last executing test programs: 32.735777517s ago: executing program 0 (id=501): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x4f}, @l2cap_cid_signaling={{0x4b}, [@l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x2}}, @l2cap_info_rsp={{0xb, 0x5, 0x30}, {0x7, 0xa, "28f2f33da4368f719822d6d4cae984e48b6b2a0b9ff722b59be78b968356deeef1d871bb57d63b0bcd1ef8ec"}}, @l2cap_move_chan_rsp={{0xf, 0xc4, 0x4}, {0x6, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x6, 0x9}}]}}, 0x54) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x143}, @l2cap_cid_signaling={{0x13f}, [@l2cap_conf_rsp={{0x5, 0x1e, 0x1d}, {0x1, 0xf47, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x75, 0x40, 0xf07e, 0xa, 0xa8}}, @l2cap_conf_flushto={0x2, 0x2, 0x9}, @l2cap_conf_flushto={0x2, 0x2, 0x10}]}}, @l2cap_info_rsp={{0xb, 0x6, 0xc5}, {0x3af, 0x3fc, "d48ef1a4a0f099d42f4107f742c83f2e9fe25dce67d14aab3cdaba3a3c1242924d3d9880fd4f06ce9d03e10329885d783587b1db7ec9273702d3561c72572d4d0636a0ce8a4482d5b67f0c7b770ccdf336a0a22a8364ecead5a69031ab49698436fa07ff893d07e675988c1cb5d73a928ce08bcefa9d172f0c92403e4fd44d7e8524f14a265152e0f6d25975928764ec15ab951517153cf23f5b00c9b39fc523b478493736d124e34c2b024c9af591f3635ca1a48c7e3db2561319444475036431"}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x200, 0x66, 0x800, 0x8}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x8, 0x8}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x8, 0x800}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0xffff, 0x6d39}}, @l2cap_move_chan_rsp={{0xf, 0x5, 0x4}, {0x2, 0x3}}, @l2cap_info_rsp={{0xb, 0x5, 0x25}, {0x3, 0x0, "6a651bfaa7358aa96e2951909ec8bb5e93ad2c62a41893b8a27bfa00f4aff9f3a0"}}]}}, 0x148) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pwritev(r0, &(0x7f0000001400)=[{&(0x7f0000000280)="282ee36df4f9e91ef4adfab3dc80fead3f5d95", 0x13}, {&(0x7f00000002c0)="a092f6392b1219514d7c27085e703e822da29f1011b080aaad16e588cb87e2528ff42f495c70e9d1a116bf20b70c5ea7db428c6036f5a411a650bbf28ea760ee1949fb38dc9893445f0a90165e8dba551a96746ddea5be1c62959312439ad6c9f2e4e1317e0c0064f6647ede5a4751cefcd2d1a6886a06d0bfb3baccafda5f6273269493a32f50840f6a05e19c5b2eba81eed0e717df1b130909b9636973e3904fdad963a87fc0bd96277a5f782d11896f30e71fc1b0d00346c65ccba8f40a8057bc1739cc400a415b289593188f93d6144e074dd289800883f272143e869a3b7ee21ccc036174a6", 0xe8}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="9b260ad3269b464ff04496b8c897f916e70844d9e1574a9e3bff80ef397e5c0479634c86c540eb3383b686fa5c276fdac53300447df7f79599d9fc91", 0x3c}], 0x4, 0x93, 0x6) bind$bt_hci(r0, &(0x7f0000001440)={0x1f, 0x4, 0x2}, 0x6) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001480)={0x0, 0x3, 0x10}, 0xc) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1) r1 = fspick(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000001500)='/dev/uhid\x00', &(0x7f0000001540)="0a2afa529e8c8f7569ce0dfc21bff501bed1bee9dc4fb0a5071ad52db9fd67f9b4c26550b3afb7d77b35e9a82ab06d3c358fdd664754454056c74d9164baf404f614d99d166107c019ede6f7e6c22c7233c33a40ac15ff02996551c39265d0f7109b08c5c1719aca3c9cfd876153e553a225a1b315b68e24d17f79655e021c82cd85e8ce5aabfa4ae49dbda42d599dc379651e5d71", 0x95) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001640)=@o_path={&(0x7f0000001600)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'vxcan0\x00', 0x0}) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000016c0), 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@bloom_filter={0x1e, 0x8, 0x8001, 0x6, 0x4a1c, r2, 0x9, '\x00', r3, r4, 0x3, 0x1, 0x1, 0x8}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r4, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001780)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001800)=[0x0, 0x0, 0x0], 0x0, 0xa0, &(0x7f0000001840)=[{}, {}], 0x10, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) writev(r2, &(0x7f0000002e80)=[{&(0x7f0000001a80)="36d40de42793edd74bff4b26b1229cc1768a5cc3c337e296e69d163601bb5439c4fafc12e395a51c52254bb38821168a854a5483f3a6a7fe4d98354f880483ec4fe4eb865826e89f50c9ab2859635c4460ade9b0a48a325ccbea2e13d96a0ec69c7c6f9268c4317bbe7fd49acb4ab7591db02d4ddda1c322c3a32f6fc073fffaf9771fe0252f57054987836d2fe672a3f1c61ebed008e7755a5c47a1c7b9", 0x9e}, {&(0x7f0000001b40)="566b95a0abba73c81468bd5e77be135ba87a17dc59779cbfb5e34c96b5430069f43fdf75549bbcf78657538ae32daa91ea286d9d522b5f5f142524f007b99b30fa97d2898ebbb894a2143469b0723c639b1ecae3eaf49958975e1029eb8e6e9bc20e39ca8e", 0x65}, {&(0x7f0000001bc0)="55c362354b478e149fa21ae14853e2d80ad00a108d714d667ea432f07d344a909a607c86b56a0c113f2fe5ba0d45125887b5281acf755bcadc11a11558619b0344ad0fec9e668aad68d2d17d3fe91412838de66805795c47f9123a7437f00353db8536d89adba991d8186d19c91716ce61a5754de000457eee2fa7b23ba3dfa49129173e1b1ffa45de15dd845289f5c9c2eda2cba0624b4555f051a4b2e12125cf533c5b480765cfec18662ea27a76c927448c69e46ed3fa5895d744455583d2188e4e07b7cd63d5abde6fb68a63a5e3603cda78a70eb3dc1d377bce185161372617", 0xe2}, {&(0x7f0000001cc0)="ef1810300169906b952843dd607b2371b407657fbcf07ca75d81d8beb05de021f9ec85c72764fe0200076d1f0142b995cea542da0541676575cc7def790360025518b78e77680127ae9a127d4fc6eda8da78d5b94960b086b4660ed9d775a9772a4886a3b50f58c5a5ab346a265acaec3d9c5fba4dfa656b1635135daa3e0805c6f0e7a4bdd57257ced6a06a1286f12dd4a0a38deb", 0x95}, {&(0x7f0000001d80)="e66a3c1a142d96636b868fd372234e5a3af178dae0b21cc1076ede31646e046cf2dabf74eb460628e5c2f82f0694dcd60ead0c54e22da66a0ea3e23f7e812a601e39f69ec10fd7203d8b8428a573790767182701884fc207b2c7daf48c039f0e90ad2d66cd6cc1eb4aff7afadc0783b58dacbe7ec8de644b7e556f7bc6a2144ade5d3cab9abef2e2840fafe096994af3431d37bc0a4712242263e1c5a69cb999bef88ec4738c25e73f608f6a47a39493c5d4e1a3136a0a199d85124f6101", 0xbe}, {&(0x7f0000001e40)="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", 0x1000}, {&(0x7f0000002e40)="02e4426170262bb2b54d0e79311f6255d8197f1352f6cd080b0ee33e3009ee539af5b85dd99a7d6ea28be3c7ddbfb406a6c2d8f3f1e3cef42f", 0x39}], 0x7) write$cgroup_subtree(r4, &(0x7f0000002f00)={[{0x2d, 'cpu'}, {0x2b, 'devices'}, {0x2d, 'rlimit'}, {0x2b, 'cpu'}, {0x2b, 'memory'}]}, 0x23) fsmount(r4, 0x1, 0x70) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000002f40)) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000002f80)={0x1d, r3}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$binfmt_elf64(r5, &(0x7f0000002fc0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x0, 0x5, 0x7, 0x7, 0x0, 0x6, 0x7, 0x6d, 0x40, 0x286, 0x101, 0xe, 0x38, 0x3, 0x4, 0x2902}, [{0x5, 0x8, 0x7, 0x828d, 0x9, 0x4, 0x4, 0x80}, {0x4, 0x4, 0x5, 0x7, 0x9, 0xffffffffffffffff, 0x7f, 0x9}, {0x2, 0x4, 0x4, 0x400, 0x9, 0xe, 0x10, 0x9}], "4f0dd5d525dde45b145aceb1f76c4ae0fe7a5c85f8c5b773c4ce0e0745b89edf2f1e44acaf83ef8420d29090215a0266c34c4cb72f033a61fda957a13936ae67d27d5d6bc10c411a2fe7ebf13c9d5b62147553c85c267aa75bd84de71a584cf79af8ad2ea240410ef368725a827a95fbe80999434f201f9d67af75edcecd434700428f39ee16e813e178a0bc6b52329f7e0f81f7a4e334000efb4e16e139b83e9f041e56c3ab81979430bc44755d38110dfa6cc2e0e2c9269b87f12acb664e466464b7bb2748d977bfc8149d0e6efb77f83a902f4fac630ec4c561657c795704eeb746b9e776c5e546bbb5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xbd3) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003c00), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000003cc0)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c40)={0x24, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24040005) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCGSTAMP(r9, 0x8906, &(0x7f0000003d00)) socket$inet6(0xa, 0x1, 0x100) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000003e80)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003e40)={&(0x7f0000003dc0)={0x7c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x8001) 32.650053911s ago: executing program 0 (id=502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd2(0xe5c, 0x80000) (async) r2 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x7, 0x2, r2}) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x7, 0x2, r2}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000080)={0x5, 0x2, 0x4, 0x100000, 0xef8c, {0x77359400}, {0x5, 0x8, 0x3, 0x1, 0x6, 0x1, "57db83ab"}, 0xa, 0x4, {}, 0xe59}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 32.520028344s ago: executing program 0 (id=504): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000440)="bad386ddc7180869ab2b83b48ae1", 0xe, 0x24004095, &(0x7f00000001c0)={0x11, 0x1b, r3, 0x1, 0x1, 0x6, @local}, 0x14) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) fstatfs(r2, &(0x7f0000000840)=""/237) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32, @ANYBLOB="0002010000000000240014dbbd5beceb0756f5d712800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a001d25711df4e85e3eb0e8aea5698974d076adfae8701d8460ad48f0a5d25feb009fb306e8ccedaf995ab9508fb3abed7925532e74cc866ac1225b379c88c28052882b61d20605f7a2d07cdeed69bb", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg(r6, &(0x7f0000000800)={&(0x7f0000000240)=@ll={0x11, 0x19, r5, 0x1, 0x40, 0x6, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="3b5f868f7d535438f241a5757ffd4b6dbe7e514bf93488a66c5bd37c17f98315835329370a70293b7443d91398ac0fa6a76b7e346fb87a677af37bdadf17882c44be8e20a14cd4017eedde8b0b0e2b0de54f8dc1404198de14f49fb3ca34e1a01977d3570d58fc1ece6399fb0c4d0f0045c38c1fd8be65546f4fced5897ac5706611c99451c7967619dd466106647de2029dc046631614f1bc6dfd6d8640be7ccbf457033d", 0xa5}], 0x1, &(0x7f0000000480)=[{0x48, 0x0, 0x8000, "12a3d9b498fb38c54fb4e299ef9cce2468f3538f85e566d6ae007ee2dd03700eb467322e29b5d2e850f22b57ebafdc4874cdff3a"}, {0x28, 0x119, 0x9, "efecd906ea1e41acd6d304f86738635d7836d4d2d45aa1"}, {0xe8, 0x114, 0x101, "444671b907280ae240bf5b9124720fbb24662cbcc8d63fb21e63ff22ac932800fdefd5be7d175760df88d4a74cba3d838cc4da95bcbc49ac35b21329984e1bd368fac9a3254db0cb7cc423dcf3028b647fa8f301adf100faf55038490461103d46aa8e40a9d8d1c2f1caacca4c15a35e8ee2042527dd3390409f8fdf8ec9ada02301c0f2b5bef3103d86c7aa288b3360a435a6da0aa440b1e25b02713df84d79de6a191111277824b776389f999aebcc3880d04989f68775f8a7ff7dff0ab90422cc054d9f26cc4651f0f4ae5a0d437f182d"}, {0x60, 0x114, 0x5, "7152e6ca370b706a19e2eb3bd9f023ec7dd23df70c42f5be4a633d2ac7ab100bfc90f73c0d4b569807a96223932d96231096380c17570d489d172a1dad78e280864f7ee36d3a7c001a8be8"}, {0x110, 0x10f, 0x401, "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"}, {0xa8, 0x102, 0x3, "e18416d8d47f76ed96c54233dc8cca6515125d16bdbd197d8987498c1142e0135f918fc070ff5486a3afb455f1bf2b3eea1351f31c6a971ad42352700f4c17f7ad22abcf11153e27121101925a83aa8080c14fe37ffdf4b432786bb7cbd9ee3db696d30c5d30417bf9ccf88fbed540d5103446fc0fae5ca7e9e64b2ec71b764a45181f58b570f3f10236d7319d11cdb24896ce0ebe"}], 0x370}, 0xc0) 32.469422474s ago: executing program 0 (id=506): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000015c0)={{'\x00', 0x2}, {0xff}, 0xe, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)="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", 0x1b4, 0x0, &(0x7f0000000480)={0x2, 0x102b, {0x0, 0xc, 0x1e, "db17c9e08d6450c84a1d67fe59757fccf8b362e8e4c92b6c82660aa562b8", 0x1000, "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"}, 0xcc, "ac64eb71cd4d0888f6e215c1f28d94b2cdbaf806376b1ff1427525f658685341cb1d3e8ea01cadb7e7dbd567254c23ac9de7d5dec149420254b1460440dbda5e9c5ff20ec8ac7c56027b0f8204c9efd5196fc350be96a0f0f4140f433756295e8411dfd1ad731d358694f346d1d57e8ee97685f741dafb3655fa1592a5e441520a6c77d94e2c072ec37551fde3b8df19f1a0600f2556a5f59c5d331719e9e5200212998545dd81fe16a64e1cc1d1e9e615b25a7d71dc2a38b7947ea52bca6b0b869924ec98e284a4c54fad4a"}, 0x1103}) r2 = socket(0x400000000010, 0x3, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xfffffffffffffd40, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x4c840) 32.455244093s ago: executing program 0 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x148, r2, 0x900, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40e7, 0x5c}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x19, 0x13, [{0x12, 0x1}, {0x6c, 0x1}, {0x4}, {0x4}, {0x6}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0xc}, {0x2, 0x1}, {0x24, 0x1}, {}, {0xc, 0x1}, {0x16}, {0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x60, 0x1}, {0x6c}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xfa, 0xbe, "0c4caed6f6c31ac5e8ecb2749a32e42c887069c2d29c144972483193d5b7d73e59839a1321ae1e1ab0a37081fc0213bfe38a58aaeb4627ff934effed748bbfaabd8a8932ff7c07c7aa9b34c54d384f84f4ac73c24119d1d200829e035bf5e2e0c43510915916d471b473f5ce1d94cf3300793a6ef7f953f1b8f6e52010e45a132df656a0719a2f68d240afdd0c9a0f1cebfad77fdf91ad421805164677e387b9e9aa3e36b2df88c4ca73005d3ab991c42d9c0c7a705affe7ace84b32a62ac39c6649773bf3c738c6344d3978bbf942c4f060d2e7fff9285e9513ca57009f9f5df9d768ddb4573f216e2100ef6fd1af4bac20df4b6ffd"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x75e644e3217ba486) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x30000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x25, 0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x80000000, @loopback}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2c5205d00f81bef965a071f9fa600000000000000cd9ea71a5e9aec7f03d4406a7710c42cb5e754ab89928abcd7589d209bc45b4064028eb7fa0000b125736e04"}, 0xd8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x6}, 0x1c) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000003c0)={'multiq3\x00', [0x140, 0x2, 0x4, 0x5, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0x7, 0x4, 0x10, 0xf4, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x100009, 0x8, 0x4, 0x8, 0xa, 0x3ff, 0x1, 0x2, 0xaf, 0x0, 0x10001fc, 0x4, 0x4]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x4000, {0x2, 0x2}}]}}, 0x0, 0x32}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002700090025bd7800fddbdf2510000000140001000a"], 0x28}}, 0x4000080) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000000)={0x5, 0x2, 0x5f7}) 32.398196079s ago: executing program 0 (id=509): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='xfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000200)="66b9a00d00000f32dbd567f0879f00a00000670f4fa1ea000000660f388080062e0f01c5baf80c66b8d789868866efbafc0cec0f0666b9800000c00f320f304466b8010000000f23d80f21f86635800000300f23f866350a00000044360f01d1", 0x60}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x22e00) recvmsg$unix(r6, &(0x7f00000005c0)={&(0x7f0000000340), 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/14, 0xe}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x170}, 0x40000163) ioctl$KVM_RUN(r5, 0xae80, 0x0) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d0403048708487b05beb72666696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f43657274696669630000000000000008666963617428a2e0861e1ae90d412073656c662d74657374696e67206b657930b8ece1852be1042deb5eeeabba59301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301683142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c000000005de9705cb4022073b7c77a5adb670a964219cf4f674f356aee29ef25f24fc810149d7969", 0x1d8, 0xfffffffffffffffd) 24.142785128s ago: executing program 3 (id=594): setuid(0xee01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8000) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/144, 0x90, 0x0, 0x0}, &(0x7f0000000380)=0x40) setns(0xc9, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x0, 0xeb}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4095, 0xffffffffffffff9c}, {&(0x7f0000000000)=""/67, 0x50}], 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd0001007770616e3000"/26], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x42, 0x4, 0x1}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001"], 0x80}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4091}, 0x20044015) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000140)=0x7ffff, 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000004c0), 0x20048812) 24.038577791s ago: executing program 3 (id=595): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr$trusted_overlay_origin(&(0x7f0000000400)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140), 0x2, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getpeername(r2, 0x0, &(0x7f0000000080)) ioctl$VT_OPENQRY(r1, 0x4b4b, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f0000000940)) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES64=r0], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008004) 23.908675173s ago: executing program 3 (id=597): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) 23.907392488s ago: executing program 3 (id=599): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8a2, 0x0) read$fb(r0, &(0x7f0000000040)=""/65, 0x41) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f00000000c0)={0x3f, 0x2}) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000100)={0x6, 0x9, 0x5, 0x5f, 0x10001, 0xbaf1, 0x2, 0xfffffffc}) (async) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000100)={0x6, 0x9, 0x5, 0x5f, 0x10001, 0xbaf1, 0x2, 0xfffffffc}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@local, @initdev}, &(0x7f0000000240)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@local, @initdev, 0x0}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0xe, 0x1, 0x6, 0x0, @remote, @local, 0x7800, 0x1, 0x3, 0x3}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2b, 0x6, 0x7, 0x2a7edc71, 0x2, @rand_addr=' \x01\x00', @mcast2, 0x7, 0x10, 0x9, 0x5}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'pimreg\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x2f, 0x39, 0x0, 0x96bf, 0x20, @mcast1, @empty, 0x1, 0x8, 0x989f}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000940)={0x888, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r8}, {0x84, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1469}}}]}}, {{0x8, 0x1, r10}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xeea2}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r19}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4e9}}}]}}, {{0x8, 0x1, r20}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbb4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf88a000}}}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x4050}, 0x40000) (async) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000940)={0x888, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r8}, {0x84, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1469}}}]}}, {{0x8, 0x1, r10}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xeea2}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r19}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4e9}}}]}}, {{0x8, 0x1, r20}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbb4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf88a000}}}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x4050}, 0x40000) r21 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x30, r21, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r22}, @val={0xc, 0x99, {0x0, 0x72}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x30, r21, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r22}, @val={0xc, 0x99, {0x0, 0x72}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) (async) r23 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r23, 0x29, 0x1c, &(0x7f0000001400)={@ipv4={""/10, ""/2, @dev}}, &(0x7f0000001440)=0x14) 23.829168421s ago: executing program 3 (id=600): arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x1) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x2) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x2) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0xffffffffffff0434) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) 23.828129968s ago: executing program 3 (id=601): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) syz_emit_ethernet(0x96, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000030800603a00fc010000000000000000000000000000fe8000000000000000000000000000aa0200907800000000605b52ab00002b00fc000000000000000000000000000000fc0000000000000000000000000000001104010001000000fc020000000000000000000000000000fe8800000000000000000000000000018800000000000000"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000180)=[r3, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r6) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r7, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000090) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='fusectl\x00', 0x10004, &(0x7f0000000200)='/dev/dri/card#\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) (async) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) (async) syz_emit_ethernet(0x96, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000030800603a00fc010000000000000000000000000000fe8000000000000000000000000000aa0200907800000000605b52ab00002b00fc000000000000000000000000000000fc0000000000000000000000000000001104010001000000fc020000000000000000000000000000fe8800000000000000000000000000018800000000000000"], 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000180)=[r3, r2], 0x2}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r6) (async) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r7, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000090) (async) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='fusectl\x00', 0x10004, &(0x7f0000000200)='/dev/dri/card#\x00') (async) 17.166958712s ago: executing program 32 (id=509): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='xfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000200)="66b9a00d00000f32dbd567f0879f00a00000670f4fa1ea000000660f388080062e0f01c5baf80c66b8d789868866efbafc0cec0f0666b9800000c00f320f304466b8010000000f23d80f21f86635800000300f23f866350a00000044360f01d1", 0x60}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x22e00) recvmsg$unix(r6, &(0x7f00000005c0)={&(0x7f0000000340), 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/14, 0xe}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x170}, 0x40000163) ioctl$KVM_RUN(r5, 0xae80, 0x0) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="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", 0x1d8, 0xfffffffffffffffd) 16.748796627s ago: executing program 2 (id=641): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtaction={0x18, 0x30, 0x200, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x4}]}, 0x18}}, 0x8000) 16.746802565s ago: executing program 2 (id=648): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x303, 0x70bd2a, 0x25dfdbff, {0xa}}, 0x14}}, 0x20000024) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15) fallocate(r2, 0x10, 0x10000000003, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800000000000003) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x9, 0x81, 0x5, 0xff, 0x2, 0x779, 0x8, 0x5, 0x7fff, 0x6, 0x7, 0xc, 0x1, 0x2, 0x3, 0xe], 0xeeef0000, 0x90200}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) 16.114556692s ago: executing program 2 (id=643): prctl$PR_GET_CHILD_SUBREAPER(0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 16.039555082s ago: executing program 2 (id=644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000ac0)="2e000e001100816b50f32ecd920c441fca023d08090f9b31371c00000069bd6efb2502eaf603000100020400bf050005001201000000000000006958111fa968837afa9b468e27d16c36660186a3bca342ba5abe887683a018383eac2fe70225eb579978623d39ec7935c02501d73977433fd1471243c86881cfeafd1da34cb70fe030bc8a6dd77a00b1b628619cb371e508007e0f63c3cd73be461c096f779fa1bf", 0xa2}, {&(0x7f00000000c0)="55e10c373d19465f18c28e49c744e8e1b54adab44889ed6fc8c42e3bd2bc28ae30a7623ab17f8ffc95c61edab8381649c8007d9255bf530b3f3ed31af6883d961d94438f8c195232c19cbdce18b19d299efe243bc09213714fbaf882172e24e18a14a2522a007a901ab067a02e09d89c48205550deaa0fcb14fbb62bc5cfb144c87a4f95b6d2d4b84c59827b8e0cb6876e861b93b41852fdf3010000000000000046572c634fc48d936e1154ecf10b7ab6b101b9b6678d482487d9cc53f82ea58d33f84efd602f954d10e7227f", 0xcd}, {&(0x7f0000000c80)="3042689c338febf47ccc1c6a9a140acf4b53dfe526a8df55d50061499da0af256e42ff17fda83618a7cbad584d3886f95e7770830a52f3cda3668d5fdf4590b471c4f450af6bafed7e7ad4814f8337c0f30c4d4846aa74a691854e33ff55fc980966b01b202a9476246fdf96d96d4fddcc5301b8e71eebe48950df4f368b68d08f8f3ffbea672d3cfb6862095ee3dad8efccd8f02471acb93228e92c25ed8307ae283ecd198713fa709e805cbc0662c6266f4337f0b48af0e5d631bf09e7117a1a903cb62f2856ab57f1f77d5e9fee4b7c3ef605cacee33b813710e22c6da9bccdd60fe4", 0xe4}, {&(0x7f00000008c0)="02e608ce5f670e01b0cf6fd4a9090415439ff18ee6530814f0f7be5c2cb8caeac36c3223f40cab0bf73eb0e9c6de60b5253aabaae1d4a1eac29e2d7cac92f0a9f856c81a69614a2cb79faf9b1fd986c8d369391c685ca2fe274cbb552009ebf0c1d800edb17b6744cbfb42bcc8e51090352dd748a6f1a88371d1aee8597fb7e3f18663f600", 0x85}, {&(0x7f0000000840)="9eb33596d6a4d1c330a7c50272ada01076c7d0312f8f6ccab0d6f3dd46d0b8bd2b8c6c6e96500d4d934416c81e4ab31aec576a69466441e2c3f4293f5b1740bcdfccc7d8f5fded5ab575a1e31e03164a99c32777f8fc80f3b0c1d0428403875b79d13b6eae450f4ccbecf3bed07fc827cf079a4db5c204", 0x77}, {&(0x7f0000000b80)="f98edecc8b22b3537f11258b92f5477e93e996ae89f1d94fda42b33994d2226c419cb5ab914a893dea4529829ad721008678820ccf3a54bf8399cb7b293a6a6dc4981aaa98cf26955a552add3a53e4aad65816b4d2000000000000e8da035a28288d28a79a76181ed4f9ec3e9d2f804ef1521f73182512e4addfe667e334cbf5bfeab9f5aca0068900d2cae4935a351c87de871a5ba418ccbc0d331fc426130e52d5cd87a9563b3b978276f80abc6067a9c895922a3a39ba9922950d56b88f025a6ef605d729e1475c68c612ee682390a4fa4a68ab980f2743eeccee", 0xdc}, {&(0x7f00000009c0)="cbbed252acafee136bdc2f2c438af016ec", 0x11}, {&(0x7f0000000a00)="852f7842ae21ffd7d1136e7ef8969ccddf8877e8fe7cdeb34d4ce591ff", 0x1d}], 0x8}, 0x0) 15.875368877s ago: executing program 2 (id=645): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x82) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r3) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000500)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x8a2b5a2bffa504e5}, 0x800) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000440)) bind$bt_sco(r5, &(0x7f00000000c0)={0x1f, @none}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x4) (async) r7 = syz_open_dev$sndpcmp(&(0x7f0000000880), 0x5, 0x208002) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[], 0xa4}}, 0x0) (async) r8 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80000, 0xa) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (rerun: 32) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="ea517148", @ANYRES16=r4, @ANYBLOB="00022dbd7000fedbdf2501000000080001000300000008000100030000000c000600000000000000000008000300", @ANYRES16=r2, @ANYRES8=r7, @ANYRES8=r8, @ANYBLOB="61bffeca9ac07883eac3b099b97486de5e8b2ee812b7ae2659cbbf0349988f4d9b1de82751bca99c05ea87f2db011e301d1ec106e867db6a99122808131d20251fec65df58732a480e5657ca44152cff5ef3a66bac32162faa396b8c181adfbe36efdc598f29be29fb473ca2a8a3869880be9abc1393588e6d8166f00662f46e29833f07a9d1a978"], 0x70}, 0x1, 0x0, 0x0, 0x2400c000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYRES8=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r9, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="2000000000000000840000080200000000004102"], 0x20}], 0x1, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x0, 0x34, 0x0, 0x0, 0x4}, 0x28) (rerun: 64) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r10, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x11) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r11, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) (async) shutdown(r10, 0x1) (async, rerun: 32) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000003c0)) (async, rerun: 32) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, 0x0, 0x0) (async) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000e40)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r4], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000c00) fchdir(r1) 15.441754634s ago: executing program 4 (id=638): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xcc, [@remote]}, @lsrr={0x83, 0x3, 0x4a}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xfffd}}}}}}, 0x0) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x7a1, 0x3}, 0x20) (async) getpeername(r0, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0x8001, 0x511042) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf2501000000080003000500000008000400040000003a5cd08700000500060001000000"], 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) (async, rerun: 64) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0xff08) mkdir(&(0x7f00000001c0)='./file0\x00', 0x199) (async) r6 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r7, 0x0, 0x18, 0x0, &(0x7f00000001c0)) (async) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {0xaef, 0x1000}, 0x10000, 0x400}}) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 64) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async, rerun: 64) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f00000019c0)=0x1, 0x4) mount$bpf(0x200000000000, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x1b7f495, 0x0) 14.729767941s ago: executing program 2 (id=652): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000780)={r4, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00000002c0)={0x7, 0x9, 0x6, 0x84, &(0x7f0000000100)=""/132, 0x5a, &(0x7f0000000200)=""/90, 0x6, &(0x7f0000000280)=""/6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000300)={0x0, 0x0, 0xfff}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000340)={0xffffffffffffffff, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0xf7, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x200000000000000) 14.178506522s ago: executing program 4 (id=654): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept(r0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1) 11.829375243s ago: executing program 4 (id=655): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002bc0)='/sys/kernel/uevent_seqnum', 0x88140, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100005000000001e0000d00000000000", @ANYRES32=0x0, @ANYBLOB="0100000001000000140003007665746830000000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000480)) r6 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x86) fchdir(r7) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r7) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x2f, 0x2, 0x4, 0x2b38, 0xffffffffffffffff, 0x5, '\x00', r4, r7, 0x0, 0x5, 0x2, 0xd}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) pwritev2(r9, &(0x7f0000000100)=[{&(0x7f00000002c0)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r10, 0x4000) truncate(&(0x7f0000000180)='./file1\x00', 0x2) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r9) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r12, @ANYBLOB="040030bd7000ffdbdf250300000005000400020000001400020076657468315f766c616e000000000000140002006272696467655f736c6176655f300000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x10000000) ioctl$VIDIOC_S_SELECTION(r11, 0xc040565f, &(0x7f0000000580)={0xd, 0x103, 0x954351f62686d7f9, {0xfffff804, 0xe7fffffc, 0x7, 0x7}}) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x2, 0x101500) 11.774065848s ago: executing program 33 (id=655): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002bc0)='/sys/kernel/uevent_seqnum', 0x88140, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100005000000001e0000d00000000000", @ANYRES32=0x0, @ANYBLOB="0100000001000000140003007665746830000000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000480)) r6 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x86) fchdir(r7) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r7) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x2f, 0x2, 0x4, 0x2b38, 0xffffffffffffffff, 0x5, '\x00', r4, r7, 0x0, 0x5, 0x2, 0xd}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) pwritev2(r9, &(0x7f0000000100)=[{&(0x7f00000002c0)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r10, 0x4000) truncate(&(0x7f0000000180)='./file1\x00', 0x2) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r9) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r12, @ANYBLOB="040030bd7000ffdbdf250300000005000400020000001400020076657468315f766c616e000000000000140002006272696467655f736c6176655f300000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x10000000) ioctl$VIDIOC_S_SELECTION(r11, 0xc040565f, &(0x7f0000000580)={0xd, 0x103, 0x954351f62686d7f9, {0xfffff804, 0xe7fffffc, 0x7, 0x7}}) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x2, 0x101500) 8.49498152s ago: executing program 34 (id=601): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) syz_emit_ethernet(0x96, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000030800603a00fc010000000000000000000000000000fe8000000000000000000000000000aa0200907800000000605b52ab00002b00fc000000000000000000000000000000fc0000000000000000000000000000001104010001000000fc020000000000000000000000000000fe8800000000000000000000000000018800000000000000"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000180)=[r3, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r6) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r7, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000090) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='fusectl\x00', 0x10004, &(0x7f0000000200)='/dev/dri/card#\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) (async) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) (async) syz_emit_ethernet(0x96, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000030800603a00fc010000000000000000000000000000fe8000000000000000000000000000aa0200907800000000605b52ab00002b00fc000000000000000000000000000000fc0000000000000000000000000000001104010001000000fc020000000000000000000000000000fe8800000000000000000000000000018800000000000000"], 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000180)=[r3, r2], 0x2}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r6) (async) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r7, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000090) (async) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='fusectl\x00', 0x10004, &(0x7f0000000200)='/dev/dri/card#\x00') (async) 5.597892506s ago: executing program 5 (id=696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x141400, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000000)=""/129, 0x81}, {0x0, 0x31}], 0x2, 0x40000005, 0x5) 5.592384723s ago: executing program 5 (id=698): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='2', 0x1) openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0xa0}, 0x3ff}]}, &(0x7f0000000080)=0xfffffffffffffe74) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) ioctl(r0, 0x813cfd92, &(0x7f00000001c0)="f500") (async) setns(r6, 0x40000000) (async) setns(0xc9, 0x0) r7 = syz_open_dev$audion(&(0x7f0000000140), 0x800, 0x4000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x3, @empty, 0x9}}, [0x25, 0x6, 0x6, 0x6a, 0x2, 0x9, 0x8000, 0x4, 0xd67, 0x0, 0xa2, 0x800, 0x6000000, 0x9, 0xf7]}, &(0x7f0000000580)=0x100) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d00000800020000000000080009002a", @ANYRESDEC=r8, @ANYRESOCT=0x0, @ANYBLOB="e7afa9154387dff4abb4037f11aa99", @ANYBLOB="53388fc16abe166e50c086bab258210b731acea381a71e1d3e3ee1fbeb91d6c90fa81e26af12bea0f8e1050d7ffde8654fe94f1e05c0e9d91efb7afd3cf16b60ab919305702c96f5078ad621e8c55d193f4f07eb70118bda7707ff32f7e5b3babc5986fdc5d60a3a93fa749d0c054c2b9150e94de07f24521c0dd8be0c7f", @ANYRES16=r5, @ANYRESOCT=r8, @ANYRES64=r5], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410005000200000000000000010100002a00000014000180100004000000000000000000000000000c00028008000100"], 0x38}}, 0x0) 5.439478005s ago: executing program 5 (id=699): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2e, 0x40, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x81}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x2c}}, 0x0) 5.389403764s ago: executing program 5 (id=700): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9c940000, 0x2, 0x3, 0x3, 0x1, 0x203}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) r5 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x3e) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x8000000000000003, {}, 0xfd}, 0x18) sendmmsg(r3, &(0x7f0000008300)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)="09a40f15c20d4782", 0x8}], 0x1, &(0x7f0000000680)=ANY=[], 0x230}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=ANY=[], 0x290}}], 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf0, 0x0, 0x1}]}}, "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"}}, 0xfce) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="2eaa00000000002ae400000000a78820d1cee69dc20beb13cedfc1536445aec3b0ea5fce3f030197991b17f62396814ea88ea18558e4ac91075a4b0f7d21bf6f24e6422d121fb28fdd7006c2f7be446a721ffc536358ee8e6104dd6b66a9e8032eb9b4aa5460add33d364c200072493609264feb4cbbe222aa054764a1bbf74a845c52994b2b6067913d3a55e29b0600f1ff1962081da15659c70000b3df"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70}, 0x94) 4.240395338s ago: executing program 5 (id=708): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x30) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x30) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0)={0xc}, 0x4) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x10, @empty, 0x1}, 0x1c) listen(r2, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCFLSH(r3, 0x540b, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000847fff)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.175827607s ago: executing program 6 (id=710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000582}, 0x10) 3.372319036s ago: executing program 5 (id=711): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') pread64(r0, &(0x7f00000024c0)=""/4122, 0x101a, 0x1000000000000095) (async) readv(r0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000440)=""/153, 0x99}, {0x0}, {&(0x7f0000000600)=""/34, 0x22}], 0x4) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async) syz_usb_disconnect(r3) (async) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f0000000040)={&(0x7f00000000c0), &(0x7f0000000300)=[0x800], 0x200000007fff, 0x0, 0x2}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async) r7 = syz_io_uring_setup(0x7131, &(0x7f00000001c0)={0x0, 0x196a, 0x2, 0x3, 0x2ef}, &(0x7f0000000500), &(0x7f0000000240), &(0x7f0000000000)) io_uring_enter(r7, 0xe7f, 0xe876, 0x3, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000080)=[0xdca, 0x5], 0x2) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[@ANYRES8=r2, @ANYRES16=r6, @ANYBLOB="010025bd7000ffdbdf2567000000080001004200000008000300", @ANYRES32=r1, @ANYRES64=r1], 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)={0x3}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet_tcp_int(r4, 0x6, 0x17, 0x0, &(0x7f0000000400)) (async) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000040)) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=r4], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) 3.371742115s ago: executing program 6 (id=712): r0 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @loopback, 0x8}, 0x20) (async) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0xbf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x20) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) (async) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000340)=""/187) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x400000001fc, 0x181181) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x84, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x10, 0x2}, 0x8, 0x203ffffb, 0x300, 0x0, 0x2, 0x20000, 0x0}) 3.343832667s ago: executing program 6 (id=714): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x10002, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0xffffffff, 0x1, 0x7fffffff, 0x7ab6}) r2 = socket$nl_route(0x10, 0x3, 0x0) close(r0) r3 = syz_open_dev$rtc(&(0x7f0000000080), 0xfffffffffffffffb, 0x101a00) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pread64(r4, 0x0, 0x0, 0xffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) sendto$unix(r6, &(0x7f0000000200)="7543ce2dacbf4a2f51230843858bdf51f12109a1efb2d30c2f0693fe5395b92c2fc7fed20a809647c0a6cade4802686e16497f23042501c792661f8e08fb6fd0cf6ea39cccad2a1f344c207830020d70a40d022a38d49156309aca29a886586b3b85fe2b0c168e14d76a52b75298f29d2d11ef7c7447a2587efc8aba32cf98819ab18f60bb3fb6e745611b0fafd12b17dfd8f3d19ff10461", 0x98, 0x2000000, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = accept4$unix(r6, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e, 0x800) ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000400)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x2, 0x6, 0x8, 0x5, 0x7, 0x6}, {0x7, 0x6242a679, 0x1, 0x9, 0x9, 0xb2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r11, 0x3b88, &(0x7f0000000140)={0xc}) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1937) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="01010200000000002400128009000100626f6e640000000014000280050001000600000005001b0000000000"], 0x44}}, 0x0) 2.400247979s ago: executing program 6 (id=723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd4, r5, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) 2.309197631s ago: executing program 6 (id=724): syz_usb_connect(0x0, 0x2e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002be"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x418, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x7f, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x1005, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0x5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x4, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0xfff, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x6e0, 0x0, 0x40000008, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0x0, 0x2, 0x0, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl(r0, 0xc4c85512, &(0x7f0000000140)="b28314b9f65b208ee5cd41ee65c80900000000000000000000c8") 1.390052241s ago: executing program 1 (id=728): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0xfffffffffffffcf5, 0x3, 0x4002}]}}]}, 0x40}}, 0x0) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r5, 0x7f, 0x6cc58be9}, 0xc) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e20, 0x2, @private0, 0x7f8e088d}}}, &(0x7f0000000140)=0x84) 1.389765352s ago: executing program 1 (id=729): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x101101, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x101101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0xe5c, 0x80000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r5, 0x7, 0x2, r3}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xf7, 0x7f}}) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xf7, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0xcb, 0xd, 0x2000000000004, 0x6d, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r6 = epoll_create1(0x80000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/wakeup_count', 0x0, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) sendfile(r6, r7, 0x0, 0x8) epoll_wait(r6, &(0x7f0000000280)=[{}], 0x1, 0x3) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRESHEX=r2], 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) 1.149435422s ago: executing program 1 (id=730): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166e", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000001b00)={'syz1\x00', {0x401, 0x9, 0xf02, 0x5}, 0x4f, [0xff, 0x1, 0x7, 0x9, 0x7fff, 0xffffff80, 0x66f, 0x4, 0x6, 0xf, 0x1, 0x3, 0xa, 0x8, 0x0, 0x1, 0xc0, 0xd6, 0x67fffe, 0x5, 0x3, 0xfffff800, 0x10, 0x8, 0xffff, 0x5, 0x3, 0xf, 0x2, 0x3, 0x5, 0x3, 0x80, 0x4, 0xff, 0x0, 0x81, 0x0, 0x21, 0x7, 0x40, 0x9, 0x81, 0x5, 0x4, 0xffffff81, 0xffffffff, 0x554, 0x9, 0x6, 0xffffffff, 0x2, 0x6790, 0x0, 0xc63, 0xb92, 0x9, 0x6, 0x800000, 0x0, 0xffffffff, 0xfff, 0x2, 0x9], [0xffffff7b, 0x0, 0x3f, 0xc8, 0x9, 0x10, 0x3, 0xff, 0x9, 0x2, 0xffffff4d, 0x4, 0x16e0, 0x2, 0x9517, 0x2, 0x100, 0x800, 0x3, 0x5, 0x29, 0x4, 0x7, 0xb21, 0x8, 0x1, 0xaaa, 0x6, 0xfff, 0xb, 0x8001, 0x3cbd, 0x5, 0x4, 0x7, 0x1, 0x5, 0x0, 0xa, 0x1d, 0x7, 0x1, 0x10001, 0x5, 0x3, 0x7, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x1, 0x81, 0x6, 0x35, 0x10000, 0x0, 0x6, 0x9, 0x1, 0x0, 0x2, 0x7fffffff, 0x3], [0x5, 0x20000, 0x6, 0xfffffffe, 0x6, 0x6, 0x9, 0x80, 0x0, 0xfffffffd, 0x6, 0x2, 0x8, 0x8, 0x5, 0x40, 0xf329, 0x9, 0xe, 0x8, 0x7, 0xfff, 0x1000, 0x4, 0x1, 0x6, 0x1, 0xfffffffd, 0xfffff001, 0x9, 0x6, 0xfffffb93, 0x10000, 0x7, 0x80000002, 0x1, 0x5, 0xd, 0x200000, 0x101, 0x75095896, 0x9d, 0x7, 0x2, 0x9, 0x7, 0xfffffffe, 0x0, 0x3, 0x6, 0x0, 0x41a5, 0xe7, 0x12, 0x9a, 0x8e, 0xfffff7f1, 0x800, 0x4, 0x1f4e, 0xecb, 0x40, 0x1000, 0xaaf], [0x4, 0x7, 0x6, 0x4ee3ae5c, 0x7f, 0x0, 0xf2c, 0x6, 0x9, 0x0, 0x9, 0x7, 0x2, 0x7f00000, 0xffff, 0x2, 0x3, 0xeb, 0x4, 0xfffffff7, 0x3, 0xfffffff8, 0x5, 0x9, 0x0, 0xd, 0x3, 0x5, 0x7, 0x1, 0x3, 0xe2, 0x101, 0xf, 0xa, 0x1, 0x3d9, 0xef9, 0x9, 0x9, 0xfffffffe, 0x88a1, 0x9f, 0xb, 0x7, 0x800, 0x1, 0xff, 0x80000000, 0x1, 0x81, 0x9, 0xffffffff, 0xc8000000, 0x10000, 0x6, 0x4, 0x4, 0x1, 0x400, 0x7, 0x23e1, 0x3, 0x8]}, 0x45c) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup(r4) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000003800)={&(0x7f0000003780)=[{0x2, 0x2000, 0x1000, &(0x7f0000000880)="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"}, {0x1, 0x10, 0x1000, &(0x7f0000002540)="730b05b6089e790f449e5e9f72d9aca9c9eb998b1ea506bb150fef8a3e9f4c42c1f17eb8bb128e7879a9f118039cb14b89b7554881beee87ae978d9e5f855a340b239c8a67586f4f4a733c3ceb9693476fa6303d58ee590a79f1e961f5c21b103c547e6a52f72555f79724f82117166543447c0dfe17e7f2f835e871b6dce89ab4466f9e1c29aa85384fd192c8bda4bcd3576edc13b490c4addbc2642311553e10b0118721cf82dc8447729024b2df8ba14f3823c1d14af2bc21e046120bf31e1cc943e5c94fff07aec0aae160302fc43f9cf2181b23f7bbf12a475febc019d9c2af271ca9750bd307d9abfa3b3d3f231bfdcddd56507cb106a119736cf187f938f95e401bc3a637f2c57d29914ad53ac7398856f0a3b91b6ed457b32a4c0b30cea1bf0ae2ea4d7072a42282894c33ee369769bb551cbf53d6321b08ea0eadc9f20d4ca7dd074d3b5182791f894581ce12a8b6fa11c1a62424885415d871fdc61fc92d5a8e1ff50d782b99e640b5d08a1bda644a11040561d5ffd0bbaeb248e8fee79bb64371ffe190c48e254f2005926496f6d60394ade138be85fa8c992c7b922e4817daf6d5933d7b5ad69306299b83ecf93aed8624252dbcd34c0c6d274850f47b052412521016fc1ebd876e6db0efff21d1f4f0c033cc5b45c87b57bdaf15baf3b83ecd3226d7fdc5385a5e51c124aeda07f860bfd376b6170254bae14fd17f2ab645b1b130443e6a77d742d1522c41a471ba4357cb552fe8101f65fc88a3aaacd9e5bfea2b857d2e7c90ab4f7666a442e16086af62a5d49be6c93c8ac1f3ee3ba260ea26a99c42bfd498fd8875e6b6f4276945f92a44471a0c5a6f4df4d9185ebe998bd0ebc28227c7ef841ac7b2b9554c0095da0b1d68b5d8868cf8927b9a921f5ca07c7f0bc618d3575ffed2a053301c7432f8ad791d62eeaaaa5510b500205e2e72e4f85575fa71911fe19c21c26ca10633014f8526dd4f98ae1766f001574b3112db1cbd51b5f56423d36b8dcd027a1c0b044b46ff6dd49a700922f65e9e3efa9f75f8829ded0e861f1391078397076dcf91e0019a62e94ab09c62723536fbd67a3d431be9473cb43346839e0aa2eb888fa46e5124847c82cb60ee1c6f266ec1ba4b068bff1149404e2a3b2595c2c7fcdd7adb55cddc1a3da98512258ec0ec576b5ab73c50cfd7230860a5bfc1cb92f2dd9b2d4bb6b52cc620f7c06e44f610eb0f7debefc270ac5630aa152e626e4e6152a73ebf1a365214fbb5e96871c337364d054cb03fea3e25ba7b2e2ae556e73c1cf352b126cf03e20529f0dfecfa0d24c16e4a2ff23cec332b7867b86bfb3120d5960880aa8ad3e28ee600654f1dfac0fc417a7a1e0d1d0569383340544b694f3774b01c8d0d63a8ac0bd153288346eb1cec950fd524bdf5a0026eb8ed35a1d2a881aeb707987aa7b29aa6bf4f9a72fe4263cf5c5c71f5ef734c1f4e6b6f2381fba06a00ef3553a9dc7c9678190fc6feda9fbb6a70e20cebf07b50ed3d401a5e82ed1861d1c88ca0fefe3ff6194e01952f0352d91b0637788e6ba9c00095b84d163fd16e5352239105573225e9771143a30ee06bb52e8d6e9773230113b6b15442dbd31bd7d3901153b94dbfdb3c530d4c7e2cbbed96c6fd63711c8dab5323bde6b0ab214c25b37baf7c6e1d6587b7d163c5909571fb68006a7a0fa6d41464531eebb3914aff975c8020527f172a94bcf0c0598ba8717a58fd5598baba9b1d8f9b075ee22ff794aafdfcb3cdd274a809ccb67f77356164c3a67fac258444f878e3c965b272c3ce674ab0b86fd94c6413b6a0d623b2792a9a894ebc692bf1a0a60091e8f539ab0aa306da3c21a6b6a1365c175dbcb5e599777c4809647a932cd20225e6bad8457d7df51272af8b7c3bbad47a6fb54fdf4eacb49005c38e20bbd0271005ed3b0550e714f1dddff6fb6c338a5a5abab68f0757d788f63cc7d400a0e8126005f032b058cf8590932881786ba04966d32d2014df3b8edee282a238308827d4fa9807d470837697aa4e97aa8e189decfbf12349bcdc543b30e9f87a946d9010464a9dc289f82be9549ce4ff74d10ada7502f656c806964fb5ed658ce7632f7f73c1fa86750ee6be0a7df1d16b95e8b79ecd6e1c4f252c269924bab0c5fc1f68a64738436aec965e98209269bae62ef958ef5ff6fae0b169236a0a6c39aabf2181ae855bb8808ab40c8626b19ce77a0b070357b074dc3a1a916d0f06d8aa0d34eac9198d46824e9c31e8c07f48bf9835bbdf953a1d7f63cb5fe42c4ee33b8232774ec98701475a50555e001efe33f66c615e31f4c333343f484f1a7d67d3f45a4aef0a39e3d36e00104b8ed2da3fa37dd0e8fd1da1d41f73ced442e0fa58b8aa379bb9c012dd7b85f73183386834db00f000cf8063dc2d37974006e5c1cde90c404e14b44f140e7a24a7fa3b1da34efcc674d80c5afd1b2dfc0a4d39424fa525b2489208aa8153552af14173d86590eb6d0a88f8eae62b74695da0afb71c400a04c481eacccb94498c20db8b138b8db4d9a2b039aee4fb3c32ac84e687a599bf445887bb771b3231814efec75df9044bc9f328de590e19446ea8a4b64da4465d3bfe9802ae709007ed051518d38f2984694c2edd34c52e732076e0396312254aa77eaefd84ce38d2a4ac4840058412a5e4f17863105003c37c46ffa61e8f1beca60d68d5fb9d7055e6fff150da7e31b10f308981b62cddd37ba37861d500265e5516657a12b446cefe4a0ffdb474c86ef917ea6575a3e33f1317ed545f7839c83cf550b69454b90c2e93ac3a6f1b28a3c2cf556c8cd80a4b41f9a89a24300353edf82531dbdf8daf557e82b8d98bb57852d35c7244385f36d7cd2a72fb003a8b8375def97b607dd6c201072fc755083cfb270e3dc72107c433849a70f9a49bd3ff77643931d9ce4fd917acf8b791800fc13aaf4fc20d6ae81fe6dae52b8d79770cc4799eed40cc23c1607a104c355ce42baa1be728da97292ba7b6da15f2f7d0cca28f98c9cb24c794b3df9a20910b7e390675a8dd36385c3caf1981eac5a69354694d31e49a04104aa2f89c8d999b22f0febddcb135b801c2f505cafbe7b31c7b29bdd00304c80fbb3c23c0206d36e13deb5082fa757fa6b22b99f33936a640bcc39eecadcff3389d1336eb8755e49a266ee914eac994025c4810130e64757393cc093940fbd91a96d0cc82dac7add43bea16c705fa535b84985f7c119135ed140c946f4fbfbe57685b0592a6d6012a8c52f541d5a8971516c9e7c9fdb062488a10dc5d52d59b2c6c2ec0b81347a16248d783be364d06cb5a2750ee485db73357544259d0166395d9615ab24bbc78e78295bc638418b43681620f322c8c3f60a9ac94e7b3bc24234a0733ca65a2a6d1727cdb3d7dc508567418996740ba504fd6c1c2ecc31068b9aa3a77777bee1070877c48a63ffddf73b8ef594540d4f7d62188006c4d413da507d80dd859256c1c68a906f2953278e9859b7686d245b8dd60ebe8d55132482452fa6c9f774bdc8b313526af3cb0926f7f9cba557ba3428ba78f44e5b25b1e7a014d99eb923f1685a31d4dbf651ece55be0f31a183002602eaa065287b4bc952a5939513f1daff2f04ff72091233ffd16e55af640be09f3d1fdd098a958fb5c5a8c30356e426542518e07c68365d20dc2514c8e4e9179a8e5a6d085f9ec3fd5b49dde02979fdd50a06b4c68792304d3b6304d356b28548fc5c608e37c302ee76388991d68735c93a87b7ea5b08ba8157a7e5772c6f0175a548d6b50c174b15e16e201151f9c1c9128a861085fa2ef887a08520a304f5661d34001a35e60c21a0d332ffa57a9db822803d702946e46b694dbeb322cb51f538bef842d0bdbafa0c9c65369617dec3f1e4d594c50b898f84d46c7c56641ddf30f47e660b4941c1dc12773847ee16c63289656cf51b6a5ce16f071794d2465b91af61ed51c42e2d8991e2cf510fb9e263ed3b23609efbf17c7d3e87ce4a981abcf2a3eb1fd8066c9ce4a54037baf07bc5ac09f1f4532a91110eb9d711bb5a9ae7f1211abd641078b7adf297a3ac96ecd67970340d5af11f81f3a95af1baafebe9179a2316475087b59668977a2cb3b0d44f51a264e05b1704401f528f87ea7e544a63153c31a3e6ee85689e8b741064be7dcc95ec5a1e176f08be0f59aeb1f42167cddfe19b5dc4d2e9fa386c607ddce8b2f0639f4d9a43a202e2642c32bafe61ce152424e66b07b571808918c5722267b49a36bf95c5106e2535cd7750682e9ab3a7c258d5734339bf4be3f845758e66ad3d24a60929b479cb6bbd791ce5ede8ba8ad1b937591064b97ce071b93f62c43ab55383843c17b3250768a297c797424fd5107592e61f4476eadefe1a27234cf1195228d06a76eb399efabcdafc7b2255f0efa44f72a4935fa7a46a51d1e03d043fe07fdb326537c6de941ba4d298d777de99b0592343c41489bc4cccbadeefe989a3364a4621f60a46cda25accf1d0b159db38f39620c0c8437636b5db0f9634c7cc4c9a52800c034e4d87a30f9ebf2c852b33b0577a614de9e8895783bbfbd52e547111e89827d6bc50eaf1a8793849412827a23b117c2b94b9ec62fbf48519b8702dde67c2af9ae8adf81a3b176b3e6aa74d0baaa77e8e3786c6381a7bb820c32cbc87cefbe3bedfefe8edac92c267c8720bb32ac987accb103817d4076d252bb3189da2c35d236c9fabc2af7821bc7d85113d7e49b3195c9e80805bb97c18e49b1bfe226bf4b1f341421cfa5718cb58249c699146886372e6e8d2a12e0588c1e60b0fac53139a763c77b0ad638f9ff191a5ae08bcf7199630a3d5873686129b3e38ab4b9fc1039b5706e4e776d093d4a87b3cb6e2069b4b7d8792d5919ed9a34d2f6284a72e799f5532904fc201b84e84305c120a2efe9bf2f91d8fe5172f61938624cfd86e0aa7dba338436dd295f9459bc1989d2f8f6d377d9ea27cc98aeba50982b940519c7d2341d6e04f3fe92ef5a2d0c5564818397321087ef99537d357016c231ab03d9e9135772d3ce28500a4c71a4ba0e4def64c4f65c99445b3cb68c0a6f6cccc6a10f742f21536d682494f9983a55834ddac85641ee5162dbbf23d1bd74eec6fe8e6d3efe8aef66c23db3c718f415b2a3f94eb86b7aa610555effe2dc51e0b12f420ec02cebf89e9905a7a1e641f110d907be8f6b713729e44f37516e1c5bce1fe8138c86b6cca865c2210d11fcb9016abe19a722d083368e9e5fd79e6b2a21ca5950758840ef8e68fc9479da1061806d61e09a704708dc74199ce6063c14ad10c92b696ccb6665cf6c911ecaa6894edf7c6f3a75d1733565c392f8fe1e38fa8755d0f924a90722e226623999fa37a089513b4d91ce6778407b67a90f451d2599765c01630a63e251a63060758e68467992527e9b833281210d971b6b0b27376a12fe13ef7df02de86dcf20afbb773f86124fd5a3ee79b4f8ff3762e014655f31c8aa4a09f36505597624048c67ecd7ba66fad0c0a636616305098c33f8b251a0a2e7cd8324a6dc8cdc8fbb1578ea6b7dd045803d7d52dae14437218c1277d347a3027aba52f342e1bca04b2952b78d53e9d02b92324e9e26af73e0ef38bbf4109ec24b76c8521fec00e81670a2d3b058e8c7edafab21481a875d4564af51ab27d1296b95567002cb9d23e7c691fb863673d368b1d033c79f83402bc38492a97894fcdd88ed4e8c62b04b56b46c4e92af4f3e4a268db2f4cd17095861e47d2f4a7eb454529dfe72fd28ce7d6a3fe7fd1"}, {0x80, 0x4a10, 0x2c, &(0x7f0000003540)="e575c43c090f768465d43a8d27857e859547f4578e6d2c90abad1f98cb8828ee64ac6ce02e0a1a38a4253a46"}, {0x401, 0x6820, 0x19, &(0x7f0000003580)="0eacb0f864ddf6be195c5ae100944590bc5cf02158e5db0082"}, {0x5, 0x2800, 0x4f, &(0x7f00000035c0)="b6ffd5f573db62cd8b77eebe3b4685153f2f257b8f4c99839ca4db239339765b03ab2d66084dccc705441f2ee920412501b7e5a005a1f8e789999c08062188c860d67924c1fbe1c23cd1ab297e9b1e"}, {0x5, 0x10, 0xa8, &(0x7f0000003640)="12b1924ab6b6a728c9a1ec4a98edcf8c64ab1f2c940d72b437979a94946b1e4b55021b26775f7d62f73ae55716def65760f36bf71153a2cbf3edc685183e449e222a5e81bab2122e3bf9158a99c7b125d3eca7dc545dbee5ec2ff6bc92f048c73041215d58625857c6888bc86582561133f39475c2a5a516fd864084591c1dbc35c52f8532b45e3ba36f93df3c140d78e586a0347be011f35362a1ab59cdfd41d1681e964ece30c1"}, {0x1, 0x6010, 0x70, &(0x7f0000003700)="93d52bcd1d337e7e6721c632b1e84e3c5560f3907ddb5511ad7c01f6210f24e17e4bbafa3f54e75929c6e1caf391da17f9ac47096ac39ddb2d8102c1fce02d9089c959ed701b3ed6451bc5e16b34ea6f582da7e9ccbba86ae7b2b6e260fb071d5669515037c99b373d2fd0866be83954"}], 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400040, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.148909335s ago: executing program 6 (id=731): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e28, 0x1, @empty}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = syz_usb_connect(0x2, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09051b00200007039a0705d15b89f26d09050903"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00030209f5fbbfd0"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002040)={0x2c, &(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRES16=r2, @ANYRES32=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x89d4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000080)={0x200002, 0x200003, 0xfffffffb, 0x2, 0x7, 0x3}) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f00000047c0)={0x2020}, 0x2020) bind(r0, &(0x7f0000000300)=@generic={0x8, "ffff0000feffffff00"}, 0xc) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000480)=0x1) read(r6, 0x0, 0x0) 908.300074ms ago: executing program 1 (id=732): syz_open_dev$video(&(0x7f0000000080), 0x485, 0x40000) (async) syz_open_dev$video(&(0x7f0000000080), 0x485, 0x40000) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x3, 0x0, 0x3b, 0x719d}, {0xfff8, 0x6, 0x7, 0x80000000}]}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x3, 0x0, 0x3b, 0x719d}, {0xfff8, 0x6, 0x7, 0x80000000}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) (async) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x1) socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000500), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x800, 0x0) (async) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x800, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') (async) pivot_root(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfffffffffffffe84}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYBLOB="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"], 0x20, 0x6044}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x24002, 0x0) readv(r6, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000340)=""/143, 0x8f}], 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0x80045300, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) 49.829398ms ago: executing program 1 (id=733): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0xef24, 0x8, 0x2, 0xc4}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5716, 0x2, 0x2, 0x325}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x137c, 0x8, 0x1, 0x26b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c04, 0x1000, 0x1, 0x3cf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x19e9, 0x20, 0x3, 0x185}, 0xffffffffffffffff}], 0x4, &(0x7f0000002640)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x1, 0xa01, 0x0, &(0x7f0000001640)=@buf_1k="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"}}, &(0x7f00000026c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xa, 0x2000002, 0x4010, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x1, 0x1fb}, 0x0) epoll_create1(0x0) accept4(r2, 0x0, 0x0, 0x800) r3 = io_uring_setup(0x45cb, &(0x7f0000000180)={0x0, 0xe486, 0x10, 0x3, 0x264}) io_uring_setup(0x4438, &(0x7f0000000200)={0x0, 0x25e5, 0x1, 0x1, 0x215, 0x0, r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r5, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r6}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) ioctl$TUNSETIFF(r4, 0x4008662c, 0x0) 0s ago: executing program 1 (id=734): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0x7, 0xffffffff, 0xfffffffd, 0x6, 0xffffffff, 0xffffffff, 0xffff7fff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0x1], [0xffffffff, 0xffffffff, 0xffefffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0x6]], '\x00', [{0x9, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x10001, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x3ffd, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) (async) syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0x7, 0xffffffff, 0xfffffffd, 0x6, 0xffffffff, 0xffffffff, 0xffff7fff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0x1], [0xffffffff, 0xffffffff, 0xffefffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0x6]], '\x00', [{0x9, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x10001, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x3ffd, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x7) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.0.192'. [ 64.991650][ T6721] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 64.995393][ T55] IPVS: starting estimator thread 0... [ 65.095898][ T5808] bond0: (slave bond_slave_0): interface is now down [ 65.095960][ T5808] bond0: (slave bond_slave_1): interface is now down [ 65.099109][ T6747] binder: 6736:6747 ioctl 40405515 0 returned -22 [ 65.105478][ T6732] IPVS: using max 30 ests per chain, 72000 per kthread [ 65.116017][ T5808] bond0: (slave bond_slave_0): interface is now down [ 65.116076][ T5808] bond0: (slave bond_slave_1): interface is now down [ 65.122573][ T5808] bond0: now running without any active interface! [ 65.374513][ T5459] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 65.524625][ T5459] usb 7-1: Using ep0 maxpacket: 32 [ 65.525950][ T5459] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 65.530677][ T5459] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 65.530792][ T5459] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 65.530815][ T5459] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 65.530836][ T5459] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 65.535450][ T5459] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.535474][ T5459] usb 7-1: Product: syz [ 65.535486][ T5459] usb 7-1: Manufacturer: syz [ 65.535498][ T5459] usb 7-1: SerialNumber: syz [ 65.549086][ C2] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 65.555686][ T5459] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input6 [ 65.563392][ T43] audit: type=1400 audit(1788380710.522:475): avc: denied { read } for pid=5125 comm="acpid" name="mouse2" dev="devtmpfs" ino=2917 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.774543][ T5459] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 65.774588][ T5459] (id 0x00) [ 65.846041][ T5459] rc_core: IR keymap rc-imon-pad not found [ 65.846085][ T5459] Registered IR keymap rc-empty [ 65.846143][ T5459] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 65.846165][ T5459] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 65.900065][ T6790] 0x000000000006-0x000000020000 : "" [ 65.912707][ T6790] ftl_cs: FTL header corrupt! [ 65.928503][ T5089] Bluetooth: hci1: unexpected event for opcode 0x080e [ 65.966795][ T5459] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 65.976130][ T5089] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 65.977303][ T5459] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input7 [ 65.993450][ T5459] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:5> initialized [ 66.028284][ T6808] ufs: You didn't specify the type of your ufs filesystem [ 66.028284][ T6808] [ 66.028284][ T6808] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 66.028284][ T6808] [ 66.028284][ T6808] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 66.039472][ T6808] ufs: ufstype=old is supported read-only [ 66.043070][ T6808] ufs: ufs_fill_super(): bad magic number [ 66.152286][ T5459] usb 7-1: USB disconnect, device number 5 [ 66.291064][ T6832] netlink: 96 bytes leftover after parsing attributes in process `syz.3.215'. [ 66.302271][ T6830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.214'. [ 66.326292][ T6832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6832 comm=syz.3.215 [ 66.468934][ T6843] erspan1: entered promiscuous mode [ 66.476779][ T6842] Bluetooth: MGMT ver 1.23 [ 66.755881][ T5089] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.757270][ T5089] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.757331][ T5089] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.763924][ T6846] cgroup: fork rejected by pids controller in /syz0 [ 66.769086][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 66.985814][ T6907] netlink: 'syz.0.226': attribute type 10 has an invalid length. [ 66.985887][ T6907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.226'. [ 66.985936][ T6907] bond0: entered promiscuous mode [ 66.985951][ T6907] bond_slave_0: entered promiscuous mode [ 66.986147][ T6907] bond_slave_1: entered promiscuous mode [ 66.986515][ T6907] bridge0: port 3(bond0) entered blocking state [ 66.987256][ T6907] bridge0: port 3(bond0) entered disabled state [ 66.987381][ T6907] bond0: entered allmulticast mode [ 66.987394][ T6907] bond_slave_0: entered allmulticast mode [ 66.987407][ T6907] bond_slave_1: entered allmulticast mode [ 66.991037][ T6906] befs: (nbd3): unable to read superblock [ 67.177186][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 67.327542][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 67.415307][ T1180] IPVS: starting estimator thread 0... [ 67.435145][ T6937] FAULT_INJECTION: forcing a failure. [ 67.435145][ T6937] name failslab, interval 1, probability 0, space 0, times 0 [ 67.435321][ T6937] CPU: 1 UID: 0 PID: 6937 Comm: syz.2.232 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.435380][ T6937] Tainted: [L]=SOFTLOCKUP [ 67.435386][ T6937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.435392][ T6937] Call Trace: [ 67.435398][ T6937] [ 67.435405][ T6937] dump_stack_lvl+0x100/0x190 [ 67.435430][ T6937] should_fail_ex.cold+0x5/0xa [ 67.435448][ T6937] should_failslab+0xc2/0x120 [ 67.435463][ T6937] __kmalloc_cache_noprof+0x91/0x6d0 [ 67.435480][ T6937] ? __x64_sys_futex+0x358/0x4d0 [ 67.435495][ T6937] ? fsnotify_alloc_group+0x8d/0x320 [ 67.435514][ T6937] fsnotify_alloc_group+0x8d/0x320 [ 67.435533][ T6937] do_inotify_init+0x4b/0x5e0 [ 67.435547][ T6937] __x64_sys_inotify_init1+0x30/0x40 [ 67.435563][ T6937] do_syscall_64+0x123/0x790 [ 67.435580][ T6937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.435593][ T6937] RIP: 0033:0x7f6e1c59e159 [ 67.435604][ T6937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.435614][ T6937] RSP: 002b:00007f6e1d458028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 67.435626][ T6937] RAX: ffffffffffffffda RBX: 00007f6e1c826090 RCX: 00007f6e1c59e159 [ 67.435634][ T6937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000800 [ 67.435640][ T6937] RBP: 00007f6e1c635024 R08: 0000000000000000 R09: 0000000000000000 [ 67.435646][ T6937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.435652][ T6937] R13: 00007f6e1c826128 R14: 00007f6e1c826090 R15: 00007ffdabc3f1c8 [ 67.435666][ T6937] [ 67.445091][ T6945] fuse: Unknown parameter 'g' [ 67.498090][ T6947] nftables ruleset with unbound chain [ 67.506359][ T6939] IPVS: using max 43 ests per chain, 103200 per kthread [ 67.569882][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 67.584142][ T6951] netlink: 'syz.0.234': attribute type 11 has an invalid length. [ 67.715879][ T6961] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 67.976873][ T6977] openvswitch: netlink: Message has 8 unknown bytes. [ 68.655147][ T6945] Dynamic Preempt: lazy [ 68.834623][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.834667][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.834712][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.127865][ T7033] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 69.195694][ T7036] netfs: Duplicate cookie detected [ 69.195765][ T7036] netfs: O-cookie c=00000003 [fl=4008 na=0 nA=0 s=-] [ 69.195831][ T7036] netfs: O-cookie V=00000001 [9p,syz,] [ 69.195862][ T7036] netfs: O-key=[8] '153cac0400000000' [ 69.195897][ T7036] netfs: N-cookie c=00000004 [fl=8 na=0 nA=0 s=-] [ 69.195932][ T7036] netfs: N-cookie V=00000001 [9p,syz,] [ 69.195963][ T7036] netfs: N-key=[8] '153cac0400000000' [ 69.396784][ T7046] netlink: 'syz.0.257': attribute type 12 has an invalid length. [ 69.492638][ T7049] hub 4-0:1.0: USB hub found [ 69.492937][ T7049] hub 4-0:1.0: 2 ports detected [ 69.549629][ T7054] comedi comedi1: Minor 2 could not be opened [ 69.588366][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 69.592758][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 69.711604][ T7063] vlan2: entered promiscuous mode [ 69.711665][ T7063] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 69.752351][ T7072] netlink: 220 bytes leftover after parsing attributes in process `syz.1.264'. [ 69.782541][ T7073] netlink: 'syz.3.262': attribute type 4 has an invalid length. [ 69.791029][ T7072] syzkaller0: entered promiscuous mode [ 69.791086][ T7072] syzkaller0: entered allmulticast mode [ 69.794730][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.812264][ T43] kauditd_printk_skb: 60 callbacks suppressed [ 69.812338][ T43] audit: type=1400 audit(1788380714.772:536): avc: denied { read } for pid=7074 comm="syz.0.265" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 69.812376][ T43] audit: type=1400 audit(1788380714.772:537): avc: denied { open } for pid=7074 comm="syz.0.265" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 69.917519][ T43] audit: type=1400 audit(1788380714.882:538): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 69.941016][ T7081] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 69.944491][ T43] audit: type=1400 audit(1788380714.902:539): avc: denied { write } for pid=7080 comm="syz.1.267" name="control" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 70.004527][ T7085] FAULT_INJECTION: forcing a failure. [ 70.004527][ T7085] name failslab, interval 1, probability 0, space 0, times 0 [ 70.004597][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.0.269 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 70.004638][ T7085] Tainted: [L]=SOFTLOCKUP [ 70.004646][ T7085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.004658][ T7085] Call Trace: [ 70.004665][ T7085] [ 70.004673][ T7085] dump_stack_lvl+0x100/0x190 [ 70.004709][ T7085] should_fail_ex.cold+0x5/0xa [ 70.004737][ T7085] should_failslab+0xc2/0x120 [ 70.004762][ T7085] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 70.004783][ T7085] ? alloc_vmap_area+0x640/0x2bb0 [ 70.004808][ T7085] alloc_vmap_area+0x640/0x2bb0 [ 70.004836][ T7085] ? kasan_save_track+0x14/0x30 [ 70.004856][ T7085] ? __kasan_kmalloc+0xaa/0xb0 [ 70.004876][ T7085] ? __pfx_alloc_vmap_area+0x10/0x10 [ 70.004897][ T7085] ? __get_vm_area_node+0x124/0x350 [ 70.004923][ T7085] __get_vm_area_node+0x1ed/0x350 [ 70.004947][ T7085] ? ringbuf_map_alloc+0x363/0x860 [ 70.004969][ T7085] get_vm_area_caller+0x71/0xa0 [ 70.004992][ T7085] ? ringbuf_map_alloc+0x363/0x860 [ 70.005013][ T7085] vmap+0x132/0x2e0 [ 70.005034][ T7085] ? __pfx_vmap+0x10/0x10 [ 70.005053][ T7085] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 70.005085][ T7085] ? __bpf_map_area_alloc+0x13a/0x200 [ 70.005108][ T7085] ringbuf_map_alloc+0x363/0x860 [ 70.005134][ T7085] map_create+0x874/0x30d0 [ 70.005160][ T7085] ? find_held_lock+0x2b/0x80 [ 70.005201][ T7085] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 70.005226][ T7085] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 70.005257][ T7085] ? __pfx_map_create+0x10/0x10 [ 70.005283][ T7085] ? avc_has_perm+0x135/0x1e0 [ 70.005306][ T7085] ? __pfx_avc_has_perm+0x10/0x10 [ 70.005327][ T7085] ? __might_fault+0xc5/0x140 [ 70.005356][ T7085] ? __might_fault+0xc5/0x140 [ 70.005395][ T7085] ? selinux_bpf+0xfb/0x150 [ 70.005423][ T7085] __sys_bpf+0x12a0/0x4a30 [ 70.005448][ T7085] ? __pfx___sys_bpf+0x10/0x10 [ 70.005464][ T7085] ? find_held_lock+0x2b/0x80 [ 70.005489][ T7085] ? futex_wake+0x4ea/0x5e0 [ 70.005538][ T7085] ? rcu_is_watching+0x13/0xc0 [ 70.005565][ T7085] ? trace_sched_exit_tp+0x120/0x160 [ 70.005607][ T7085] ? __x64_sys_futex+0x34f/0x4d0 [ 70.005631][ T7085] ? __x64_sys_futex+0x358/0x4d0 [ 70.005659][ T7085] ? xfd_validate_state+0x129/0x190 [ 70.005684][ T7085] ? __x64_sys_bpf+0xce/0x140 [ 70.005701][ T7085] __x64_sys_bpf+0xce/0x140 [ 70.005720][ T7085] ? do_syscall_64+0xae/0x790 [ 70.005744][ T7085] do_syscall_64+0x123/0x790 [ 70.005767][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.005787][ T7085] RIP: 0033:0x7f44b259e159 [ 70.005804][ T7085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.005822][ T7085] RSP: 002b:00007f44b33f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.005841][ T7085] RAX: ffffffffffffffda RBX: 00007f44b2825fa0 RCX: 00007f44b259e159 [ 70.005853][ T7085] RDX: 0000000000000050 RSI: 0000200000000800 RDI: 0000000000000000 [ 70.005865][ T7085] RBP: 00007f44b2635024 R08: 0000000000000000 R09: 0000000000000000 [ 70.005876][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.005887][ T7085] R13: 00007f44b2826038 R14: 00007f44b2825fa0 R15: 00007fff3fa20a18 [ 70.005911][ T7085] [ 70.058930][ T7089] tipc: Started in network mode [ 70.058945][ T7089] tipc: Node identity 1000001, cluster identity 4369 [ 70.058955][ T7089] tipc: Node number set to 16777217 [ 70.059062][ T7089] tipc: Cannot configure node identity twice [ 70.059272][ T43] audit: type=1400 audit(1788380715.022:540): avc: denied { create } for pid=7088 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 70.059306][ T43] audit: type=1400 audit(1788380715.022:541): avc: denied { read } for pid=7088 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 70.067448][ T7089] tipc: New replicast peer: 127.0.0.1 [ 70.068312][ T7089] tipc: Enabled bearer , priority 10 [ 70.071501][ T43] audit: type=1400 audit(1788380715.032:542): avc: denied { mounton } for pid=7088 comm="syz.0.271" path="/71/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 70.072294][ T7089] tipc: Enabling of bearer rejected, already enabled [ 70.133287][ T43] audit: type=1400 audit(1788380715.092:543): avc: denied { write } for pid=7097 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.181732][ T7100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1044 sclass=netlink_route_socket pid=7100 comm=syz.0.275 [ 70.217153][ T7103] jfs: Unknown parameter 'usrquota/tun' [ 70.231527][ T7103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'. [ 70.231595][ T7103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'. [ 70.237962][ T43] audit: type=1400 audit(1788380715.202:544): avc: denied { getopt } for pid=7099 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.244499][ T43] audit: type=1400 audit(1788380715.202:545): avc: denied { write } for pid=7099 comm="syz.0.275" name="sg1" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 70.259451][ T7100] syz_tun: refused to change device tx_queue_len [ 70.532702][ T7118] Bluetooth: MGMT ver 1.23 [ 70.604969][ T5089] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 70.605234][ T7126] 9pnet_virtio: no channels available for device syz [ 70.737522][ T7138] xt_ecn: cannot match TCP bits for non-tcp packets [ 70.777938][ T7146] 9pnet_virtio: no channels available for device /dev/nbd0 [ 70.779421][ T7148] 9pnet_virtio: no channels available for device /dev/nbd0 [ 70.799710][ T7147] netlink: 'syz.3.288': attribute type 13 has an invalid length. [ 70.817730][ T7147] netlink: 'syz.3.288': attribute type 13 has an invalid length. [ 70.818094][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.818146][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.818202][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.834708][ T5808] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.869739][ T7154] 9pnet_virtio: no channels available for device syz [ 70.926249][ T5089] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.926299][ T5089] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.985624][ T64] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 71.038101][ T7166] binder_alloc: binder_alloc_mmap_handler: 7165 200000ffd000-200001000000 already mapped failed -16 [ 71.054502][ T57] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 71.194795][ T57] usb 6-1: device descriptor read/64, error -71 [ 71.294012][ T7179] (syz.3.299,7179,2):ocfs2_get_sector:1713 ERROR: status = -5 [ 71.294090][ T7179] (syz.3.299,7179,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 71.294129][ T7179] (syz.3.299,7179,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 71.294153][ T7179] (syz.3.299,7179,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 71.319439][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.319621][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.336250][ T1356] cfg80211: failed to load regulatory.db [ 71.454693][ T57] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 71.594607][ T57] usb 6-1: device descriptor read/64, error -71 [ 71.704877][ T57] usb usb6-port1: attempt power cycle [ 72.041908][ T7217] overlayfs: failed to resolve 'dont_measure': -2 [ 72.054726][ T57] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 72.075167][ T57] usb 6-1: device descriptor read/8, error -71 [ 72.326640][ T57] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 72.358797][ T57] usb 6-1: device descriptor read/8, error -71 [ 72.476774][ T57] usb usb6-port1: unable to enumerate USB device [ 72.663189][ T7242] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 72.672108][ T7240] team0: Device gtp0 is of different type [ 72.674833][ T7242] input: syz1 as /devices/virtual/input/input8 [ 72.728053][ T7244] __nla_validate_parse: 9 callbacks suppressed [ 72.728233][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 72.778028][ T7248] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 73.274772][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 73.294076][ T7267] bridge0: port 3(bond0) entered blocking state [ 73.294216][ T7267] bridge0: port 3(bond0) entered forwarding state [ 73.296743][ T7267] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.305145][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.330891][ T7268] netlink: 'syz.0.326': attribute type 13 has an invalid length. [ 73.341482][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.345479][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.351653][ T7267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.351721][ T7267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.362823][ T7267] veth1_vlan: left promiscuous mode [ 73.365463][ T7267] veth0_vlan: left promiscuous mode [ 73.366372][ T7267] veth0_vlan: entered promiscuous mode [ 73.371183][ T7267] veth1_vlan: entered promiscuous mode [ 73.376399][ T7267] veth1_macvtap: left promiscuous mode [ 73.379003][ T7267] veth0_macvtap: left promiscuous mode [ 73.379630][ T7267] veth0_macvtap: entered promiscuous mode [ 73.385710][ T7267] veth1_macvtap: entered promiscuous mode [ 73.391536][ T7267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.395410][ T7267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.398499][ T7267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.402197][ T7267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.411120][ T7267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.421213][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.421321][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.424072][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.424165][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.424963][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 73.425486][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.426701][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 73.426727][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.426739][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.426752][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.426764][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.426783][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.464586][ T5807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 73.464849][ T5807] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.465087][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.465127][ T5807] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.465148][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.465176][ T5807] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.465196][ T5807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.465225][ T5807] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.465245][ T5807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.556269][ T7277] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 73.556346][ T7277] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 73.556396][ T7277] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 73.556426][ T7277] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 73.556449][ T7277] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 73.556471][ T7277] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 73.556494][ T7277] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 73.556516][ T7277] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 73.556539][ T7277] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 73.556560][ T7277] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 73.585055][ T7278] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 73.585081][ T7278] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 73.585146][ T7278] vhci_hcd vhci_hcd.0: Device attached [ 73.623935][ T7280] vhci_hcd: connection closed [ 73.625975][ T12] vhci_hcd vhci_hcd.0: stop threads [ 73.626028][ T12] vhci_hcd vhci_hcd.0: release socket [ 73.626069][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 73.633031][ T10] usb 8-1: usb_control_msg returned -32 [ 73.633061][ T10] usbtmc 8-1:16.0: can't read capabilities [ 74.011817][ T7289] netlink: 'syz.2.330': attribute type 1 has an invalid length. [ 74.048456][ T7291] pim6reg1: entered promiscuous mode [ 74.048517][ T7291] pim6reg1: entered allmulticast mode [ 74.172141][ T7300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.334'. [ 74.192825][ T5837] usb 8-1: USB disconnect, device number 6 [ 74.264694][ T7307] loop4: detected capacity change from 0 to 7 [ 74.274053][ T7307] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 74.274128][ T7307] loop4: partition table partially beyond EOD, truncated [ 74.275997][ T7307] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 74.387420][ T7318] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 74.431234][ T7323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7323 comm=syz.0.338 [ 74.558022][ T7334] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 74.558061][ T7334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.558160][ T7334] vhci_hcd vhci_hcd.0: Device attached [ 74.582589][ T7335] vhci_hcd: connection closed [ 74.582946][ T5807] vhci_hcd vhci_hcd.0: stop threads [ 74.582989][ T5807] vhci_hcd vhci_hcd.0: release socket [ 74.583022][ T5807] vhci_hcd vhci_hcd.0: disconnect device [ 75.130234][ T43] kauditd_printk_skb: 46 callbacks suppressed [ 75.130358][ T43] audit: type=1400 audit(1788380720.092:592): avc: denied { create } for pid=7353 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.136458][ T43] audit: type=1400 audit(1788380720.102:593): avc: denied { getopt } for pid=7353 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.237783][ T43] audit: type=1400 audit(1788380720.202:594): avc: denied { create } for pid=7362 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.239911][ T43] audit: type=1400 audit(1788380720.202:595): avc: denied { setopt } for pid=7362 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.274641][ T43] audit: type=1400 audit(1788380720.242:596): avc: denied { read write } for pid=7364 comm="syz.2.349" name="rdma_cm" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 75.274800][ T43] audit: type=1400 audit(1788380720.242:597): avc: denied { open } for pid=7364 comm="syz.2.349" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 75.756751][ T7349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.756910][ T7349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.756985][ T7349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.757067][ T7349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.765668][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.765865][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.772058][ T43] audit: type=1400 audit(1788380720.732:598): avc: denied { write } for pid=7374 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 75.772174][ T43] audit: type=1400 audit(1788380720.732:599): avc: denied { read } for pid=7374 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 75.772229][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.772633][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.796445][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.796742][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.797375][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.797547][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.798206][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.798410][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.825795][ T43] audit: type=1400 audit(1788380720.792:600): avc: denied { ioctl } for pid=7379 comm="syz.2.353" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.826485][ T7380] netlink: 64 bytes leftover after parsing attributes in process `syz.2.353'. [ 75.839933][ T43] audit: type=1400 audit(1788380720.802:601): avc: denied { ioctl } for pid=7374 comm="syz.1.351" path="socket:[15303]" dev="sockfs" ino=15303 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 75.973213][ T7393] netlink: 'syz.2.355': attribute type 10 has an invalid length. [ 76.014986][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 76.144899][ T30] usb 5-1: device descriptor read/64, error -71 [ 76.385036][ T850] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 76.394716][ T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.534632][ T30] usb 5-1: device descriptor read/64, error -71 [ 76.544550][ T850] usb 8-1: Using ep0 maxpacket: 8 [ 76.548485][ T850] usb 8-1: unable to get BOS descriptor or descriptor too short [ 76.548547][ T850] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.549309][ T850] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 76.549326][ T850] usb 8-1: can't read configurations, error -71 [ 76.644967][ T30] usb usb5-port1: attempt power cycle [ 76.665020][ T7409] vcan0 speed is unknown, defaulting to 1000 [ 76.666857][ T7409] vcan0 speed is unknown, defaulting to 1000 [ 76.667806][ T7409] vcan0 speed is unknown, defaulting to 1000 [ 76.737852][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'. [ 76.745599][ T7413] hub 9-0:1.0: USB hub found [ 76.747517][ T7413] hub 9-0:1.0: 1 port detected qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 76.801737][ T7409] infiniband syz1: set active [ 76.801805][ T7409] infiniband syz1: added vcan0 [ 76.804165][ T10] vcan0 speed is unknown, defaulting to 1000 [ 76.817533][ T7409] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 76.817612][ T7409] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 76.817661][ T7409] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 76.846041][ T7409] RDS/IB: syz1: added [ 76.846265][ T7409] smc: adding ib device syz1 with port count 1 [ 76.846363][ T7409] smc: ib device syz1 port 1 has no pnetid [ 76.847842][ T5837] vcan0 speed is unknown, defaulting to 1000 [ 76.851580][ T7409] vcan0 speed is unknown, defaulting to 1000 [ 76.971837][ T7409] vcan0 speed is unknown, defaulting to 1000 [ 76.994608][ T5089] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.994730][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 77.027202][ T30] usb 5-1: device descriptor read/8, error -71 [ 77.109061][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.366'. [ 77.111109][ T7427] tipc: Started in network mode [ 77.111140][ T7427] tipc: Node identity d6744aafdaa9, cluster identity 4711 [ 77.111363][ T7427] tipc: Enabled bearer , priority 0 [ 77.118932][ T7427] syzkaller0: entered promiscuous mode [ 77.118955][ T7427] syzkaller0: entered allmulticast mode [ 77.122507][ T7409] vcan0 speed is unknown, defaulting to 1000 [ 77.143820][ T7427] tipc: Resetting bearer [ 77.147447][ T7425] tipc: Resetting bearer [ 77.159977][ T7428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7428 comm=syz.2.366 [ 77.160865][ T7425] tipc: Disabling bearer [ 77.232662][ T7409] vcan0 speed is unknown, defaulting to 1000 [ 77.243957][ T7437] xt_ecn: cannot match TCP bits for non-tcp packets [ 77.274877][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 77.297189][ T30] usb 5-1: device descriptor read/8, error -71 [ 77.404646][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 77.406080][ T30] usb usb5-port1: unable to enumerate USB device [ 77.498568][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'. [ 77.688065][ T850] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 77.794813][ T5089] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.794888][ T5089] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.794930][ T5089] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.814618][ T850] usb 8-1: device descriptor read/64, error -71 [ 78.015505][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 78.045449][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 78.045517][ T7501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.382'. [ 78.046045][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 78.046058][ T7501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.382'. [ 78.046391][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 78.046406][ T7502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.382'. [ 78.062175][ T850] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 78.171365][ T7508] fuse: Unknown parameter 'à [ 78.171365][ T7508] –á@4èq [ 78.171365][ T7508] ÃDÅW' [ 78.197429][ T850] usb 8-1: device descriptor read/64, error -71 [ 78.305090][ T850] usb usb8-port1: attempt power cycle [ 78.369002][ T7523] bond0: (slave veth0): Error: Device can not be enslaved while up [ 78.400592][ T7529] netlink: 'syz.1.391': attribute type 1 has an invalid length. [ 78.440134][ T7531] rnbd_client L607: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 78.469740][ T5807] rtrs_client L1777: : Resolving route failed, err: -ENODEV [ 78.484195][ T7534] netlink: 112 bytes leftover after parsing attributes in process `syz.2.393'. [ 78.509257][ T7531] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 78.598840][ T64] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 78.613043][ T7544] ./sys/bus/nd/drivers/nd_pmem/unbind: Can't lookup blockdev [ 78.644648][ T850] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 78.666547][ T850] usb 8-1: device descriptor read/8, error -71 [ 78.691919][ T7549] ima: policy update failed [ 78.766332][ T7551] tipc: MTU too low for tipc bearer [ 78.906700][ T850] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 78.924937][ T850] usb 8-1: device descriptor read/8, error -71 [ 78.979280][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 78.980511][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.980998][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.034942][ T850] usb usb8-port1: unable to enumerate USB device [ 79.057915][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.403'. [ 79.150529][ T7570] netlink: 'syz.2.405': attribute type 3 has an invalid length. [ 79.397065][ T7585] netlink: 'syz.0.409': attribute type 21 has an invalid length. [ 79.611139][ T7608] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 79.620110][ T7608] netlink: 'syz.0.413': attribute type 11 has an invalid length. [ 80.064713][ T1356] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 80.080615][ T64] Bluetooth: hci1: unexpected event for opcode 0x0c57 [ 80.215262][ T1356] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 80.219964][ T1356] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x7 has invalid wMaxPacketSize 0 [ 80.220030][ T1356] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.230559][ T1356] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 80.230611][ T1356] usb 5-1: Product: syz [ 80.230673][ T1356] usb 5-1: Manufacturer: syz [ 80.230706][ T1356] usb 5-1: SerialNumber: syz [ 80.242508][ T1356] usb 5-1: config 0 descriptor?? [ 80.249198][ T1356] usb 5-1: selecting invalid altsetting 0 [ 80.280331][ T5101] block nbd0: Possible stuck request ffff8880290a7000: control (read@0,4096B). Runtime 30 seconds [ 80.352461][ T43] kauditd_printk_skb: 43 callbacks suppressed [ 80.352510][ T43] audit: type=1400 audit(1788380725.312:645): avc: denied { read } for pid=7637 comm="syz.2.421" path="socket:[19683]" dev="sockfs" ino=19683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.451342][ T30] usb 5-1: USB disconnect, device number 9 [ 80.465166][ T43] audit: type=1400 audit(1788380725.432:646): avc: denied { cmd } for pid=7647 comm="iou-wrk-7648" path="socket:[20667]" dev="sockfs" ino=20667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.500241][ T43] audit: type=1400 audit(1788380725.462:647): avc: denied { append } for pid=7655 comm="syz.1.426" name="pmem0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.507752][ T43] audit: type=1400 audit(1788380725.462:648): avc: denied { mount } for pid=7655 comm="syz.1.426" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 80.507800][ T43] audit: type=1400 audit(1788380725.472:649): avc: denied { search } for pid=7655 comm="syz.1.426" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 80.507834][ T43] audit: type=1400 audit(1788380725.472:650): avc: denied { search } for pid=7655 comm="syz.1.426" name="events" dev="tracefs" ino=3498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 80.507869][ T43] audit: type=1400 audit(1788380725.472:651): avc: denied { search } for pid=7655 comm="syz.1.426" name="sched" dev="tracefs" ino=17989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 80.507903][ T43] audit: type=1400 audit(1788380725.472:652): avc: denied { write } for pid=7655 comm="syz.1.426" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 80.537619][ T43] audit: type=1400 audit(1788380725.472:653): avc: denied { open } for pid=7655 comm="syz.1.426" path="/96/tracing/events/sched/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 80.537656][ T43] audit: type=1400 audit(1788380725.492:654): avc: denied { mounton } for pid=7640 comm="syz.3.422" path="/105/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 80.611656][ T7662] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 80.611835][ T7662] SELinux: failed to load policy [ 80.850628][ T7682] tipc: Started in network mode [ 80.850690][ T7682] tipc: Node identity 1000001, cluster identity 4369 [ 80.850723][ T7682] tipc: Node number set to 16777217 [ 80.850847][ T7682] tipc: Cannot configure node identity twice [ 80.931761][ T7691] xt_hashlimit: size too large, truncated to 1048576 [ 81.057517][ T7695] FAULT_INJECTION: forcing a failure. [ 81.057517][ T7695] name failslab, interval 1, probability 0, space 0, times 0 [ 81.057611][ T7695] CPU: 0 UID: 0 PID: 7695 Comm: syz.0.437 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 81.057659][ T7695] Tainted: [L]=SOFTLOCKUP [ 81.057669][ T7695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.057682][ T7695] Call Trace: [ 81.057690][ T7695] [ 81.057699][ T7695] dump_stack_lvl+0x100/0x190 [ 81.057754][ T7695] should_fail_ex.cold+0x5/0xa [ 81.057787][ T7695] should_failslab+0xc2/0x120 [ 81.057821][ T7695] __kmalloc_noprof+0xfc/0x840 [ 81.057844][ T7695] ? tomoyo_encode2+0xfb/0x3c0 [ 81.057873][ T7695] tomoyo_encode2+0xfb/0x3c0 [ 81.057901][ T7695] tomoyo_encode+0x29/0x50 [ 81.057923][ T7695] tomoyo_realpath_from_path+0x18c/0x690 [ 81.057953][ T7695] tomoyo_check_open_permission+0x2af/0x3c0 [ 81.057997][ T7695] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 81.058041][ T7695] ? hook_file_open+0x248/0x8e0 [ 81.058092][ T7695] ? path_get+0x61/0x80 [ 81.058124][ T7695] tomoyo_file_open+0x6b/0x90 [ 81.058153][ T7695] security_file_open+0xb5/0x1e0 [ 81.058178][ T7695] do_dentry_open+0x588/0x14d0 [ 81.058209][ T7695] vfs_open+0x82/0x3f0 [ 81.058241][ T7695] path_openat+0x19fa/0x2440 [ 81.058302][ T7695] ? __pfx_path_openat+0x10/0x10 [ 81.058361][ T7695] do_file_open+0x20e/0x430 [ 81.058389][ T7695] ? __pfx_do_file_open+0x10/0x10 [ 81.058437][ T7695] ? _raw_spin_unlock+0x28/0x50 [ 81.058476][ T7695] ? alloc_fd+0x471/0x7a0 [ 81.058511][ T7695] do_sys_openat2+0x10f/0x1e0 [ 81.058540][ T7695] ? __pfx_do_sys_openat2+0x10/0x10 [ 81.058570][ T7695] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.058604][ T7695] __x64_sys_openat+0x12d/0x210 [ 81.058653][ T7695] ? __pfx___x64_sys_openat+0x10/0x10 [ 81.058691][ T7695] do_syscall_64+0x123/0x790 [ 81.058720][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.058742][ T7695] RIP: 0033:0x7f44b259e159 [ 81.058761][ T7695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.058781][ T7695] RSP: 002b:00007f44b33f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 81.058803][ T7695] RAX: ffffffffffffffda RBX: 00007f44b2825fa0 RCX: 00007f44b259e159 [ 81.058818][ T7695] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 81.058832][ T7695] RBP: 00007f44b2635024 R08: 0000000000000000 R09: 0000000000000000 [ 81.058847][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.058860][ T7695] R13: 00007f44b2826038 R14: 00007f44b2825fa0 R15: 00007fff3fa20a18 [ 81.058887][ T7695] [ 81.063352][ T7695] ERROR: Out of memory at tomoyo_realpath_from_path. [ 81.216341][ T7700] bridge0: port 3(bond0) entered disabled state [ 81.217282][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.217700][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.289449][ T7700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.295404][ T7700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.307852][ T7703] kvm [7699]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xb4004000 [ 81.334886][ T7703] kvm [7699]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xb4004000 [ 81.339101][ T7703] kvm [7699]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xb4004000 [ 81.432722][ T7716] bridge0: port 4(syz_tun) entered blocking state [ 81.432829][ T7716] bridge0: port 4(syz_tun) entered disabled state [ 81.432958][ T7716] syz_tun: entered allmulticast mode [ 81.434182][ T7716] syz_tun: entered promiscuous mode [ 81.454630][ T5807] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.454719][ T5807] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.454771][ T5807] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.454795][ T5807] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.454826][ T5807] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.454851][ T5807] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.454882][ T5807] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.454907][ T5807] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.519356][ T7727] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.4194304) [ 84.233555][ T7707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.649981][ T7834] __nla_validate_parse: 6 callbacks suppressed [ 84.650056][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 84.654218][ T7836] netlink: 'syz.2.469': attribute type 10 has an invalid length. [ 84.654238][ T7836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.469'. [ 84.662350][ T7836] dummy0: entered promiscuous mode [ 84.757385][ T7846] overlay: filesystem on ./file0 not supported [ 84.923604][ T7855] netlink: 244 bytes leftover after parsing attributes in process `syz.1.472'. [ 85.253339][ T7857] bridge_slave_0 (unregistering): left allmulticast mode [ 85.253389][ T7857] bridge_slave_0 (unregistering): left promiscuous mode [ 85.254216][ T7857] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.454379][ T7865] FAULT_INJECTION: forcing a failure. [ 85.454379][ T7865] name failslab, interval 1, probability 0, space 0, times 0 [ 85.454568][ T7865] CPU: 1 UID: 0 PID: 7865 Comm: syz.3.477 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 85.454610][ T7865] Tainted: [L]=SOFTLOCKUP [ 85.454618][ T7865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.454628][ T7865] Call Trace: [ 85.454634][ T7865] [ 85.454639][ T7865] dump_stack_lvl+0x100/0x190 [ 85.454659][ T7865] should_fail_ex.cold+0x5/0xa [ 85.454675][ T7865] should_failslab+0xc2/0x120 [ 85.454690][ T7865] kmem_cache_alloc_noprof+0x92/0x6a0 [ 85.454702][ T7865] ? d_instantiate+0x8a/0xb0 [ 85.454717][ T7865] ? alloc_empty_file+0x5b/0x1c0 [ 85.454733][ T7865] alloc_empty_file+0x5b/0x1c0 [ 85.454747][ T7865] alloc_file_pseudo+0x183/0x290 [ 85.454761][ T7865] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 85.454776][ T7865] ? alloc_fd+0x471/0x7a0 [ 85.454790][ T7865] sock_alloc_file+0x50/0x210 [ 85.454810][ T7865] __sys_socket+0x1c0/0x260 [ 85.454825][ T7865] ? __pfx___sys_socket+0x10/0x10 [ 85.454844][ T7865] __x64_sys_socket+0x72/0xb0 [ 85.454859][ T7865] ? lockdep_hardirqs_on+0x7d/0x110 [ 85.454872][ T7865] do_syscall_64+0x123/0x790 [ 85.454887][ T7865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.454898][ T7865] RIP: 0033:0x7f3b7d19e159 [ 85.454908][ T7865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.454918][ T7865] RSP: 002b:00007f3b7e143fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 85.454930][ T7865] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f3b7d19e159 [ 85.454937][ T7865] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 85.454948][ T7865] RBP: 00007f3b7d235024 R08: 0000000000000000 R09: 0000000000000000 [ 85.454955][ T7865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.454961][ T7865] R13: 00007f3b7d426038 R14: 00007f3b7d425fa0 R15: 00007ffecbd43928 [ 85.454975][ T7865] [ 85.538732][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 85.538801][ T43] audit: type=1400 audit(1788380730.502:676): avc: denied { setopt } for pid=7872 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.548800][ T43] audit: type=1400 audit(1788380730.512:677): avc: denied { bind } for pid=7870 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.548829][ T43] audit: type=1400 audit(1788380730.512:678): avc: denied { name_bind } for pid=7870 comm="syz.3.480" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 85.548850][ T43] audit: type=1400 audit(1788380730.512:679): avc: denied { node_bind } for pid=7870 comm="syz.3.480" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 85.554017][ T7873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10628 sclass=netlink_route_socket pid=7873 comm=syz.2.479 [ 85.573464][ T43] audit: type=1400 audit(1788380730.532:680): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 85.603478][ T7883] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 85.609310][ T7883] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 85.653571][ T64] Bluetooth: hci1: ISO packet too small [ 85.718287][ T43] audit: type=1400 audit(1788380730.682:681): avc: denied { read } for pid=7896 comm="syz.2.485" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.718425][ T43] audit: type=1400 audit(1788380730.682:682): avc: denied { open } for pid=7896 comm="syz.2.485" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.719842][ T43] audit: type=1400 audit(1788380730.682:683): avc: denied { ioctl } for pid=7896 comm="syz.2.485" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.721921][ T43] audit: type=1400 audit(1788380730.682:684): avc: denied { read } for pid=7896 comm="syz.2.485" dev="nsfs" ino=4026533151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.721961][ T43] audit: type=1400 audit(1788380730.682:685): avc: denied { open } for pid=7896 comm="syz.2.485" path="net:[4026533151]" dev="nsfs" ino=4026533151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.775917][ T7906] input: syz0 as /devices/virtual/input/input10 [ 85.801017][ T7906] syzkaller1: entered promiscuous mode [ 85.801088][ T7906] syzkaller1: entered allmulticast mode [ 86.004641][ T30] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 86.044001][ T7916] Bluetooth: MGMT ver 1.23 [ 86.044058][ T7916] Bluetooth: hci1: too big key_count value 24929 [ 86.165647][ T30] usb 5-1: not running at top speed; connect to a high speed hub [ 86.165700][ T30] usb 5-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 86.166721][ T30] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 86.168473][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.168487][ T30] usb 5-1: Product: 釉戊鮅h [ 86.168539][ T30] usb 5-1: Manufacturer: й [ 86.168548][ T30] usb 5-1: SerialNumber: Ј [ 86.389336][ T30] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.389437][ T30] usb 5-1: MIDIStreaming interface descriptor not found [ 86.422095][ T30] usb 5-1: USB disconnect, device number 10 [ 86.458817][ T6817] udevd[6817]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.874730][ T57] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 86.941281][ T7929] netlink: 128 bytes leftover after parsing attributes in process `syz.0.497'. [ 86.941354][ T7929] net_ratelimit: 3256 callbacks suppressed [ 86.941409][ T7929] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 86.995120][ T7931] bridge0: port 3(syz_tun) entered blocking state [ 86.995195][ T7931] bridge0: port 3(syz_tun) entered disabled state [ 86.995277][ T7931] syz_tun: entered allmulticast mode [ 86.996028][ T7931] syz_tun: entered promiscuous mode [ 86.996279][ T7931] bridge0: port 3(syz_tun) entered blocking state [ 86.996323][ T7931] bridge0: port 3(syz_tun) entered forwarding state [ 86.997080][ T7931] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 86.997108][ T7932] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 87.035339][ T57] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 87.040187][ T57] usb 7-1: config 0 has no interfaces? [ 87.040245][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.046098][ T1356] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 87.052571][ T57] usb 7-1: config 0 descriptor?? [ 87.097035][ T64] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 87.098168][ T64] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 87.205316][ T1356] usb 6-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 87.210104][ T1356] usb 6-1: config 0 has no interfaces? [ 87.210177][ T1356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.213079][ T1356] usb 6-1: config 0 descriptor?? [ 87.254722][ T7951] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 87.273681][ T7951] bond2: entered promiscuous mode [ 87.273740][ T7951] bond2: entered allmulticast mode [ 87.274097][ T7951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.282864][ T7954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.288000][ T7954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.326671][ T7957] program syz.0.506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.337733][ T7958] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 87.385826][ T7963] bond0: Error: Cannot enslave bond to itself. [ 87.428786][ T7927] comedi comedi0: comedi_parport: I/O port conflict (0x100,3) [ 87.454726][ T7927] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 87.454770][ T7927] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 87.454878][ T7927] vhci_hcd vhci_hcd.0: Device attached [ 87.469688][ T7927] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 87.469728][ T7927] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 87.469813][ T7927] vhci_hcd vhci_hcd.0: Device attached [ 87.472157][ T7927] netlink: 'syz.1.496': attribute type 58 has an invalid length. [ 87.473592][ T7927] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(19) [ 87.473612][ T7927] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 87.473650][ T7927] vhci_hcd vhci_hcd.0: Device attached [ 87.474646][ T7975] vhci_hcd: connection closed [ 87.474756][ T7971] vhci_hcd: connection closed [ 87.476011][ T7973] vhci_hcd: connection closed [ 87.476639][ T12] vhci_hcd vhci_hcd.1: stop threads [ 87.476659][ T12] vhci_hcd vhci_hcd.1: release socket [ 87.476676][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 87.480498][ T12] vhci_hcd vhci_hcd.1: stop threads [ 87.480519][ T12] vhci_hcd vhci_hcd.1: release socket [ 87.480539][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 87.482096][ T12] vhci_hcd vhci_hcd.1: stop threads [ 87.482112][ T12] vhci_hcd vhci_hcd.1: release socket [ 87.482129][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 87.491637][ T5878] usb 7-1: USB disconnect, device number 6 [ 87.524787][ T10] usb 6-1: USB disconnect, device number 10 [ 87.869915][ T7996] overlay: ./file0 is not a directory [ 87.873068][ T7996] overlay: ./file0 is not a directory [ 88.326921][ T8012] SELinux: Context system_u:object_r:getty_var_run_t:s0 is not valid (left unmapped). [ 88.331231][ T8012] bridge0: port 1(team0) entered blocking state [ 88.331321][ T8012] bridge0: port 1(team0) entered disabled state [ 88.331563][ T8012] team0: entered allmulticast mode [ 88.331590][ T8012] team_slave_0: entered allmulticast mode [ 88.331625][ T8012] team_slave_1: entered allmulticast mode [ 88.333276][ T8012] team0: entered promiscuous mode [ 88.333309][ T8012] team_slave_0: entered promiscuous mode [ 88.344781][ T8012] team_slave_1: entered promiscuous mode [ 88.722122][ T8028] netlink: del zone limit has 8 unknown bytes [ 88.724071][ T8028] tipc: Enabling of bearer rejected, failed to enable media [ 88.762218][ T8030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.522'. [ 88.822986][ T8033] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 88.823059][ T8033] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 88.892188][ T8033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.899033][ T8033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.974593][ T5808] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.974680][ T5807] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.974739][ T5807] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.974883][ T5807] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.077745][ T8038] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 89.490326][ T8045] Invalid ELF header len 18 [ 89.533504][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 89.791650][ T8079] tipc: New replicast peer: 127.0.0.1 [ 89.792184][ T8079] tipc: Enabled bearer , priority 10 [ 90.032833][ T8083] vcan0 speed is unknown, defaulting to 1000 [ 90.146723][ T8094] netlink: 25 bytes leftover after parsing attributes in process `syz.2.540'. [ 90.150351][ T8094] netlink: 'syz.2.540': attribute type 4 has an invalid length. [ 90.208403][ T8096] 9p: Invalid gid '0x00000000ffffffff' [ 90.315047][ T8104] netlink: 40 bytes leftover after parsing attributes in process `syz.1.543'. [ 90.357125][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 90.564056][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 90.564136][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 90.721077][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 90.725223][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 90.725314][ T43] audit: type=1400 audit(1788380735.682:713): avc: denied { mounton } for pid=8112 comm="syz.3.547" path="/137/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 90.726431][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 91.425818][ T43] audit: type=1400 audit(1788380736.392:714): avc: denied { name_bind } for pid=8130 comm="syz.1.550" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 91.536221][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 91.537337][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 91.540714][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 91.541291][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 91.553498][ T8134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8134 comm=syz.2.551 [ 91.594507][ T8143] kAFS: bad VL server IP address [ 91.607554][ T43] audit: type=1400 audit(1788380736.572:715): avc: denied { write } for pid=8152 comm="syz.1.555" name="usb_gadget" dev="configfs" ino=3348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.610455][ T43] audit: type=1400 audit(1788380736.572:716): avc: denied { write } for pid=8152 comm="syz.1.555" name="functions" dev="configfs" ino=22021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.620332][ T43] audit: type=1400 audit(1788380736.582:717): avc: denied { write } for pid=8152 comm="syz.1.555" name="extensions" dev="configfs" ino=22039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.804651][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20490 ms [ 91.804774][ C1] sl0: transmit timed out, driver error? [ 91.854653][ T57] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 91.905541][ T8169] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 91.909222][ T8174] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 92.024599][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 92.029869][ T57] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.035419][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.035495][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.046002][ T57] usb 6-1: config 0 descriptor?? [ 92.251953][ T57] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 92.468643][ T30] usb 6-1: USB disconnect, device number 11 [ 92.693355][ T8200] loop6: detected capacity change from 0 to 8 [ 92.745071][ T8200] loop6: detected capacity change from 8 to 7 [ 92.749207][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 92.751152][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.751416][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.752121][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.752186][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.755935][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.756018][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.757164][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.757230][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.757434][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.757492][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.757834][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.757913][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.758620][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.758683][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.758830][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.758882][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.759272][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.759304][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.759419][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.760638][ T8200] ldm_validate_partition_table(): Disk read failed. [ 92.761488][ T8200] Dev loop6: unable to read RDB block 0 [ 92.762800][ T8200] loop6: unable to read partition table [ 92.763952][ T8200] loop6: partition table beyond EOD, truncated [ 92.764016][ T8200] loop_reread_partitions: partition scan of loop6 (°´[{BÑ·¶žMܾ`*ÎîZ´Ç5¡]z(¿Ťî4+hGËpX„Ïgm [ 92.764016][ T8200] ü òæôØ.BÊL_seÔ) failed (rc=-5) [ 92.836454][ T43] audit: type=1400 audit(1788380737.802:718): avc: denied { write } for pid=8201 comm="syz.1.571" name="UDC" dev="configfs" ino=23633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 92.836754][ T43] audit: type=1400 audit(1788380737.802:719): avc: denied { open } for pid=8201 comm="syz.1.571" path="/127/config/usb_gadget/g1/UDC" dev="configfs" ino=23633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 92.843515][ T8202] Need at least one configuration in g1. [ 92.843775][ T8202] udc usbip-vudc.0: failed to start g1: -22 [ 92.843797][ T8202] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 92.853705][ T8202] UDC core: g1: couldn't find an available UDC or it's busy [ 93.214618][ T57] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 93.366198][ T57] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 93.367218][ T57] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 93.367238][ T57] usb 6-1: config 1 has no interface number 0 [ 93.369080][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.369100][ T57] usb 6-1: Product: syz [ 93.369112][ T57] usb 6-1: Manufacturer: syz [ 93.369123][ T57] usb 6-1: SerialNumber: syz [ 93.381200][ T57] usb 6-1: 3:0 : does not exist [ 93.381222][ T57] usb 6-1: 3:0 : does not exist [ 93.597017][ T30] usb 6-1: USB disconnect, device number 12 [ 93.731973][ T8218] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 93.852711][ T43] audit: type=1400 audit(1788380738.812:720): avc: denied { execute } for pid=8226 comm="syz.2.578" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 93.853694][ T8227] program syz.2.578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.889397][ T43] audit: type=1400 audit(1788380738.852:721): avc: denied { getopt } for pid=8228 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.071890][ T8240] Need at least one configuration in g1. [ 94.072000][ T8240] udc usbip-vudc.0: failed to start g1: -22 [ 94.072052][ T8240] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 94.073217][ T8240] UDC core: g1: couldn't find an available UDC or it's busy [ 94.200477][ T43] audit: type=1326 audit(1788380739.162:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8249 comm="syz.1.586" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517859e159 code=0x7ff00000 [ 95.692737][ T8279] sock: sock_timestamping_bind_phc: sock not bind to device [ 95.749774][ T8283] overlayfs: invalid origin (0000) [ 95.750309][ T8281] Need at least one configuration in g1. [ 95.750374][ T8281] udc usbip-vudc.0: failed to start g1: -22 [ 95.750391][ T8281] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 95.756393][ T8281] UDC core: g1: couldn't find an available UDC or it's busy [ 95.861715][ T43] kauditd_printk_skb: 2351 callbacks suppressed [ 95.861793][ T43] audit: type=1400 audit(1788380740.822:3074): avc: denied { write } for pid=8285 comm="syz.2.596" path="socket:[23212]" dev="sockfs" ino=23212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.874329][ T43] audit: type=1400 audit(1788380740.832:3075): avc: denied { setopt } for pid=8290 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.908089][ T43] audit: type=1400 audit(1788380740.872:3076): avc: denied { write } for pid=8294 comm="syz.3.599" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 96.024739][ T8306] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 97.668929][ T43] audit: type=1400 audit(1788380742.632:3077): avc: denied { read } for pid=8313 comm="syz.1.603" name="trace_pipe_raw" dev="tracefs" ino=6717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 97.669038][ T43] audit: type=1400 audit(1788380742.632:3078): avc: denied { open } for pid=8313 comm="syz.1.603" path="/133/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=6717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 97.681812][ T43] audit: type=1400 audit(1788380742.642:3079): avc: denied { create } for pid=8313 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.690265][ T43] audit: type=1400 audit(1788380742.652:3080): avc: denied { write } for pid=8313 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.691415][ T8314] __nla_validate_parse: 2 callbacks suppressed [ 97.691427][ T8314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.603'. [ 97.729845][ T8316] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 97.732620][ T43] audit: type=1400 audit(1788380742.692:3081): avc: denied { mounton } for pid=8315 comm="syz.1.604" path="/file0" dev="ramfs" ino=28634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 97.732654][ T43] audit: type=1400 audit(1788380742.692:3082): avc: denied { mounton } for pid=8315 comm="syz.1.604" path="/file0" dev="ramfs" ino=28634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 97.739226][ T8317] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 97.739240][ T8317] overlayfs: failed to set xattr on upper [ 97.739244][ T8317] overlayfs: ...falling back to redirect_dir=nofollow. [ 97.739248][ T8317] overlayfs: ...falling back to index=off. [ 97.739252][ T8317] overlayfs: ...falling back to uuid=null. [ 97.739256][ T8317] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 97.747803][ T8316] syzkaller1: entered promiscuous mode [ 97.747824][ T8316] syzkaller1: entered allmulticast mode [ 97.871180][ T8319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.605'. [ 97.871249][ T8319] nbd: illegal input index 67111936 [ 97.910332][ T8323] jffs2: notice: (8323) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.919013][ T43] audit: type=1400 audit(1788380742.882:3083): avc: denied { mounton } for pid=8320 comm="syz.1.606" path="/136/file0" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.184711][ T5159] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 98.357728][ T5159] usb 6-1: not running at top speed; connect to a high speed hub [ 98.357787][ T5159] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.364614][ T5159] usb 6-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.364666][ T5159] usb 6-1: config 1 interface 0 has no altsetting 0 [ 98.366252][ T5159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.366265][ T5159] usb 6-1: Product: syz [ 98.366272][ T5159] usb 6-1: Manufacturer: syz [ 98.366279][ T5159] usb 6-1: SerialNumber: syz [ 98.575375][ T5159] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 98.583153][ T5159] usb 6-1: USB disconnect, device number 13 [ 99.118007][ T8328] netlink: 'syz.1.608': attribute type 1 has an invalid length. [ 99.155348][ T8328] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 99.159135][ T8328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.608'. [ 99.159929][ T5808] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 99.160113][ T8328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.274650][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 99.292484][ T8335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.611'. [ 99.292594][ T8335] netlink: 'syz.1.611': attribute type 7 has an invalid length. [ 99.292646][ T8335] netlink: 'syz.1.611': attribute type 8 has an invalid length. [ 99.292679][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 99.296726][ T8335] ip6gretap0: entered promiscuous mode [ 99.297402][ T8335] syz_tun: entered promiscuous mode [ 99.298017][ T8335] gretap0: entered promiscuous mode [ 99.346425][ T8337] syzkaller0: entered promiscuous mode [ 99.347504][ T8337] syzkaller0: entered allmulticast mode [ 99.349529][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 99.554360][ T8341] bond2: entered promiscuous mode [ 99.790857][ T8348] netlink: 'syz.1.616': attribute type 11 has an invalid length. [ 100.193756][ T8356] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 100.265195][ T8358] fuse: Unknown parameter '0x0000000000000003' [ 100.521226][ T8368] vcan0 speed is unknown, defaulting to 1000 [ 100.615313][ T8371] qrtr: Invalid version 0 [ 100.647207][ T5808] bond1: (slave ip6gretap1): link status up again after 0 ms [ 100.655768][ T8369] Attempt to restore checkpoint with obsolete wellknown handles [ 100.663795][ T5521] vcan0 speed is unknown, defaulting to 1000 [ 100.666436][ T12] bond1: (slave ip6gretap1): link status up again after 0 ms [ 100.666480][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 100.666937][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 100.774624][ T5807] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 100.884674][ T5807] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 100.994911][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 101.104660][ T5807] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 101.115771][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 101.115837][ T43] audit: type=1400 audit(1788380746.082:3087): avc: denied { ioctl } for pid=8394 comm="syz.2.629" path="/183/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=6717 ioctlcmd=0x5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 101.214602][ T5808] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 101.351830][ T8406] batman_adv: batadv0: Adding interface: veth0 [ 101.351898][ T8406] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.351941][ T8406] batman_adv: batadv0: Interface activated: veth0 [ 101.356518][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.363241][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.365684][ T8406] batman_adv: batadv0: Interface deactivated: veth0 [ 101.365698][ T8406] batman_adv: batadv0: Removing interface: veth0 [ 101.423293][ T43] audit: type=1400 audit(1788380746.382:3088): avc: denied { execute } for pid=8405 comm="syz.2.632" path="/file1" dev="ramfs" ino=29741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 101.579191][ T8411] bond1 (unregistering): Released all slaves [ 101.710911][ T8417] bond1: entered promiscuous mode [ 101.710984][ T8417] bond1: entered allmulticast mode [ 101.738730][ T43] audit: type=1400 audit(1788380746.702:3089): avc: denied { bind } for pid=8419 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.788315][ T43] audit: type=1400 audit(1788380746.752:3090): avc: denied { ioctl } for pid=8421 comm="syz.2.637" path="socket:[29060]" dev="sockfs" ino=29060 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.649054][ T43] audit: type=1400 audit(1788380747.612:3091): avc: denied { execute } for pid=8424 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 102.662978][ T43] audit: type=1400 audit(1788380747.632:3092): avc: denied { execute_no_trans } for pid=8424 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 102.749587][ T43] audit: type=1400 audit(1788380747.712:3093): avc: denied { write } for pid=8427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.759181][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.766541][ T5089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.767166][ T5089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.768091][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.768463][ T5089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.826988][ T43] audit: type=1400 audit(1788380747.792:3094): avc: denied { write } for pid=8434 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.909838][ T43] audit: type=1400 audit(1788380747.872:3095): avc: denied { write } for pid=8441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.985946][ T43] audit: type=1400 audit(1788380747.952:3096): avc: denied { write } for pid=8448 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.005579][ T8428] vcan0 speed is unknown, defaulting to 1000 [ 103.331858][ T8428] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.331933][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.332140][ T8428] bridge_slave_0: entered allmulticast mode [ 103.332887][ T8428] bridge_slave_0: entered promiscuous mode [ 103.335970][ T8428] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.336016][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.336079][ T8428] bridge_slave_1: entered allmulticast mode [ 103.336883][ T8428] bridge_slave_1: entered promiscuous mode [ 103.350566][ T8428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.352097][ T8428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.364726][ T8428] team0: Port device team_slave_0 added [ 103.366034][ T8428] team0: Port device team_slave_1 added [ 103.378483][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.378513][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.378569][ T8428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.379500][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.379508][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.379522][ T8428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.400644][ T8428] hsr_slave_0: entered promiscuous mode [ 103.401106][ T8428] hsr_slave_1: entered promiscuous mode [ 103.401417][ T8428] debugfs: 'hsr0' already exists in 'hsr' [ 103.401429][ T8428] Cannot create hsr debugfs directory [ 103.527018][ T8428] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.532352][ T8428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.535179][ T8428] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.541894][ T8428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.547759][ T8428] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.552550][ T8428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.555008][ T8428] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.562253][ T8428] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.578320][ T8428] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.578404][ T8428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.578542][ T8428] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.578585][ T8428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.606491][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.609550][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.623920][ T8428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.633109][ T8428] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.636517][ T7734] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.636643][ T7734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.642586][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.642670][ T7734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.741799][ T8479] batman_adv: batadv0: Adding interface: veth0 [ 103.741920][ T8479] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.741949][ T8479] batman_adv: batadv0: Interface activated: veth0 [ 103.748200][ T8479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.748222][ T8479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.760540][ T8479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.760561][ T8479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.770341][ T8479] batman_adv: batadv0: Interface deactivated: veth0 [ 103.770397][ T8479] batman_adv: batadv0: Removing interface: veth0 [ 103.981366][ T8428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.177858][ T8428] veth0_vlan: entered promiscuous mode [ 104.186602][ T8428] veth1_vlan: entered promiscuous mode [ 104.214395][ T8428] veth0_macvtap: entered promiscuous mode [ 104.220700][ T8428] veth1_macvtap: entered promiscuous mode [ 104.232295][ T8428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.240470][ T8428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.254771][ T5807] net_ratelimit: 23 callbacks suppressed [ 104.254841][ T5807] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 104.304241][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.304282][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.326780][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.327041][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.327121][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.331646][ T7742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.331666][ T7742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.345934][ T5808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.384796][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 104.389926][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.638'. [ 104.390283][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.638'. [ 104.390514][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.638'. [ 104.390672][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.638'. [ 104.390832][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.638'. [ 104.390991][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.638'. [ 104.391150][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.638'. [ 104.391369][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.638'. [ 104.391630][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.638'. [ 104.391790][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.638'. [ 104.494668][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 104.614634][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 104.724896][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 104.844605][ T64] Bluetooth: hci4: command tx timeout [ 104.854661][ T5807] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 104.974616][ T5807] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 105.096733][ T5807] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 105.205649][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 105.315623][ T5807] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 107.517484][ T5807] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.833176][ T5807] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.910056][ T5807] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.003952][ T5807] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.111455][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.115050][ T5808] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.115087][ T5808] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.122404][ T12] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.125107][ T5808] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.137019][ T5089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.140452][ T5089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.145290][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.145934][ T5089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.159741][ T5807] bridge_slave_1: left allmulticast mode [ 108.159878][ T5807] bridge_slave_1: left promiscuous mode [ 108.162058][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.174671][ T5807] bridge_slave_0: left allmulticast mode [ 108.174721][ T5807] bridge_slave_0: left promiscuous mode [ 108.174925][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.229634][ T8544] fuse: Bad value for 'rootmode' [ 108.313233][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.325938][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.333485][ T5807] bond0 (unregistering): Released all slaves [ 108.424372][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 108.424489][ T43] audit: type=1400 audit(1788380753.382:3106): avc: denied { write } for pid=8554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.479672][ T43] audit: type=1400 audit(1788380753.442:3107): avc: denied { write } for pid=8559 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.508417][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 108.529470][ T8537] vcan0 speed is unknown, defaulting to 1000 [ 108.580451][ T43] audit: type=1400 audit(1788380753.542:3108): avc: denied { write } for pid=8564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.633161][ T43] audit: type=1400 audit(1788380753.592:3109): avc: denied { write } for pid=8567 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.686903][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 108.758986][ T43] audit: type=1400 audit(1788380753.722:3110): avc: denied { write } for pid=8571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.807041][ T43] audit: type=1400 audit(1788380753.772:3111): avc: denied { write } for pid=8576 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.868659][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 108.875394][ T5807] hsr_slave_0: left promiscuous mode [ 108.875910][ T5807] hsr_slave_1: left promiscuous mode [ 108.876329][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.876352][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.878539][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.878554][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.888461][ T5807] veth1_macvtap: left promiscuous mode [ 108.888497][ T5807] veth0_macvtap: left promiscuous mode [ 108.888547][ T5807] veth1_vlan: left promiscuous mode [ 108.888592][ T5807] veth0_vlan: left promiscuous mode [ 109.024898][ T5807] team0 (unregistering): Port device team_slave_1 removed [ 109.031646][ T5807] team0 (unregistering): Port device team_slave_0 removed [ 109.144261][ T8537] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.144360][ T8537] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.144623][ T8537] bridge_slave_0: entered allmulticast mode [ 109.145400][ T8537] bridge_slave_0: entered promiscuous mode [ 109.146732][ T8537] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.146776][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.146835][ T8537] bridge_slave_1: entered allmulticast mode [ 109.147973][ T8537] bridge_slave_1: entered promiscuous mode [ 109.162360][ T8537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.163754][ T8537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.186930][ T8537] team0: Port device team_slave_0 added [ 109.188258][ T8537] team0: Port device team_slave_1 added [ 109.204265][ T8537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.204315][ T8537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.204362][ T8537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.205238][ T8537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.205247][ T8537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.205260][ T8537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.220502][ T43] audit: type=1400 audit(1788380754.182:3112): avc: denied { write } for pid=8583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.224848][ T8537] hsr_slave_0: entered promiscuous mode [ 109.225248][ T8537] hsr_slave_1: entered promiscuous mode [ 109.225771][ T8537] debugfs: 'hsr0' already exists in 'hsr' [ 109.225783][ T8537] Cannot create hsr debugfs directory [ 109.275920][ T43] audit: type=1400 audit(1788380754.242:3113): avc: denied { write } for pid=8586 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.314273][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5 [ 109.315841][ T12] net_ratelimit: 29 callbacks suppressed [ 109.315853][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 109.353431][ T8537] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.359051][ T8537] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.360989][ T8537] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.363644][ T8537] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.364213][ T8537] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.368174][ T8537] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.369013][ T8537] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.376524][ T8537] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.403550][ T8537] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.403666][ T8537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.403887][ T8537] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.403990][ T8537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.424839][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 109.439031][ T8537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.448232][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.452399][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.467938][ T8537] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.472260][ T7734] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.472345][ T7734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.480335][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.480453][ T7734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.564985][ T5807] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 109.674810][ T5808] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 109.733143][ T8537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.794657][ T5807] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 109.879320][ T8537] veth0_vlan: entered promiscuous mode [ 109.883421][ T8537] veth1_vlan: entered promiscuous mode [ 109.898882][ T8537] veth0_macvtap: entered promiscuous mode [ 109.901027][ T8537] veth1_macvtap: entered promiscuous mode [ 109.904705][ T5807] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 109.908527][ T8537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.914520][ T8537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.951964][ T7742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.952687][ T7742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.006300][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.006359][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.014968][ T5807] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 110.034677][ T5807] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.034774][ T5807] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.034829][ T5807] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.034874][ T5807] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.147939][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 110.194682][ T64] Bluetooth: hci4: command tx timeout [ 110.264659][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 110.332400][ T8634] FAULT_INJECTION: forcing a failure. [ 110.332400][ T8634] name failslab, interval 1, probability 0, space 0, times 0 [ 110.332502][ T8634] CPU: 3 UID: 0 PID: 8634 Comm: syz.5.665 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 110.332544][ T8634] Tainted: [L]=SOFTLOCKUP [ 110.332552][ T8634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.332564][ T8634] Call Trace: [ 110.332570][ T8634] [ 110.332577][ T8634] dump_stack_lvl+0x100/0x190 [ 110.332632][ T8634] should_fail_ex.cold+0x5/0xa [ 110.332659][ T8634] should_failslab+0xc2/0x120 [ 110.332686][ T8634] __kmalloc_cache_node_noprof+0x94/0x720 [ 110.332706][ T8634] ? __alloc_workqueue+0xdba/0x1950 [ 110.332729][ T8634] ? init_rescuer+0x19f/0x550 [ 110.332756][ T8634] init_rescuer+0x19f/0x550 [ 110.332778][ T8634] ? __pfx_init_rescuer+0x10/0x10 [ 110.332803][ T8634] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.332842][ T8634] __alloc_workqueue+0xe82/0x1950 [ 110.332874][ T8634] alloc_workqueue_noprof+0xc7/0x130 [ 110.332896][ T8634] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 110.332923][ T8634] ? __pfx___debug_object_init+0x10/0x10 [ 110.332965][ T8634] nci_register_device+0x21e/0xb80 [ 110.333000][ T8634] ? __pfx_nci_register_device+0x10/0x10 [ 110.333034][ T8634] ? lockdep_init_map_type+0x5c/0x250 [ 110.333057][ T8634] virtual_ncidev_open+0x141/0x220 [ 110.333079][ T8634] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 110.333100][ T8634] misc_open+0x26d/0x450 [ 110.333125][ T8634] ? __pfx_misc_open+0x10/0x10 [ 110.333151][ T8634] chrdev_open+0x234/0x6a0 [ 110.333172][ T8634] ? __pfx_chrdev_open+0x10/0x10 [ 110.333194][ T8634] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 110.333225][ T8634] do_dentry_open+0x6ab/0x14d0 [ 110.333243][ T8634] ? __pfx_chrdev_open+0x10/0x10 [ 110.333270][ T8634] vfs_open+0x82/0x3f0 [ 110.333293][ T8634] path_openat+0x19fa/0x2440 [ 110.333328][ T8634] ? __pfx_path_openat+0x10/0x10 [ 110.333358][ T8634] do_file_open+0x20e/0x430 [ 110.333383][ T8634] ? __pfx_do_file_open+0x10/0x10 [ 110.333426][ T8634] ? _raw_spin_unlock+0x28/0x50 [ 110.333454][ T8634] ? alloc_fd+0x471/0x7a0 [ 110.333484][ T8634] do_sys_openat2+0x10f/0x1e0 [ 110.333507][ T8634] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.333532][ T8634] ? find_held_lock+0x2b/0x80 [ 110.333564][ T8634] __x64_sys_openat+0x12d/0x210 [ 110.333588][ T8634] ? __pfx___x64_sys_openat+0x10/0x10 [ 110.333621][ T8634] do_syscall_64+0x123/0x790 [ 110.333645][ T8634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.333666][ T8634] RIP: 0033:0x7f91ec39e159 [ 110.333682][ T8634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.333699][ T8634] RSP: 002b:00007f91ed287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.333720][ T8634] RAX: ffffffffffffffda RBX: 00007f91ec625fa0 RCX: 00007f91ec39e159 [ 110.333732][ T8634] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 110.333744][ T8634] RBP: 00007f91ec435024 R08: 0000000000000000 R09: 0000000000000000 [ 110.333757][ T8634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.333767][ T8634] R13: 00007f91ec626038 R14: 00007f91ec625fa0 R15: 00007fffdf7dd608 [ 110.333790][ T8634] [ 110.333875][ T8634] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_cmd_wq" [ 110.362550][ T5101] block nbd0: Possible stuck request ffff8880290a7000: control (read@0,4096B). Runtime 60 seconds [ 110.375603][ T5808] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 110.536496][ T43] audit: type=1400 audit(1788380755.492:3114): avc: denied { mount } for pid=8639 comm="syz.5.668" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 110.539168][ T8642] vivid-000: disconnect [ 110.606735][ T43] audit: type=1400 audit(1788380755.572:3115): avc: denied { create } for pid=8646 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.393302][ T7014] bridge0: port 3(syz_tun) entered disabled state [ 111.401298][ T7014] syz_tun (unregistering): left allmulticast mode [ 111.401363][ T7014] syz_tun (unregistering): left promiscuous mode [ 111.401429][ T7014] bridge0: port 3(syz_tun) entered disabled state [ 111.420494][ T5089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.423599][ T5089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.426686][ T5089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.431951][ T5089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.434762][ T5089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.642268][ T8671] vcan0 speed is unknown, defaulting to 1000 [ 111.869130][ T8671] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.869274][ T8671] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.869396][ T8671] bridge_slave_0: entered allmulticast mode [ 111.870714][ T8671] bridge_slave_0: entered promiscuous mode [ 111.872537][ T8671] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.872577][ T8671] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.872630][ T8671] bridge_slave_1: entered allmulticast mode [ 111.873352][ T8671] bridge_slave_1: entered promiscuous mode [ 111.889627][ T8671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.891103][ T8671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.904652][ T8671] team0: Port device team_slave_0 added [ 111.906017][ T8671] team0: Port device team_slave_1 added [ 111.918021][ T8671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.918088][ T8671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.918144][ T8671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.919713][ T8671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.919725][ T8671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.919743][ T8671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.941066][ T8671] hsr_slave_0: entered promiscuous mode [ 111.941547][ T8671] hsr_slave_1: entered promiscuous mode [ 111.941835][ T8671] debugfs: 'hsr0' already exists in 'hsr' [ 111.941847][ T8671] Cannot create hsr debugfs directory [ 112.070343][ T8671] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 112.076770][ T8671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.077703][ T8671] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 112.083172][ T8671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.083865][ T8671] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 112.090020][ T8671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.090755][ T8671] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 112.100705][ T8671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.120052][ T8671] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.121728][ T8671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.121909][ T8671] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.121984][ T8671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.161677][ T8671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.176948][ T7742] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.180429][ T7742] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.192452][ T8671] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.203613][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.203699][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.208078][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.208171][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.284920][ T64] Bluetooth: hci4: command tx timeout [ 112.479128][ T8671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.629107][ T8671] veth0_vlan: entered promiscuous mode [ 112.634738][ T8671] veth1_vlan: entered promiscuous mode [ 112.660692][ T8671] veth0_macvtap: entered promiscuous mode [ 112.667155][ T8671] veth1_macvtap: entered promiscuous mode [ 112.677597][ T8671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.686383][ T8671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.689386][ T5807] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.705802][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.705927][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.705969][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.758187][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.758237][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.774462][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.774518][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.828357][ T8722] FAULT_INJECTION: forcing a failure. [ 112.828357][ T8722] name failslab, interval 1, probability 0, space 0, times 0 [ 112.828403][ T8722] CPU: 2 UID: 0 PID: 8722 Comm: syz.6.678 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 112.828431][ T8722] Tainted: [L]=SOFTLOCKUP [ 112.828447][ T8722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.828456][ T8722] Call Trace: [ 112.828460][ T8722] [ 112.828465][ T8722] dump_stack_lvl+0x100/0x190 [ 112.828486][ T8722] should_fail_ex.cold+0x5/0xa [ 112.828503][ T8722] should_failslab+0xc2/0x120 [ 112.828517][ T8722] __kmalloc_cache_node_noprof+0x94/0x720 [ 112.828530][ T8722] ? __alloc_workqueue+0xdba/0x1950 [ 112.828544][ T8722] ? init_rescuer+0x19f/0x550 [ 112.828561][ T8722] init_rescuer+0x19f/0x550 [ 112.828577][ T8722] ? __pfx_init_rescuer+0x10/0x10 [ 112.828592][ T8722] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.828611][ T8722] __alloc_workqueue+0xe82/0x1950 [ 112.828629][ T8722] alloc_workqueue_noprof+0xc7/0x130 [ 112.828643][ T8722] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 112.828660][ T8722] ? __pfx___debug_object_init+0x10/0x10 [ 112.828675][ T8722] nci_register_device+0x21e/0xb80 [ 112.828694][ T8722] ? __pfx_nci_register_device+0x10/0x10 [ 112.828718][ T8722] ? lockdep_init_map_type+0x5c/0x250 [ 112.828733][ T8722] virtual_ncidev_open+0x141/0x220 [ 112.828747][ T8722] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 112.828761][ T8722] misc_open+0x26d/0x450 [ 112.828778][ T8722] ? __pfx_misc_open+0x10/0x10 [ 112.828793][ T8722] chrdev_open+0x234/0x6a0 [ 112.828806][ T8722] ? __pfx_chrdev_open+0x10/0x10 [ 112.828820][ T8722] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 112.828840][ T8722] do_dentry_open+0x6ab/0x14d0 [ 112.828850][ T8722] ? __pfx_chrdev_open+0x10/0x10 [ 112.828865][ T8722] vfs_open+0x82/0x3f0 [ 112.828879][ T8722] path_openat+0x19fa/0x2440 [ 112.828894][ T8722] ? __pfx_path_openat+0x10/0x10 [ 112.828911][ T8722] do_file_open+0x20e/0x430 [ 112.828924][ T8722] ? __pfx_do_file_open+0x10/0x10 [ 112.828946][ T8722] ? _raw_spin_unlock+0x28/0x50 [ 112.828962][ T8722] ? alloc_fd+0x471/0x7a0 [ 112.828979][ T8722] do_sys_openat2+0x10f/0x1e0 [ 112.828993][ T8722] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.829007][ T8722] ? find_held_lock+0x2b/0x80 [ 112.829025][ T8722] __x64_sys_openat+0x12d/0x210 [ 112.829039][ T8722] ? __pfx___x64_sys_openat+0x10/0x10 [ 112.829058][ T8722] do_syscall_64+0x123/0x790 [ 112.829072][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.829083][ T8722] RIP: 0033:0x7fc855d9e159 [ 112.829094][ T8722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.829105][ T8722] RSP: 002b:00007fc856c40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.829116][ T8722] RAX: ffffffffffffffda RBX: 00007fc856025fa0 RCX: 00007fc855d9e159 [ 112.829122][ T8722] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 112.829129][ T8722] RBP: 00007fc855e35024 R08: 0000000000000000 R09: 0000000000000000 [ 112.829135][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.829142][ T8722] R13: 00007fc856026038 R14: 00007fc856025fa0 R15: 00007ffe45b0fc48 [ 112.829156][ T8722] [ 112.829227][ T8722] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_cmd_wq" [ 113.094313][ T8728] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.329577][ T8737] bond1: option downdelay: invalid value (18446744073709551615) [ 113.329632][ T8737] bond1: option downdelay: allowed values 0 - 2147483647 [ 113.345977][ T8737] bond1 (unregistering): Released all slaves [ 113.475715][ T64] Bluetooth: hci2: command tx timeout [ 113.507004][ T5521] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 113.566589][ T8759] kvm: kvm [8757]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008d) = 0x40 [ 113.676830][ T5521] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.677632][ T5521] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.679141][ T5521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.679154][ T5521] usb 6-1: Product: syz [ 113.679162][ T5521] usb 6-1: Manufacturer: syz [ 113.679177][ T5521] usb 6-1: SerialNumber: syz [ 113.888727][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.889068][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.894660][ T5521] cdc_ether 6-1:1.0: skipping garbage [ 113.894764][ T5521] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 113.896496][ T5521] usb 6-1: USB disconnect, device number 14 [ 114.190438][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 114.190494][ T43] audit: type=1400 audit(1788380759.152:3123): avc: denied { append } for pid=8770 comm="syz.5.696" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 114.233554][ T8775] __nla_validate_parse: 57 callbacks suppressed [ 114.233609][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.698'. [ 114.258370][ T8775] hsr_slave_1 (unregistering): left promiscuous mode [ 114.304151][ T8776] ovs-system: entered promiscuous mode [ 114.334547][ T5459] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 114.364547][ T64] Bluetooth: hci4: command tx timeout [ 114.435980][ T13] net_ratelimit: 31 callbacks suppressed [ 114.436046][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 114.479560][ T43] audit: type=1400 audit(1788380759.442:3124): avc: denied { write } for pid=8788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.485710][ T5459] usb 6-1: Using ep0 maxpacket: 8 [ 114.486198][ T5459] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 114.486957][ T5459] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 114.486971][ T5459] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 114.486991][ T5459] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.487003][ T5459] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.487017][ T5459] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 114.487030][ T5459] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.487050][ T5459] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.546137][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 114.553187][ T43] audit: type=1400 audit(1788380759.512:3125): avc: denied { write } for pid=8792 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.676983][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 114.690537][ T5459] usb 6-1: GET_CAPABILITIES returned 0 [ 114.690584][ T5459] usbtmc 6-1:16.0: can't read capabilities [ 114.721950][ T43] audit: type=1400 audit(1788380759.682:3126): avc: denied { write } for pid=8797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.779343][ T43] audit: type=1400 audit(1788380759.742:3127): avc: denied { write } for pid=8803 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.787234][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 114.894104][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.894350][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.894696][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 114.896030][ T43] audit: type=1400 audit(1788380759.862:3128): avc: denied { getopt } for pid=8740 comm="syz.1.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.004654][ T5807] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.114623][ T5807] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.224569][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.334636][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.402007][ T5521] usb 6-1: USB disconnect, device number 15 [ 115.442613][ T8811] 9p: Bad value for 'version' [ 115.475989][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.554567][ T64] Bluetooth: hci2: command tx timeout [ 115.561004][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.707'. [ 115.563420][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.6.707'. [ 115.591677][ T8831] FAULT_INJECTION: forcing a failure. [ 115.591677][ T8831] name fail_futex, interval 1, probability 0, space 0, times 0 [ 115.591776][ T8831] CPU: 0 UID: 0 PID: 8831 Comm: syz.5.708 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 115.591819][ T8831] Tainted: [L]=SOFTLOCKUP [ 115.591826][ T8831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.591837][ T8831] Call Trace: [ 115.591845][ T8831] [ 115.591868][ T8831] dump_stack_lvl+0x100/0x190 [ 115.591900][ T8831] should_fail_ex.cold+0x5/0xa [ 115.591927][ T8831] get_futex_key+0x1d0/0x14f0 [ 115.591953][ T8831] ? __pfx_get_futex_key+0x10/0x10 [ 115.591983][ T8831] futex_wake+0xf4/0x5e0 [ 115.592013][ T8831] ? __pfx_futex_wake+0x10/0x10 [ 115.592037][ T8831] ? kasan_quarantine_put+0x104/0x240 [ 115.592060][ T8831] ? putname+0xb1/0x110 [ 115.592081][ T8831] ? kmem_cache_free+0x127/0x6c0 [ 115.592112][ T8831] do_futex+0x2b2/0x440 [ 115.592137][ T8831] ? __pfx_do_futex+0x10/0x10 [ 115.592158][ T8831] ? __pfx_do_sys_openat2+0x10/0x10 [ 115.592188][ T8831] __x64_sys_futex+0x34f/0x4d0 [ 115.592213][ T8831] ? __x64_sys_openat+0x12d/0x210 [ 115.592236][ T8831] ? __pfx___x64_sys_futex+0x10/0x10 [ 115.592269][ T8831] do_syscall_64+0x123/0x790 [ 115.592293][ T8831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.592312][ T8831] RIP: 0033:0x7f91ec39e159 [ 115.592327][ T8831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.592344][ T8831] RSP: 002b:00007f91ed2660e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.592363][ T8831] RAX: ffffffffffffffda RBX: 00007f91ec626098 RCX: 00007f91ec39e159 [ 115.592375][ T8831] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f91ec62609c [ 115.592388][ T8831] RBP: 00007f91ec626090 R08: 0000000000000001 R09: 0000000000000000 [ 115.592399][ T8831] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 115.592410][ T8831] R13: 00007f91ec626128 R14: 00007fffdf7dd520 R15: 00007fffdf7dd608 [ 115.592435][ T8831] [ 115.707006][ T8812] bond1: option downdelay: invalid value (18446744073709551615) [ 115.707071][ T8812] bond1: option downdelay: allowed values 0 - 2147483647 [ 115.719700][ T8812] bond1 (unregistering): Released all slaves [ 116.004639][ T8616] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 116.164681][ T8616] usb 10-1: Using ep0 maxpacket: 32 [ 116.165524][ T8616] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 116.166711][ T8616] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 116.166744][ T8616] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 116.166776][ T8616] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 116.166799][ T8616] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 116.166823][ T8616] usb 10-1: config 0 interface 0 has no altsetting 0 [ 116.169146][ T8616] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 116.169168][ T8616] usb 10-1: Product: syz [ 116.169182][ T8616] usb 10-1: Manufacturer: syz [ 116.169195][ T8616] usb 10-1: SerialNumber: syz [ 116.171868][ T8616] usb 10-1: config 0 descriptor?? [ 116.179040][ T8616] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 116.182848][ T8616] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 116.375076][ T5816] usb 10-1: USB disconnect, device number 2 [ 116.380539][ T5816] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 116.448157][ T64] Bluetooth: hci4: command tx timeout [ 116.854782][ T43] audit: type=1400 audit(1788380761.812:3129): avc: denied { getattr } for pid=8869 comm="syz.1.717" name="/" dev="9p" ino=78395899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 116.874664][ T8870] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.893791][ T43] audit: type=1400 audit(1788380761.852:3130): avc: denied { setattr } for pid=8869 comm="syz.1.717" name="file0" dev="overlay" ino=78396439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.899505][ T43] audit: type=1400 audit(1788380761.862:3131): avc: denied { write open } for pid=8869 comm="syz.1.717" path=2F202864656C6574656429 dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.904658][ T43] audit: type=1400 audit(1788380761.862:3132): avc: denied { link } for pid=8869 comm="syz.1.717" name="#1036" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.046189][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 117.046826][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.047828][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.082963][ T8874] netlink: 'syz.1.719': attribute type 32 has an invalid length. [ 117.143590][ T8882] netlink: 112 bytes leftover after parsing attributes in process `syz.1.720'. [ 117.356652][ T8892] netlink: 112 bytes leftover after parsing attributes in process `syz.1.722'. [ 117.413651][ T8907] netlink: 'syz.6.723': attribute type 1 has an invalid length. [ 117.434163][ T8907] macvlan1: entered promiscuous mode [ 117.434216][ T8907] macvlan1: entered allmulticast mode [ 117.635243][ T64] Bluetooth: hci2: command tx timeout [ 117.735094][ T30] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 117.899871][ T30] usb 11-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 117.900811][ T30] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 117.900832][ T30] usb 11-1: config 1 has no interface number 0 [ 117.902528][ T30] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.902541][ T30] usb 11-1: Product: syz [ 117.902548][ T30] usb 11-1: Manufacturer: syz [ 117.902556][ T30] usb 11-1: SerialNumber: syz [ 117.911690][ T30] usb 11-1: 3:190 : does not exist [ 117.911711][ T30] usb 11-1: 3:0 : does not exist [ 118.118077][ T30] usb 11-1: USB disconnect, device number 2 [ 118.312764][ T8981] netlink: 'syz.1.727': attribute type 5 has an invalid length. [ 118.347668][ T8981] netlink: 'syz.1.727': attribute type 5 has an invalid length. [ 118.453720][ T8988] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.455098][ T8989] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.640779][ T8992] input: syz0 as /devices/virtual/input/input15 [ 119.064528][ T57] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 119.218733][ T57] usb 11-1: unable to get BOS descriptor or descriptor too short [ 119.223410][ T57] usb 11-1: not running at top speed; connect to a high speed hub [ 119.223481][ T57] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 119.230663][ T57] usb 11-1: config 14 has an invalid interface number: 57 but max is 1 [ 119.230717][ T57] usb 11-1: config 14 has an invalid interface number: 228 but max is 1 [ 119.230782][ T57] usb 11-1: config 14 has no interface number 0 [ 119.230821][ T57] usb 11-1: config 14 has no interface number 1 [ 119.230890][ T57] usb 11-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 119.230929][ T57] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 119.230966][ T57] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 119.231004][ T57] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 119.231044][ T57] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 119.231082][ T57] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 119.231117][ T57] usb 11-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.231160][ T57] usb 11-1: config 14 interface 57 has no altsetting 0 [ 119.231192][ T57] usb 11-1: config 14 interface 228 has no altsetting 0 [ 119.236378][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 119.236398][ T43] audit: type=1400 audit(1788380764.202:3146): avc: denied { write } for pid=9021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.286256][ T57] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.286299][ T57] usb 11-1: Product: syz [ 119.286334][ T57] usb 11-1: Manufacturer: syz [ 119.286360][ T57] usb 11-1: SerialNumber: syz [ 119.301813][ T43] audit: type=1400 audit(1788380764.262:3147): avc: denied { write } for pid=9024 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.401069][ T43] audit: type=1400 audit(1788380764.362:3148): avc: denied { write } for pid=9026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.445277][ T43] audit: type=1400 audit(1788380764.412:3149): avc: denied { write } for pid=9029 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.529393][ T43] audit: type=1400 audit(1788380764.492:3150): avc: denied { write } for pid=9031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.539261][ T12] net_ratelimit: 34 callbacks suppressed [ 119.539399][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 119.576980][ T43] audit: type=1400 audit(1788380764.542:3151): avc: denied { write } for pid=9034 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.644545][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 119.714859][ T64] Bluetooth: hci2: command tx timeout [ 119.756332][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex ** replaying previous printk message ** [ 119.833219][ T9040] ------------[ cut here ]------------ [ 119.833262][ T9040] ODEBUG: free active (active state 0) object: ffff88802a5f1e20 object type: hrtimer hint: dummy_hrtimer_callback+0x0/0x160 [ 119.833323][ T9040] WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0, CPU#2: syz.1.734/9040 [ 119.844562][ T9040] Modules linked in: [ 119.846398][ T9040] CPU: 2 UID: 0 PID: 9040 Comm: syz.1.734 Tainted: G L syzkaller #0 PREEMPT(lazy) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 119.850619][ T9040] Tainted: [L]=SOFTLOCKUP [ 119.852352][ T9040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.855007][ T43] audit: type=1400 audit(1788380764.812:3152): avc: denied { write } for pid=5719 comm="syz-executor" path="pipe:[3828]" dev="pipefs" ino=3828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 119.863788][ T9040] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 119.865794][ T9040] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 78 14 1c 0c 41 56 48 8b 14 ed 40 20 62 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 22 72 11 0c 01 48 83 c4 18 5b 5d 41 5c 41 [ 119.872398][ T9040] RSP: 0018:ffffc90005157b48 EFLAGS: 00010246 [ 119.874390][ T9040] RAX: dffffc0000000000 RBX: ffffc90005157c30 RCX: 0000000000000000 [ 119.875454][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 119.879960][ T9040] RDX: ffffffff8c621f80 RSI: ffffffff8c621b20 RDI: ffffffff914fd150 [ 119.882642][ T9040] RBP: 0000000000000003 R08: ffff88802a5f1e20 R09: ffffffff8bf32760 [ 119.886066][ T9040] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c621b20 [ 119.888963][ T9040] R13: ffffffff8bf327a0 R14: ffffffff896afdd0 R15: ffffc90005157c48 [ 119.891593][ T9040] FS: 000055556d651500(0000) GS:ffff8880d5d61000(0000) knlGS:0000000000000000 [ 119.894645][ T9040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.896827][ T9040] CR2: 00007f5176750ff8 CR3: 000000010fea8000 CR4: 0000000000352ef0 [ 119.899470][ T9040] Call Trace: [ 119.900668][ T9040] [ 119.901666][ T9040] ? __pfx_dummy_hrtimer_callback+0x10/0x10 [ 119.903663][ T9040] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 119.905705][ T9040] debug_check_no_obj_freed+0x4da/0x630 [ 119.907602][ T9040] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 119.909592][ T9040] ? find_held_lock+0x2b/0x80 [ 119.911156][ T9040] ? __wake_up+0x3f/0x60 [ 119.912583][ T9040] ? do_raw_spin_unlock+0x145/0x1e0 [ 119.914494][ T9040] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 119.916620][ T9040] ? find_held_lock+0x2b/0x80 [ 119.918366][ T9040] ? dummy_pcm_close+0x9a/0xd0 [ 119.920215][ T9040] ? dummy_pcm_close+0x80/0xd0 [ 119.922037][ T9040] kfree+0x3d6/0x6d0 [ 119.923396][ T9040] dummy_pcm_close+0x9a/0xd0 [ 119.924959][ T9040] snd_pcm_release_substream.part.0+0x114/0x340 [ 119.927084][ T9040] snd_pcm_release+0x10f/0x230 [ 119.928705][ T9040] ? __pfx_snd_pcm_release+0x10/0x10 [ 119.930532][ T9040] __fput+0x3ff/0xb50 [ 119.931856][ T9040] task_work_run+0x150/0x240 [ 119.933627][ T9040] ? __pfx_task_work_run+0x10/0x10 [ 119.935539][ T9040] exit_to_user_mode_loop+0x1d8/0x700 [ 119.937607][ T9040] ? rcu_is_watching+0x13/0xc0 [ 119.939405][ T9040] do_syscall_64+0x661/0x790 [ 119.940967][ T8545] vivid-000: reconnect [ 119.942694][ T9040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.944725][ T9040] RIP: 0033:0x7f517859e159 [ 119.946423][ T9040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.952455][ T9040] RSP: 002b:00007ffff480c4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 119.955445][ T9040] RAX: 0000000000000000 RBX: 00007f5178827da0 RCX: 00007f517859e159 [ 119.958423][ T9040] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 119.961171][ T9040] RBP: 00007f5178827da0 R08: 00007f51788264e8 R09: 0000000000000000 [ 119.963739][ T9040] R10: 000000000003fd04 R11: 0000000000000246 R12: 000000000001d6b2 [ 119.966590][ T9040] R13: 00007f517882645c R14: 00007f5178826458 R15: 00007f5178826450 [ 119.969063][ T9040] [ 119.970310][ T9040] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.972790][ T9040] CPU: 2 UID: 0 PID: 9040 Comm: syz.1.734 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 119.976876][ T9040] Tainted: [L]=SOFTLOCKUP [ 119.978483][ T9040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.981815][ T9040] Call Trace: [ 119.982887][ T9040] [ 119.983874][ T9040] dump_stack_lvl+0x100/0x190 [ 119.985356][ T9040] vpanic+0x553/0x970 [ 119.986631][ T9040] ? __pfx_vpanic+0x10/0x10 [ 119.988106][ T9040] panic+0xd1/0xe0 [ 119.989335][ T9040] ? __pfx_panic+0x10/0x10 [ 119.990850][ T9040] check_panic_on_warn.cold+0x19/0x34 [ 119.992622][ T9040] ? debug_print_object+0x198/0x2b0 [ 119.994304][ T9040] __warn.cold+0x191/0x318 [ 119.995716][ T9040] __report_bug+0x30f/0x440 [ 119.997151][ T9040] ? debug_print_object+0x198/0x2b0 [ 119.998802][ T9040] ? __pfx___report_bug+0x10/0x10 [ 120.000414][ T9040] ? lockdep_hardirqs_on+0x7d/0x110 [ 120.002281][ T9040] ? debug_print_object+0x1a5/0x2b0 [ 120.004252][ T9040] report_bug_entry+0xe2/0x290 [ 120.005895][ T9040] ? debug_print_object+0x1a5/0x2b0 [ 120.007544][ T9040] handle_bug+0x1cd/0x2a0 [ 120.008911][ T9040] exc_invalid_op+0x17/0x50 [ 120.010365][ T9040] asm_exc_invalid_op+0x1a/0x20 [ 120.011913][ T9040] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 120.013883][ T9040] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 78 14 1c 0c 41 56 48 8b 14 ed 40 20 62 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 22 72 11 0c 01 48 83 c4 18 5b 5d 41 5c 41 [ 120.020225][ T9040] RSP: 0018:ffffc90005157b48 EFLAGS: 00010246 [ 120.022189][ T9040] RAX: dffffc0000000000 RBX: ffffc90005157c30 RCX: 0000000000000000 [ 120.024684][ T9040] RDX: ffffffff8c621f80 RSI: ffffffff8c621b20 RDI: ffffffff914fd150 [ 120.027175][ T9040] RBP: 0000000000000003 R08: ffff88802a5f1e20 R09: ffffffff8bf32760 [ 120.029702][ T9040] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c621b20 [ 120.032361][ T9040] R13: ffffffff8bf327a0 R14: ffffffff896afdd0 R15: ffffc90005157c48 [ 120.035087][ T9040] ? __pfx_dummy_hrtimer_callback+0x10/0x10 [ 120.037032][ T9040] ? __pfx_dummy_hrtimer_callback+0x10/0x10 [ 120.039105][ T9040] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 120.041225][ T9040] debug_check_no_obj_freed+0x4da/0x630 [ 120.043317][ T9040] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 120.045352][ T9040] ? find_held_lock+0x2b/0x80 [ 120.046947][ T9040] ? __wake_up+0x3f/0x60 [ 120.048411][ T9040] ? do_raw_spin_unlock+0x145/0x1e0 [ 120.050382][ T9040] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 120.052390][ T9040] ? find_held_lock+0x2b/0x80 [ 120.054052][ T9040] ? dummy_pcm_close+0x9a/0xd0 [ 120.055753][ T9040] ? dummy_pcm_close+0x80/0xd0 [ 120.057497][ T9040] kfree+0x3d6/0x6d0 [ 120.058898][ T9040] dummy_pcm_close+0x9a/0xd0 [ 120.060494][ T9040] snd_pcm_release_substream.part.0+0x114/0x340 [ 120.062554][ T9040] snd_pcm_release+0x10f/0x230 [ 120.064324][ T9040] ? __pfx_snd_pcm_release+0x10/0x10 [ 120.066134][ T9040] __fput+0x3ff/0xb50 [ 120.067675][ T9040] task_work_run+0x150/0x240 [ 120.069192][ T9040] ? __pfx_task_work_run+0x10/0x10 [ 120.070894][ T9040] exit_to_user_mode_loop+0x1d8/0x700 [ 120.072887][ T9040] ? rcu_is_watching+0x13/0xc0 [ 120.074706][ T9040] do_syscall_64+0x661/0x790 [ 120.076285][ T9040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.078322][ T9040] RIP: 0033:0x7f517859e159 [ 120.079937][ T9040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.087075][ T9040] RSP: 002b:00007ffff480c4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 120.090023][ T9040] RAX: 0000000000000000 RBX: 00007f5178827da0 RCX: 00007f517859e159 [ 120.092816][ T9040] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 120.095760][ T9040] RBP: 00007f5178827da0 R08: 00007f51788264e8 R09: 0000000000000000 [ 120.098507][ T9040] R10: 000000000003fd04 R11: 0000000000000246 R12: 000000000001d6b2 [ 120.101353][ T9040] R13: 00007f517882645c R14: 00007f5178826458 R15: 00007f5178826450 [ 120.104504][ T9040] [ 120.106244][ T9040] Kernel Offset: disabled [ 120.107759][ T9040] Rebooting in 86400 seconds..