9e6f8d02ab3d004d3889cc93ee45f2708324aef6df711542ca7ab785c0436be7fd8fe00db15aa3e940a899dd4779f72803b4c904bfc46cba078861365cc9764273e653ff8e185477362fa21e9d1250916a3007687bf4ea18d91c2a214de16df303a23d3f314cdf868ed949429e8d9c9835150d643bfa912a06347f0158fc70851ff1b62a2d33fc4692396943730ff6492a93431a886f2108cb76dddd9306e040132d3b055a9646d7e421c2f5d89c14e1e28f0c0349443f0015f4e8d0578d193a7a51fa215067dcad4ccfa303d7a475f68308b04363e1c16082e117ed2d1c0ba1813f8e14aaa53c770e956d473e23e77e2a31346b465f42c75f266b7d0524f4a09682f1ae4dd413dc6a325f23ab8beacb34f241ec2d6ca70a0dc84cb5438080b519a2a36dd335b75e86fd6c81833a2ac7d4a6ffa7bc3817617bbf065e20028a1ec4f2c2a31d6825bfd55df8258744b61fbe3e74495b2e357e56aa5c9ceb230d08129c050f8623a275fd5a16396a1978015eb9e62b74df9bb406a4c14e1641170dc58c8de18077bf41c3bb01a6af7bb5cc8cc760d1c8bb0dceb9f1b69313f9a5a1fbb8facc81fa5a81d93dc3024f0577728b366e6161ffcf3a265f34d7c873643215537fb4d7c150e414277d3492d7ccc137da0adb0bb2dd651d07eb6ac96d6882e803c8c2ddff470909deb6bbe4130a35bad818c104dbeeadb96b8e4086890393c6e8d60a415b402713d539ca182efb2ee565df8377884e3fcca72dea8e981d695ddd50df36857a76832b3bf4d8795febf18dfdfe020cc6fc1260eb877539e46fac9b0bc4f0847d3b3d04147a4ffa4b2eb846e3551da6cf111e50a1d3390b90548f4b401f865c7c6d08233e4be2dd94902dc193e4809c666df0b5e0d77cd60075913fc6978517c8db5ca08109c70e6a1ac18e904ca5ec31c6c925f15d7026be28b2e0c7efe91d3344fd5b0f53a5648a10d1022175c06c12349d035e10e3bdf97a14c976a0ad41865d146fa1d264650b9a4722b7bbae69ec57189428d630025cecb2ed05370e07f8709e864b5f7abfb792162c1e5031ff071280e7bc49c2c5541d63f5de73574ab3d2cf7c6067dc9a6be523d3eb204f815c561cfca6915731697580df872feb54369b0f70aa058e038fa0720d21b4c0f8e5fd589b196810e41be02b7fa1a7a33e84d59180a829ab5db80fa0e1075224324cdd62a982199e449ae1b1aaf4302a31833a447d734d5e23d6c446d1386d8b2e668a3654d881cc6293ae32d02f661a37faed6a5c376311a79dd41b90e682cf9d78449b63fea20b522c2e0d8431aeb4cbac0724c14a79a226457c67272a221e1f9b89ee5af8fa76b26d9dacd712a79863e2108fb43dc9295bbe5734faf4ea8049f68d02d6bdb7147b72d127d50338326daab0121a3bd852e5cfe9b313becdf31cd6b16155195f581f60b24a10f8a04a8c80e15043ea0b4f3937df54d25740732785d931035328db41cc8138a287c2e2a065707e9a30386823f2a0508abb92e1c9ba53a3fbda7372f68677a43ad0feb30701efdb0e57fd7c1b19d5b94340a58391ec3e4020c02eb3aef17ef776eb48ad655a5fb39c739a489a728047902e6cb979714fe1726701e57b8c34a297b06ff206a5eab67148b1fb2b4e843b2fcf3173e1340d4d55e4ac9df6164a702755d6074dd8b649afde4e9c5781e574f0da4f5584ddca57c6958485327bd5c8a746b17f9a8ca3ac2ca5dad80a429a5e3fbb9243ffd0d2c56f8bb99f2ad15096fa927a024925522d83df85c57e96345fb821a924643473d60477abff100e82ca7b02a8eb2660d30d70a8bfc4e33032b56c86b80d5dc01ee5ae53cdc848b44ca9ca720481f9849949d3d6b78ee6dc14a3f05d362bcef77e04a770613bc510a58e55c1ca9ada3959daee5a543329889ca3c28a01fdbb1a82d7975819c2d0387dcb97b798f03763bbbaa1889dc91f931451e3973bc909bc765b5a2dcaccb20ff260cebf19c1ef1480c08b77f605751cfe42c34b7067d803fd85cfd95996170c7903dcd77270f7b6c58df57f8f0a5506b72c77797a09542b3b5fcbc97d923739328f69210480d8be2148cb13f3a75cf7c2a60015d2e0e525c3f885ae723d6bb9756b8ea6d6ca3eec3a2ffcd29c603dfeece07c7d62177a8ec0b62c25ebd7f2ada3b89167d674d16c5835217e19d1448c75a9f49d20c886af4e2d056b1f713180dc09c7141f1cef6d4fd222777d29879fe8479eb5f24d7787866f068aea3200b804e9a72990a4d67f0a983f7fc2460aaec3b94d23b5e6708c9baef34eb27494dcd3ac9b63d58e7e9d6ac5c1a3a752fab08d4f22d72abf751095bf0dca63de96a0ccb6d9a679db2f7a3a108c9396eebf535f7d1b60a1e37b43b77b9affeaec8becc03912c1ff7869c8df0cdccc5674b0ecc6bd43825a045c36f7e54d24333efbd4fe2d18c027df63b3ded7d265121705b880c2bdd5da7df228a093afcdf96f34909959567008d985d0db344137a99e8beff4a53abf19b8fe4c399014a9709377876f14365384aff030d770947ac24258d7229492e1bc5a519bc41ecaa5034c4c19551defa51dbb552a5c7bd3e0442ab4ccdf1cc55a571eecc233be5ddb17a7fad736e3d918b73c73cab40a4f8b5069c93517bc0b504df4d84a550e10ea7ed3558d783ebbf60edb4744990c56b21295a4c6913f325470324e9c8219198f6cef07465957c1275923440f596896c5584abbaa44bd140fd248d2ae7fe181edcf5bfe64e1b53fe5fb7b1dd41da6d6ee321375279083c314bfbb93eba07764f58f27ad2db85d74db72916818f0996deaed53d10f26e1c5538a319bda0f39059d31c426f7184e82d796ca9273e82c0ba6d26e8b33d35da5c7d7e1dc8355aa0e9bcdc0aa05f2d17cad2f116fc4d92e10a3b4c6992eb4e68eb15cd8da2c90a239110cfa7b8b678bb59762941972e38f32be4c60440fc05532c28602e01823e229451dafe32a376dc29c25960a27f13091fa3c54a6e7b8b3603b3032ca3381e0303a6343166ceea924e1c51e61317f768d2abcc360ca366ddcdcbe958b95719f777624441580d0595352705fa09d6fa49096b9f48fef8df80db474d1aacb7f60f380f75902bf94ebe6a5b3a8c7dc46be614334da0ac21e2ed8f4cc6b08b98211f48863c7ef49d42ce699a23d58feb1621a0c4889d73a7cda349e9be8a2fdd8fe63d1c984f39ec6ff873e2eb9acd5ea9ccc9b8bf017867534af24bb110d49ee822bf5935e5b4c6ce61ea44041a9bc8f327764107dad70c33653d7b18c4766aa265344e1af9a975ccca6b690c08cb90362084b2811b3fc4e2460901554bcb906935c2b2e80f1de6817c53b9b0bd3bc4d651ad2e3a99fd7cf712cdc5424e243b805da018db3dc15fcef06e4eb2163a1a3165bf27dbc1a3801818ae03c16ba25504a1b917609ddb5e82613f99813c0e811457fbba0d910f49d96b3ab705d22d35ccd80a73eb4ccc5d36711c5f0e89c5fd5ceec43eac18f1a7c9f3c349a8cf21ceb57a9e01789678201d925e7cf13afa1c5d9c4061d078e8189078056cbf1dada17caf187fb4fcf31923e018ec2dff7fc666ec3bc1b842e385bdb0f5a8600672bb76b899bf78a55f93bb41aaaa0d8e62befc5715e090886ebcf30fadd5fd32d4a33f427068bbeaa66ce3712c56919a5380018114197b3bfc179211f30e72c9a9bf208ff3a104f09cb4ad0fcf75aa7c7a4e612392f9ab9b3c43b0dde9d1c788f28675b00e7938eae92a84c1e5cedc3e8bc72c8a98ec827e190fc8aa063bdc64df344dd2768edf94781c3b618ec7455899eb4830867f1bb189d0a1ae899fc782ce3cb3a8b9c6b830348625f32d8427a841304edc7bcfce49b847933a241f7bb1b1d4005095086002e7dc3a0800153fbbe7192788166a377549defdeb6e37c5ba921403d50e84b33885fdadd59f1b66b8e497ea761ab7b8b3e5d299ff2765f6daa775c59efbb151e44c3234280c3024dddaee918afbe75014c732814a8e716a891693ce34dd426f9525b17b5c99d1bb8d1deac4e016f9063f9274103d6adad0b177e3663e9dbc58b5285c101604dea93028538bfa48b2a28d57f00f9f4b70968f0b6271107cd8df50620aa59b21fdfc6341f5adec0116541ff71c8fc23d0e9342a92e3c50d8b3d63bf3e5ca3403123498050564c285079a0f595a624472e40310f903111ae36e8e29981b4d05684a4d0347949e50d6f450a5bd2ba8f3c86fc25be3c19deef5570d9"}) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000002400)=0x3, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000024c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x3c, r3, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x80000001, 0x10}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x16}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000881) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000025c0)={0x3}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002640), r0) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000002740)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x44, r6, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4008044) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r0, &(0x7f00000027c0)={@val={0x0, 0x888e}, @void, @x25={0x2, 0x76, 0x0, "ca150e66fd4187fa9c3d9d7a732c033178d3a4e78a9493ea369e641355b8bc8ac2001d3e11910a495088febdbf2b58b9f007381d64d7dcb53523a4b6e7f0e1935d342b01a8d1a07fd09c62f44925dc02ba3d2159d0c4c86d960a286ff88b194352"}}, 0x68) r8 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000002840), 0x28000, 0x0) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000002880), 0x224000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000002a40)={0x1, 0x846, &(0x7f00000028c0)="5b32e2fd66650042a8d65e7477c4f7124eaa1b3b90c69a6346061fd402a5edc5ac7d8776e9ca222d467a272231dde640fcfedd4d09d407ae3040a5fc9c6af30261a26ecf985e19c1af63f1030f0522c8332b257f9240495df5e0b7fb3a4caa7ed6a6c513d92149e3a079d8361c22ab4a80691e6ada3e76055228b5175e4e4b8d84ac92c78a09e34186d99b40085510e1a9a998d90f", &(0x7f0000002980)="3b18ebd4b863ae74b532da5c66194767fbe4529ff3073cca67c8ad20b041972055fd8087789cd1af33494a8503d29198aed2475dad945a8b12b1d645549d2b611a1615a07ffb9dad992fbff43fe3b595a618117b1933df8d98f73282873688def0e9159ea7399678bb0ee31ecd0df76654a55a499967d660e12a4289cb1040c1cf9265cb9e22b9feb78ca73f73ef436e", 0x95, 0x90}) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000002a80)={"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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002e80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000003080)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000030c0)={"cab84274f6626a76bf512c9ee755ddd6", r9, r10, {0x3018, 0x3}, {0xffffffffffffffa2, 0x176}, 0x8000000000000001, [0x1, 0x0, 0x80, 0x100, 0x6, 0x1ff, 0x0, 0x200, 0x7ff, 0x8f, 0x1, 0x6, 0x8, 0x930, 0x9, 0x8000000000000000]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000031c0), 0x0, 0x0) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000003300)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x24, r3, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x15}]}, 0x24}, 0x1, 0x0, 0x0, 0xcd0eba54dbadb266}, 0x4000001) 2m40.591128298s ago: executing program 1 (id=37): close(0x3) (async) close(0x3) r0 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) close(0x3) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) (async) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001080)={0x1, 0x12, 0x0, 0xa62, 0x2b4b, 0x4, 0xa, 0x54a, r4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x1e82, &(0x7f0000000080)={0x0, 0x1ecf, 0x400, 0x2, 0x47}, &(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x40010, 0xffffffffffffffff, 0x0) (async) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x40010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r5, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x204840, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1108, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) socket$inet6(0xa, 0x5, 0x0) (async) r9 = socket$inet6(0xa, 0x5, 0x0) close(0x3) (async) close(0x3) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) 2m40.480769642s ago: executing program 1 (id=38): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fe, 0x0, 0x32}, 0x9c) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000440)=[r3, r3, r3], 0x0, 0x3}) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x7, 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) semtimedop(r4, &(0x7f0000000040)=[{0x1, 0x3ff, 0x800}, {0x0, 0x0, 0x800}, {0x4, 0x800, 0x800}, {0x1, 0x16e}, {0x1, 0x4, 0x1800}, {0x0, 0x5, 0x800}, {0x2, 0x800, 0x800}, {0x4, 0x5a38, 0x3000}], 0x14, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) listen(r6, 0x9) semctl$SEM_STAT(r4, 0x0, 0x12, &(0x7f0000000240)=""/55) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="45f03cc58f20aa21892dc8edb1cc5c7e4948e4ab6d3d11e5da3613ffd71e0ebbbb42bfd8eb0bd1e0dbdb28e29aceed4f4b065ee8f1595383593726dd7d", @ANYRESHEX=r3, @ANYRES8, @ANYRES8=r7, @ANYRES64=r2, @ANYBLOB="e8689ac3cf8fa71093c3fced54a97d2de214bbbbc0b41452c2c5a6c0d867eea0bfd55f59536050cfbf2e67fd9150476dee37b49da94656a105eb953dab654b3a177515"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e25, 0x0, @loopback}, 0x1c) 2m40.399932168s ago: executing program 1 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x3, 0x4, 0x1000, &(0x7f0000ff4000/0x1000)=nil}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0xbb3, 0x5, 0x5}, 0x3f, [0xc, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x2, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x10, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0xfc2, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbfffe, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x1, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x80, 0x201c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x8, 0x0, 0x3ff, 0xfffffffd, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x7fe, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0xe8e, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x84040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x8000005], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x7, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x40000004, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x202, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) getpid() r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @local}}}, 0x88) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x400) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r6, 0x8044610a, 0x0) r7 = syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_procfs(r7, &(0x7f0000000040)='stat\x00') pread64(r9, &(0x7f0000000140)=""/15, 0xf, 0x4) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{}, {0x77359400}}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2e41d16cd5f466b822000f00d0460f06f245dd48f526263ef2a585f6b92e030000b800000000ba008000000f3041ab0fc73a0fc71f", 0x35}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='.\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m40.071078909s ago: executing program 1 (id=40): r0 = socket(0xa, 0x801, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffff"], 0x34}], 0x1}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x1, 0x1, 0x4, 0x4, "5fbd26ba9bcf2b8a9c6eb30368f1369485b5eb8e732761c12964ac27e47d695be7cec76ad1fea1"}, 0x37) getsockopt(r0, 0xc28, 0x6, 0x0, &(0x7f0000000040)=0x3c) 2m40.017426432s ago: executing program 32 (id=40): r0 = socket(0xa, 0x801, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffff"], 0x34}], 0x1}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x1, 0x1, 0x4, 0x4, "5fbd26ba9bcf2b8a9c6eb30368f1369485b5eb8e732761c12964ac27e47d695be7cec76ad1fea1"}, 0x37) getsockopt(r0, 0xc28, 0x6, 0x0, &(0x7f0000000040)=0x3c) 1m43.716228664s ago: executing program 0 (id=533): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"/4046], 0xfce) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ppoll(&(0x7f0000000040)=[{r2, 0x12c2}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) unlink(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f0000000040)='./file0\x00', 0xffffc000, 0x0) 1m43.4195491s ago: executing program 0 (id=535): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e22, 0x47, @mcast2, 0xb}, 0x1c) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r1) fcntl$setstatus(r1, 0x4, 0x2c00) r2 = gettid() fcntl$setsig(r1, 0xa, 0x2f) fcntl$setown(r1, 0x8, r2) timer_create(0x0, &(0x7f0000000000)={0x0, 0x2, 0x0, @tid=r2}, &(0x7f0000000040)) 1m43.198971332s ago: executing program 0 (id=536): r0 = io_uring_setup(0x669, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) syz_io_uring_setup(0x61e, &(0x7f0000000080)={0x0, 0x3, 0x10100, 0x4}, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f00000011c0), 0xfffffffffffffffe) syz_open_procfs(r3, &(0x7f0000000440)='stack\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800010000000000000000000a800000000300080000000014000700000000000000000000000000000000010800040001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_getneigh={0x30, 0x1e, 0x100, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, r7, 0x20, 0x180}, [@IFLA_BROADCAST={0xa, 0x2, @random="13511e158d94"}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4e194}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7}]}, 0x3c}}, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r9, &(0x7f0000000240), 0xfffffecc) ioctl$TCSETSW(r8, 0x5403, &(0x7f00000002c0)={0x2000001, 0xfd, 0x0, 0x7, 0x8f, "001204005f679300006a35c080c90a0080872b"}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x3, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xfff3}, {0xffe0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20048001) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x7ff}, 0x8) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000240)={0x3, 0x1, &(0x7f00000001c0)={&(0x7f0000ffc000/0x1000)=nil, 0x70000, 0x9}}) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x1410, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0xfffffffd}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x40) 1m42.910471687s ago: executing program 0 (id=537): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r4, 0x80000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x28682, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r8, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x1, 0x660, 0x8, &(0x7f0000000340)="05607ce468a9f344153cc6a205ec782568a5ffa0d69fc829050273a4e2db99a9c2f160db3530c884be4b27833dc814856c4053ae5f8d9c830613c8a5e4d4d6f374d80a3e9dee249e926f0c29a7a58739ededdf0f71c2734ca52fa2f69de7d36c559b421384293ad255d3a82c9160f00e9977daf61346f86b65a84c7638690b54a32b98060eab6e83c53c8097e1872a213d476a484e0560ae09c7da82768afb1c39b3bb5fb0a5df55e04aa646770d6c01d1092eb105feb0029336b2edee5e0bff6eccc6c0abb5e2cb0358c650"}, {0x1, 0x0, 0x401, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x200007f, 0x0}, {0x2, 0x5d, 0x85a0, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xff, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x80000001, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x3f, 0x0}, {0x3, 0x0, 0xd09f, 0x0}]}) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000bf1000/0x400000)=nil) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@rdmsr={0x66, 0x18, {0x40000002}}], 0x18}) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x6, 0x31237648, 0x3, 0x9, 0x84}]}) r12 = socket$inet6(0x10, 0x2, 0x0) write(r12, &(0x7f00000007c0)="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", 0xfc) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r11, 0x4068aea3, &(0x7f0000000200)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) ptrace$setregs(0xd, r13, 0x3, &(0x7f0000000600)="e742a933f37ff726a51f1fb1010e93e96a837b8e11d417e6e3310bf49eea1fce838e98f50839bb743e63989186db03e84f2132ab3743954209ae4ac17451f607214b1f357bba9e2928cad039eb1deebd41e71d789bc1bac9e1f17d276ddd7fc1c9e85ecee0313107c7a2143cb413c0ecbbfe35daa22587eabc97d6548ba84ac5332650ca66edf4453b227ca7ff03de968b419779071b9fb5e2418fe35d3100149b67fe31") close(0x3) r14 = socket(0x2, 0x80805, 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r15, 0x0) close(r14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) 1m42.677114524s ago: executing program 0 (id=540): arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000000c0)) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000e33000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/140, 0x8c, 0x1, &(0x7f0000000200)=""/251, 0xfb}, &(0x7f0000000340)=0x40) sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x2, 0x0, 0xfff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m42.480458619s ago: executing program 0 (id=543): socket$kcm(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$alg(0x26, 0x5, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, &(0x7f0000000000)={0x20, 0x9, 0x1a, {0x1a, 0x5, "4c26698cbab5b5c75cdb6adab9e16621d288c784c93a02ec"}}, &(0x7f0000000180)={0x0, 0x3, 0x88, @string={0x88, 0x3, "232fc74ecc8a53d96376764e03e33e7270e935e116785b4e9f21042644116ad8ddd341b8133e73ae02cce9b9f76bb92db3e6daa96760a585f0d3d960290e471a0a4d82c9686282c785aed209f655a1317141c7f2e384238a6c58bbf19e92373f6765b303b238fbcf98be91f409c869de0a894bb83ba1d5ec6e93ecc5a1df41f668d239ef7a32"}}, &(0x7f0000000280)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x8, "b9b819d4"}, @main=@item_4={0x3, 0x0, 0xb, "381f81e3"}, @main=@item_012={0x1, 0x0, 0xb, "df"}, @global=@item_012={0x2, 0x1, 0xe, "f646"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xba, 0x2, 0x1, {0x22, 0xb50}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x0, 0x8, 0x7d, "431389a1fd857a87bd0aff58f3d955e3b7aac3e645c83e45fa6fa8afcc000ac3e3739529f5abcfe383f04ad200c92fff70318f711509f8095a0f607714743b74982255c1c5d0fbdd5ca66b5ceb66a8beceef7a0a6519a94a43d2ea672355b1641727845f28e8d9d1dcb5f6ea509eaac77ee4f5d414438cfd342adea103"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xf5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x1, 0x66, "c403b76bc8fb42902d126220e7851c6379db1f6c7ccc1369fd8ce4b56a4338b9faaf484bbca68398eff3b7bf7172cf79bdf59a89423cf0a3b18175ccee099117d06e579ff016cf5a690f86203767436bfbace4a45870172a8468638cc35b61e23a687b367f4e"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x4}}) 1m39.299808508s ago: executing program 2 (id=578): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xf) socket$nl_route(0x10, 0x3, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x438, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 1m39.220761391s ago: executing program 2 (id=579): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='P\x00'/20, @ANYRES32=r2, @ANYBLOB="0b1b050000000000300012800b00010069703667726500002000028014000700fe8000000000000000000000000000bb08000d00ffffff7f"], 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000580)='o', 0x1, 0x0, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @local}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0408041bc9"], 0x7) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x12, 0x5, 0x5) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r4 = syz_open_dev$media(&(0x7f0000000080), 0x4, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x80000001, 0x10001}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0xba08, 0xfffffffd, 0x6, 0xc, 0x6e, 0x100}, 0x1c) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x10) io_uring_setup(0xf08, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 1m39.060308062s ago: executing program 2 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c00028006000f0002"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x48805) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1m38.870857492s ago: executing program 2 (id=581): socket$unix(0x1, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) read$FUSE(r0, &(0x7f0000002a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffe) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006140)={0x2020}, 0x2020) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601010000000000000000000000000c0007800500140000000000e0ff010073797a3000000000050001000700000011000300686173683a69702c706f72740000000005000500020000000500040003000000"], 0x58}, 0x1, 0x0, 0x0, 0x24010800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d8bf8623", @ANYRES32=r1, @ANYRES32=r4, @ANYRESOCT=r2], 0x50) r8 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) r10 = dup(r9) fsetxattr$trusted_overlay_upper(r10, &(0x7f0000000000), 0x0, 0x0, 0x2) flistxattr(r9, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) 1m35.69091557s ago: executing program 2 (id=590): arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000000c0)) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000e33000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/140, 0x8c, 0x1, &(0x7f0000000200)=""/251, 0xfb}, &(0x7f0000000340)=0x40) sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x2, 0x0, 0xfff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m35.565181187s ago: executing program 2 (id=591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) (async, rerun: 64) close(r3) (async, rerun: 64) r4 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r4) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) (async) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) (async, rerun: 32) r11 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0xa0e00) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r11, 0x40045532, &(0x7f0000000040)) (async, rerun: 32) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x10}, {0xc}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffe2b, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}, @qdisc_kind_options=@q_hhf={{}, {0x0, 0x2, [@TCA_HHF_BACKLOG_LIMIT, @TCA_HHF_QUANTUM={0x0, 0x2, 0xfc54}, @TCA_HHF_EVICT_TIMEOUT={0x0, 0x6, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x0, 0x3, 0x9}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x5}, @TCA_HHF_RESET_TIMEOUT={0x0, 0x4, 0xbf}, @TCA_HHF_ADMIT_BYTES={0x0, 0x5, 0x638}, @TCA_HHF_RESET_TIMEOUT={0x0, 0x4, 0x4c}]}}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x3}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 1m27.438106156s ago: executing program 33 (id=543): socket$kcm(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$alg(0x26, 0x5, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, &(0x7f0000000000)={0x20, 0x9, 0x1a, {0x1a, 0x5, "4c26698cbab5b5c75cdb6adab9e16621d288c784c93a02ec"}}, &(0x7f0000000180)={0x0, 0x3, 0x88, @string={0x88, 0x3, "232fc74ecc8a53d96376764e03e33e7270e935e116785b4e9f21042644116ad8ddd341b8133e73ae02cce9b9f76bb92db3e6daa96760a585f0d3d960290e471a0a4d82c9686282c785aed209f655a1317141c7f2e384238a6c58bbf19e92373f6765b303b238fbcf98be91f409c869de0a894bb83ba1d5ec6e93ecc5a1df41f668d239ef7a32"}}, &(0x7f0000000280)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x8, "b9b819d4"}, @main=@item_4={0x3, 0x0, 0xb, "381f81e3"}, @main=@item_012={0x1, 0x0, 0xb, "df"}, @global=@item_012={0x2, 0x1, 0xe, "f646"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xba, 0x2, 0x1, {0x22, 0xb50}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x0, 0x8, 0x7d, "431389a1fd857a87bd0aff58f3d955e3b7aac3e645c83e45fa6fa8afcc000ac3e3739529f5abcfe383f04ad200c92fff70318f711509f8095a0f607714743b74982255c1c5d0fbdd5ca66b5ceb66a8beceef7a0a6519a94a43d2ea672355b1641727845f28e8d9d1dcb5f6ea509eaac77ee4f5d414438cfd342adea103"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xf5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x1, 0x66, "c403b76bc8fb42902d126220e7851c6379db1f6c7ccc1369fd8ce4b56a4338b9faaf484bbca68398eff3b7bf7172cf79bdf59a89423cf0a3b18175ccee099117d06e579ff016cf5a690f86203767436bfbace4a45870172a8468638cc35b61e23a687b367f4e"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x4}}) 1m19.97107538s ago: executing program 34 (id=591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) (async, rerun: 64) close(r3) (async, rerun: 64) r4 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r4) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) (async) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) (async, rerun: 32) r11 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0xa0e00) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r11, 0x40045532, &(0x7f0000000040)) (async, rerun: 32) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x10}, {0xc}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffe2b, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}, @qdisc_kind_options=@q_hhf={{}, {0x0, 0x2, [@TCA_HHF_BACKLOG_LIMIT, @TCA_HHF_QUANTUM={0x0, 0x2, 0xfc54}, @TCA_HHF_EVICT_TIMEOUT={0x0, 0x6, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x0, 0x3, 0x9}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x5}, @TCA_HHF_RESET_TIMEOUT={0x0, 0x4, 0xbf}, @TCA_HHF_ADMIT_BYTES={0x0, 0x5, 0x638}, @TCA_HHF_RESET_TIMEOUT={0x0, 0x4, 0x4c}]}}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x3}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 35.612391294s ago: executing program 3 (id=1339): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x10) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x700, {r0}}, 0x58) 35.611182797s ago: executing program 3 (id=1340): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x0) 35.538363548s ago: executing program 3 (id=1341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000a7060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 35.538116385s ago: executing program 3 (id=1342): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x29, 0xb6, 0xea, 0x10001, 0x1a, @private1, @empty, 0x7800, 0x7, 0xcc1e3ae0, 0x4}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve1\x00'}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) bpf$PROG_LOAD(0x5, &(0x7f0000003500)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sched_cls=0x37}, 0x94) r6 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0xc0844123, &(0x7f0000002180)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0000000007500500200012800b000100627269646765000010f202800c002300faffffffffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 35.326509383s ago: executing program 3 (id=1348): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0xfefffffe}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2c}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r3, r2}, 0xc) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000012c0)=ANY=[@ANYRES16=r0, @ANYRES32=r2], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0xac7c56fbddb4c575, 0x6) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x0, 0x5}, {0x2, 0xb}}}, 0x47}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x31, 0xa, 0xffc, {0x3, @esp_ip6_spec={@mcast2, @mcast1, 0x5, 0xc}, {0x0, @local, 0x2, 0x1000, [0x5, 0x10]}, @ether_spec={@multicast, @local, 0x3}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x1, 0x40, [0x686, 0x6]}, 0x8, 0x7}, 0x4000000000000071, [0x80000000, 0x5dd, 0xe, 0x6, 0x8]}}) creat(&(0x7f0000000140)='./file0\x00', 0x49) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x1c}}, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000040)={0xc, r6}) 20.614354605s ago: executing program 3 (id=1361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7fffffffffffffff, 0x8004, 0xfffe, 0x9, 0x4, 0x7, 0x10, 0x4, 0x8000000000000000, 0x1, 0x0, 0x3, 0x10000000005, 0x3, 0xfffffffffffffffd], 0x0, 0x110900}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20.614307065s ago: executing program 35 (id=1361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7fffffffffffffff, 0x8004, 0xfffe, 0x9, 0x4, 0x7, 0x10, 0x4, 0x8000000000000000, 0x1, 0x0, 0x3, 0x10000000005, 0x3, 0xfffffffffffffffd], 0x0, 0x110900}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16.469859272s ago: executing program 4 (id=1479): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x109, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$netlink(0x10, 0x3, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x2, 0xa, 0x2) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000180"], 0xfdef) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af83, &(0x7f0000000400)={0x1d}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000030000001000000000200000000000000000000020000000500000000010000845eb9d2c2c02000000000000000000300000000000000000000000000000b010000000000"], &(0x7f0000001280)=""/226, 0x4a, 0xe2, 0x1}, 0x28) 16.258615214s ago: executing program 4 (id=1487): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f00000002c0)) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x8, 0x328}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x8005, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x4, 0x5, 0x5}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 16.18649467s ago: executing program 4 (id=1490): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$FE_SET_FRONTEND_TUNE_MODE(r0, 0x6f51, &(0x7f0000002480)) ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0xf) 16.185463511s ago: executing program 4 (id=1492): pipe(&(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getpgid(0x0) r1 = syz_open_dev$video(&(0x7f0000000240), 0x3, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x0, 0xffffff80, 0x1, 0x7}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket(0x1d, 0x7, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r6, &(0x7f0000006140)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0xf, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0xff14) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') r7 = socket(0x22, 0x2, 0x2) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 15.81708277s ago: executing program 4 (id=1505): set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 15.550317915s ago: executing program 4 (id=1516): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) poll(&(0x7f0000001280)=[{r0, 0x8100}], 0x1, 0x4d8b7b7e) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f00000000c0)=[{0x6, 0x7, 0xe1, 0x7fffffff}, {0x0, 0x40, 0xb, 0x3}, {0x7f, 0x1, 0x4, 0xe004}, {0x3, 0xe, 0x3, 0x1ff}, {0x2, 0x7, 0x3, 0x1}]}) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x4, 0x2) 15.450585655s ago: executing program 36 (id=1516): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) poll(&(0x7f0000001280)=[{r0, 0x8100}], 0x1, 0x4d8b7b7e) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f00000000c0)=[{0x6, 0x7, 0xe1, 0x7fffffff}, {0x0, 0x40, 0xb, 0x3}, {0x7f, 0x1, 0x4, 0xe004}, {0x3, 0xe, 0x3, 0x1ff}, {0x2, 0x7, 0x3, 0x1}]}) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x4, 0x2) 2.668347792s ago: executing program 5 (id=1805): memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) (async) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) syz_emit_ethernet(0xda, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2a1c99", 0xa4, 0x11, 0x0, @empty, @loopback, {[@srh={0x8a}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "b0575c7b4df2bddabab59df4a56afe54ba6a5d5d0d170fca692c777338468608", "29accf2af44cf619aaaf532417a91cada0a250498ce1b5c603debf9e05d8de03dc00", "3d73abde0da6c68c8d2dab5346224f905b3b904310b3bd00975f0a9f", {"6cde9c5018586db672628c1415233979", "ba3df3d8a8490bce9cafc2ab6acde477"}}}}}}}}, 0x0) r1 = dup(r0) fanotify_init(0x8, 0x80000) (async) r2 = fanotify_init(0x8, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r4 = memfd_secret(0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000008000/0x3000)=nil) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b40), 0x80c82, 0x0) ioctl$CDROMMULTISESSION(r5, 0x5310, &(0x7f0000000000)={@msf={0x8, 0x9, 0x8}, 0x1, 0x3}) (async) ioctl$CDROMMULTISESSION(r5, 0x5310, &(0x7f0000000000)={@msf={0x8, 0x9, 0x8}, 0x1, 0x3}) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="040000000400289c96bfb38e5491c6fe0672d0af56e09b4274ba50c83b308c4e006a8e2a168130b1cb52c7b632d74c4815f4edca9ce473e2f8d458c06407bad2a3cf5a128d5d7770e4cc933768358ab38c200e3cb568531ab40ee582c29b758533c65d0802b05a08f6a5018f7e446f14e7439a7c69a8804ac892e744943c9daa466b18a82835971bd642e951615641861db578fbeb06142cd18757e90d"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x48}]}]}}, 0x0, 0x2e}, 0x28) socket$kcm(0xa, 0x2, 0x0) (async) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'ovf\x00', 0x1, 0x9d3f, 0x6a}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'ovf\x00', 0x1, 0x9d3f, 0x6a}, 0x2c) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) fanotify_mark(r2, 0x1, 0x8001021, r1, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.57899267s ago: executing program 5 (id=1807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000006000600000fff0024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 2.478615394s ago: executing program 5 (id=1810): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x2) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$FE_SET_FRONTEND_TUNE_MODE(r0, 0x6f51, &(0x7f0000002480)) ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0xf) 2.419704726s ago: executing program 5 (id=1813): socket$packet(0x11, 0xa, 0x300) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0x8cf, &(0x7f00000001c0)={0x0, 0xb0a8, 0x80, 0x1, 0x118}, &(0x7f00000002c0), &(0x7f0000000080), &(0x7f0000000000)) (async) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x1001) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = gettid() (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f0000000040)='\x00', 0x1) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) r4 = syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/uts\x00') (async) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) (async) memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfWsz\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xa8\x8c\x9e\xed\a\n0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0xa, r2, 0x0, r3}) r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001a00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0], 0x0, 0xb9, &(0x7f0000001ac0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001b00), &(0x7f0000001b40), 0x8, 0x98, 0x8, 0x8, &(0x7f0000001b80)}}, 0x10) sendmmsg$sock(r4, &(0x7f00000022c0)=[{{&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, 'veth0_to_batadv\x00'}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000240)="d10d53d4f14afc85cd1cbcc9cd2bbcadef966d26f9010128cd9513451c4ddd36940bdf33876e7bf524d513aaa1f2a40f22dfb204a95010f533eea4e596921f21b3094fb1765e32e136b9d8a47fe823cbc4f136f499", 0x55}, {&(0x7f00000002c0)="f31cfbc1c4dcb346e8c38644dd8282a68aef91928f1e760c9cf9d5be2cbace25491284bd6cdb2278087af729db3645445f", 0x31}, {&(0x7f0000000300)="34d9450b4e4b914d152209ced2f5b8263de6845aa62a7604708072ae2a83f020761dede5c77386548806b0c4f994c6d45be07a11e5968fc165e43be3032af9c67aa858f3ba05732cd9860ad8a02dfd7a6f03d93141c4bd0a8be4125bd8ee278d62e87c9da8ed99085cd61e", 0x6b}, {&(0x7f0000000380)="cd3b29adee1a7ad4e5a49fab32d482e719b11d892228ca91e07a5bedbc11c270faff4a7ab0157c322f939e831f084ba0a0a57255f04092f571956c2d64b8f8571d4054d03a87653fc6ce470b3676a65cf93c08", 0x53}, {&(0x7f0000000400)="34646813ffc7a7f3a55460a92dfea106da3cbcb87926e6dc301fdc6f9e361bd13e4560eaf7036aae66c52607b2d9ace1afb3831499592920eb75ed91dbdc3b7be83068a29490c19592d661310df057797b7de7b9ffdb06af9f5108f0adedd20ec975e86ea583abf0348a8ac238fc22982310aa6bb4146d358b8e674fe330edaeeb0ac05808c4c7d51e3b5bb15ae40c9cf45da9d493cd02bbafea4eb7c21d6455dc8c94687ef5f779f1c6801f3da5bd52f8ad69f9d004b8", 0xb7}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="bf0a157ff91f6a8f088b8b8a837dd2fac4cada92e49e75ef8840e785a95d18e27c89a7f5c5a779b5f2f313971484aa6d2f6bec62afbd1a4691e649e569353279f5f7709767f7fdf89dd75656feb91659770609999a4c6a89b2cb85b9015ccf1dc083a5a3c24a508d0e879e5c6b980c2f3a2ce726006e", 0x76}, {&(0x7f0000001540)="4578a747a20770971b8a21aaec26b0ff14a3a1a363c349c1caffd7d861535454bfe215382b3f2614a70f78313599dae59200c76a3914147d57d74eff5c40", 0x3e}, {&(0x7f0000001580)="eef41ab201f3d2a38b2dd0807ac0d4f3930c1e3c5ef3fde3543ac77434d01e0f8ff3df9349c7ab0f2878431e621a19e4a26893a44f15181bf465e96b8c3e45c51a7f112ac932191c41f2669ed4c26beb855f9f8e55c32a63e7e09c0cd8757aef2cfcf799afed34f530f251eb292baebdc8bddf440cded1cbf81ee216837f01700069e1189475ead3e9a0e1776cd72cc304a7ded602fb5e2d54c78a6ae53f56a064479640d91135", 0xa7}], 0x9, &(0x7f0000001700)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x8000}}], 0xa8}}, {{&(0x7f00000017c0)=@pptp={0x18, 0x2, {0x1, @private=0xa010102}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001840)="d44f16c6ec0213b345cb58cdabd849c49ff378da55d14acdb05d28099ab1cf3aec5780be28b47c5efaf1e56f1d05001258be565eba5c19a083dda073d5948ced5a17bae5923bd82294af44638bdc30bcd79f97ec0215c4fd393d6d0a72a934d80f545e73398c7890c59866f5214012c8d92db18aa68da3d25d1dd4ece11548bd4911821770334a9e9c9fc0", 0x8b}, {&(0x7f0000001900)="1e5bfe15fb4c840a90967e33e116f755e13de1f168e26520dae8d7d58dc0b0a84f798af84348bff4634f5e5ed4b34dc20674ac4de6f5faeecae22ae7c4683b9edc0f61bc5fae487b3299467c4a1b33c9757280de225e9f9cbb422c4a6dfe721900c455f5ab45537c61b58916c1042e890680cf719899bde4b8483f7ef293698b", 0x80}], 0x2, &(0x7f00000019c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}, {{&(0x7f0000001d00)=@can={0x1d, r5}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001d80)="4164bc965f8bc532790d3ae7fbbb37ccda8389a084403509d431c6e8a8c4c5a377821eef000c26", 0x27}, {&(0x7f0000001dc0)="6d57336684df4b67e9f3e49df5aaae2c4a7a8136df7b5933dfdff89df71085b6e78f43da927c320925598f46d442345d679dee33fe11d7312c0f71d6a2ca5df520aae5f467e80056f3cac5916cf097170b2be0e8aefeec29767725ed55495abf6a74ddf7de228173566f930c02b3a888d9f738fa5726c156fa04946d9163f4a6dda00dbcac0d6301735dece965376d171d7f3f665c67edc4008db65b475a", 0x9e}, {&(0x7f0000001e80)="13841c8fd5becca49f5bafae5dc88e730160a0856f967413b5f7746a4c4be79097f890d17e20e0c910c924a48cf9b124800ba880d8f628fcf0ed2b2ccfc7f15e01a3f0f5bf385436a02234dbdbf965104e9a40868f99865bd2642334ade3290311b65922edad1234ee29ec64a6cdd953e9b62e586a4f686de9053c5c4c096889631b051480ee2fc86ccc53b4b2f617f1bfb1d789d6dfbee6561567e56c2f37732b9b28716c1c49da61e8802a003e9782993aaa8dcede219705929fbf1d7b3da4aefd3e0583eace3ebe356efed760caf2b5127a969f802ef4", 0xd8}], 0x3, &(0x7f0000001fc0)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}}, {{&(0x7f0000002000)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002080)="b888e4923ace14aac3d777e2a8802d0c80ce9ec4311a3b86070163a92e4fd66ca3f6ae04543efa6b81afbc6c0e0b100aa69aa61ccf8bc93d892878538daaeb844bd925db3e7d93f9c9d51f1a4fd14c2d853594be42dd25b10271bd9cc56985d5164ae26fe852a2e00e8e47a4775c4904dee70686aeb684f2b8c1cc8571764b8c5df9e0751822e5e812a58ad92a4fe2404ddebb70ec572f1d8e75393f06c91822fa205e2c55e4abc628f891852dbf30ffec7be8a46459695e6a974a70ba9ef61f1bf060cce8ef", 0xc6}], 0x1, &(0x7f00000021c0)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff7}}, @timestamping={{0x14, 0x1, 0x25, 0x63af8}}, @mark={{0x14, 0x1, 0x24, 0xd7a4}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000002240)="5b2c7f848d475a358fa4f6c9a9a68784bba0d5575a67ca829d8cc9056a69c71db1e440bcef6703abacf0cd9290c2de7054436779bf8b58", 0x37}], 0x1}}], 0x5, 0x1) fcntl$notify(r0, 0x402, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002400)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) write$UHID_INPUT(r6, &(0x7f0000002440)={0x8, {"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", 0x1000}}, 0x1006) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000003480)={0xee39, 0x5, 0x81, 0xf0a8, 0xfff8, 0x2}) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000034c0)={'dt2815\x00', [0x2, 0x1, 0x10002000, 0xfffffff9, 0x7fff, 0x2ed, 0xffffff7f, 0x0, 0x3, 0x40, 0xe, 0x4, 0xffff, 0x3, 0x101, 0x0, 0x5, 0x8, 0x80000000, 0x499, 0x80, 0x2, 0x2, 0xe4, 0x7d0, 0xce9, 0x7, 0x40000, 0x6, 0x8, 0x800, 0x400]}) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000003580)=0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000004740)={0x2, 0x0, &(0x7f00000035c0)=""/134, &(0x7f0000003680)=""/179, &(0x7f0000003740)=""/4096, 0x30000}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000004780)=[@in6={0xa, 0x4e21, 0x9, @private1}, @in6={0xa, 0x4e20, 0xc9, @mcast1, 0x4}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e22, 0x1, @loopback, 0x2}], 0xb0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000004880), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000048c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f00000049c0)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004980)={&(0x7f0000004900)={0x54, r10, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x44085}, 0x10) ioctl$BTRFS_IOC_ENCODED_WRITE(r8, 0x40809440, &(0x7f0000004b40)={&(0x7f0000004b00)=[{&(0x7f0000004a00)="282a773c7fd5a975d1906750c477f53fe8868166639f630833cd7ea57aca8d8a8c9c281f4806e0fb72740d57f156652253ac0ef997e85ef1e46d9cab6ae4793351dbcb6d5707a1899202aa7206f4964583da840633d423dfc9010dbed7472a7e945f49c4fd47577b73654024abda882fb5a50a138791f12f18ccfebf3d0a700eaf4f44c42e9cabab3002bf60a0ecd9294e179ed70c5e9957960b3ca4f2041f5e135b21dad73a9f3dcc5a934f7535e2b554724938861c71c80b38dabdf03bc336a6c0c04cc0eff8c40bf055841a7ba2e34c9ac0476757537900233164", 0xdc}], 0x1, 0x80, 0x0, 0x2, 0x0, 0xb91, 0x7, 0xae82}) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000004e80)={{'\x00', 0x3}, {0xc}, 0x181, 0x0, 0x0, &(0x7f0000004bc0)='./file0\x00', &(0x7f0000004c00)='./file0\x00', &(0x7f0000004c40)="c5889c45264239a1a35634aec1a625ffa4a8d5a2548fc98c2b1cf2b60ffc17bd2b161af7ae761f04cce3fabf2145ab532c7ab86b7482edd88681e522c03996f7bcc227afcdbde1820425c6c009dfe3847b9504f66b61267647720997c2da7d98f01d5950b61c872ad03eac9459c2211a3106f22e0e6e38da6c54cc939670619ef37fcd8f36f7c084511e74c8cb1561994948da6eb770d87c8c1608488fc1ebf317d84354b20bcdc490a9cdfcec90bc45e5411da445b210761fd1b360b0e9171d30e14fb26cc6518c5562953993a9e333078e734438a8d9f9", 0xd8, 0x0, &(0x7f0000004d40)={0x2, 0x5e, {0x0, 0xc, 0x49, "ad77a459f307c8e1ff7669f2d98c2249aa4f90f8e31953069a8ccbb8626c4cf8da24b966e2545500ec0a2dba3ea5d2a4f210cd392bc4582f99b3ec38c0e4fffc7fdbd8d82699bb3275", 0x8, "451c2e4c7ced66a0"}, 0xab, "5efe3a96fa0bcb804087a94bb734ad86e91afcb865100d814ae0829dd7b7359cbc24af38e7267973cf0277cce26d7a729316cb0aef7bc4e5633032843a79b05bfb29227bc116c1861960f6f53e11d0f33bcc457f04eae82cdd5a6da8f56ff232d05ba29a0d80d41ad2de9cf38a7860a76d77aee3ed9bc6588c54ef889fc209451313abba9db9f7e59ac49c1adf3dd828e1eaa514967de40e818bc052bd6dada946bc3c866f0ab60882cb2f"}, 0x115}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004f00), 0x404000, 0x0) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000004f80)=[@textreal={0x8, &(0x7f0000004f40)="66b9150b000066b8fda5000066ba000000000f300f21040f5141030f01d5ba4200ec0f20d86635080000000f22d80f06e0fa646664f30f090f201c", 0x3b}], 0x1, 0x8, &(0x7f0000004fc0)=[@cstype3={0x5, 0xb}, @dstype0={0x6, 0x3}], 0x2) socket(0x10, 0xa, 0xade) accept4$nfc_llcp(r0, 0x0, &(0x7f0000005000), 0x80000) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000005040)={0x28, 0x2, r3, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8}) preadv(r0, &(0x7f0000005180)=[{&(0x7f0000005080)=""/232, 0xe8}], 0x1, 0x8, 0x3ff) 2.279475861s ago: executing program 5 (id=1818): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x3, &(0x7f0000000340)=0x0) io_submit(r3, 0x1, &(0x7f0000000a00)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000000380)="06497c803872fa4674b8b246d8a47b1c3ad26e707fe06047e134cd091f5578900ed12e9d66a18fbb15da63783a4229231c7519308a1ffba50da612640632c1802f0e5f2f81281ea9", 0x48, 0x6fe9}]) read$qrtrtun(r1, &(0x7f00000004c0)=""/57, 0x39) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x6) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f00000024c0)={0x7, 0xcf, 0x5, 0x2}) 1.007901751s ago: executing program 8 (id=1844): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500000000000800124000000001050004000000000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x14, 0x18, 0x1, 0x70bd26}, 0x14}}, 0x4040000) 1.007391882s ago: executing program 8 (id=1846): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x2) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x5, &(0x7f00000000c0)=[{0x7ff, 0x9, 0x81, 0x6d32}, {0x4, 0x2, 0x5, 0x3}, {0x8, 0xf, 0x7f, 0x7}, {0x1a, 0xaf, 0x1, 0x2}, {0x4, 0x5, 0x1e, 0x4}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$FE_SET_FRONTEND_TUNE_MODE(r0, 0x6f51, &(0x7f0000002480)) ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0xf) 940.30774ms ago: executing program 8 (id=1848): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) r1 = dup2(r0, r0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x980902, 0x6e}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002300)={0x7, {"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", 0x10af}}, 0x1006) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) (async) dup2(r0, r0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x980902, 0x6e}) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002300)={0x7, {"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", 0x10af}}, 0x1006) (async) 939.75574ms ago: executing program 8 (id=1850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x14, 0x0, &(0x7f0000000280)) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000060a09040000000000000000020000000900020073790600000000000900010073797a300000000005000740d1000000140000001100010000000000000000000000000a"], 0x5c}}, 0x0) 858.896439ms ago: executing program 8 (id=1852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x44, 0x9, {{0x23, 0x4, 0x2, 0x9, 0x8c, 0x64, 0x0, 0x10, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xf0, 0x3, 0x3, [{@broadcast, 0x6352}, {@loopback, 0x7fffffff}, {@local, 0x1000}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x2}]}, @lsrr={0x83, 0x23, 0x55, [@dev={0xac, 0x14, 0x14, 0xe}, @loopback, @private=0xa010101, @rand_addr=0x64010100, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty]}, @lsrr={0x83, 0x23, 0xb4, [@broadcast, @loopback, @loopback, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}, @empty, @broadcast]}, @generic={0x7, 0x4, "b508"}]}}}}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x50000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080025bd7000ffdbdf250d000000080034000002000008002c00faffffff08003a0056b1000008000600", @ANYRES32=r4, @ANYBLOB="0500000008003a004a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@x25, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)="74863dcdb845c4cd6d72d6f1626df1e014ab3191359eac396d3d908fd09bc690e169bdbb7ea38fcb7bd06d3413d44f6436c5c394e8ffe323044e38ad0ee62ee1dd236e0238945a3d9db6402856a36bb49970a161675b2a58c36f7828ec", 0x5d}, {&(0x7f0000000780)="2b81aaf349d0269355d5aa42e054c87c54afeb4ef6e2aed14ca22fb781ac950f9ac6e0ee159aaf022da0061ef0802a1f8daa8cf6d1ee12a11229165f6eafcd1591a3b1af72cb580fd117babcd2b87e729fc029f4ee5b38c46a6f5eb35cb73ad99c", 0x61}], 0x2}, 0xd0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100033060000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000aa00000000000000000200000062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000232000000fe880000000000000000000000000001000000000000009aaf0a3f012d94f600000000000000000000000000000000000000000000000000fdffffffdfffff070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a000000000000004c001400726d643136300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044"], 0x13c}}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 855.398075ms ago: executing program 8 (id=1853): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x20, 0x22, 0x7, {0x7, 0x2, "b792783c57"}}, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4a, 0x0, 0x0, 0x6, 0xc, 0x998d, 0x5}}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000"], 0x4c}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0406618, &(0x7f0000000040)={@id={0x2, 0x0, @b}}) 789.765547ms ago: executing program 7 (id=1854): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (rerun: 64) request_key(&(0x7f0000000cc0)='id_legacy\x00', &(0x7f0000000d00)={'syz', 0x0}, &(0x7f0000000d40)='.,\x00', 0xfffffffffffffffe) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000540)="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", 0x704, 0x808, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) (async) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = fsmount(r3, 0x1, 0x0) (rerun: 64) fchdir(r4) (async, rerun: 64) r5 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYRES32=r1], &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, r4, 0x0, 0x0, 0xffffffffffffff10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) dup(r7) (async, rerun: 64) r8 = fsmount(r5, 0x1, 0xa) (rerun: 64) fchdir(r8) (async, rerun: 64) close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r10, 0x1}, 0x1c}}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r11 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) (async, rerun: 32) r12 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) (rerun: 32) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r12, 0x0) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async) write$P9_RVERSION(r11, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r13, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) 676.993345ms ago: executing program 7 (id=1856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 676.741265ms ago: executing program 7 (id=1857): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000010000000007000000", @ANYRES32=r3, @ANYBLOB="800002000a0002000180c2001f"], 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000008000000000000000", @ANYRES32, @ANYBLOB="872100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200200e09004500003c000000000006907864010102ac1414aa40010000b6ffd36d30eda3b1fb2090daf1b07c180c57b55dd9fc1b892494b6ad8f205eaab5dce035bda4b02704534b1bcfcbad66fdbe2e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac000004907800001312473ecfd2106a00"/28], 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000180)="0a6f40e1cb45e3a9d83d15d4e25238fc6befc701460b79130d862cb3c4f955f1328a052d9c558d8f8638073898650f52821a5f294ccb58a064441b4641dca7effe69dcad53f10233d790f7931fe339013ab0672cec3c7a527e9d44da5822bfcd7fcea1b709e2993cd8c1c6", &(0x7f0000000240)=""/136, 0x4}, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x7, 0x101}, 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r8, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="18001700000000000000f8ffffff00008510000402000000d6000000feffffff9500007b000000008500000013000000953609c763f128c91af5aba9b87c8a"], &(0x7f00000003c0)='GPL\x00', 0x5}, 0x94) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$FE_SET_FRONTEND_TUNE_MODE(r0, 0x6f51, &(0x7f0000002480)) ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0xf) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 597.526364ms ago: executing program 7 (id=1861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x44, 0x9, {{0x23, 0x4, 0x2, 0x9, 0x8c, 0x64, 0x0, 0x10, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xf0, 0x3, 0x3, [{@broadcast, 0x6352}, {@loopback, 0x7fffffff}, {@local, 0x1000}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x2}]}, @lsrr={0x83, 0x23, 0x55, [@dev={0xac, 0x14, 0x14, 0xe}, @loopback, @private=0xa010101, @rand_addr=0x64010100, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty]}, @lsrr={0x83, 0x23, 0xb4, [@broadcast, @loopback, @loopback, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}, @empty, @broadcast]}, @generic={0x7, 0x4, "b508"}]}}}}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x50000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080025bd7000ffdbdf250d000000080034000002000008002c00faffffff08003a0056b1000008000600", @ANYRES32=r4, @ANYBLOB="0500000008003a004a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@x25, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)="74863dcdb845c4cd6d72d6f1626df1e014ab3191359eac396d3d908fd09bc690e169bdbb7ea38fcb7bd06d3413d44f6436c5c394e8ffe323044e38ad0ee62ee1dd236e0238945a3d9db6402856a36bb49970a161675b2a58c36f7828ec", 0x5d}, {&(0x7f0000000780)="2b81aaf349d0269355d5aa42e054c87c54afeb4ef6e2aed14ca22fb781ac950f9ac6e0ee159aaf022da0061ef0802a1f8daa8cf6d1ee12a11229165f6eafcd1591a3b1af72cb580fd117babcd2b87e729fc029f4ee5b38c46a6f5eb35cb73ad99c", 0x61}], 0x2}, 0xd0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100033060000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000aa00000000000000000200000062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000232000000fe880000000000000000000000000001000000000000009aaf0a3f012d94f600000000000000000000000000000000000000000000000000fdffffffdfffff070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a000000000000004c001400726d643136300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044"], 0x13c}}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 516.957908ms ago: executing program 7 (id=1862): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 516.382843ms ago: executing program 7 (id=1864): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xe) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000300)={0x50, 0x0, r2, {0x7, 0x1f, 0x100004, 0x8800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28a43, 0x0) getdents64(r0, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r0, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x4100, 0x8b) 237.165848ms ago: executing program 6 (id=1870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x44, 0x9, {{0x23, 0x4, 0x2, 0x9, 0x8c, 0x64, 0x0, 0x10, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xf0, 0x3, 0x3, [{@broadcast, 0x6352}, {@loopback, 0x7fffffff}, {@local, 0x1000}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x2}]}, @lsrr={0x83, 0x23, 0x55, [@dev={0xac, 0x14, 0x14, 0xe}, @loopback, @private=0xa010101, @rand_addr=0x64010100, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty]}, @lsrr={0x83, 0x23, 0xb4, [@broadcast, @loopback, @loopback, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}, @empty, @broadcast]}, @generic={0x7, 0x4, "b508"}]}}}}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x50000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080025bd7000ffdbdf250d000000080034000002000008002c00faffffff08003a0056b1000008000600", @ANYRES32=r4, @ANYBLOB="0500000008003a004a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@x25, 0x80, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000700)="74863dcdb845c4cd6d72d6f1626df1e014ab3191359eac396d3d908fd09bc690e169bdbb7ea38fcb7bd06d3413d44f6436c5c394e8ffe323044e38ad0ee62ee1dd236e0238945a3d9db6402856a36bb49970a161675b2a58c36f7828ec", 0x5d}, {&(0x7f0000000780)="2b81aaf349d0269355d5aa42e054c87c54afeb4ef6e2aed14ca22fb781ac950f9ac6e0ee159aaf022da0061ef0802a1f8daa8cf6d1ee12a11229165f6eafcd1591a3b1af72cb580fd117babcd2b87e729fc029f4ee5b38c46a6f5eb35cb73ad99c", 0x61}], 0x3}, 0xd0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100033060000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000aa00000000000000000200000062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000232000000fe880000000000000000000000000001000000000000009aaf0a3f012d94f600000000000000000000000000000000000000000000000000fdffffffdfffff070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a000000000000004c001400726d643136300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044"], 0x13c}}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 235.942692ms ago: executing program 6 (id=1871): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$FE_SET_FRONTEND_TUNE_MODE(r0, 0x6f51, &(0x7f0000002480)) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "81e3255b36a38f426a3603a2e2d311d54fc243f488cb7dc86ff72d4f08bb08627de1daef3c7f362808a11e76e96168f134a6a4ecb79cd909583277c8db625fa3", 0x35}, 0x48, 0xfffffffffffffff8) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000240)) keyctl$instantiate(0xc, r1, &(0x7f0000000200)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:'}, 0x16, 0xfffffffffffffffa) ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0xf) 150.39761ms ago: executing program 6 (id=1872): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000080)={0x0, 0x4}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x80, &(0x7f0000000280)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@xino_auto}]}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno', 0xa) 149.86996ms ago: executing program 6 (id=1873): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000001300)='jffs2\x00', 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000003d40)=0x1, 0x20) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000805) r3 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, r5, 0x18803, 0xc104}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) fsopen(&(0x7f0000001300)='jffs2\x00', 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000003d40)=0x1, 0x20) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000805) (async) io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, r5, 0x18803, 0xc104}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) 69.874027ms ago: executing program 6 (id=1874): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) syz_emit_ethernet(0x83, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000001ff02000000000000000000000000000104004e200023b0"], 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002e40)={0x8e8, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100000}, @ETHTOOL_A_BITSET_VALUE={0x8c6, 0x4, "3f7fdc98cb8ec82af8c5867eb0af88bbb267430cbb381d0cdc2e0695dce2f5a3abf3c57c5b23cf55ad2eb303a0e6eb6e40902c931dcf53adbe5c92b22682764239c4e1d93636ebab0392182118c18888b467dfab257a9bea86e4766656e7846a3855c0c04605c424c57bec94695b54f8f917686da15a40370ca95349313637e9d4c915b6b1b7de3c8d5e8f9cf0b9732cd3e749fe62f51a266c2b06fbf6173af4f580172edb6c5d4885487fe36d4c5728f2ff19bd198f8f271a9a4a3383add15af0f2db555a13e0582a5df1a24095fb163fd41e9628e36eb6f527950b006e5b175bda34aecec43aa5175c03b65ba5044c5e9614ceb59a63cf7fe09cd7aefd3500f3624c7782088a5dd5d9f723b4304c503cbe012734de85cc2ff2d31aaf7d03124a1eede6ad3f8df50cf8c4fad060b6521507abaa5d2c759e7752dc4e8fe7bdd44e40a412e32a9bc06b2bdf9a3464e2d12ca2433e5270efbe54a0aebc53cee412afb5d4ff23489b87386cec72f8ac9d3e711c8b83216986563e12e7f85e1a6850987b2a0ebbe03f9e695108597e9292cb0b951733f4c17644808ec3457d8a947cda0c539b21de2f63d4bb8119b2d16a04e299b9765207748ff57a8628e2797408374599c4a877ad76d3939a72e8a53eef86a2ae57747b6913574d79eca13ed871ba2ad3f15a87dbbdae9c9b9eef993a43ac969c8f8ba2c909c4b4437b576f632e57cd97f7492419f787f4eab5e5f05feccf587987598f24b390835dcb6c026bf3c89584425eaa69cd7ce58992d0332b642c9d422e53cfd9951c23625ce7c6bb2c5de70bcebef8898db0641a6872e730884e4c5e145e020f4e131a94f57990542251093b0fcc1a9be783da1e5e6bdc8a9679f2c19037405578b53e01c855ee5049323698e7a7f0be3384f11688df4989a8e0c50e47dd0e8dfdfafb042fdbf5d4cb90ec6f4d69df6d79d799afdc06061249e3b9b87815bdc9b5484a22d701363ca359a25a007c172b390ae10ff08336726e209fb33b1ee8aeba2027ddcca8208e12b89b595f0e53b7f772e7ea69a6156bac59032936e674ad48e9b59891b6298e2fc4c3c478fbe8eb4e514497b0c7ae98552e708bb087d94c3392d1286e62b74a4fdfabadd49a3ae74f1081259d616718abc8e62cad25cd605ef411f18a002b4a873f604c11f28d75f0f120dabd01eb121ac271b5c06922c8086d4c3bc966a7e824ea9ac4e01ce95fe5270b3d4826c6e190e052306fee51e6cada57f4cedc6eeed5b467d86fcfc53562707a39d1280b416650dde1f6131c8e36866040a5709d1ed7e984d7f17279cff829d9963993bec6006ed32ac1bd599ec11a855502abeb18c2feb8b8dbc1b044012134bd1b849e75adc0e5267b69026d6a4cf2da6d0aeb860ae94aad6f1b5e87180b28805b5e3beb9aa7cfce4d2185973886362c67f43a9145b9ac9f4a1415d882046acf4a63212d70c97e3a177f7077e0c9d86c7a293cb7cf9bc8353428354f20c62d431014a0a6d1f28d02224f044d3f9d8a6ec6dc3ad9d2d59bd88734018b0ffb90b0e0243b6ff71edbf0d8b3bb973aa4349b312d651a69e85a69fee582194ffc580121b9c594b77c64211e70419cef6885d6a94a91b9a92665958f1a571f63b063eac40108d31a72f7952c3ea95a5286d2d62098e4379e4d5cac9fee9caa3f9ba1c9b28ca1256c24479936f482c8e313bdce0fcae7e01809a9e3f7dc5941219b38e4c0de358192b4bf48f01c1729fa4023fc1309d5e7a7e459cccd6b2836f15c627bbab7949467cff8928b7da95c81130f575c5032077c86171d382d8efe6ed13512326e078375ff7125b408decb20cc2642d0819fc48613237eb72eaaa982c2d8c9f0b09caad86f4f03541dd6ef7047a3f9ec30a3b35e6c4bec107506fbc02687f314dc47e632d6fed1befce24974c493226609b26b33bbe353ecc09e09e97f3ce563e0c5bb48da730bf0d732b5ab2024c764d8041573622938bb585890ad718d223811623d82905312bb5d7ab61374a1eeebf04c8f137abf0887bab4994c726090d80cabfefa10021d15c1b6a5188cd76a2f5a75c51007e928b61f5367f0ee5006f5d6ab78c16b3a19d149c3231b798f07c02fcc0a36f98d2e18b5517a99747af5251e4a3b3885c54fdfeafa5ebc529c08eb57d56c7deca7ea04054da2865aaa49eb1b17337550b1d9da92cb5018f42638bd1e86c9812eb84de6654ce0ed548a41c76ff74d846b399ee8b99b15f5749c46d4db37a694221cbe1fb2a4effa98c8ff58271c3d5a2e3b980e960d3f81f652eee84e6e8d9fde7549e6d4d4644ddf93de8587362334b2f6fad35c387fd3c2ebb60f9f989557110fa8332627527cd86435db057fd50800644b87c0a6972e37e054ff72ea35121d68da47bce98ab1a4258212265f43aeef6b97bc4351ee3d810e92bd3e2714e65579010398da06a2708ef824f5ef2c4274280798f7bb42cf75c4fa508790549f2601c933286826d37f635409c903e67d2e8eba6dc110a4006c4b9a8d0956e8889431643d7c943af95d1c4f948d7d4190c585ddde86cd30b54429b913d2fb303d1e33a9b633d4edeb51d8e716f39f197e4076a869fe8e462110509d4a9c579e31dd38070a11ef8d7158f057fd68709e768db4a83cc80f25020af025508b2e98c4724b74c69c947b10b709855defd1e38c10032a51c5a0f43173226460254cbd365730ad297e06ba41ab8bdc66ab4a7004a61464c50a15979a20d250667eb8dd4253ed75c18ebb66bdb52bf43047581c0b11ef27d729055e4e45c68b8cc59193ff914357585b4d3a6d7a67717383f96fef5a616ad9354d8626c737f2d0290a628f6cace460f18869b45d98fd0bb2c412e4f339bc26adde7c9b746d4e44555916613d361674215b5d1760fc23a7380851f88bb24626f422acc6d0c84baa0a538d487aed3bfd32eebd1e054a1e90be4bbc9c773704f27957ef667b599917e3fdd6120c6f8f5ebb7828bb9b0576bc95d88f23f62c17f1056face00e60dcaed3d4ee8a1d78b9ae896b957fad53dc4068bea3e9754b260691ecad7036efc7a3e3b95312455eea909ea68d49bbb4ead45772d1296ff61966c593fc2fddf25fb79d52de932164341769f91030621f2a7782bb130b7decfb0bcecd3d5d10a413439fd4f8fb815b"}]}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x44801}, 0x40) 0s ago: executing program 6 (id=1875): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ppoll(&(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d10c6a41d1000000000fff50000000000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) kernel console output (not intermixed with test programs): 55386][ T39] usb 10-1: USB disconnect, device number 4 [ 143.359469][ T6606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.440724][ T8705] netlink: 'syz.6.744': attribute type 1 has an invalid length. [ 143.444788][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.744'. [ 143.448311][ T8706] netlink: 'syz.6.744': attribute type 26 has an invalid length. [ 143.450413][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.744'. [ 143.454429][ T8705] netlink: 'syz.6.744': attribute type 26 has an invalid length. [ 143.478597][ T6021] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 143.510423][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 143.510441][ T40] audit: type=1400 audit(1775036103.274:541): avc: denied { shutdown } for pid=8708 comm="syz.6.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.580356][ T8713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8713 comm=syz.6.770 [ 143.660245][ T6021] usb 8-1: unable to get BOS descriptor or descriptor too short [ 143.664145][ T6021] usb 8-1: not running at top speed; connect to a high speed hub [ 143.664469][ T5290] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 143.667913][ T6021] usb 8-1: config 1 interface 0 altsetting 12 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 143.673805][ T6021] usb 8-1: config 1 interface 0 altsetting 12 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 143.677548][ T6021] usb 8-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.684131][ T6021] usb 8-1: config 1 interface 0 has no altsetting 0 [ 143.688180][ T6021] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.692017][ T6021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.695401][ T6021] usb 8-1: Product: syz [ 143.697111][ T6021] usb 8-1: Manufacturer: syz [ 143.698903][ T6021] usb 8-1: SerialNumber: syz [ 143.704992][ T8697] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.709466][ T8697] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.913965][ T8697] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.924196][ T6021] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 143.933150][ T6021] usb 8-1: USB disconnect, device number 16 [ 145.058669][ T5290] Bluetooth: hci3: command tx timeout [ 147.138622][ T5933] Bluetooth: hci3: command 0x040f tx timeout [ 149.218744][ T5933] Bluetooth: hci3: command 0x040f tx timeout [ 151.298649][ T5933] Bluetooth: hci3: command 0x040f tx timeout [ 159.108122][ T40] audit: type=1400 audit(1775036118.864:542): avc: denied { map } for pid=8775 comm="syz.6.774" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 159.109892][ T8776] CIFS mount error: No usable UNC path provided in device string! [ 159.109892][ T8776] [ 159.120940][ T8776] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 159.132375][ T8781] binder: 8780:8781 ioctl c00c620f 200000000040 returned -22 [ 159.174032][ T8781] binder: 8780:8781 ioctl ae01 0 returned -22 [ 159.324539][ T5933] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 159.370663][ T8799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8799 comm=syz.5.781 [ 159.472244][ T8815] netlink: 48 bytes leftover after parsing attributes in process `syz.3.785'. [ 159.477434][ T8819] netlink: 48 bytes leftover after parsing attributes in process `syz.3.785'. [ 159.520249][ T8823] omfs: Invalid superblock (0) [ 159.543493][ T5290] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 159.639044][ T1329] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 159.660365][ T8830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8830 comm=syz.6.793 [ 159.733348][ T8841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8841 comm=syz.6.797 [ 159.793948][ T1329] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 159.797343][ T1329] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.801391][ T1329] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.805465][ T1329] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 159.812526][ T1329] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 159.814167][ T8848] i2c i2c-1: Invalid block write size 34 [ 159.816294][ T1329] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 159.823911][ T1329] usb 9-1: Manufacturer: syz [ 159.831336][ T1329] usb 9-1: config 0 descriptor?? [ 159.968725][ T34] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 160.010060][ T5290] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 160.143237][ T8864] trusted_key: encrypted_key: master key parameter 'Ycryptfs' is invalid [ 160.149459][ T40] audit: type=1400 audit(1775036119.904:543): avc: denied { read append } for pid=8865 comm="syz.3.806" name="usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 160.161355][ T40] audit: type=1400 audit(1775036119.904:544): avc: denied { open } for pid=8865 comm="syz.3.806" path="/dev/usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 160.175374][ T8864] /dev/sg0: Can't lookup blockdev [ 160.226673][ T8870] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 160.251461][ T8870] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.260853][ T1329] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 160.278917][ T1329] appleir 0003:05AC:8243.0011: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 160.284366][ T40] audit: type=1400 audit(1775036120.044:545): avc: denied { module_request } for pid=8869 comm="syz.3.807" kmod="crypto-ccm(aes)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 160.309389][ T8877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8877 comm=syz.6.808 [ 160.422762][ T8884] QAT: Stopping all acceleration devices. [ 160.431061][ T8884] netlink: 'syz.6.809': attribute type 1 has an invalid length. [ 160.512194][ T40] audit: type=1400 audit(1775036120.274:546): avc: denied { bpf } for pid=8893 comm="syz.5.812" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.531232][ T40] audit: type=1400 audit(1775036120.284:547): avc: denied { perfmon } for pid=8893 comm="syz.5.812" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.690735][ T40] audit: type=1400 audit(1775036120.454:548): avc: denied { wake_alarm } for pid=8908 comm="syz.5.816" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.692955][ T8911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8911 comm=syz.6.817 [ 160.782374][ T40] audit: type=1326 audit(1775036120.544:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.6.820" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06b1b9c819 code=0x0 [ 160.834340][ T8926] netlink: 24 bytes leftover after parsing attributes in process `syz.5.823'. [ 160.842288][ T8926] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8926 comm=syz.5.823 [ 160.851300][ T5944] Bluetooth: hci4: unexpected event 0x03 length: 4 < 11 [ 161.025987][ T5944] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 161.087717][ T40] audit: type=1400 audit(1775036120.844:550): avc: denied { setattr } for pid=8945 comm="syz.5.832" name="sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 161.149392][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.6.833'. [ 161.186100][ T8951] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8951 comm=syz.6.833 [ 161.195191][ T5944] Bluetooth: hci3: unexpected event 0x03 length: 4 < 11 [ 161.211931][ C1] sr 2:0:0:0: [sr0] tag#5 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 161.216127][ C1] sr 2:0:0:0: [sr0] tag#5 CDB: Read Long(10) 3e 69 f5 55 fd a8 8c [ 161.223578][ T40] audit: type=1400 audit(1775036120.984:551): avc: denied { map } for pid=8945 comm="syz.5.832" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 161.260901][ T8955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.335098][ T8957] x_tables: duplicate underflow at hook 3 [ 161.460872][ T5944] Bluetooth: hci4: command 0x0406 tx timeout [ 161.527434][ T8975] comedi: valid board names for 8255 driver are: [ 161.530940][ T8975] 8255 [ 161.532017][ T8975] comedi: valid board names for vmk80xx driver are: [ 161.536022][ T8975] vmk80xx [ 161.537240][ T8975] comedi: valid board names for usbduxsigma driver are: [ 161.539958][ T8975] usbduxsigma [ 161.541400][ T8975] comedi: valid board names for usbduxfast driver are: [ 161.543785][ T8975] usbduxfast [ 161.544926][ T8975] comedi: valid board names for usbdux driver are: [ 161.547219][ T8975] usbdux [ 161.548242][ T8975] comedi: valid board names for ni6501 driver are: [ 161.551460][ T8975] ni6501 [ 161.552607][ T8975] comedi: valid board names for dt9812 driver are: [ 161.554921][ T8975] dt9812 [ 161.555962][ T8975] comedi: valid board names for ni_labpc_cs driver are: [ 161.558286][ T8975] ni_labpc_cs [ 161.559884][ T8975] comedi: valid board names for ni_daq_700 driver are: [ 161.562463][ T8975] ni_daq_700 [ 161.563710][ T8975] comedi: valid board names for labpc_pci driver are: [ 161.566112][ T8975] labpc_pci [ 161.567418][ T8975] comedi: valid board names for adl_pci9118 driver are: [ 161.570783][ T8975] pci9118dg [ 161.572210][ T8975] pci9118hg [ 161.573535][ T8975] pci9118hr [ 161.574806][ T8975] comedi: valid board names for 8255_pci driver are: [ 161.577192][ T8975] 8255_pci [ 161.578649][ T8975] comedi: valid board names for s526 driver are: [ 161.580804][ T8975] s526 [ 161.581810][ T8975] comedi: valid board names for multiq3 driver are: [ 161.584139][ T8975] multiq3 [ 161.585286][ T8975] comedi: valid board names for pcmuio driver are: [ 161.587463][ T8975] pcmuio48 [ 161.588790][ T8975] pcmuio96 [ 161.590342][ T8975] comedi: valid board names for pcmmio driver are: [ 161.592945][ T8975] pcmmio [ 161.594273][ T8975] comedi: valid board names for pcmda12 driver are: [ 161.596805][ T8975] pcmda12 [ 161.597836][ T8975] comedi: valid board names for pcmad driver are: [ 161.600526][ T8975] pcmad12 [ 161.601933][ T8975] pcmad16 [ 161.603066][ T8975] comedi: valid board names for ni_labpc driver are: [ 161.605557][ T8975] lab-pc-1200 [ 161.607139][ T8975] lab-pc-1200ai [ 161.609690][ T8975] lab-pc+ [ 161.611400][ T8975] comedi: valid board names for atmio16 driver are: [ 161.614004][ T8975] atmio16 [ 161.615939][ T8975] atmio16d [ 161.617348][ T8975] comedi: valid board names for ni_at_ao driver are: [ 161.625224][ T8975] at-ao-6 [ 161.626281][ T8975] at-ao-10 [ 161.627272][ T8975] comedi: valid board names for ni_at_a2150 driver are: [ 161.629786][ T8975] ni_at_a2150 [ 161.631290][ T8975] comedi: valid board names for adq12b driver are: [ 161.634019][ T8975] adq12b [ 161.635314][ T8975] comedi: valid board names for mpc624 driver are: [ 161.637758][ T8975] mpc624 [ 161.639094][ T8975] comedi: valid board names for c6xdigio driver are: [ 161.641355][ T8975] c6xdigio [ 161.642388][ T8975] comedi: valid board names for aio_iiro_16 driver are: [ 161.644528][ T8975] aio_iiro_16 [ 161.645730][ T8975] comedi: valid board names for aio_aio12_8 driver are: [ 161.647930][ T8975] aio_aio12_8 [ 161.649258][ T8975] aio_ai12_8 [ 161.650375][ T8975] aio_ao12_4 [ 161.651415][ T8975] comedi: valid board names for fl512 driver are: [ 161.653523][ T8975] fl512 [ 161.654620][ T8975] comedi: valid board names for dmm32at driver are: [ 161.657505][ T8975] dmm32at [ 161.658834][ T8975] comedi: valid board names for dt282x driver are: [ 161.661076][ T8975] dt2821 [ 161.662067][ T8975] dt2821-f [ 161.663089][ T8975] dt2821-g [ 161.664248][ T8975] dt2823 [ 161.665321][ T8975] dt2824-pgh [ 161.666434][ T8975] dt2824-pgl [ 161.669731][ T8975] dt2825 [ 161.671035][ T8975] dt2827 [ 161.672264][ T8975] dt2828 [ 161.673549][ T8975] dt2829 [ 161.674872][ T8975] dt21-ez [ 161.676241][ T8975] dt23-ez [ 161.677729][ T8975] dt24-ez [ 161.679581][ T8975] dt24-ez-pgl [ 161.680960][ T8975] comedi: valid board names for dt2817 driver are: [ 161.683129][ T8975] dt2817 [ 161.684063][ T8975] comedi: valid board names for dt2815 driver are: [ 161.686103][ T8975] dt2815 [ 161.687048][ T8975] comedi: valid board names for dt2814 driver are: [ 161.689376][ T8975] dt2814 [ 161.690788][ T8975] comedi: valid board names for dt2811 driver are: [ 161.693341][ T8975] dt2811-pgh [ 161.694893][ T8975] dt2811-pgl [ 161.696364][ T8975] comedi: valid board names for dt2801 driver are: [ 161.699135][ T8975] dt2801 [ 161.700195][ T8975] comedi: valid board names for das6402 driver are: [ 161.702208][ T8975] das6402-12 [ 161.703167][ T8975] das6402-16 [ 161.704450][ T8975] comedi: valid board names for das1800 driver are: [ 161.706657][ T8975] das-1701st [ 161.707940][ T8975] das-1701st-da [ 161.712532][ T8975] das-1702st [ 161.715116][ T8975] das-1702st-da [ 161.716416][ T8975] das-1702hr [ 161.717634][ T8975] das-1702hr-da [ 161.719105][ T8975] das-1701ao [ 161.720248][ T8975] das-1702ao [ 161.721427][ T8975] das-1801st [ 161.722523][ T8975] das-1801st-da [ 161.723741][ T8975] das-1802st [ 161.724907][ T8975] das-1802st-da [ 161.726121][ T8975] das-1802hr [ 161.727326][ T8975] das-1802hr-da [ 161.729054][ T8975] das-1801hc [ 161.730492][ T8975] das-1802hc [ 161.731902][ T8975] das-1801ao [ 161.733115][ T8975] das-1802ao [ 161.734271][ T8975] comedi: valid board names for das800 driver are: [ 161.736316][ T8975] das-800 [ 161.737339][ T8975] cio-das800 [ 161.738937][ T8975] das-801 [ 161.739953][ T8975] cio-das801 [ 161.741124][ T8975] das-802 [ 161.742168][ T8975] cio-das802 [ 161.743280][ T8975] cio-das802/16 [ 161.744572][ T8975] comedi: valid board names for isa-das08 driver are: [ 161.746930][ T8975] isa-das08 [ 161.748157][ T8975] das08-pgm [ 161.749880][ T8975] das08-pgh [ 161.751321][ T8975] das08-pgl [ 161.752519][ T8975] das08-aoh [ 161.753641][ T8975] das08-aol [ 161.754817][ T8975] das08-aom [ 161.755976][ T8975] das08/jr-ao [ 161.757236][ T8975] das08jr-16-ao [ 161.758501][ T8975] pc104-das08 [ 161.759903][ T8975] das08jr/16 [ 161.761187][ T8975] comedi: valid board names for das16m1 driver are: [ 161.763723][ T8975] das16m1 [ 161.765254][ T8975] comedi: valid board names for dac02 driver are: [ 161.767899][ T8975] dac02 [ 161.769054][ T8975] comedi: valid board names for rti802 driver are: [ 161.771118][ T8975] rti802 [ 161.772094][ T8975] comedi: valid board names for rti800 driver are: [ 161.774438][ T8975] rti800 [ 161.775471][ T8975] rti815 [ 161.776459][ T8975] comedi: valid board names for pcm3724 driver are: [ 161.778974][ T8975] pcm3724 [ 161.780136][ T8975] comedi: valid board names for pcl818 driver are: [ 161.782502][ T8975] pcl818l [ 161.783485][ T8975] pcl818h [ 161.784486][ T8975] pcl818hd [ 161.787905][ T8975] pcl818hg [ 161.789064][ T8975] pcl818 [ 161.791230][ T8975] pcl718 [ 161.792344][ T8975] pcm3718 [ 161.793469][ T8975] comedi: valid board names for pcl816 driver are: [ 161.798655][ T8975] pcl816 [ 161.799780][ T8975] pcl814b [ 161.800818][ T8975] comedi: valid board names for pcl812 driver are: [ 161.802922][ T8975] pcl812 [ 161.803879][ T8975] pcl812pg [ 161.804905][ T8975] acl8112pg [ 161.805987][ T8975] acl8112dg [ 161.807054][ T8975] acl8112hg [ 161.808294][ T8975] a821pgl [ 161.809531][ T8975] a821pglnda [ 161.810940][ T8975] a821pgh [ 161.812124][ T8975] a822pgl [ 161.813265][ T8975] a822pgh [ 161.814384][ T8975] a823pgl [ 161.815415][ T8975] a823pgh [ 161.816412][ T8975] pcl813 [ 161.817400][ T8975] pcl813b [ 161.818469][ T8975] acl8113 [ 161.819691][ T8975] iso813 [ 161.820845][ T8975] acl8216 [ 161.822017][ T8975] a826pg [ 161.823048][ T8975] comedi: valid board names for pcl730 driver are: [ 161.825562][ T8975] pcl730 [ 161.826739][ T8975] iso730 [ 161.827873][ T8975] acl7130 [ 161.829492][ T8975] pcm3730 [ 161.831046][ T8975] pcl725 [ 161.832189][ T8975] p8r8dio [ 161.833635][ T8975] acl7225b [ 161.834874][ T8975] p16r16dio [ 161.836222][ T8975] pcl733 [ 161.837485][ T8975] pcl734 [ 161.840082][ T8975] opmm-1616-xt [ 161.841680][ T8975] pearl-mm-p [ 161.843653][ T8975] ir104-pbf [ 161.845099][ T8975] comedi: valid board names for pcl726 driver are: [ 161.847750][ T8975] pcl726 [ 161.849080][ T8975] pcl727 [ 161.850291][ T8975] pcl728 [ 161.851524][ T8975] acl6126 [ 161.852863][ T8975] acl6128 [ 161.854205][ T8975] comedi: valid board names for pcl724 driver are: [ 161.857131][ T8975] pcl724 [ 161.858745][ T8975] pcl722 [ 161.860268][ T8975] pcl731 [ 161.861804][ T8975] acl7122 [ 161.863093][ T8975] acl7124 [ 161.864419][ T8975] pet48dio [ 161.865807][ T8975] pcmio48 [ 161.867103][ T8975] onyx-mm-dio [ 161.868707][ T8975] comedi: valid board names for pcl711 driver are: [ 161.871458][ T8975] pcl711 [ 161.872905][ T8975] pcl711b [ 161.874481][ T8975] acl8112hg [ 161.876163][ T8975] acl8112dg [ 161.877836][ T8975] comedi: valid board names for amplc_pc263 driver are: [ 161.881307][ T8975] pc263 [ 161.882653][ T8975] comedi: valid board names for amplc_pc236 driver are: [ 161.885635][ T8975] pc36at [ 161.886897][ T8975] comedi: valid board names for amplc_dio200 driver are: [ 161.889792][ T8975] pc212e [ 161.891039][ T8975] pc214e [ 161.892376][ T8975] pc215e [ 161.893771][ T8975] pc218e [ 161.895221][ T8975] pc272e [ 161.896961][ T8975] comedi: valid board names for comedi_parport driver are: [ 161.900300][ T8975] comedi_parport [ 161.901681][ T8975] comedi: valid board names for comedi_test driver are: [ 161.904195][ T8975] comedi_test [ 161.905616][ T8975] comedi: valid board names for comedi_bond driver are: [ 161.908785][ T8975] comedi_bond [ 162.057125][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.849'. [ 162.087237][ T9000] xt_hashlimit: size too large, truncated to 1048576 [ 162.147102][ T9005] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 162.178736][ T5933] Bluetooth: hci3: command 0x040f tx timeout [ 162.180554][ T5290] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 162.232847][ T9011] netlink: 24 bytes leftover after parsing attributes in process `syz.6.853'. [ 162.288243][ T9011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9011 comm=syz.6.853 [ 162.293669][ T5290] Bluetooth: hci3: unexpected event 0x03 length: 4 < 11 [ 162.299815][ T10] usb 9-1: USB disconnect, device number 18 [ 162.370482][ T9022] netlink: 'syz.6.858': attribute type 2 has an invalid length. [ 162.533074][ T9034] tun0: tun_chr_ioctl cmd 1074025675 [ 162.534785][ T9034] tun0: persist enabled [ 162.536639][ T9034] tun0: tun_chr_ioctl cmd 1074025675 [ 162.540401][ T9034] tun0: persist disabled [ 162.560462][ T9036] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9036 comm=syz.3.864 [ 162.778547][ T10] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 162.822192][ T9060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9060 comm=syz.3.870 [ 162.862154][ T9063] netlink: 'syz.6.871': attribute type 1 has an invalid length. [ 162.894406][ T9063] bond1: (slave geneve2): making interface the new active one [ 162.898747][ T9063] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 162.902959][ T6602] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 162.906146][ T6602] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 162.918518][ T6602] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 162.921730][ T6602] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 162.934906][ T10] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 162.940816][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.946052][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.955388][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 162.967416][ T5290] Bluetooth: hci3: unexpected event 0x03 length: 4 < 11 [ 162.970007][ T10] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 162.970036][ T10] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 162.970051][ T10] usb 9-1: Manufacturer: syz [ 162.972501][ T10] usb 9-1: config 0 descriptor?? [ 162.997244][ T9070] netlink: 'syz.3.874': attribute type 1 has an invalid length. [ 163.001412][ T9070] netlink: 192 bytes leftover after parsing attributes in process `syz.3.874'. [ 163.050349][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.875'. [ 163.056699][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.875'. [ 163.337817][ T9094] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 163.340328][ T9094] overlayfs: failed to set xattr on upper [ 163.342466][ T9094] overlayfs: ...falling back to redirect_dir=nofollow. [ 163.345116][ T9094] overlayfs: ...falling back to index=off. [ 163.347276][ T9094] overlayfs: ...falling back to uuid=null. [ 163.349457][ T9094] overlayfs: ...falling back to xino=off. [ 163.351461][ T9094] overlayfs: conflicting lowerdir path [ 163.385640][ T10] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 163.392437][ T10] appleir 0003:05AC:8243.0012: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 163.416541][ T5290] Bluetooth: hci3: unexpected event 0x03 length: 4 < 11 [ 163.602227][ T9114] fuse: Bad value for 'fd' [ 163.619079][ T9115] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 163.621553][ T9115] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 163.625631][ T9115] vhci_hcd vhci_hcd.0: Device attached [ 163.631722][ T9117] vhci_hcd: connection closed [ 163.639126][ T95] vhci_hcd vhci_hcd.5: stop threads [ 163.643100][ T95] vhci_hcd vhci_hcd.5: release socket [ 163.644854][ T95] vhci_hcd vhci_hcd.5: disconnect device [ 163.839327][ T9133] bridge0: port 3(syz_tun) entered blocking state [ 163.841861][ T9133] bridge0: port 3(syz_tun) entered disabled state [ 163.845810][ T9133] syz_tun: entered allmulticast mode [ 163.850095][ T9133] syz_tun: entered promiscuous mode [ 163.853479][ T9133] bridge0: port 3(syz_tun) entered blocking state [ 163.855883][ T9133] bridge0: port 3(syz_tun) entered forwarding state [ 164.067313][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.896'. [ 164.183173][ T9146] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 164.189252][ T9148] overlayfs: failed to clone upperpath [ 164.481861][ T9180] selinux_netlink_send: 2 callbacks suppressed [ 164.481881][ T9180] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9180 comm=syz.3.909 [ 164.544056][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 164.544071][ T40] audit: type=1400 audit(1775036124.304:559): avc: denied { mounton } for pid=9181 comm="syz.3.910" path="/267/file0" dev="tmpfs" ino=1432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 164.663913][ T9196] syz.5.915 (9196): attempted to duplicate a private mapping with mremap. This is not supported. [ 164.676188][ T40] audit: type=1400 audit(1775036124.434:560): avc: denied { map } for pid=9195 comm="syz.5.915" path="socket:[30794]" dev="sockfs" ino=30794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.749233][ T40] audit: type=1400 audit(1775036124.514:561): avc: denied { getopt } for pid=9201 comm="syz.5.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.812060][ T9208] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9208 comm=syz.6.918 [ 164.817981][ T5290] Bluetooth: hci3: unexpected event 0x03 length: 4 < 11 [ 164.844192][ T9211] sctp: [Deprecated]: syz.5.919 (pid 9211) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.844192][ T9211] Use struct sctp_sack_info instead [ 164.922936][ T9211] netlink: 16 bytes leftover after parsing attributes in process `syz.5.919'. [ 165.021845][ T9232] 9pnet_fd: p9_fd_create_unix (9232): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 165.429511][ T59] usb 9-1: USB disconnect, device number 19 [ 165.448744][ T40] audit: type=1400 audit(1775036125.194:562): avc: denied { read } for pid=9254 comm="syz.6.931" lport=41419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.567950][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.931'. [ 166.004698][ T40] audit: type=1400 audit(1775036125.764:563): avc: denied { mount } for pid=9303 comm="syz.6.950" name="/" dev="hugetlbfs" ino=29842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 166.113171][ T9317] __report_access: 55 callbacks suppressed [ 166.113191][ T9317] ptrace attach of "/syz-executor exec"[9320] was attempted by "/syz-executor exec"[9317] [ 166.130906][ T9319] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9319 comm=syz.4.954 [ 166.251126][ T9335] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.281723][ T40] audit: type=1400 audit(1775036126.044:564): avc: denied { read } for pid=9337 comm="syz.5.960" dev="nsfs" ino=4026533109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 166.298518][ T40] audit: type=1400 audit(1775036126.044:565): avc: denied { open } for pid=9337 comm="syz.5.960" path="net:[4026533109]" dev="nsfs" ino=4026533109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 166.315556][ T9330] veth7: entered promiscuous mode [ 166.386289][ T9347] netlink: 'syz.4.963': attribute type 10 has an invalid length. [ 166.394033][ T9347] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 166.566821][ T9314] syz.3.953 (9314): drop_caches: 1 [ 166.647407][ T9372] pim6reg: entered allmulticast mode [ 166.667118][ T9314] syz.3.953 (9314): drop_caches: 1 [ 166.782408][ T5290] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 166.801476][ T9397] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9397 comm=syz.4.981 [ 166.918016][ T9410] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.009775][ T9410] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.091748][ T9410] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.159049][ T9410] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.165861][ T5290] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 167.215880][ T9444] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9444 comm=syz.3.993 [ 167.281959][ T6602] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.291495][ T6602] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.310577][ T6602] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.313171][ T6602] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.389638][ T9458] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 167.404487][ T9458] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.998'. [ 167.451181][ T9462] gfs2: gfs2 mount does not exist [ 167.452779][ T5290] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 167.478635][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1002'. [ 167.574863][ T40] audit: type=1400 audit(1775036127.334:566): avc: denied { read write } for pid=9474 comm="syz.5.1005" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 167.583366][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1005'. [ 167.583672][ T40] audit: type=1400 audit(1775036127.334:567): avc: denied { open } for pid=9474 comm="syz.5.1005" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 167.584274][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1005'. [ 167.599244][ T40] audit: type=1400 audit(1775036127.344:568): avc: denied { create } for pid=9474 comm="syz.5.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 167.644658][ T9475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9475 comm=syz.5.1005 [ 167.863205][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1007'. [ 167.930462][ T9487] sctp: [Deprecated]: syz.4.1007 (pid 9487) Use of int in maxseg socket option. [ 167.930462][ T9487] Use struct sctp_assoc_value instead [ 167.978127][ T5290] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 168.237198][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1016'. [ 168.243300][ T9501] tipc: Started in network mode [ 168.244903][ T9501] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 168.249516][ T9501] tipc: Enabled bearer , priority 10 [ 168.356722][ T9514] 9p: Bad value for 'version' [ 168.369335][ T9514] xt_TCPMSS: Only works on TCP SYN packets [ 168.416298][ T9512] syz.6.1019 (9512) used greatest stack depth: 19736 bytes left [ 168.479000][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1024'. [ 168.485176][ T5290] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 168.599421][ T9538] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 168.761905][ T9555] tmpfs: Unknown parameter 'usrquota0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.761905][ T9555] 0 [ 168.838541][ T5290] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 168.987721][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1036'. [ 169.090896][ T9576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9576 comm=syz.6.1041 [ 169.096339][ T5290] Bluetooth: hci3: unexpected event 0x03 length: 4 < 11 [ 169.198400][ T5290] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 169.270176][ T9596] FAULT_INJECTION: forcing a failure. [ 169.270176][ T9596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.277639][ T9596] CPU: 2 UID: 0 PID: 9596 Comm: syz.5.1048 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.277660][ T9596] Tainted: [L]=SOFTLOCKUP [ 169.277665][ T9596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.277672][ T9596] Call Trace: [ 169.277678][ T9596] [ 169.277683][ T9596] dump_stack_lvl+0x100/0x190 [ 169.277718][ T9596] should_fail_ex.cold+0x5/0xa [ 169.277736][ T9596] _copy_from_user+0x2e/0xd0 [ 169.277757][ T9596] copy_clone_args_from_user+0x152/0x7d0 [ 169.277775][ T9596] ? find_held_lock+0x2b/0x80 [ 169.277791][ T9596] ? get_pid_task+0xfc/0x250 [ 169.277801][ T9596] ? get_pid_task+0xfc/0x250 [ 169.277813][ T9596] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 169.277832][ T9596] ? find_held_lock+0x2b/0x80 [ 169.277851][ T9596] __do_sys_clone3+0xbf/0x290 [ 169.277869][ T9596] ? __pfx___do_sys_clone3+0x10/0x10 [ 169.277893][ T9596] ? __fget_files+0x21f/0x3d0 [ 169.277917][ T9596] do_syscall_64+0x106/0xf80 [ 169.277980][ T9596] ? clear_bhb_loop+0x40/0x90 [ 169.277995][ T9596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.278008][ T9596] RIP: 0033:0x7f642919c819 [ 169.278020][ T9596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.278031][ T9596] RSP: 002b:00007f642a132ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 169.278044][ T9596] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f642919c819 [ 169.278051][ T9596] RDX: 00007f642a132f10 RSI: 0000000000000058 RDI: 00007f642a132f10 [ 169.278058][ T9596] RBP: 00007f642a133090 R08: 0000000000000000 R09: 0000000000000058 [ 169.278065][ T9596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.278072][ T9596] R13: 00007f6429416038 R14: 00007f6429415fa0 R15: 00007fff13638ad8 [ 169.278087][ T9596] [ 169.345391][ T9602] netlink: 'syz.5.1050': attribute type 6 has an invalid length. [ 169.377820][ T9604] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 169.380799][ T9604] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 169.383756][ T9604] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 169.386671][ T9604] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 169.386838][ T9209] tipc: Node number set to 1 [ 169.578483][ T9619] ªªªªªª: renamed from vlan0 (while UP) [ 169.618183][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 169.618194][ T40] audit: type=1400 audit(1775036129.374:576): avc: denied { setopt } for pid=9626 comm="syz.3.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.695847][ T40] audit: type=1400 audit(1775036129.454:577): avc: denied { write } for pid=9613 comm="syz.5.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 169.719102][ T9634] netlink: 'syz.3.1061': attribute type 6 has an invalid length. [ 169.762767][ T40] audit: type=1400 audit(1775036129.524:578): avc: denied { setopt } for pid=9613 comm="syz.5.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 169.969099][ T40] audit: type=1400 audit(1775036129.734:579): avc: denied { create } for pid=9645 comm="syz.3.1065" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 169.988218][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'. [ 170.055007][ T40] audit: type=1400 audit(1775036129.814:580): avc: denied { unlink } for pid=5934 comm="syz-executor" name="file0" dev="tmpfs" ino=1591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 170.074442][ T40] audit: type=1400 audit(1775036129.834:581): avc: denied { lock } for pid=9649 comm="syz.4.1066" path="socket:[29634]" dev="sockfs" ino=29634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 170.097836][ T9663] netlink: 'syz.6.1070': attribute type 6 has an invalid length. [ 170.135893][ T9670] /dev/sg0: Can't lookup blockdev [ 170.137784][ T9666] /dev/sg0: Can't lookup blockdev [ 170.192283][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1072'. [ 170.196082][ T9675] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 170.239244][ T9681] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1076'. [ 170.246382][ T5290] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 170.276369][ T9688] netlink: 'syz.6.1079': attribute type 6 has an invalid length. [ 170.310996][ T40] audit: type=1400 audit(1775036130.074:582): avc: denied { getopt } for pid=9695 comm="syz.6.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.377510][ T9707] program syz.3.1085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.420070][ T40] audit: type=1400 audit(1775036130.184:583): avc: denied { write } for pid=9711 comm="syz.3.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 170.470133][ T5290] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 170.471521][ T9719] netlink: 'syz.5.1090': attribute type 6 has an invalid length. [ 170.506884][ T40] audit: type=1400 audit(1775036130.264:584): avc: denied { append } for pid=9722 comm="syz.5.1092" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 170.517214][ T9723] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 170.618347][ T5290] Bluetooth: hci4: unexpected event for opcode 0x0a20 [ 170.631080][ T9733] xfrm0 speed is unknown, defaulting to 1000 [ 170.633085][ T9733] xfrm0 speed is unknown, defaulting to 1000 [ 170.636704][ T9733] xfrm0 speed is unknown, defaulting to 1000 [ 170.642337][ T9733] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 170.651187][ T9733] infiniband syzq: RDMA CMA: cma_listen_on_dev, error -98 [ 170.687121][ T9733] xfrm0 speed is unknown, defaulting to 1000 [ 170.693815][ T9733] xfrm0 speed is unknown, defaulting to 1000 [ 170.700564][ T9743] netlink: 'syz.6.1101': attribute type 6 has an invalid length. [ 170.721949][ T9733] xfrm0 speed is unknown, defaulting to 1000 [ 170.724711][ T9733] xfrm0 speed is unknown, defaulting to 1000 [ 170.815875][ T9758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=9758 comm=syz.3.1106 [ 170.975142][ T9771] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 170.976793][ T9772] netlink: 'syz.3.1111': attribute type 6 has an invalid length. [ 171.005829][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1113'. [ 171.010994][ T9776] tipc: Enabled bearer , priority 10 [ 171.082997][ T9794] kAFS: unable to lookup cell '(' [ 171.091350][ T9794] kAFS: unable to lookup cell '(,c¾ûL' [ 171.092313][ T5290] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 171.136457][ T9803] netlink: 'syz.3.1121': attribute type 2 has an invalid length. [ 171.140544][ T9803] netlink: 'syz.3.1121': attribute type 2 has an invalid length. [ 171.148997][ T40] audit: type=1400 audit(1775036130.904:585): avc: denied { write } for pid=9802 comm="syz.3.1121" path="socket:[32400]" dev="sockfs" ino=32400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 171.182430][ T5290] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 171.219700][ T6602] bridge0: port 3(syz_tun) entered disabled state [ 171.240928][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'. [ 171.268383][ T9832] netlink: 212304 bytes leftover after parsing attributes in process `syz.6.1131'. [ 171.272275][ T9832] openvswitch: netlink: Message has 6 unknown bytes. [ 171.283219][ T5290] Bluetooth: hci3: unexpected event for opcode 0x0407 [ 171.353133][ T9842] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.1134'. [ 171.356715][ T9842] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 171.478589][ T9209] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 171.530697][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1134'. [ 171.559548][ T9867] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 171.563359][ T9866] netlink: 'syz.6.1139': attribute type 10 has an invalid length. [ 171.565830][ T9866] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1139'. [ 171.569769][ T9866] team0: entered promiscuous mode [ 171.571540][ T9866] team_slave_0: entered promiscuous mode [ 171.574903][ T9866] team_slave_1: entered promiscuous mode [ 171.576715][ T9866] team0: entered allmulticast mode [ 171.578288][ T9866] team_slave_0: entered allmulticast mode [ 171.581764][ T9866] team_slave_1: entered allmulticast mode [ 171.584114][ T9866] bridge0: port 4(team0) entered blocking state [ 171.586425][ T9866] bridge0: port 4(team0) entered disabled state [ 171.590488][ T9866] bridge0: port 4(team0) entered blocking state [ 171.592563][ T9866] bridge0: port 4(team0) entered forwarding state [ 171.628520][ T9209] usb 10-1: Using ep0 maxpacket: 16 [ 171.631922][ T9209] usb 10-1: config 0 has no interfaces? [ 171.633736][ T9209] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 171.636910][ T9209] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.646452][ T9209] usb 10-1: config 0 descriptor?? [ 171.662172][ T9874] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 171.698091][ T5290] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 171.733092][ T9880] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9880 comm=syz.6.1143 [ 171.739606][ T5290] Bluetooth: hci3: unexpected event 0x03 length: 4 < 11 [ 171.860314][ T9820] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 172.408514][ T1329] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 172.580195][ T1329] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 172.584046][ T1329] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.587936][ T1329] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.598646][ T1329] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 172.604007][ T1329] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 172.606757][ T1329] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 172.609972][ T1329] usb 9-1: Manufacturer: syz [ 172.613047][ T1329] usb 9-1: config 0 descriptor?? [ 173.019078][ T1329] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 173.024444][ T1329] appleir 0003:05AC:8243.0013: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 174.223148][ T6157] usb 10-1: USB disconnect, device number 6 [ 174.438610][ T5290] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 174.451910][ T9912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9912 comm=syz.3.1152 [ 174.572799][ T9929] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1155'. [ 174.848663][ T6016] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 174.988545][ T6016] usb 10-1: device descriptor read/64, error -71 [ 175.009142][ T1329] usb 9-1: USB disconnect, device number 20 [ 175.228540][ T6016] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 175.358522][ T6016] usb 10-1: device descriptor read/64, error -71 [ 175.468928][ T6016] usb usb10-port1: attempt power cycle [ 175.808543][ T6016] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 175.829023][ T6016] usb 10-1: device descriptor read/8, error -71 [ 176.078579][ T6016] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 176.118534][ T6016] usb 10-1: device descriptor read/8, error -71 [ 176.229153][ T6016] usb usb10-port1: unable to enumerate USB device [ 176.719642][ T9944] netlink: 'syz.3.1160': attribute type 322 has an invalid length. [ 176.723050][ T9944] netlink: 'syz.3.1160': attribute type 2 has an invalid length. [ 176.763105][ T9943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.781193][ T9953] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9953 comm=syz.6.1163 [ 176.791653][ T5290] Bluetooth: hci3: unexpected event 0x03 length: 4 < 11 [ 176.905418][ T9952] SELinux: failed to load policy [ 177.051310][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 177.055180][ T9987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1171'. [ 177.133715][ T9995] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9995 comm=syz.3.1173 [ 177.183133][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 177.183145][ T40] audit: type=1400 audit(1775036136.944:595): avc: denied { execute } for pid=10004 comm="syz.3.1176" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 177.240747][T10005] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1176'. [ 177.243885][ T40] audit: type=1400 audit(1775036137.004:596): avc: denied { accept } for pid=10009 comm="syz.6.1178" path="/164/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 177.330619][ T40] audit: type=1400 audit(1775036137.094:597): avc: denied { connect } for pid=10013 comm="syz.3.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.338805][ T40] audit: type=1400 audit(1775036137.094:598): avc: denied { accept } for pid=10013 comm="syz.3.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.427199][T10023] x_tables: duplicate underflow at hook 3 [ 177.431290][T10023] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 177.437942][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1182'. [ 177.492487][T10012] netlink: 16170 bytes leftover after parsing attributes in process `syz.6.1179'. [ 177.495956][T10029] pimreg: entered allmulticast mode [ 177.498349][T10029] pimreg: left allmulticast mode [ 177.624248][T10033] XFS (nbd5): SB validate failed with error -5. [ 177.974878][ T1242] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 178.047068][ T40] audit: type=1400 audit(1775036137.804:599): avc: denied { setopt } for pid=10058 comm="syz.4.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 178.223298][T10094] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10094 comm=syz.5.1206 [ 178.232228][ T5290] Bluetooth: hci4: unexpected event 0x03 length: 4 < 11 [ 178.234118][ T40] audit: type=1400 audit(1775036137.994:600): avc: denied { write } for pid=10095 comm="syz.3.1205" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 178.235113][T10097] program syz.3.1205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.256149][ T40] audit: type=1400 audit(1775036137.994:601): avc: denied { open } for pid=10095 comm="syz.3.1205" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 178.364903][T10110] xfrm0 speed is unknown, defaulting to 1000 [ 178.369545][T10112] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 178.561202][ T5978] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 178.716482][ T40] audit: type=1400 audit(1775036138.474:602): avc: denied { create } for pid=10127 comm="syz.5.1216" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.718539][ T5978] usb 9-1: Using ep0 maxpacket: 32 [ 178.728398][ T40] audit: type=1400 audit(1775036138.474:603): avc: denied { map } for pid=10127 comm="syz.5.1216" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.731264][ T5978] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 178.740790][ T40] audit: type=1400 audit(1775036138.474:604): avc: denied { read write } for pid=10127 comm="syz.5.1216" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.744777][ T5978] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 178.761114][ T5290] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 178.767013][ T5978] usb 9-1: string descriptor 0 read error: -22 [ 178.770081][ T5978] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 178.774264][ T5978] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.782068][T10103] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.790564][ T5978] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.793449][ T5978] usb 9-1: MIDIStreaming interface descriptor not found [ 178.899832][T10139] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.991673][ T5978] usb 9-1: USB disconnect, device number 21 [ 179.097707][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1226'. [ 179.106967][T10150] macsec1: entered promiscuous mode [ 179.126510][ T5290] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 179.147260][T10154] SELinux: ebitmap start bit (6553620) is not a multiple of the map unit size (64) [ 179.157103][T10154] SELinux: failed to load policy [ 179.456568][ T5290] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 179.464521][ T5290] Bluetooth: hci3: ACL packet too small [ 179.513330][ T5290] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 179.695448][T10194] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10194 comm=syz.4.1243 [ 179.795728][T10197] Invalid option length (1048180) for dns_resolver key [ 180.173284][T10220] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 180.179852][T10220] VFS: Can't find a romfs filesystem on dev nullb0. [ 180.179852][T10220] [ 180.235352][T10226] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1253'. [ 180.239535][T10226] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1253'. [ 180.264787][T10231] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10231 comm=syz.3.1254 [ 180.347601][T10242] trusted_key: encrypted_key: master key parameter 'defaultjf' is invalid [ 180.352655][T10242] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 180.379740][T10238] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1246'. [ 180.562428][T10253] netlink: 'syz.5.1262': attribute type 11 has an invalid length. [ 180.568554][ T34] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 180.605552][T10258] program syz.3.1263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.623750][T10258] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 180.775179][T10269] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 180.896197][T10269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1266'. [ 180.990853][T10270] 8021q: VLANs not supported on sit0 [ 181.059674][T10286] netlink: 'syz.3.1271': attribute type 4 has an invalid length. [ 181.087007][T10292] netlink: 'syz.3.1271': attribute type 4 has an invalid length. [ 181.269117][T10300] bridge0: port 3(macvlan2) entered blocking state [ 181.271277][T10300] bridge0: port 3(macvlan2) entered disabled state [ 181.273489][T10300] macvlan2: entered allmulticast mode [ 181.276644][T10300] macvlan2: left allmulticast mode [ 181.355900][T10306] GUP no longer grows the stack in syz.5.1277 (10306): 200000006000-200000008000 (200000004000) [ 181.361356][T10303] cdrom: dropping to single frame dma [ 181.362805][T10306] CPU: 0 UID: 0 PID: 10306 Comm: syz.5.1277 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.362824][T10306] Tainted: [L]=SOFTLOCKUP [ 181.362827][T10306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.362834][T10306] Call Trace: [ 181.362838][T10306] [ 181.362843][T10306] dump_stack_lvl+0x100/0x190 [ 181.362866][T10306] gup_vma_lookup.cold+0x83/0x96 [ 181.362883][T10306] fixup_user_fault+0x253/0x510 [ 181.362899][T10306] fault_in_user_writeable+0x70/0xe0 [ 181.362911][T10306] futex_lock_pi+0x68b/0x7b0 [ 181.362928][T10306] ? __pfx_futex_lock_pi+0x10/0x10 [ 181.362943][T10306] ? __pfx___futex_wait+0x10/0x10 [ 181.362972][T10306] ? __pfx_futex_wake_mark+0x10/0x10 [ 181.362995][T10306] do_futex+0x18a/0x350 [ 181.363008][T10306] ? __pfx_do_futex+0x10/0x10 [ 181.363020][T10306] ? __vm_munmap+0x1d2/0x390 [ 181.363040][T10306] __x64_sys_futex+0x34f/0x4d0 [ 181.363055][T10306] ? __pfx___x64_sys_futex+0x10/0x10 [ 181.363073][T10306] do_syscall_64+0x106/0xf80 [ 181.363091][T10306] ? clear_bhb_loop+0x40/0x90 [ 181.363105][T10306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.363117][T10306] RIP: 0033:0x7f642919c819 [ 181.363128][T10306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.363139][T10306] RSP: 002b:00007f642a133028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 181.363150][T10306] RAX: ffffffffffffffda RBX: 00007f6429415fa0 RCX: 00007f642919c819 [ 181.363157][T10306] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 181.363164][T10306] RBP: 00007f6429232c91 R08: 0000000000000000 R09: 0000000000000000 [ 181.363171][T10306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.363177][T10306] R13: 00007f6429416038 R14: 00007f6429415fa0 R15: 00007fff13638ad8 [ 181.363192][T10306] [ 181.698973][ T9209] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 181.764023][T10338] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 181.869073][ T9209] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 181.872094][ T9209] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.876038][ T9209] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 181.880020][ T9209] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 181.883013][ T9209] usb 8-1: Manufacturer: syz [ 181.887014][ T9209] usb 8-1: config 0 descriptor?? [ 181.938743][ T9209] rc_core: IR keymap rc-hauppauge not found [ 181.941439][ T9209] Registered IR keymap rc-empty [ 181.945395][ T9209] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 181.952251][ T9209] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input15 [ 182.133575][T10375] ceph: No source [ 182.140767][ T34] usb 8-1: USB disconnect, device number 17 [ 182.172608][T10382] netlink: 'syz.6.1300': attribute type 1 has an invalid length. [ 182.205614][T10382] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 182.214859][T10382] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 182.244737][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 182.244758][ T40] audit: type=1400 audit(1775036142.004:622): avc: denied { name_connect } for pid=10387 comm="syz.4.1302" dest=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 182.259292][ T40] audit: type=1400 audit(1775036142.014:623): avc: denied { read } for pid=10387 comm="syz.4.1302" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 182.267500][T10391] macvlan3: entered promiscuous mode [ 182.271228][ T40] audit: type=1400 audit(1775036142.014:624): avc: denied { open } for pid=10387 comm="syz.4.1302" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 182.272167][T10391] macvlan3: entered allmulticast mode [ 182.274127][T10390] misc userio: Begin command sent, but we're already running [ 182.284434][ T40] audit: type=1400 audit(1775036142.014:625): avc: denied { ioctl } for pid=10387 comm="syz.4.1302" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 182.286932][T10391] bond3: entered promiscuous mode [ 182.288295][ T40] audit: type=1400 audit(1775036142.024:626): avc: denied { create } for pid=10381 comm="syz.6.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 182.299880][T10391] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 182.301614][ T40] audit: type=1400 audit(1775036142.024:627): avc: denied { write } for pid=10381 comm="syz.6.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 182.323058][T10382] __nla_validate_parse: 5 callbacks suppressed [ 182.323074][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1300'. [ 182.330186][T10391] bond3: left promiscuous mode [ 182.416545][ T40] audit: type=1400 audit(1775036142.174:628): avc: denied { unmount } for pid=6139 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 182.689324][ T6001] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 182.840729][ T6001] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 182.843388][ T6001] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.846520][ T6001] usb 9-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.853731][ T6001] usb 9-1: config 0 interface 0 has no altsetting 0 [ 182.858341][ T6001] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 182.862553][ T6001] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 182.866067][ T6001] usb 9-1: Product: syz [ 182.867391][ T6001] usb 9-1: Manufacturer: syz [ 182.869431][ T6001] usb 9-1: SerialNumber: syz [ 182.910421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 182.990161][ T40] audit: type=1400 audit(1775036142.754:629): avc: denied { read } for pid=10401 comm="syz.3.1308" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 183.035656][ T40] audit: type=1400 audit(1775036142.754:630): avc: denied { open } for pid=10401 comm="syz.3.1308" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 183.044190][T10417] Invalid option length (1048180) for dns_resolver key [ 183.310831][ T6001] usb 9-1: config 0 descriptor?? [ 183.347763][ T6001] hub 9-1:0.0: bad descriptor, ignoring hub [ 183.366014][ T6001] hub 9-1:0.0: probe with driver hub failed with error -5 [ 183.587332][T10394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.623047][T10394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.661326][ T6001] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 183.748263][ T6001] usb 9-1: USB disconnect, device number 23 [ 183.888934][ T8785] udevd[8785]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.125323][T10427] FAULT_INJECTION: forcing a failure. [ 184.125323][T10427] name failslab, interval 1, probability 0, space 0, times 0 [ 184.138501][T10427] CPU: 0 UID: 0 PID: 10427 Comm: syz.5.1312 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.138533][T10427] Tainted: [L]=SOFTLOCKUP [ 184.138537][T10427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.138543][T10427] Call Trace: [ 184.138548][T10427] [ 184.138552][T10427] dump_stack_lvl+0x100/0x190 [ 184.138576][T10427] should_fail_ex.cold+0x5/0xa [ 184.138590][T10427] ? bpf_test_init.isra.0+0x88/0x100 [ 184.138629][T10427] should_failslab+0xc2/0x120 [ 184.138641][T10427] __kmalloc_noprof+0xe0/0x850 [ 184.138657][T10427] ? __lock_acquire+0x4a5/0x2630 [ 184.138670][T10427] bpf_test_init.isra.0+0x88/0x100 [ 184.138686][T10427] bpf_prog_test_run_xdp+0x57e/0x1670 [ 184.138707][T10427] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 184.138727][T10427] ? fput+0x79/0x100 [ 184.138740][T10427] ? __bpf_prog_get+0x97/0x2a0 [ 184.138756][T10427] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 184.138773][T10427] __sys_bpf+0x1725/0x4b90 [ 184.138787][T10427] ? __pfx___sys_bpf+0x10/0x10 [ 184.138800][T10427] ? find_held_lock+0x2b/0x80 [ 184.138814][T10427] ? __schedule+0x2fd3/0x6120 [ 184.138829][T10427] ? __schedule+0x2fd3/0x6120 [ 184.138844][T10427] ? rcu_is_watching+0x12/0xc0 [ 184.138857][T10427] ? trace_sched_exit_tp+0x13a/0x180 [ 184.138874][T10427] ? __schedule+0x1000/0x6120 [ 184.138888][T10427] ? __pfx___schedule+0x10/0x10 [ 184.138913][T10427] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 184.138924][T10427] ? rcu_is_watching+0x12/0xc0 [ 184.138938][T10427] __x64_sys_bpf+0x7b/0xc0 [ 184.138950][T10427] ? lockdep_hardirqs_on+0x78/0x100 [ 184.138966][T10427] do_syscall_64+0x106/0xf80 [ 184.138982][T10427] ? clear_bhb_loop+0x40/0x90 [ 184.138995][T10427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.139006][T10427] RIP: 0033:0x7f642919c819 [ 184.139015][T10427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.139026][T10427] RSP: 002b:00007f642a133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.139036][T10427] RAX: ffffffffffffffda RBX: 00007f6429415fa0 RCX: 00007f642919c819 [ 184.139043][T10427] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 184.139049][T10427] RBP: 00007f642a133090 R08: 0000000000000000 R09: 0000000000000000 [ 184.139055][T10427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.139061][T10427] R13: 00007f6429416038 R14: 00007f6429415fa0 R15: 00007fff13638ad8 [ 184.139074][T10427] [ 184.147014][ T40] audit: type=1400 audit(1775036143.904:631): avc: denied { mount } for pid=10428 comm="syz.6.1313" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 184.159586][T10429] overlayfs: failed to clone lowerpath [ 184.259807][ T5290] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 184.312683][T10435] overlayfs: failed to clone upperpath [ 184.318558][ T6001] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 184.328833][T10435] netlink: 'syz.6.1317': attribute type 3 has an invalid length. [ 184.449637][ T6001] usb 9-1: device descriptor read/64, error -71 [ 184.520800][T10452] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 184.525600][T10452] ip6gretap1: entered promiscuous mode [ 184.533773][T10454] xfs: Unknown parameter 'norecovery¢' [ 184.706610][T10464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.708535][ T6001] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 184.760680][T10470] veth1_to_batadv: entered promiscuous mode [ 184.765776][T10470] batman_adv: batadv0: Adding interface: dummy0 [ 184.767790][T10470] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.777622][T10470] batman_adv: batadv0: Interface activated: dummy0 [ 184.848726][ T6001] usb 9-1: device descriptor read/64, error -71 [ 184.869697][T10476] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1332'. [ 184.906856][T10478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10478 comm=syz.5.1333 [ 184.914130][ T5290] Bluetooth: hci4: unexpected event 0x03 length: 4 < 11 [ 184.969061][ T6001] usb usb9-port1: attempt power cycle [ 185.045363][T10488] batman_adv: batadv0: Interface deactivated: dummy0 [ 185.048293][T10488] batman_adv: batadv0: Removing interface: dummy0 [ 185.055042][T10488] bridge_slave_0: left allmulticast mode [ 185.057492][T10488] bridge_slave_0: left promiscuous mode [ 185.062452][T10488] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.069112][T10488] bridge_slave_1: left allmulticast mode [ 185.071305][T10488] bridge_slave_1: left promiscuous mode [ 185.073421][T10488] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.088040][T10488] bond0: (slave bond_slave_0): Releasing backup interface [ 185.095037][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1338'. [ 185.099814][T10488] bond0: (slave bond_slave_1): Releasing backup interface [ 185.106707][T10488] team0: Port device team_slave_0 removed [ 185.111278][T10488] team0: Port device team_slave_1 removed [ 185.113792][T10488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.116218][T10488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.128045][T10488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.131605][T10488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.146747][T10488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 185.147989][T10493] netlink: 'syz.3.1340': attribute type 8 has an invalid length. [ 185.155950][ T6021] xfrm0 speed is unknown, defaulting to 1000 [ 185.308740][ T6001] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 185.328117][T10502] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10502 comm=syz.5.1344 [ 185.329151][ T6001] usb 9-1: device descriptor read/8, error -71 [ 185.336234][ T5290] Bluetooth: hci4: unexpected event 0x03 length: 4 < 11 [ 185.377658][T10498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1342'. [ 185.475680][T10515] kAFS: unable to lookup cell 'syz0' [ 185.525500][T10522] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.574886][T10528] netlink: 'syz.4.1351': attribute type 12 has an invalid length. [ 185.577974][T10528] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1351'. [ 185.592725][ T5290] Bluetooth: hci4: unexpected event 0x03 length: 4 < 11 [ 185.624487][ T5290] Bluetooth: hci4: unknown advertising packet type: 0x82 [ 185.624529][ T5290] Bluetooth: hci4: unknown advertising packet type: 0x1c [ 185.627247][ T5290] Bluetooth: hci4: Malformed LE Event: 0x02 [ 185.653471][T10540] FAULT_INJECTION: forcing a failure. [ 185.653471][T10540] name failslab, interval 1, probability 0, space 0, times 0 [ 185.657749][T10540] CPU: 1 UID: 0 PID: 10540 Comm: syz.5.1357 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.657767][T10540] Tainted: [L]=SOFTLOCKUP [ 185.657771][T10540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.657777][T10540] Call Trace: [ 185.657781][T10540] [ 185.657785][T10540] dump_stack_lvl+0x100/0x190 [ 185.657806][T10540] should_fail_ex.cold+0x5/0xa [ 185.657821][T10540] should_failslab+0xc2/0x120 [ 185.657833][T10540] __kvmalloc_node_noprof+0xfa/0xa00 [ 185.657850][T10540] ? bpf_test_run_xdp_live+0x16f/0x760 [ 185.657866][T10540] ? __print_lock_name+0x21/0x80 [ 185.657880][T10540] ? synchronize_rcu_expedited+0x3c3/0x450 [ 185.657893][T10540] bpf_test_run_xdp_live+0x16f/0x760 [ 185.657908][T10540] ? __mutex_unlock_slowpath+0x15c/0x790 [ 185.657927][T10540] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 185.657942][T10540] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.657960][T10540] ? __pfx___schedule+0x10/0x10 [ 185.657974][T10540] ? find_held_lock+0x2b/0x80 [ 185.657990][T10540] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 185.658015][T10540] ? 0xffffffffa0209200 [ 185.658024][T10540] ? 0xffffffffa0209200 [ 185.658032][T10540] ? bpf_dispatcher_change_prog+0x2dc/0xa60 [ 185.658048][T10540] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 185.658069][T10540] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 185.658089][T10540] ? fput+0x79/0x100 [ 185.658101][T10540] ? __bpf_prog_get+0x97/0x2a0 [ 185.658117][T10540] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 185.658133][T10540] __sys_bpf+0x1725/0x4b90 [ 185.658147][T10540] ? __pfx___sys_bpf+0x10/0x10 [ 185.658157][T10540] ? proc_fail_nth_write+0x9f/0x220 [ 185.658173][T10540] ? find_held_lock+0x2b/0x80 [ 185.658191][T10540] ? find_held_lock+0x2b/0x80 [ 185.658204][T10540] ? ksys_write+0x190/0x250 [ 185.658217][T10540] ? __mutex_unlock_slowpath+0x15c/0x790 [ 185.658238][T10540] ? __fget_files+0x215/0x3d0 [ 185.658256][T10540] ? fput+0x79/0x100 [ 185.658269][T10540] ? ksys_write+0x1ac/0x250 [ 185.658278][T10540] ? __pfx_ksys_write+0x10/0x10 [ 185.658290][T10540] __x64_sys_bpf+0x7b/0xc0 [ 185.658302][T10540] ? lockdep_hardirqs_on+0x78/0x100 [ 185.658318][T10540] do_syscall_64+0x106/0xf80 [ 185.658334][T10540] ? clear_bhb_loop+0x40/0x90 [ 185.658348][T10540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.658359][T10540] RIP: 0033:0x7f642919c819 [ 185.658368][T10540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.658378][T10540] RSP: 002b:00007f642a133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.658389][T10540] RAX: ffffffffffffffda RBX: 00007f6429415fa0 RCX: 00007f642919c819 [ 185.658396][T10540] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 185.658402][T10540] RBP: 00007f642a133090 R08: 0000000000000000 R09: 0000000000000000 [ 185.658420][T10540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.658426][T10540] R13: 00007f6429416038 R14: 00007f6429415fa0 R15: 00007fff13638ad8 [ 185.658440][T10540] [ 185.849784][ T6608] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.878690][ T6001] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 185.899020][ T6001] usb 9-1: Using ep0 maxpacket: 32 [ 185.902174][ T6001] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 185.907390][ T6001] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 185.911892][ T6001] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 185.914922][ T6001] usb 9-1: Product: syz [ 185.916471][ T6001] usb 9-1: Manufacturer: syz [ 185.917982][ T6001] usb 9-1: SerialNumber: syz [ 185.922027][ T6001] usb 9-1: config 0 descriptor?? [ 185.924866][T10528] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 185.928676][ T6001] hub 9-1:0.0: bad descriptor, ignoring hub [ 185.931288][ T6001] hub 9-1:0.0: probe with driver hub failed with error -5 [ 185.937727][ T6608] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.994557][ T6608] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.022869][ T5933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.026480][ T5933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.030302][ T5933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.034262][ T5933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.037585][ T5933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.056971][ T6608] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.069147][T10548] xfrm0 speed is unknown, defaulting to 1000 [ 186.169639][T10548] chnl_net:caif_netlink_parms(): no params data found [ 186.269242][ T6001] usb 9-1: USB disconnect, device number 27 [ 186.357497][ T6608] bond1 (unregistering): (slave geneve2): Releasing active interface [ 186.364598][ T6608] geneve2 (unregistering): left allmulticast mode [ 186.372844][ T6608] team0: Port device geneve0 removed [ 186.448867][ T6608] bond2 (unregistering): (slave bridge2): Releasing active interface [ 186.912068][ T6608] bond0 (unregistering): Released all slaves [ 186.922112][ T6608] bond1 (unregistering): Released all slaves [ 186.933206][ T6608] bond2 (unregistering): Released all slaves [ 186.943461][ T6608] bond3 (unregistering): Released all slaves [ 186.953939][ T6608] bond4 (unregistering): Released all slaves [ 186.990456][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.993532][T10548] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.996819][T10548] bridge_slave_0: entered allmulticast mode [ 187.002022][T10548] bridge_slave_0: entered promiscuous mode [ 187.006969][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.010196][T10548] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.013321][T10548] bridge_slave_1: entered allmulticast mode [ 187.017103][T10548] bridge_slave_1: entered promiscuous mode [ 187.045266][T10548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.053233][T10548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.093310][T10548] team0: Port device team_slave_0 added [ 187.097981][T10548] team0: Port device team_slave_1 added [ 187.130740][T10548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.133939][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.145764][T10548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.152305][T10548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.155524][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.166677][T10548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.207020][T10548] hsr_slave_0: entered promiscuous mode [ 187.210405][T10548] hsr_slave_1: entered promiscuous mode [ 187.213740][T10548] debugfs: 'hsr0' already exists in 'hsr' [ 187.216248][T10548] Cannot create hsr debugfs directory [ 187.344284][ T6608] hsr_slave_0: left promiscuous mode [ 187.347362][ T6608] hsr_slave_1: left promiscuous mode [ 187.350945][ T6608] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 187.353874][ T6608] batman_adv: batadv0: Removing interface: ipvlan2 [ 187.361738][ T6608] veth1_macvtap: left promiscuous mode [ 187.364249][ T6608] veth0_macvtap: left promiscuous mode [ 187.366640][ T6608] veth1_vlan: left promiscuous mode [ 187.370258][ T6608] veth0_vlan: left promiscuous mode [ 187.614514][T10548] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 187.645838][T10548] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 187.651985][T10548] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 187.656135][T10548] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 187.687882][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.690673][T10548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.693871][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.697053][T10548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.751240][T10548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.761018][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.764875][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.774998][T10548] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.783944][ T6606] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.787142][ T6606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.793776][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.796285][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.971049][T10548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.098624][ T5290] Bluetooth: hci1: command tx timeout [ 188.136822][T10548] veth0_vlan: entered promiscuous mode [ 188.145384][T10548] veth1_vlan: entered promiscuous mode [ 188.169823][T10548] veth0_macvtap: entered promiscuous mode [ 188.176676][T10548] veth1_macvtap: entered promiscuous mode [ 188.192774][T10548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.202300][T10548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.216183][ T6608] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.220638][ T6608] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.226223][ T6608] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.230879][ T6608] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.291554][ T6608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.294922][ T6608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.322513][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.326189][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.334066][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 188.334082][ T40] audit: type=1400 audit(1775036148.094:638): avc: denied { mounton } for pid=10548 comm="syz-executor" path="/syzkaller.cqOjuz/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 188.395251][T10601] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1362'. [ 190.179881][ T5290] Bluetooth: hci1: command tx timeout [ 192.258642][ T5290] Bluetooth: hci1: command tx timeout [ 194.339167][ T5290] Bluetooth: hci1: command tx timeout [ 199.227107][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.181147][ T40] audit: type=1400 audit(1775036159.944:639): avc: denied { accept } for pid=10633 comm="syz.5.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 200.190148][ T40] audit: type=1400 audit(1775036159.944:640): avc: denied { connect } for pid=10633 comm="syz.5.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.352475][T10645] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 200.356155][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1368'. [ 200.360921][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1368'. [ 200.392470][T10658] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 200.403560][T10645] bond1 (unregistering): Released all slaves [ 200.511371][ T40] audit: type=1400 audit(1775036160.274:641): avc: denied { create } for pid=10663 comm="syz.6.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 200.600810][ T40] audit: type=1400 audit(1775036160.364:642): avc: denied { write } for pid=10665 comm="syz.5.1372" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 200.722783][T10676] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1377'. [ 200.825656][T10688] ksmbd: Unknown IPC event: 1, ignore. [ 200.923868][T10684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1379'. [ 201.283600][T10705] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1387'. [ 201.371210][T10712] binder: 10706:10712 ioctl c00c620f 200000000040 returned -22 [ 201.636988][ T40] audit: type=1400 audit(1775036161.394:643): avc: denied { block_suspend } for pid=10733 comm="syz.6.1399" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.661191][ T40] audit: type=1400 audit(1775036161.424:644): avc: denied { create } for pid=10733 comm="syz.6.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 201.670734][ T40] audit: type=1400 audit(1775036161.424:645): avc: denied { map } for pid=10733 comm="syz.6.1399" path="socket:[37049]" dev="sockfs" ino=37049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 201.681342][ T40] audit: type=1400 audit(1775036161.424:646): avc: denied { read } for pid=10733 comm="syz.6.1399" path="socket:[37049]" dev="sockfs" ino=37049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 201.736301][ T5290] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 202.519412][T10775] FAULT_INJECTION: forcing a failure. [ 202.519412][T10775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.523969][T10775] CPU: 1 UID: 0 PID: 10775 Comm: syz.7.1412 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.523987][T10775] Tainted: [L]=SOFTLOCKUP [ 202.523990][T10775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.523997][T10775] Call Trace: [ 202.524001][T10775] [ 202.524006][T10775] dump_stack_lvl+0x100/0x190 [ 202.524036][T10775] should_fail_ex.cold+0x5/0xa [ 202.524051][T10775] _copy_from_user+0x2e/0xd0 [ 202.524071][T10775] copy_msghdr_from_user+0x9f/0x4f0 [ 202.524109][T10775] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 202.524127][T10775] ___sys_sendmsg+0x106/0x1e0 [ 202.524140][T10775] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.524168][T10775] __sys_sendmsg+0x170/0x220 [ 202.524184][T10775] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.524211][T10775] do_syscall_64+0x106/0xf80 [ 202.524262][T10775] ? clear_bhb_loop+0x40/0x90 [ 202.524275][T10775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.524286][T10775] RIP: 0033:0x7fbb37d9c819 [ 202.524295][T10775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.524305][T10775] RSP: 002b:00007fbb35ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.524316][T10775] RAX: ffffffffffffffda RBX: 00007fbb38015fa0 RCX: 00007fbb37d9c819 [ 202.524323][T10775] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 202.524329][T10775] RBP: 00007fbb35ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 202.524335][T10775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.524341][T10775] R13: 00007fbb38016038 R14: 00007fbb38015fa0 R15: 00007ffd0e03fca8 [ 202.524354][T10775] [ 202.665973][ T5290] Bluetooth: hci3: unexpected event 0x03 length: 4 < 11 [ 202.670650][T10787] set match dimension is over the limit! [ 202.831624][ T5290] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 202.903367][T10811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.906756][T10811] IPv6: NLM_F_CREATE should be set when creating new route [ 202.909888][T10811] IPv6: NLM_F_CREATE should be set when creating new route [ 202.914195][T10811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.956927][T10816] FAULT_INJECTION: forcing a failure. [ 202.956927][T10816] name failslab, interval 1, probability 0, space 0, times 0 [ 202.963943][T10816] CPU: 0 UID: 0 PID: 10816 Comm: syz.7.1432 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.963974][T10816] Tainted: [L]=SOFTLOCKUP [ 202.963979][T10816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.963989][T10816] Call Trace: [ 202.963998][T10816] [ 202.964006][T10816] dump_stack_lvl+0x100/0x190 [ 202.964038][T10816] should_fail_ex.cold+0x5/0xa [ 202.964066][T10816] should_failslab+0xc2/0x120 [ 202.964085][T10816] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 202.964113][T10816] ? __alloc_skb+0x140/0x710 [ 202.964143][T10816] __alloc_skb+0x140/0x710 [ 202.964165][T10816] ? __alloc_skb+0x5b7/0x710 [ 202.964189][T10816] ? __pfx___alloc_skb+0x10/0x10 [ 202.964211][T10816] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 202.964254][T10816] netlink_alloc_large_skb+0x69/0x150 [ 202.964316][T10816] netlink_sendmsg+0x680/0xda0 [ 202.964348][T10816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.964376][T10816] ? __might_fault+0x50/0x140 [ 202.964411][T10816] ____sys_sendmsg+0x9e1/0xb70 [ 202.964430][T10816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.964460][T10816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.964490][T10816] ___sys_sendmsg+0x190/0x1e0 [ 202.964515][T10816] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.964567][T10816] __sys_sendmsg+0x170/0x220 [ 202.964593][T10816] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.964637][T10816] do_syscall_64+0x106/0xf80 [ 202.964664][T10816] ? clear_bhb_loop+0x40/0x90 [ 202.964688][T10816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.964706][T10816] RIP: 0033:0x7fbb37d9c819 [ 202.964725][T10816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.964742][T10816] RSP: 002b:00007fbb35ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.964760][T10816] RAX: ffffffffffffffda RBX: 00007fbb38015fa0 RCX: 00007fbb37d9c819 [ 202.964771][T10816] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 202.964784][T10816] RBP: 00007fbb35ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 202.964794][T10816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.964806][T10816] R13: 00007fbb38016038 R14: 00007fbb38015fa0 R15: 00007ffd0e03fca8 [ 202.964859][T10816] [ 203.394851][T10849] FAULT_INJECTION: forcing a failure. [ 203.394851][T10849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.401696][T10849] CPU: 1 UID: 0 PID: 10849 Comm: syz.5.1444 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.401716][T10849] Tainted: [L]=SOFTLOCKUP [ 203.401720][T10849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.401727][T10849] Call Trace: [ 203.401732][T10849] [ 203.401736][T10849] dump_stack_lvl+0x100/0x190 [ 203.401760][T10849] should_fail_ex.cold+0x5/0xa [ 203.401776][T10849] _copy_from_iter+0x1f4/0x1690 [ 203.401791][T10849] ? __asan_memset+0x23/0x50 [ 203.401808][T10849] ? __pfx__copy_from_iter+0x10/0x10 [ 203.401821][T10849] ? __pfx___alloc_skb+0x10/0x10 [ 203.401836][T10849] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 203.401858][T10849] netlink_sendmsg+0x808/0xda0 [ 203.401880][T10849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.401897][T10849] ? __might_fault+0x50/0x140 [ 203.401919][T10849] ____sys_sendmsg+0x9e1/0xb70 [ 203.401930][T10849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.401950][T10849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.401968][T10849] ___sys_sendmsg+0x190/0x1e0 [ 203.401982][T10849] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.402011][T10849] __sys_sendmsg+0x170/0x220 [ 203.402026][T10849] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.402050][T10849] do_syscall_64+0x106/0xf80 [ 203.402066][T10849] ? clear_bhb_loop+0x40/0x90 [ 203.402080][T10849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.402091][T10849] RIP: 0033:0x7f642919c819 [ 203.402101][T10849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.402111][T10849] RSP: 002b:00007f642a133028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.402121][T10849] RAX: ffffffffffffffda RBX: 00007f6429415fa0 RCX: 00007f642919c819 [ 203.402128][T10849] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 203.402133][T10849] RBP: 00007f642a133090 R08: 0000000000000000 R09: 0000000000000000 [ 203.402139][T10849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.402145][T10849] R13: 00007f6429416038 R14: 00007f6429415fa0 R15: 00007fff13638ad8 [ 203.402158][T10849] [ 203.402704][T10850] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1445'. [ 203.629718][ T5290] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 203.984219][ T40] audit: type=1400 audit(1775036163.744:647): avc: denied { map } for pid=10899 comm="syz.4.1467" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 203.995761][T10900] binder: 10899:10900 unknown command 4294967293 [ 203.997888][T10900] binder: 10899:10900 ioctl c0306201 2000000001c0 returned -22 [ 204.041718][T10908] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1470'. [ 204.122826][T10917] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1473'. [ 204.128692][ T40] audit: type=1400 audit(1775036163.884:648): avc: denied { read } for pid=10916 comm="syz.7.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.279354][T10928] syzkaller1: entered promiscuous mode [ 204.281573][T10928] syzkaller1: entered allmulticast mode [ 204.327768][ T5290] Bluetooth: hci4: unexpected event 0x03 length: 4 < 11 [ 204.329446][T10933] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1482'. [ 204.404892][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1486'. [ 204.425466][T10943] macvlan3: entered promiscuous mode [ 204.430566][T10943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10943 comm=syz.6.1486 [ 204.653406][T10966] can: request_module (can-proto-0) failed. [ 204.686826][ T5290] Bluetooth: hci1: unexpected event 0x03 length: 4 < 11 [ 204.746494][ T5290] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 205.131699][T11006] netlink: 'syz.7.1513': attribute type 21 has an invalid length. [ 205.134577][T11006] IPv6: NLM_F_CREATE should be specified when creating new route [ 205.237121][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 205.237138][ T40] audit: type=1400 audit(1775036164.994:654): avc: denied { unmount } for pid=8309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 205.241346][T11014] SELinux: failed to load policy [ 205.312974][ T1242] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.331784][T11013] binder: 11012:11013 ioctl c00c620f 200000000040 returned -22 [ 205.401247][T11024] __nla_validate_parse: 4 callbacks suppressed [ 205.401259][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1521'. [ 205.434652][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.441735][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.443031][ T1242] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.444938][ T5933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.455980][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.459706][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.470330][T11030] sctp: [Deprecated]: syz.5.1522 (pid 11030) Use of int in max_burst socket option deprecated. [ 205.470330][T11030] Use struct sctp_assoc_value instead [ 205.485129][T11025] xfrm0 speed is unknown, defaulting to 1000 [ 205.553678][ T5933] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 205.591233][ T1242] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.600095][ T40] audit: type=1400 audit(1775036165.364:655): avc: denied { ioctl } for pid=11039 comm="syz.5.1527" path="pid:[4026532890]" dev="nsfs" ino=4026532890 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 205.706385][ T1242] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.724660][T11025] chnl_net:caif_netlink_parms(): no params data found [ 205.733442][T11052] overlayfs: missing 'workdir' [ 205.780003][T11025] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.782465][T11025] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.785085][T11025] bridge_slave_0: entered allmulticast mode [ 205.794657][T11025] bridge_slave_0: entered promiscuous mode [ 205.798147][T11025] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.800673][T11025] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.802981][T11025] bridge_slave_1: entered allmulticast mode [ 205.805641][T11025] bridge_slave_1: entered promiscuous mode [ 205.810745][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1534'. [ 205.824578][T11025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.829565][T11025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.848650][ T6021] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 205.867624][T11025] team0: Port device team_slave_0 added [ 205.871926][T11025] team0: Port device team_slave_1 added [ 205.899649][T11025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.902375][T11025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.911235][T11025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.916038][T11025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.918489][T11025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.926827][T11025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.010385][ T6021] usb 12-1: Using ep0 maxpacket: 32 [ 206.015528][ T6021] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 206.021848][ T6021] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 206.025565][ T6021] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 206.032770][ T6021] usb 12-1: Product: syz [ 206.034526][ T6021] usb 12-1: Manufacturer: syz [ 206.036398][ T6021] usb 12-1: SerialNumber: syz [ 206.041729][ T6021] usb 12-1: config 0 descriptor?? [ 206.044590][T11038] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 206.049510][ T6021] hub 12-1:0.0: bad descriptor, ignoring hub [ 206.051952][ T6021] hub 12-1:0.0: probe with driver hub failed with error -5 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x343000) [ 206.171708][ T1242] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 206.180543][ T1242] bond0 (unregistering): Released all slaves [ 206.188100][ T1242] bond1 (unregistering): Released all slaves [ 206.239412][T11025] hsr_slave_0: entered promiscuous mode [ 206.243541][T11025] hsr_slave_1: entered promiscuous mode [ 206.250773][ T5933] Bluetooth: hci1: unexpected event 0x03 length: 4 < 11 [ 206.369652][ T9] usb 12-1: USB disconnect, device number 2 [ 206.453547][ T40] audit: type=1400 audit(1775036166.214:656): avc: denied { map } for pid=11090 comm="syz.5.1545" path="socket:[38933]" dev="sockfs" ino=38933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.523435][T11025] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 206.537289][T11025] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 206.544610][T11025] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 206.552585][T11025] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 206.583642][ T1242] hsr_slave_0: left promiscuous mode [ 206.586196][ T1242] hsr_slave_1: left promiscuous mode [ 206.592763][ T1242] veth1_macvtap: left promiscuous mode [ 206.594750][ T1242] veth0_macvtap: left promiscuous mode [ 206.596702][ T1242] veth1_vlan: left allmulticast mode [ 206.602294][ T1242] veth1_vlan: left promiscuous mode [ 206.604420][ T1242] veth0_vlan: left promiscuous mode [ 206.732600][ T1242] team0 (unregistering): Port device macvlan0 removed [ 206.933063][T11025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.945559][T11025] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.961977][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.964727][ T6602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.987969][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.991012][ T6602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.991292][T11129] netlink: 'syz.7.1550': attribute type 2 has an invalid length. [ 207.120153][T11025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.125872][ T5933] Bluetooth: hci1: unexpected event 0x03 length: 4 < 11 [ 207.216408][ T1242] IPVS: stop unused estimator thread 0... [ 207.335559][T11025] veth0_vlan: entered promiscuous mode [ 207.340894][T11025] veth1_vlan: entered promiscuous mode [ 207.380870][T11025] veth0_macvtap: entered promiscuous mode [ 207.385448][T11025] veth1_macvtap: entered promiscuous mode [ 207.394702][T11025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.405058][T11025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.412373][ T6602] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.416562][ T6602] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.431117][ T46] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.439695][ T6604] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.471677][ T40] audit: type=1400 audit(1775036167.234:657): avc: denied { setopt } for pid=11169 comm="syz.6.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 207.525097][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.527806][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.538570][ T5933] Bluetooth: hci0: command tx timeout [ 207.553539][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.556446][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.642426][T11186] xt_hashlimit: size too large, truncated to 1048576 [ 207.682668][T11191] serio: Serial port ptm1 [ 207.786716][ T40] audit: type=1400 audit(1775036167.544:658): avc: denied { setattr } for pid=11197 comm="syz.8.1568" name="XDP" dev="sockfs" ino=37829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 207.787915][ T5933] Bluetooth: hci0: unexpected event 0x03 length: 4 < 11 [ 207.904756][T11202] ocfs2: Unknown parameter 'usrquota"' [ 207.919088][T11204] netlink: 'syz.5.1570': attribute type 1 has an invalid length. [ 207.921955][T11204] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1570'. [ 207.924915][T11204] NCSI netlink: No device for ifindex 0 [ 207.932495][T11204] input: syz0 as /devices/virtual/input/input17 [ 208.012401][T11210] netdevsim netdevsim8: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 208.024967][ T40] audit: type=1400 audit(1775036167.784:659): avc: denied { getopt } for pid=11209 comm="syz.8.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.078478][ T40] audit: type=1400 audit(1775036167.834:660): avc: denied { write } for pid=11211 comm="syz.8.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.188368][ T5933] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 208.233984][T11224] netlink: zone id is out of range [ 208.235987][T11224] netlink: zone id is out of range [ 208.237644][T11224] netlink: zone id is out of range [ 208.239557][T11224] netlink: zone id is out of range [ 208.241264][T11224] netlink: zone id is out of range [ 208.242914][T11224] netlink: zone id is out of range [ 208.252233][T11224] netlink: set zone limit has 4 unknown bytes [ 208.286323][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1581'. [ 208.291063][T11230] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1581'. [ 208.307768][T11230] geneve2: entered promiscuous mode [ 208.310233][T11230] geneve2: entered allmulticast mode [ 208.332691][T11229] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1582'. [ 208.335752][T11229] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1582'. [ 208.360629][T11229] netlink: 'syz.8.1582': attribute type 4 has an invalid length. [ 208.363654][T11229] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1582'. [ 208.371769][T11229] netlink: 14601 bytes leftover after parsing attributes in process `syz.8.1582'. [ 208.562056][ T5933] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 208.658212][T11263] program syz.5.1594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.710968][ T40] audit: type=1400 audit(1775036168.474:661): avc: denied { shutdown } for pid=11271 comm="syz.5.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 208.711644][T11272] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 208.727561][T11272] SELinux: failed to load policy [ 208.910072][T11260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5133 sclass=netlink_tcpdiag_socket pid=11260 comm=syz.6.1592 [ 208.910377][ T5933] Bluetooth: hci3: unexpected event 0x03 length: 4 < 11 [ 208.924015][T11274] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 209.239760][ T40] audit: type=1400 audit(1775036169.004:662): avc: denied { ioctl } for pid=11312 comm="syz.5.1610" path="socket:[38683]" dev="sockfs" ino=38683 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 209.250317][ T40] audit: type=1400 audit(1775036169.004:663): avc: denied { accept } for pid=11312 comm="syz.5.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 209.358751][ T6016] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 209.508854][ T6016] usb 13-1: Using ep0 maxpacket: 8 [ 209.513564][ T6016] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 209.517013][ T6016] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.522630][ T6016] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.526813][ T6016] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.531047][ T6016] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.536798][ T6016] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.540869][ T6016] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.618747][ T5933] Bluetooth: hci0: command tx timeout [ 209.759636][ T6016] usb 13-1: GET_CAPABILITIES returned 0 [ 209.762387][ T6016] usbtmc 13-1:16.0: can't read capabilities [ 209.988280][ T5933] Bluetooth: hci3: unexpected event 0x03 length: 4 < 11 [ 209.989447][ T830] usb 13-1: USB disconnect, device number 2 [ 210.344750][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 210.344768][ T40] audit: type=1400 audit(1775036170.104:666): avc: denied { write } for pid=11368 comm="syz.5.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 210.618663][ T5290] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 210.627681][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1632'. [ 210.671906][ T5290] Bluetooth: hci4: unexpected event 0x03 length: 4 < 11 [ 210.879023][T11400] delete_channel: no stack [ 211.003621][T11409] overlayfs: statfs failed on './file0' [ 211.063493][T11415] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 211.368753][T11434] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1653'. [ 211.479033][T11445] program syz.5.1658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.524983][T11448] netlink: 'syz.6.1660': attribute type 10 has an invalid length. [ 211.528370][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1660'. [ 211.591081][ T40] audit: type=1400 audit(1775036171.354:667): avc: denied { setopt } for pid=11452 comm="syz.6.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 211.621515][ T40] audit: type=1400 audit(1775036171.384:668): avc: denied { bind } for pid=11452 comm="syz.6.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 211.638683][ T830] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 211.703692][ T5290] Bluetooth: hci0: command tx timeout [ 211.800627][ T830] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.804496][ T830] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.809186][ T830] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.813352][ T830] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.818150][ T830] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.825322][ T830] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.830176][ T830] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.834103][ T830] usb 13-1: Product: syz [ 211.836293][ T830] usb 13-1: Manufacturer: syz [ 211.844322][ T830] cdc_wdm 13-1:1.0: skipping garbage [ 211.846540][ T830] cdc_wdm 13-1:1.0: skipping garbage [ 211.846645][T11467] program syz.5.1667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.852539][ T830] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 211.855220][ T5290] Bluetooth: hci4: unexpected event 0x03 length: 4 < 11 [ 211.856226][ T830] cdc_wdm 13-1:1.0: Unknown control protocol [ 212.081772][ T40] audit: type=1400 audit(1775036171.844:669): avc: denied { create } for pid=11479 comm="syz.5.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 212.098569][ T5933] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 212.099188][ T5290] Bluetooth: hci2: command 0x1003 tx timeout [ 212.183384][ T40] audit: type=1400 audit(1775036171.944:670): avc: denied { map } for pid=11482 comm="syz.5.1673" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 212.318942][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 212.560144][ T6021] usb 13-1: USB disconnect, device number 3 [ 212.626155][T11501] Bluetooth: MGMT ver 1.23 [ 213.323871][T11509] FAULT_INJECTION: forcing a failure. [ 213.323871][T11509] name failslab, interval 1, probability 0, space 0, times 0 [ 213.331566][T11509] CPU: 2 UID: 0 PID: 11509 Comm: syz.8.1682 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.331585][T11509] Tainted: [L]=SOFTLOCKUP [ 213.331588][T11509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.331595][T11509] Call Trace: [ 213.331599][T11509] [ 213.331604][T11509] dump_stack_lvl+0x100/0x190 [ 213.331637][T11509] should_fail_ex.cold+0x5/0xa [ 213.331651][T11509] ? tomoyo_realpath_from_path+0xb6/0x690 [ 213.331673][T11509] should_failslab+0xc2/0x120 [ 213.331685][T11509] __kmalloc_noprof+0xe0/0x850 [ 213.331703][T11509] tomoyo_realpath_from_path+0xb6/0x690 [ 213.331723][T11509] tomoyo_path_number_perm+0x23c/0x580 [ 213.331737][T11509] ? tomoyo_path_number_perm+0x22e/0x580 [ 213.331752][T11509] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 213.331780][T11509] ? find_held_lock+0x2b/0x80 [ 213.331795][T11509] ? __fget_files+0x215/0x3d0 [ 213.331806][T11509] ? hook_file_ioctl_common+0x146/0x410 [ 213.331836][T11509] ? __fget_files+0x21f/0x3d0 [ 213.331850][T11509] security_file_ioctl+0xd3/0x230 [ 213.331867][T11509] __x64_sys_ioctl+0xb7/0x210 [ 213.331885][T11509] do_syscall_64+0x106/0xf80 [ 213.331944][T11509] ? clear_bhb_loop+0x40/0x90 [ 213.331958][T11509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.331969][T11509] RIP: 0033:0x7f966459c819 [ 213.331978][T11509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.331989][T11509] RSP: 002b:00007f9665372028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.332000][T11509] RAX: ffffffffffffffda RBX: 00007f9664815fa0 RCX: 00007f966459c819 [ 213.332006][T11509] RDX: 000000000000000f RSI: 0000000000005321 RDI: 0000000000000003 [ 213.332012][T11509] RBP: 00007f9665372090 R08: 0000000000000000 R09: 0000000000000000 [ 213.332018][T11509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.332024][T11509] R13: 00007f9664816038 R14: 00007f9664815fa0 R15: 00007ffc3ff5e948 [ 213.332038][T11509] [ 213.332305][T11509] ERROR: Out of memory at tomoyo_realpath_from_path. [ 213.468037][T11518] bridge0: port 4(team0) entered disabled state [ 213.490670][T11518] syz_tun: left allmulticast mode [ 213.525272][T11518] syz_tun: left promiscuous mode [ 213.527667][T11518] bridge0: port 3(syz_tun) entered disabled state [ 213.534773][T11518] bridge_slave_1: left allmulticast mode [ 213.537408][T11518] bridge_slave_1: left promiscuous mode [ 213.540126][T11518] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.546701][T11518] bridge_slave_0: left allmulticast mode [ 213.550148][T11518] bridge_slave_0: left promiscuous mode [ 213.553357][T11518] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.714228][ T40] audit: type=1400 audit(1775036173.474:671): avc: denied { setcheckreqprot } for pid=11532 comm="syz.5.1690" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 213.728631][ T10] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 213.778681][ T5933] Bluetooth: hci0: command tx timeout [ 213.900650][ T10] usb 12-1: config index 0 descriptor too short (expected 23569, got 27) [ 213.904569][ T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.910011][ T10] usb 12-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 213.914262][ T10] usb 12-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 213.917935][ T10] usb 12-1: Manufacturer: syz [ 213.923317][ T10] usb 12-1: config 0 descriptor?? [ 213.935980][T11549] netlink: 'syz.5.1696': attribute type 1 has an invalid length. [ 213.988556][ T10] rc_core: IR keymap rc-hauppauge not found [ 213.991137][ T10] Registered IR keymap rc-empty [ 213.994138][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 214.005213][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input18 [ 214.131222][ T830] usb 12-1: USB disconnect, device number 3 [ 214.178730][T11569] netlink: 'syz.6.1705': attribute type 1 has an invalid length. [ 214.250245][T11569] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.365361][T11575] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1707'. [ 214.375852][T11575] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1707'. [ 214.494059][ T40] audit: type=1400 audit(1775036174.254:672): avc: denied { write } for pid=11598 comm="syz.5.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 214.507146][T11603] netlink: 'syz.8.1712': attribute type 3 has an invalid length. [ 214.554911][T11607] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1716'. [ 214.569413][T11609] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1717'. [ 214.578001][T11610] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 214.619642][T11609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.630091][T11609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.634030][T11609] bond0 (unregistering): Released all slaves [ 214.644859][ T53] syz0: Port: 1 Link DOWN [ 214.686344][ T40] audit: type=1400 audit(1775036174.444:673): avc: denied { map } for pid=11615 comm="syz.7.1719" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 214.694192][ T40] audit: type=1400 audit(1775036174.444:674): avc: denied { execute } for pid=11615 comm="syz.7.1719" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 214.822219][ T40] audit: type=1400 audit(1775036174.584:675): avc: denied { connect } for pid=11627 comm="syz.6.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 214.868267][T11633] netlink: 'syz.7.1725': attribute type 10 has an invalid length. [ 214.871505][T11633] macvlan0: entered allmulticast mode [ 214.877475][T11633] veth1_vlan: entered allmulticast mode [ 214.881357][T11633] team0: Port device macvlan0 added [ 214.930296][T11637] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 214.935729][T11637] bond1 (unregistering): Released all slaves [ 214.967650][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1726'. [ 214.972370][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1726'. [ 214.981073][T11641] netlink: 'syz.7.1726': attribute type 4 has an invalid length. [ 214.984576][T11641] netlink: 'syz.7.1726': attribute type 1 has an invalid length. [ 214.987659][T11641] netlink: 'syz.7.1726': attribute type 1 has an invalid length. [ 214.991833][T11641] netlink: 9172 bytes leftover after parsing attributes in process `syz.7.1726'. [ 215.081158][T11647] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 215.084324][T11647] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 215.088650][T11648] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 215.091543][T11648] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 215.284870][T11660] i2c i2c-1: dtv_property_process_set: SET cmd 0x00002000 undefined [ 215.323567][T11659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56449 sclass=netlink_route_socket pid=11659 comm=syz.8.1732 [ 215.332028][T11663] netlink: 'syz.7.1731': attribute type 10 has an invalid length. [ 215.341451][T11663] veth0_macvtap: left promiscuous mode [ 215.457177][T11672] usb usb8: usbfs: process 11672 (syz.8.1736) did not claim interface 0 before use [ 215.468629][T11674] IPv6: addrconf: prefix option has invalid lifetime [ 215.472314][T11672] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 215.861412][ T5933] Bluetooth: hci0: command tx timeout [ 216.252461][T11751] __nla_validate_parse: 2 callbacks suppressed [ 216.252473][T11751] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1760'. [ 216.254864][T11758] cgroup: No subsys list or none specified [ 216.455635][T11775] xfrm0 speed is unknown, defaulting to 1000 [ 216.590497][T11792] overlayfs: failed to clone upperpath [ 216.605177][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1776'. [ 216.649759][T11790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11790 comm=syz.8.1774 [ 216.867980][T11810] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1783'. [ 217.137603][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 217.137620][ T40] audit: type=1400 audit(1775036176.894:678): avc: denied { mounton } for pid=11839 comm="syz.7.1791" path="/bus" dev="hugetlbfs" ino=41746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 217.141972][T11840] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 217.151808][ T29] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 217.155059][T11840] overlayfs: failed to set xattr on upper [ 217.160551][T11840] overlayfs: ...falling back to redirect_dir=nofollow. [ 217.163355][T11840] overlayfs: ...falling back to index=off. [ 217.165239][T11840] overlayfs: ...falling back to uuid=null. [ 217.167594][T11840] overlayfs: maximum fs stacking depth exceeded [ 217.212344][ T40] audit: type=1400 audit(1775036176.974:679): avc: denied { name_bind } for pid=11841 comm="syz.7.1792" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 217.266166][T11845] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1792'. [ 217.268239][T11844] netlink: 'syz.8.1793': attribute type 1 has an invalid length. [ 217.269234][T11845] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1792'. [ 217.325439][T11848] futex_wake_op: syz.8.1794 tries to shift op by -1; fix this program [ 217.902029][ T40] audit: type=1400 audit(1775036177.664:680): avc: denied { read } for pid=11871 comm="syz.5.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.118130][T11891] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:128 [ 218.121481][T11892] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:128 [ 218.386986][ T40] audit: type=1400 audit(1775036178.144:681): avc: denied { setopt } for pid=11927 comm="syz.5.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 218.474140][T11943] nftables ruleset with unbound chain [ 218.526975][T11944] program syz.5.1818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.536850][T11952] netlink: 'syz.6.1823': attribute type 3 has an invalid length. [ 218.554618][ T40] audit: type=1400 audit(1775036178.314:682): avc: denied { read } for pid=11949 comm="syz.8.1822" name="file0" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.569403][ T40] audit: type=1400 audit(1775036178.314:683): avc: denied { open } for pid=11949 comm="syz.8.1822" path="/46/file0" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.917530][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1827'. [ 219.441878][T11998] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.512388][T12009] netlink: 'syz.6.1834': attribute type 2 has an invalid length. [ 219.514963][T12009] netlink: 'syz.6.1834': attribute type 2 has an invalid length. [ 219.524519][T12009] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1834'. [ 219.527692][T12009] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1834'. [ 219.532408][T12009] netlink: 19 bytes leftover after parsing attributes in process `syz.6.1834'. [ 219.765843][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1847'. [ 219.788994][T12046] syz.7.1847 uses old SIOCAX25GETINFO [ 219.980099][T12074] ip6t_REJECT: ECHOREPLY is not supported [ 220.178557][ T10] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 220.254004][T12102] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 220.256758][T12102] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 220.263025][T12102] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 220.266599][T12102] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 220.275213][ T40] audit: type=1400 audit(1775036180.034:684): avc: denied { mounton } for pid=12101 comm="syz.7.1864" path="/116/file0" dev="tmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 220.344688][ T10] usb 13-1: Using ep0 maxpacket: 16 [ 220.349164][ T10] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.354237][ T10] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.361083][ T10] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 220.365882][T12112] overlayfs: failed to clone upperpath [ 220.366482][ T10] usb 13-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 220.373686][ T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.383140][ T10] usb 13-1: config 0 descriptor?? [ 220.581146][T12132] overlayfs: missing 'workdir' [ 220.786251][T12143] netlink: 'syz.6.1875': attribute type 6 has an invalid length. [ 220.792295][T12067] random: crng reseeded on system resumption [ 220.795304][ T40] audit: type=1400 audit(1775036180.554:685): avc: denied { append } for pid=12066 comm="syz.8.1853" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 220.813766][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input19 [ 220.837049][ T10] shield 0003:0955:7214.0014: Registered Thunderstrike controller [ 220.840432][ T10] shield 0003:0955:7214.0014: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 221.014424][ T9] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 221.015756][ T2296] usb 13-1: USB disconnect, device number 4 [ 221.019732][ T9] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 221.027022][ T2296] ------------[ cut here ]------------ [ 221.027094][ T9] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 221.028933][ T2296] workqueue: work disable count underflowed [ 221.028946][ T2296] WARNING: kernel/workqueue.c:4410 at enable_work+0x2d1/0x320, CPU#3: kworker/3:2/2296 [ 221.028979][ T2296] Modules linked in: [ 221.028997][ T2296] CPU: 3 UID: 0 PID: 2296 Comm: kworker/3:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.029012][ T2296] Tainted: [L]=SOFTLOCKUP [ 221.029016][ T2296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.029024][ T2296] Workqueue: usb_hub_wq hub_event [ 221.029045][ T2296] RIP: 0010:enable_work+0x2d1/0x320 [ 221.029059][ T2296] Code: ff e8 f3 c8 38 00 e8 ce b5 c0 09 e9 61 ff ff ff e8 e4 c8 38 00 90 0f 0b 90 e9 17 fe ff ff e8 d6 c8 38 00 48 8d 3d bf 95 0c 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 ea 57 a5 00 e9 [ 221.029069][ T2296] RSP: 0018:ffffc9000d34f2e0 EFLAGS: 00010093 [ 221.029078][ T2296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81d03280 [ 221.029089][ T2296] RDX: ffff88803045c980 RSI: ffffffff81d0344a RDI: ffffffff90dcca10 [ 221.029096][ T2296] RBP: ffff88802f536780 R08: 0000000000000007 R09: 0000000000000000 [ 221.029102][ T2296] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 221.029109][ T2296] R13: 1ffff92001a69e5d R14: ffff88802f5366e0 R15: 000000007fffffff [ 221.029116][ T2296] FS: 0000000000000000(0000) GS:ffff8880d663c000(0000) knlGS:0000000000000000 [ 221.029138][ T2296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.029147][ T2296] CR2: 000000110c2b724d CR3: 0000000026417000 CR4: 0000000000352ef0 [ 221.029155][ T2296] Call Trace: [ 221.029159][ T2296] [ 221.029164][ T2296] ? __pfx_enable_work+0x10/0x10 [ 221.029179][ T2296] ? __pfx___might_resched+0x10/0x10 [ 221.029195][ T2296] cancel_delayed_work_sync+0x96/0xf0 [ 221.029212][ T2296] thermal_zone_device_unregister+0x28e/0x4e0 [ 221.029257][ T2296] ? __pfx_shield_remove+0x10/0x10 [ 221.029293][ T2296] power_supply_unregister+0x10a/0x150 [ 221.029310][ T2296] shield_remove+0x75/0x130 [ 221.029326][ T2296] ? __pfx_shield_remove+0x10/0x10 [ 221.029341][ T2296] hid_device_remove+0xd1/0x270 [ 221.029354][ T2296] ? __pfx_hid_device_remove+0x10/0x10 [ 221.029367][ T2296] device_remove+0xcb/0x180 [ 221.034219][ T9] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 221.035799][ T2296] device_release_driver_internal+0x44e/0x620 [ 221.113851][ T2296] bus_remove_device+0x2bc/0x560 [ 221.115557][ T2296] ? __pfx_bus_remove_device+0x10/0x10 [ 221.117469][ T2296] ? __pfx_device_remove_attrs+0x10/0x10 [ 221.119289][ T2296] ? up_write+0x290/0x4f0 [ 221.120816][ T2296] device_del+0x376/0x9b0 [ 221.122706][ T2296] ? __pfx_device_del+0x10/0x10 [ 221.124853][ T2296] ? do_raw_spin_lock+0x128/0x260 [ 221.127199][ T2296] hid_destroy_device+0x19c/0x240 [ 221.129708][ T2296] usbhid_disconnect+0xa0/0xe0 [ 221.131891][ T2296] usb_unbind_interface+0x1dd/0x9e0 [ 221.134155][ T2296] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 221.136538][ T2296] ? __pfx_usb_unbind_interface+0x10/0x10 [ 221.139193][ T2296] device_remove+0x12a/0x180 [ 221.141521][ T2296] device_release_driver_internal+0x44e/0x620 [ 221.144067][ T2296] bus_remove_device+0x2bc/0x560 [ 221.146040][ T2296] ? __pfx_bus_remove_device+0x10/0x10 [ 221.148379][ T2296] ? __pfx_device_remove_attrs+0x10/0x10 [ 221.150830][ T2296] ? up_write+0x290/0x4f0 [ 221.152703][ T2296] device_del+0x376/0x9b0 [ 221.154757][ T2296] ? __pfx_device_del+0x10/0x10 [ 221.157214][ T2296] ? kobject_put+0xb9/0x640 [ 221.159403][ T2296] usb_disable_device+0x367/0x810 [ 221.161389][ T2296] usb_disconnect+0x2e2/0x9a0 [ 221.163284][ T2296] hub_event+0x1d0c/0x4af0 [ 221.165235][ T2296] ? __lock_acquire+0x4a5/0x2630 [ 221.167414][ T2296] ? do_raw_spin_unlock+0x145/0x1e0 [ 221.169882][ T2296] ? __pfx_hub_event+0x10/0x10 [ 221.171887][ T2296] ? debug_object_deactivate+0x2e4/0x3b0 [ 221.174294][ T2296] ? trace_event_raw_event_sched_process_exec+0x1e0/0x350 [ 221.177335][ T2296] ? rcu_is_watching+0x12/0xc0 [ 221.179348][ T2296] process_one_work+0xa23/0x19a0 [ 221.181840][ T2296] ? __pfx_process_one_work+0x10/0x10 [ 221.184691][ T2296] ? __pfx_hub_event+0x10/0x10 [ 221.186916][ T2296] worker_thread+0x5ef/0xe50 [ 221.188984][ T2296] ? kthread+0x13a/0x450 [ 221.190852][ T2296] ? __pfx_worker_thread+0x10/0x10 [ 221.193030][ T2296] kthread+0x370/0x450 [ 221.194790][ T2296] ? __pfx_kthread+0x10/0x10 [ 221.196913][ T2296] ret_from_fork+0x754/0xd80 [ 221.199219][ T2296] ? __pfx_ret_from_fork+0x10/0x10 [ 221.201787][ T2296] ? __switch_to+0x7b4/0x1120 [ 221.203949][ T2296] ? __pfx_kthread+0x10/0x10 [ 221.206031][ T2296] ret_from_fork_asm+0x1a/0x30 [ 221.208108][ T2296] [ 221.209470][ T2296] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 221.212578][ T2296] CPU: 3 UID: 0 PID: 2296 Comm: kworker/3:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.217628][ T2296] Tainted: [L]=SOFTLOCKUP [ 221.219586][ T2296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.223930][ T2296] Workqueue: usb_hub_wq hub_event [ 221.226324][ T2296] Call Trace: [ 221.227885][ T2296] [ 221.229258][ T2296] dump_stack_lvl+0x100/0x190 [ 221.231306][ T2296] vpanic+0x552/0x970 [ 221.233001][ T2296] ? __pfx_vpanic+0x10/0x10 [ 221.234990][ T2296] panic+0xd1/0xe0 [ 221.236698][ T2296] ? __pfx_panic+0x10/0x10 [ 221.238820][ T2296] ? check_panic_on_warn+0x1f/0x90 [ 221.241182][ T2296] check_panic_on_warn.cold+0x19/0x34 [ 221.243414][ T2296] ? enable_work+0x2d1/0x320 [ 221.245421][ T2296] __warn.cold+0x191/0x348 [ 221.247405][ T2296] __report_bug+0x296/0x3d0 [ 221.249571][ T2296] ? enable_work+0x2d1/0x320 [ 221.251596][ T2296] ? __pfx___report_bug+0x10/0x10 [ 221.253815][ T2296] ? __pfx_debug_object_free+0x10/0x10 [ 221.256151][ T2296] ? enable_work+0x2ca/0x320 [ 221.258219][ T2296] ? enable_work+0x100/0x320 [ 221.260387][ T2296] ? find_held_lock+0x2b/0x80 [ 221.262594][ T2296] ? __flush_work+0x928/0xcb0 [ 221.264663][ T2296] ? __flush_work+0x928/0xcb0 [ 221.266704][ T2296] report_bug_entry+0xe1/0x290 [ 221.268882][ T2296] ? enable_work+0x2d1/0x320 [ 221.271195][ T2296] handle_bug+0x1cd/0x2a0 [ 221.273269][ T2296] exc_invalid_op+0x17/0x50 [ 221.275278][ T2296] asm_exc_invalid_op+0x1a/0x20 [ 221.277380][ T2296] RIP: 0010:enable_work+0x2d1/0x320 [ 221.279703][ T2296] Code: ff e8 f3 c8 38 00 e8 ce b5 c0 09 e9 61 ff ff ff e8 e4 c8 38 00 90 0f 0b 90 e9 17 fe ff ff e8 d6 c8 38 00 48 8d 3d bf 95 0c 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 ea 57 a5 00 e9 [ 221.288427][ T2296] RSP: 0018:ffffc9000d34f2e0 EFLAGS: 00010093 [ 221.291044][ T2296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81d03280 [ 221.294642][ T2296] RDX: ffff88803045c980 RSI: ffffffff81d0344a RDI: ffffffff90dcca10 [ 221.298374][ T2296] RBP: ffff88802f536780 R08: 0000000000000007 R09: 0000000000000000 [ 221.301911][ T2296] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 221.305589][ T2296] R13: 1ffff92001a69e5d R14: ffff88802f5366e0 R15: 000000007fffffff [ 221.309249][ T2296] ? enable_work+0x100/0x320 [ 221.311338][ T2296] ? enable_work+0x2ca/0x320 [ 221.313528][ T2296] ? __pfx_enable_work+0x10/0x10 [ 221.316036][ T2296] ? __pfx___might_resched+0x10/0x10 [ 221.318634][ T2296] cancel_delayed_work_sync+0x96/0xf0 [ 221.321132][ T2296] thermal_zone_device_unregister+0x28e/0x4e0 [ 221.323753][ T2296] ? __pfx_shield_remove+0x10/0x10 [ 221.326174][ T2296] power_supply_unregister+0x10a/0x150 [ 221.328815][ T2296] shield_remove+0x75/0x130 [ 221.330960][ T2296] ? __pfx_shield_remove+0x10/0x10 [ 221.333214][ T2296] hid_device_remove+0xd1/0x270 [ 221.335306][ T2296] ? __pfx_hid_device_remove+0x10/0x10 [ 221.337733][ T2296] device_remove+0xcb/0x180 [ 221.339859][ T2296] device_release_driver_internal+0x44e/0x620 [ 221.342688][ T2296] bus_remove_device+0x2bc/0x560 [ 221.344912][ T2296] ? __pfx_bus_remove_device+0x10/0x10 [ 221.347347][ T2296] ? __pfx_device_remove_attrs+0x10/0x10 [ 221.349916][ T2296] ? up_write+0x290/0x4f0 [ 221.351880][ T2296] device_del+0x376/0x9b0 [ 221.353844][ T2296] ? __pfx_device_del+0x10/0x10 [ 221.355952][ T2296] ? do_raw_spin_lock+0x128/0x260 [ 221.358141][ T2296] hid_destroy_device+0x19c/0x240 [ 221.360509][ T2296] usbhid_disconnect+0xa0/0xe0 [ 221.363058][ T2296] usb_unbind_interface+0x1dd/0x9e0 [ 221.365751][ T2296] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 221.368169][ T2296] ? __pfx_usb_unbind_interface+0x10/0x10 [ 221.370663][ T2296] device_remove+0x12a/0x180 [ 221.372669][ T2296] device_release_driver_internal+0x44e/0x620 [ 221.375208][ T2296] bus_remove_device+0x2bc/0x560 [ 221.377324][ T2296] ? __pfx_bus_remove_device+0x10/0x10 [ 221.379804][ T2296] ? __pfx_device_remove_attrs+0x10/0x10 [ 221.382425][ T2296] ? up_write+0x290/0x4f0 [ 221.384348][ T2296] device_del+0x376/0x9b0 [ 221.386221][ T2296] ? __pfx_device_del+0x10/0x10 [ 221.388277][ T2296] ? kobject_put+0xb9/0x640 [ 221.390343][ T2296] usb_disable_device+0x367/0x810 [ 221.392698][ T2296] usb_disconnect+0x2e2/0x9a0 [ 221.395045][ T2296] hub_event+0x1d0c/0x4af0 [ 221.397083][ T2296] ? __lock_acquire+0x4a5/0x2630 [ 221.399177][ T2296] ? do_raw_spin_unlock+0x145/0x1e0 [ 221.401491][ T2296] ? __pfx_hub_event+0x10/0x10 [ 221.403588][ T2296] ? debug_object_deactivate+0x2e4/0x3b0 [ 221.406293][ T2296] ? trace_event_raw_event_sched_process_exec+0x1e0/0x350 [ 221.409537][ T2296] ? rcu_is_watching+0x12/0xc0 [ 221.411629][ T2296] process_one_work+0xa23/0x19a0 [ 221.413779][ T2296] ? __pfx_process_one_work+0x10/0x10 [ 221.416099][ T2296] ? __pfx_hub_event+0x10/0x10 [ 221.418505][ T2296] worker_thread+0x5ef/0xe50 [ 221.420883][ T2296] ? kthread+0x13a/0x450 [ 221.422825][ T2296] ? __pfx_worker_thread+0x10/0x10 [ 221.425035][ T2296] kthread+0x370/0x450 [ 221.426809][ T2296] ? __pfx_kthread+0x10/0x10 [ 221.428882][ T2296] ret_from_fork+0x754/0xd80 [ 221.431149][ T2296] ? __pfx_ret_from_fork+0x10/0x10 [ 221.433647][ T2296] ? __switch_to+0x7b4/0x1120 [ 221.435754][ T2296] ? __pfx_kthread+0x10/0x10 [ 221.437767][ T2296] ret_from_fork_asm+0x1a/0x30 [ 221.439848][ T2296] [ 221.442076][ T2296] Kernel Offset: disabled [ 221.444220][ T2296] Rebooting in 86400 seconds..