last executing test programs: 2.882372866s ago: executing program 0 (id=240): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x53e21521}, 0x40}, 0x10) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 2.794152252s ago: executing program 0 (id=242): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @dev, @local, {[@routing={0x5c, 0x0, 0x1}]}}}}}, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1a713, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xd, 0x2, 0x4, 0x0, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00?'], 0xe4}}, 0x0) 2.793829543s ago: executing program 3 (id=243): r0 = socket$inet_sctp(0x2, 0x2, 0x84) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000040)=0x10001, 0x4) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x7ff, 0xa00, 0xba1, 0xb09}, 0x8) 2.702699938s ago: executing program 0 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000000d]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000380)={'dummy0\x00', @ifru_ivalue=0x4}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0xffffffff, 0x7fff}, 0x8) shutdown(r1, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000280)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]}) 2.702503295s ago: executing program 3 (id=245): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r3, @in6={{0xa, 0x0, 0x6, @empty}}, 0xfffd, 0x80}, &(0x7f0000000500)=0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRESHEX=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=0x0], 0x48) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2441, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x58050}, 0x4005) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f00000001c0)={0x3, 0xfff, 0x0, 0x80000}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.643443719s ago: executing program 3 (id=246): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000280)={0xf, 0x7, 0x7, 0x8, 0x4}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000ac0)={0x11, 0x2, 0x0, "f78772b8b72b71a9340ae4c7caa29b4d6e0dceee2da304af885b3c302db04a7d"}) r5 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r2, &(0x7f0000000200)={&(0x7f0000000080)={0xa, 0x4e22, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000002c0)="8b09e36b53d71b801706b34660fbda3a10d95a30434abf780a7a4f9c83344e36e4e174cfcc7601f6fb1cc5a20e58ba243002ffc9512a504b6014cb5b02a61fbddbc3dd0199524237d4d93156cbe79a7769da10a3c38b8463ac59af30b59c45acc7aa88fa2d4959cd4a73e59fda04dfeed0a030cce0e6654795aeab9071481938d52ff18edb441fe6492c9dca53b51564ed6853a09d0ae5f132cb64d9fe6d01cb7e230d6b74ad27f7b11869723bda0fabf52b64f895a6c1cca5", 0xb9}], 0x1}, 0x4048043) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r6, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x2) 1.843943427s ago: executing program 0 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @empty}, 0x4, 0x2, 0x3, 0x1}}, 0x26) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000080)=[{r2, 0x22a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r5, 0x25, 0x4, @void}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x1404, 0x10, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x2, 0x1, 0x4, 0x1}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r6, 0x8004745a, &(0x7f0000005280)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x4, 0x2}, 0x6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB="08000600", @ANYRES32=r9], 0x24}}, 0x0) 1.771353643s ago: executing program 3 (id=256): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 1.063853555s ago: executing program 1 (id=269): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xe804) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$inet6(0x2d, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f00000001c0)={0x79c, r5, 0x32, {0xb, 0x100000000}, 0x2}, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xffff}, {0x1ffc0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0x0, 0x0, 0x10], 0xff, [0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}]}, 0x88}}, 0x4075) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) unshare(0x60060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r11 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x381200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x28, {r12}}, 0xfffffffffffffddd) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.006556824s ago: executing program 0 (id=271): socket$nl_route(0x10, 0x3, 0x0) 941.899556ms ago: executing program 0 (id=273): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x18, 0x0, &(0x7f0000000080)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x105) ioctl$SIOCSIFMTU(r5, 0x8922, 0x0) r6 = socket(0x22, 0x2, 0x2) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$HIDIOCGUSAGE(r8, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0x5, 0x0, 0xfffffffc}) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000040), 0x4) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x0, 0x489, &(0x7f0000000300)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'fo\x00', 0x0, 0x0, 0x38}, {@multicast1, 0x4e21, 0x0, 0x6, 0x4, 0x7f}}, 0x44) 884.028011ms ago: executing program 3 (id=274): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0xe5ba, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3f, 0x800}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x34, 0x18, 0x4a2499fd4c68d2f3, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x34}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0x1, 0x203, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0xfffffffb, 0x8, 0xb, 0x3}, 0x7}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000a84e06a43598d687cefd62b86f184e1000000000000000dce1e27e58db21cc70160654", @ANYRESDEC=r4, @ANYBLOB="01ffffff1100009c83266200000000000000", @ANYRESDEC=r3, @ANYRESOCT=r4], 0x28}, 0x1, 0x0, 0x0, 0xec0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100050e9000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000002001c0012800b00010062726964676500000c00028008001c0081000000"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="00042bbd7000fbdbdf250c00000008000400635c4bb558f4ac5a0abf2590ac593a060000001400018008000b0073697000080005000200000008000500090000004c000280080009000900000006000b000a000000080007002caf00000800080006000000060002004e20000006000f0000000000efff02000400000008"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0xe5ba, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3f, 0x800}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x34, 0x18, 0x4a2499fd4c68d2f3, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x34}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0x1, 0x203, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0xfffffffb, 0x8, 0xb, 0x3}, 0x7}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000a84e06a43598d687cefd62b86f184e1000000000000000dce1e27e58db21cc70160654", @ANYRESDEC=r4, @ANYBLOB="01ffffff1100009c83266200000000000000", @ANYRESDEC=r3, @ANYRESOCT=r4], 0x28}, 0x1, 0x0, 0x0, 0xec0}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100050e9000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000002001c0012800b00010062726964676500000c00028008001c0081000000"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) (async) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="00042bbd7000fbdbdf250c00000008000400635c4bb558f4ac5a0abf2590ac593a060000001400018008000b0073697000080005000200000008000500090000004c000280080009000900000006000b000a000000080007002caf00000800080006000000060002004e20000006000f0000000000efff02000400000008"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) (async) 883.007939ms ago: executing program 3 (id=275): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x7, 0xf9, 0xb, 0x28c1}, {0x1ff, 0x3, 0x7, 0x7ff}]}) close_range(r1, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x700, 0x700, 0x2c}, 0x48) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000100)) 693.254745ms ago: executing program 1 (id=279): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000340)={&(0x7f0000000140), &(0x7f0000000500)=""/77, 0x4d}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0xfff0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x40}) write$P9_RREADLINK(r2, &(0x7f0000000180)={0xffffffffffffff9e, 0x17, 0xfffd, {0x7, './file0'}}, 0x4800) 330.203996ms ago: executing program 1 (id=283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x400000000000030d}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000037c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000004c0)={0x2, 0x0, @pic={0x1, 0x0, 0x4, 0x0, 0xf, 0x9, 0x1, 0x7, 0x2, 0x5, 0x8, 0x7, 0x0, 0x6, 0x7, 0x10}}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg/2:0:0:0\x00', 0x100, 0x0) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000000)) (async) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 232.503668ms ago: executing program 2 (id=285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000140)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 231.415743ms ago: executing program 2 (id=286): ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0x0, 0x1, 0x8}) (async, rerun: 32) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x1, 0x6, '\x00', &(0x7f0000000040)=0xc5}) (async, rerun: 32) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x7}) (async) r0 = getpid() move_pages(r0, 0x9, &(0x7f0000000100)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x804, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000200)={r0}) (async) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000280)={0x5, 0x8, 0x8, 0x5, 0x4}) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x1, 0x4, [0x101, 0xe3ee, 0x2000, 0xd]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000340)={r4, 0x3}, &(0x7f0000000380)=0x8) (async) ioctl$int_in(r2, 0x5452, &(0x7f00000003c0)=0xa00000) (async, rerun: 64) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000400)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) (async, rerun: 64) ioctl$UFFDIO_POISON(r2, 0xc020aa08, &(0x7f0000000440)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) (async, rerun: 64) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000540)={r5, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x800, 0x6, 0x7, 0x0, 0x40, 0x0, 0x3}, 0x9c) (async, rerun: 64) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001600)={&(0x7f0000000600)=[0xa27, 0x80000000, 0x400, 0x6, 0x6, 0x7, 0x6, 0xd2, 0xf08a, 0x0, 0xffffdf5a, 0x5, 0x8, 0x2, 0x6, 0xc89, 0x8, 0x6, 0x9, 0x4, 0x2d66, 0xe4ca, 0x8, 0x7f, 0x6, 0x7, 0x9, 0x7, 0x1, 0x1c, 0x3, 0x0, 0x6, 0x10000, 0x3, 0x0, 0x4, 0x6, 0x2ca, 0x80000001, 0x9, 0x9, 0x13e, 0x0, 0x9, 0x1, 0x9, 0x4, 0x6, 0x298, 0x9, 0x0, 0x3, 0x3, 0x800, 0xfffffdbc, 0x7, 0xc, 0x8, 0x8001, 0x3, 0x2, 0x6, 0x4, 0x6, 0x6, 0xfffffff7, 0x1b, 0x3ff, 0x0, 0x2, 0x7fffffff, 0x2, 0xfff, 0x9, 0x1, 0x6, 0x7, 0x9, 0x10001, 0xc0000000, 0x6, 0x2c, 0x8, 0x1000, 0x3, 0xfffffffe, 0x9, 0x9, 0x6, 0x1, 0x7fff, 0x7, 0x5, 0x8, 0x702, 0x434, 0xfffffff8, 0x0, 0x4, 0xbf2e, 0x2f2, 0x7, 0x3960, 0x5, 0x7, 0x1, 0x3, 0xfa, 0x5, 0x4, 0xeba5, 0x981, 0x6, 0x6, 0x4, 0x9, 0x6, 0x8, 0x3, 0x2, 0x9, 0x80000001, 0x7, 0x3, 0x1, 0x2, 0x8000, 0x8, 0x40, 0x101, 0x0, 0x10001, 0x4, 0x4d, 0x3ff, 0x6, 0x5966, 0xb751, 0x4e, 0x5, 0x18d6, 0x1562, 0x6, 0x798c, 0x8, 0xe, 0x8045, 0xc, 0x8, 0x3, 0x7, 0x10000, 0x2, 0x6, 0x9, 0x9, 0x2, 0x6, 0x3, 0x1, 0xb, 0x10000000, 0xfffffff7, 0x80000000, 0xc26d, 0x100, 0x401, 0x8, 0xa, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x2, 0x9, 0x401, 0x9, 0x4, 0xd, 0x10001, 0x0, 0xffff8001, 0x171e, 0x2, 0xc, 0x7f, 0x100, 0x9, 0x6, 0x6, 0x8, 0x10001, 0x86, 0x81fc, 0x8, 0x3ff, 0x8, 0x1, 0x10, 0xc000, 0x2, 0xc808, 0xac, 0xffffffff, 0x3, 0x2, 0x8, 0x63, 0xffff3a70, 0xffffffff, 0x61c, 0x10, 0x47, 0x7f, 0x1ff, 0x0, 0x0, 0x0, 0x7, 0x9, 0xaea, 0x2, 0x6, 0x535e, 0x4, 0x8, 0x6, 0x5, 0x3, 0xfffffe00, 0x3, 0x81, 0x72b, 0x4, 0x5, 0x80, 0x6, 0x80000001, 0x3, 0xc5da, 0x60, 0x101, 0x4, 0x6, 0x8, 0x999, 0x4, 0x4773, 0x8, 0x101, 0xffffffff, 0x7fff, 0xfffff72a, 0x252, 0x0, 0x6, 0x4, 0x5, 0xfffffff9, 0xa5e, 0x100, 0x3ff, 0x0, 0xca7, 0x2, 0x5, 0x401, 0x3ff, 0x3, 0x80000001, 0x401, 0x94, 0x0, 0x7ff, 0x3, 0xfe5, 0x4c, 0x2, 0x9c, 0x7f, 0x89, 0x7, 0x5, 0x7, 0x6, 0x80, 0x9e1, 0x2, 0x6, 0x0, 0x1, 0x0, 0x20a, 0x101, 0x8, 0x1, 0x2, 0xffff, 0x6, 0x7, 0x4, 0x4, 0x1, 0x7fff, 0x9, 0x6, 0x3, 0xfffffffd, 0x8b2, 0xffffffff, 0x5425, 0x101, 0xf209643, 0x5, 0xfffffffc, 0xca, 0xfffffff2, 0x4, 0x4, 0x5, 0x0, 0x7, 0x800, 0x6, 0x1, 0x1, 0xb1b, 0x330, 0x6, 0x7, 0x158e1b1d, 0x4, 0x63b, 0x3ff, 0x6, 0x401, 0x2, 0x0, 0x9, 0x9bf1, 0x5, 0x7, 0x2, 0xfffffff8, 0xa3d, 0x1, 0x2, 0x0, 0x10001, 0x5, 0xe, 0x400, 0x3, 0x6, 0x5, 0x80000000, 0x0, 0x2, 0xe00000, 0x5d, 0xee7, 0x62a32888, 0x3, 0x8001, 0x10000, 0x7ff, 0x1, 0x8, 0xff, 0xff, 0x4, 0x9, 0x2, 0x3b7, 0x2, 0xa, 0x80000000, 0x4, 0x1ff, 0x7, 0x3, 0x9, 0x4, 0xffffff80, 0x7, 0x2e, 0x5, 0x80000000, 0x3ff, 0x3, 0x7ff, 0x7, 0x78, 0xffff, 0xb, 0x8000, 0x9, 0x6cc1c1ef, 0xb, 0x10000, 0x4, 0x10, 0xffffb7c8, 0x0, 0x7, 0x61040de3, 0x400, 0x48, 0x6, 0xff, 0x6, 0x100, 0xc, 0x7fff, 0x4, 0x8, 0x6, 0x2ce, 0x75, 0x1, 0x0, 0x2, 0x1, 0x5, 0x5, 0x2, 0x9, 0x4, 0x6, 0x1, 0x2, 0x3ff, 0x6, 0x3ff, 0x5, 0xfffffff1, 0x5, 0x80, 0x5, 0x3ff, 0x1, 0x1, 0x1400000, 0x5, 0x9, 0x4, 0x8, 0x1, 0xfff, 0x0, 0x2, 0xf, 0x6, 0x5, 0x7, 0x149, 0x8001, 0x7, 0x9, 0x8, 0x8001, 0x7fffffff, 0x7, 0x100, 0x101, 0x8, 0x7, 0x966, 0x5, 0x200, 0xb41, 0xa5b, 0x1, 0x0, 0x8000, 0x7fffffff, 0x4, 0x8, 0x5, 0x0, 0x2, 0x5, 0x80000001, 0x3b16, 0x400, 0x8, 0xff, 0x6, 0x40, 0x2, 0x81, 0x3, 0x5, 0xc, 0xfffffffd, 0x9, 0x4, 0x8e, 0x2, 0x8001, 0x3, 0x7bc, 0xb958, 0x6, 0x7, 0x9, 0x8, 0x2, 0x4, 0x2, 0x8, 0x3, 0x1ff, 0x4, 0x3, 0x3, 0x5ab3, 0x0, 0xffff, 0x0, 0x7fffffff, 0x6, 0x26, 0x8, 0x5, 0x7, 0x6, 0x0, 0x5, 0xffff, 0x8001, 0x2, 0x4, 0x5b8, 0x1, 0x5, 0x1, 0x800, 0x0, 0x0, 0xa, 0xffff, 0x3, 0x80000001, 0x5, 0x6, 0xee, 0x1, 0x8, 0x1, 0x4, 0xc, 0xff, 0x8, 0x4, 0x2, 0x7, 0x317, 0xfffffffc, 0x1, 0x800, 0x3, 0xbba, 0x7, 0x6, 0x7f, 0x5b, 0xff7f, 0x8001, 0xe, 0x6, 0x1, 0x7f, 0x4, 0x5, 0x0, 0x8, 0x9, 0x8, 0x5, 0x8, 0x6, 0x3, 0x1, 0x0, 0x7, 0x7492, 0x8, 0x0, 0xc48, 0x4, 0x6, 0x89ef, 0x3, 0x4b5e, 0x0, 0x3, 0x1, 0x2, 0x80, 0x10001, 0x898, 0x3, 0x2, 0xe, 0x80000000, 0x43b, 0xfffffffe, 0x1, 0x9, 0x3, 0x5, 0x7, 0xf930, 0x6, 0x400, 0x48a, 0x1ff, 0x3ff, 0x9, 0x4, 0x9, 0x13, 0xb623, 0x0, 0xffff468c, 0x200, 0x4, 0x2, 0x9, 0x0, 0x8, 0x0, 0x1, 0x8, 0x8, 0x3, 0x0, 0x0, 0x4, 0x8, 0xf, 0x8bb, 0x8, 0x2, 0x9, 0x6, 0x6, 0x8, 0x9, 0x7, 0x10000, 0x1000, 0x10001, 0x8, 0xe, 0x0, 0x200, 0x3, 0x0, 0x63e, 0x9, 0x7a67, 0x8, 0x80000000, 0x34, 0x0, 0xf7f5, 0x80000000, 0x0, 0xffff, 0xf3d, 0xf, 0x8682, 0xffffffff, 0xa, 0x6, 0xa, 0x1, 0x1, 0x10000, 0xfffffff9, 0xb, 0xffff5f97, 0x2, 0x4, 0x6, 0x6, 0xfffffffa, 0x8, 0x801, 0x4, 0x63da, 0x100, 0xc210, 0x4, 0x9, 0x0, 0x3ff, 0xe289, 0xfff, 0x8, 0x3, 0x4, 0x10001, 0xb, 0x6, 0x7fffffff, 0x1350, 0x9, 0x1, 0x9, 0x9, 0x7, 0x7a, 0x7, 0x1, 0xc82, 0x4, 0x7, 0x4, 0xe3, 0x5, 0x400, 0xa3, 0x8, 0x886, 0x63, 0x8, 0x7ff, 0x9, 0x3, 0x0, 0x8, 0x2, 0x9, 0x32, 0x7, 0x2, 0x3, 0x6, 0x10000, 0xfff, 0x9, 0xf8, 0x9, 0x2, 0x400, 0x4, 0x24b3, 0x4, 0x7, 0x2, 0xf2, 0x4, 0x4, 0x25a3, 0x4815b8b2, 0x2, 0x1, 0xffffff00, 0x8, 0x0, 0xde, 0xffffffff, 0x1c000000, 0xaa0, 0x7f, 0x4, 0x0, 0x1, 0x2, 0x7, 0x2, 0x7, 0x8001, 0x8, 0xdb4f, 0x6, 0x1, 0x3, 0x0, 0x0, 0x4, 0x3ff, 0x8000, 0x1, 0x5, 0x4, 0x5, 0x100, 0x9, 0x7ff, 0x6, 0xfff, 0x7, 0x6, 0x8e, 0x1c96, 0x0, 0x1, 0x1000, 0x6, 0x9, 0x3, 0x200, 0xfe, 0x3, 0x31bf75ff, 0x0, 0x2, 0x8, 0xf, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x3, 0xf3a, 0x8, 0x1, 0x80, 0x0, 0x7, 0xffff, 0x8, 0x8001, 0x1ff, 0xffffff7f, 0x2, 0x7, 0x7, 0x4, 0x6, 0xfff, 0xfffffffb, 0x6, 0x9, 0x324b, 0x3, 0xff, 0x0, 0x674, 0x4, 0xbb, 0x6, 0x0, 0x7, 0x9f74, 0x1000, 0x9, 0x772, 0x2, 0x5, 0xfffffc1f, 0x8, 0xffffffff, 0x3, 0xa6, 0x7, 0xfff, 0x64ec, 0x3f8ce5ea, 0x7, 0x509, 0xfffff0d9, 0x8, 0x200, 0x14495c2d, 0xc, 0x7, 0x7fff, 0xfffffffd, 0xd8b, 0x6, 0x659400, 0x6, 0x0, 0x2, 0x10, 0x2, 0x0, 0x6, 0x1ff, 0x1, 0x3, 0x8, 0x2, 0xffffff81, 0x8, 0x7, 0x1, 0x7, 0xb6, 0x5, 0x5, 0x4e, 0x2, 0x9, 0xd, 0x9, 0x8, 0xc493, 0x7, 0x6, 0x8, 0x1, 0x0, 0x8f, 0x6, 0xffffffff, 0x5, 0x8, 0x2, 0x5, 0x7, 0x3, 0x10, 0x9, 0x9, 0x5, 0x0, 0x8, 0x6a1d, 0x0, 0x101, 0x33d, 0x9, 0x5, 0x1, 0x9, 0x4, 0x80, 0x800, 0x10000, 0x3000000, 0x8, 0xfffffff8, 0x7, 0xc465, 0xfffff623, 0x0, 0x3, 0x100, 0x6, 0x2a, 0x4, 0x2, 0x1ca8222c, 0x9, 0x1, 0x9781, 0x4, 0xffffffff, 0xfffffd36, 0xa, 0x3, 0x2, 0xd, 0x7, 0x7, 0x5, 0x7, 0x3, 0x7, 0x28000000, 0x2, 0x1, 0x8, 0x100, 0x7, 0x0, 0x7, 0xfffffffb, 0xbbb, 0x2, 0x7fffffff, 0x9, 0x7, 0xdb2, 0x1ff, 0xfffffff7, 0x5, 0x66, 0x400, 0x7ae, 0x6b, 0x0, 0x1, 0x7, 0x7, 0x5, 0x7fffffff, 0x7fffffff, 0xe, 0x8001, 0x6, 0xa0, 0x0, 0x1, 0x10, 0x5, 0x5, 0x10, 0x7, 0x8, 0x9, 0xffffffff, 0xbd7, 0x6, 0x27a, 0x9, 0x5, 0x10000, 0xd8e6, 0x1000, 0x7, 0x1d, 0x4, 0x8001, 0x7fffffff], 0x2, 0x400, 0x80000000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r1, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa4, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x95, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e00)={r2, 0xe0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001b00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b80)=[0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f0000001bc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001c40), &(0x7f0000001c80), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000001cc0)}}, 0x10) (async, rerun: 32) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001e40), 0x4) (async, rerun: 32) r10 = syz_open_procfs(r0, &(0x7f0000001e80)='net/ip_vs_stats_percpu\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x3, 0x12, &(0x7f0000001640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x43f0a3eb02b403ef, 0x3, 0x4, 0x2, 0x1, 0x100, 0xffffffffffffffec}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000001700)='GPL\x00', 0x2, 0x24, &(0x7f0000001740)=""/36, 0x40f00, 0x21, '\x00', r6, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001ac0)={0x5, 0x6, 0xf2, 0xa6}, 0x10, r8, r9, 0x2, &(0x7f0000001ec0)=[r2, r10, r2, r2, 0xffffffffffffffff, r2, r2, r2], &(0x7f0000001f00)=[{0x2, 0x4, 0xe, 0x8}, {0x2, 0x5, 0x7, 0x5}], 0x10, 0x2}, 0x94) (async) ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f0000002000)={0xffffffffffffff42, 0x100000000}) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000002040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) (async) syz_pidfd_open(r0, 0x0) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000002300)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000022c0)={&(0x7f00000021c0)={0xd4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x13}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6f244e5cd8aa6095}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20014800}, 0x40) 164.037942ms ago: executing program 2 (id=287): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000000037132517c9ef92d7a3000000d35365c2540ea798a9461e8f63b4fc134e7b46303ee3eba77cd31b6e4934bbd56695d9ae4add9a2786", @ANYRES32=0x0, @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4004088) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="245465794e2ec2ed9fe0e37ef72a135487f44500000000000000000000000000000000000545f80d55879426b252590e5364"], 0x24}, 0x1, 0x0, 0x0, 0x21}, 0x1) (async) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="245465794e2ec2ed9fe0e37ef72a135487f44500000000000000000000000000000000000545f80d55879426b252590e5364"], 0x24}, 0x1, 0x0, 0x0, 0x21}, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="f66ebd721eb7cd2bec7be1c1f6a3e4010029bd7000fe5ff3097badc0003fe6952c2151c651319d1e8aa5ee23e07e3aa1bd05061f9a44d90eedfc193abb923e2c501f1331da1b3f892ce68d9d645767bfedc13960d77b1d4f86"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x22}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x7}, 0x1, 0x0, 0x0, 0x4000802}, 0x8051) 160.658846ms ago: executing program 2 (id=288): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x28) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = eventfd2(0x8e7, 0x80800) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x1, r4}) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1, 0x3}, &(0x7f0000000140)=0x8) (async) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000180)='caif0\x00') fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000200)={0x6}) (async, rerun: 64) r8 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f0000000240)={0x5}, 0x1) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000280)={r2, 0xf35}, &(0x7f00000002c0)=0x8) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000003c0)={0x1, 0x0, [{0x3000, 0xaf, &(0x7f0000000300)=""/175}]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000}) getsockopt$inet_mreqsrc(r8, 0x0, 0x28, &(0x7f0000000440)={@dev, @rand_addr, @private}, &(0x7f0000000480)=0xc) (async) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r10, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x603}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x880) (async, rerun: 32) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000600)={r2, 0x7ff}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000680)={r6, 0x63e9}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000700)={r12, @in={{0x2, 0x4e24, @multicast1}}, 0xff7f, 0x3}, 0x90) sendto$inet(r8, &(0x7f00000007c0)="ee33307526a1a001aca65d4a478d6704300621be40173fd878ba69356d0a4b17abfe8b0a9977f298367cb7378c03280574657ecbf92fe1f832e24a76037b020eda417a5af21ba7972f822febaabf5af830e8ba51be482abd493303f9ffd33c254583768b2fa605521d01b86d28a9784ab28f0633b90fab73801afcf05c22c738d2eb9f8fd422a2adb232a12dccd2d75cfcbd00eaab680e8e6a6300d55f83ed3ddc", 0xa1, 0x20004000, &(0x7f0000000880)={0x2, 0x4e22, @loopback}, 0x10) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000a40)={0x2, 0x1, &(0x7f00000008c0)=""/107, &(0x7f0000000940)=""/57, &(0x7f0000000980)=""/147, 0xeeee8000}) (async) socket$unix(0x1, 0x0, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000001640)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f00000011c0)={0x428, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r13}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xb66, 0x5, 0xad, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xac}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8b}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x101, 0x2, 0xff, 0x8001}, {0x2, 0x3, 0x9, 0x7}, {0x9, 0x10, 0x59, 0x46}, {0x4, 0xe5, 0x4, 0x9}, {0x3ff, 0xfc, 0x7, 0xfffffff9}, {0x6, 0xbe, 0xd, 0x8}, {0x4, 0xe, 0x6}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8e}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9b, 0xff, 0x4, 0x8001}, {0x5bf, 0xff, 0x5, 0x3}, {0x7fff, 0x7, 0x8, 0x7ff}, {0x7, 0x7, 0x0, 0x10001}, {0x101, 0x8, 0xc, 0x9}, {0x551, 0x6, 0x8, 0x8}, {0x0, 0x7, 0x6, 0x7f}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x428}, 0x1, 0x0, 0x0, 0x48040}, 0x8810) 103.541795ms ago: executing program 1 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000a80)={0x0, 0x0, @pic={0x96, 0xb9, 0x2, 0xb9, 0x1c, 0xa, 0x2, 0xa, 0x0, 0xb9, 0x4, 0x9, 0x0, 0x4, 0xff, 0x14}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000000c0)={0xa, 0x81}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440002100000900010073797a3000000000080003400000000814"], 0x64}}, 0x0) 24.08033ms ago: executing program 2 (id=290): r0 = io_uring_setup(0x980, &(0x7f00000001c0)={0x0, 0x8fb1, 0x1000, 0x0, 0x400042}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x9, 0x3f, 0x1a, "3eccd25569e20900"}) r2 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x200) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000001d40)={0xa, @raw_data="752ae0b998dc0a7286617792b8846137fd5e789aaacdf16c2c8775cdb14054e3a03edfb1e65a686f175bc0aa07009dca773bf20ff0b4b8b885a2e6213209aa5f69589d00313ac31fd733f990e24a6b11c0bfad8562e8ff27733629751e457143f05e4b06a6d09713601d7a90991ae9e868c3e7ceefdcbae94b35e94b333a855e26d6621bbc847bd5b83bf9ab82d320e7f6cb6022fc19d94c5b8366d919a5ffeb51fedbdb2fe6a71f1d70d8c08277f6c113f5372fc84c75a9067658b71e17e835e03f3949bd66f1e7"}) close_range(r0, 0xffffffffffffffff, 0x0) 23.882015ms ago: executing program 1 (id=291): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000540)) 21.419397ms ago: executing program 2 (id=292): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000340)={&(0x7f0000000140), &(0x7f0000000500)=""/77, 0x4d}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0xfff0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x40}) write$P9_RREADLINK(r2, &(0x7f0000000180)={0xffffffffffffff9e, 0x17, 0xfffd, {0x7, './file0'}}, 0x4800) 0s ago: executing program 1 (id=293): writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)="890c88d324c131d26df99363a02f69d846aacb7242221935e29131957fb268fc579673b9fb971e7134c2937a25c1f6f90e918eeb3327c527f754e2e773fb", 0x3e}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000300)={&(0x7f0000000280)=[r3, 0x0, r4, r5], &(0x7f00000002c0)=[0x0], 0x4}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10000001) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 44.053664][ T40] audit: type=1400 audit(1766274721.840:60): avc: denied { rlimitinh } for pid=5835 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.060922][ T40] audit: type=1400 audit(1766274721.850:61): avc: denied { siginh } for pid=5835 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:5773' (ED25519) to the list of known hosts. [ 46.284169][ T40] audit: type=1400 audit(1766274724.090:62): avc: denied { name_bind } for pid=5884 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.313304][ T40] audit: type=1400 audit(1766274724.120:63): avc: denied { execute } for pid=5885 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.320287][ T40] audit: type=1400 audit(1766274724.120:64): avc: denied { execute_no_trans } for pid=5885 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.312817][ T40] audit: type=1400 audit(1766274726.120:65): avc: denied { mounton } for pid=5885 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.322317][ T40] audit: type=1400 audit(1766274726.130:66): avc: denied { mount } for pid=5885 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.324165][ T5885] cgroup: Unknown subsys name 'net' [ 48.520225][ T5885] cgroup: Unknown subsys name 'cpuset' [ 48.525361][ T5885] cgroup: Unknown subsys name 'rlimit' [ 48.773005][ T5919] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.477782][ T5885] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.530595][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 52.530609][ T40] audit: type=1400 audit(1766274730.340:82): avc: denied { execmem } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.682130][ T40] audit: type=1400 audit(1766274730.490:83): avc: denied { create } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.705876][ T40] audit: type=1400 audit(1766274730.490:84): avc: denied { read write } for pid=5930 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.713789][ T40] audit: type=1400 audit(1766274730.490:85): avc: denied { open } for pid=5930 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.715883][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.721725][ T40] audit: type=1400 audit(1766274730.500:86): avc: denied { ioctl } for pid=5930 comm="syz-executor" path="socket:[6360]" dev="sockfs" ino=6360 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.724588][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.734822][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.737975][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.740333][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.742980][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.743820][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.745315][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.748914][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.750206][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.752349][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.755101][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.757974][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.760398][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.762897][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.764459][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.767040][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.769416][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.773342][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.775946][ T40] audit: type=1400 audit(1766274730.580:87): avc: denied { read } for pid=5936 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.784264][ T40] audit: type=1400 audit(1766274730.590:88): avc: denied { open } for pid=5942 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.786862][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.793337][ T40] audit: type=1400 audit(1766274730.590:89): avc: denied { mounton } for pid=5942 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.972792][ T40] audit: type=1400 audit(1766274730.780:90): avc: denied { module_request } for pid=5930 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.014047][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 53.036965][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 53.070565][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 53.207010][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.209590][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.212255][ T5930] bridge_slave_0: entered allmulticast mode [ 53.215208][ T5930] bridge_slave_0: entered promiscuous mode [ 53.249434][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.252553][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.255509][ T5930] bridge_slave_1: entered allmulticast mode [ 53.259461][ T5930] bridge_slave_1: entered promiscuous mode [ 53.263677][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.266739][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.269889][ T5936] bridge_slave_0: entered allmulticast mode [ 53.273115][ T5936] bridge_slave_0: entered promiscuous mode [ 53.300148][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.303253][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.306334][ T5936] bridge_slave_1: entered allmulticast mode [ 53.310317][ T5936] bridge_slave_1: entered promiscuous mode [ 53.340537][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.343542][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.346551][ T5942] bridge_slave_0: entered allmulticast mode [ 53.350763][ T5942] bridge_slave_0: entered promiscuous mode [ 53.360014][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.364256][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.367877][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 53.378591][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.382495][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.385677][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.389207][ T5942] bridge_slave_1: entered allmulticast mode [ 53.392948][ T5942] bridge_slave_1: entered promiscuous mode [ 53.399218][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.481470][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.487036][ T5936] team0: Port device team_slave_0 added [ 53.498317][ T5930] team0: Port device team_slave_0 added [ 53.502756][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.508439][ T5936] team0: Port device team_slave_1 added [ 53.534741][ T5930] team0: Port device team_slave_1 added [ 53.563537][ T5942] team0: Port device team_slave_0 added [ 53.584598][ T5942] team0: Port device team_slave_1 added [ 53.588945][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.591844][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.602449][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.612447][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.615187][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.618184][ T5931] bridge_slave_0: entered allmulticast mode [ 53.620793][ T5931] bridge_slave_0: entered promiscuous mode [ 53.629741][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.631858][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.639903][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.644099][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.646332][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.654399][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.658038][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.660283][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.662506][ T5931] bridge_slave_1: entered allmulticast mode [ 53.665084][ T5931] bridge_slave_1: entered promiscuous mode [ 53.677996][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.680199][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.688749][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.696733][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.699002][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.707225][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.729420][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.732219][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.740693][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.748699][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.765874][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.826019][ T5936] hsr_slave_0: entered promiscuous mode [ 53.829282][ T5936] hsr_slave_1: entered promiscuous mode [ 53.839974][ T5930] hsr_slave_0: entered promiscuous mode [ 53.842351][ T5930] hsr_slave_1: entered promiscuous mode [ 53.844388][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 53.846253][ T5930] Cannot create hsr debugfs directory [ 53.853377][ T5942] hsr_slave_0: entered promiscuous mode [ 53.856498][ T5942] hsr_slave_1: entered promiscuous mode [ 53.860000][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 53.862435][ T5942] Cannot create hsr debugfs directory [ 53.866554][ T5931] team0: Port device team_slave_0 added [ 53.881448][ T5931] team0: Port device team_slave_1 added [ 53.959985][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.962186][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.970449][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.992232][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.994423][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.004155][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.115878][ T5931] hsr_slave_0: entered promiscuous mode [ 54.118199][ T5931] hsr_slave_1: entered promiscuous mode [ 54.120269][ T5931] debugfs: 'hsr0' already exists in 'hsr' [ 54.122088][ T5931] Cannot create hsr debugfs directory [ 54.232940][ T5930] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.242257][ T5930] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.249330][ T5930] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.261682][ T5930] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.305463][ T5936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.312112][ T5936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.318867][ T5936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.333088][ T5936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.375905][ T5942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.384478][ T5942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.389735][ T5942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.402695][ T5942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.419645][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.462259][ T5931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.468715][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.470925][ T5931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.475086][ T5931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.481106][ T5931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.499558][ T549] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.502289][ T549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.524958][ T549] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.528015][ T549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.560464][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.596541][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.604870][ T549] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.607348][ T549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.614903][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.616512][ T40] audit: type=1400 audit(1766274732.420:91): avc: denied { sys_module } for pid=5930 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.617783][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.630777][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.663527][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.671360][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.684331][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.686625][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.705368][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.708551][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.714825][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.737042][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.739352][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.750978][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.754030][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.769036][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.817032][ T5930] veth0_vlan: entered promiscuous mode [ 54.819478][ T5940] Bluetooth: hci0: command tx timeout [ 54.819481][ T5932] Bluetooth: hci2: command tx timeout [ 54.819808][ T64] Bluetooth: hci1: command tx timeout [ 54.819836][ T5945] Bluetooth: hci3: command tx timeout [ 54.823165][ T5930] veth1_vlan: entered promiscuous mode [ 54.846083][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.860580][ T5930] veth0_macvtap: entered promiscuous mode [ 54.865724][ T5930] veth1_macvtap: entered promiscuous mode [ 54.884179][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.891629][ T5936] veth0_vlan: entered promiscuous mode [ 54.894427][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.902528][ T4756] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.914127][ T4756] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.919822][ T5936] veth1_vlan: entered promiscuous mode [ 54.923090][ T4756] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.926139][ T4756] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.944945][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.955876][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.972550][ T5936] veth0_macvtap: entered promiscuous mode [ 54.986560][ T5936] veth1_macvtap: entered promiscuous mode [ 54.995878][ T1243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.002919][ T1243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.017003][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.029078][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.038561][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.040928][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.041175][ T5942] veth0_vlan: entered promiscuous mode [ 55.051906][ T4756] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.054601][ T4756] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.059560][ T4756] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.062300][ T4756] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.081725][ T5931] veth0_vlan: entered promiscuous mode [ 55.084079][ T5942] veth1_vlan: entered promiscuous mode [ 55.095675][ T5930] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.102796][ T5931] veth1_vlan: entered promiscuous mode [ 55.136473][ T4756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.141938][ T4756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.163104][ T5942] veth0_macvtap: entered promiscuous mode [ 55.181853][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.184376][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.191666][ T5942] veth1_macvtap: entered promiscuous mode [ 55.196319][ T5931] veth0_macvtap: entered promiscuous mode [ 55.204731][ T5931] veth1_macvtap: entered promiscuous mode [ 55.212835][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.224371][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.228352][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.232532][ T840] IPVS: starting estimator thread 0... [ 55.238232][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.245922][ T1243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.254384][ T1243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.264268][ T6022] IPVS: sh: FWM 3 0x00000003 - no destination available [ 55.266585][ C3] IPVS: sh: FWM 3 0x00000003 - no destination available [ 55.273245][ T1243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.276461][ T1243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.282179][ T1243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.284925][ T1243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.289084][ T1243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.291911][ T1243] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.317508][ T6023] IPVS: using max 43 ests per chain, 103200 per kthread [ 55.364561][ T4756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.375234][ T4756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.387819][ T4756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.391474][ T4756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.403966][ T4756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.407688][ T4756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.419430][ T549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.423978][ T549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.509844][ T6034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=6034 comm=syz.1.2 [ 55.573085][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 55.597966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.618726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.709061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.735367][ T6061] netlink: 'syz.2.13': attribute type 12 has an invalid length. [ 55.777745][ T6064] fuse: Unknown parameter 'use00000000000000000000' [ 55.818190][ T6066] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 55.899499][ T6075] 9pnet_virtio: no channels available for device syz [ 55.908860][ T6071] process 'syz.3.19' launched './file1' with NULL argv: empty string added [ 55.981419][ T6081] random: crng reseeded on system resumption [ 56.127341][ T6095] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.155288][ T6100] fuse: Unknown parameter 'use00000000000000000000' [ 56.295816][ T6113] program syz.0.34 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.302067][ T6113] ata1.00: non-matching transfer count (0/133) [ 56.336436][ T6115] ======================================================= [ 56.336436][ T6115] WARNING: The mand mount option has been deprecated and [ 56.336436][ T6115] and is ignored by this kernel. Remove the mand [ 56.336436][ T6115] option from the mount to silence this warning. [ 56.336436][ T6115] ======================================================= [ 56.353318][ T6115] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 56.374817][ T6082] Zero length message leads to an empty skb [ 56.490817][ T6128] fuse: Unknown parameter 'use00000000000000000000' [ 56.593333][ T6138] netlink: 'syz.2.43': attribute type 2 has an invalid length. [ 56.632179][ T6136] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.728911][ T6134] sp0: Synchronizing with TNC [ 56.734759][ T6134] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 56.836286][ T6133] [U] è` [ 56.840943][ T6165] fuse: Unknown parameter 'user_i00000000000000000000' [ 56.889927][ T6167] /dev/sg0: Can't lookup blockdev [ 56.900179][ T64] Bluetooth: hci3: command tx timeout [ 56.900242][ T5940] Bluetooth: hci2: command tx timeout [ 56.900289][ T5932] Bluetooth: hci0: command tx timeout [ 56.900346][ T5945] Bluetooth: hci1: command tx timeout [ 57.017814][ T6173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 57.020569][ T6173] IPv6: NLM_F_CREATE should be set when creating new route [ 57.046840][ T6173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 57.199544][ T6187] netlink: 188 bytes leftover after parsing attributes in process `syz.1.58'. [ 57.250412][ T6190] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.253119][ T6192] fuse: Unknown parameter 'user_i00000000000000000000' [ 57.254029][ T6190] block device autoloading is deprecated and will be removed. [ 57.332853][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.63'. [ 57.335821][ T6207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 57.338239][ T6207] IPv6: NLM_F_CREATE should be set when creating new route [ 57.417800][ T6209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 57.420155][ T6209] IPv6: NLM_F_CREATE should be set when creating new route [ 57.546744][ T6224] fuse: Unknown parameter 'user_i00000000000000000000' [ 57.552259][ T40] kauditd_printk_skb: 147 callbacks suppressed [ 57.552269][ T40] audit: type=1400 audit(1766274735.360:239): avc: denied { append } for pid=6223 comm="syz.2.70" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.575683][ T40] audit: type=1400 audit(1766274735.380:240): avc: denied { create } for pid=6226 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.587545][ T40] audit: type=1400 audit(1766274735.400:241): avc: denied { ioctl } for pid=6226 comm="syz.0.71" path="socket:[10777]" dev="sockfs" ino=10777 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.644778][ T40] audit: type=1400 audit(1766274735.450:242): avc: denied { create } for pid=6233 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 57.651500][ T40] audit: type=1400 audit(1766274735.450:243): avc: denied { ioctl } for pid=6233 comm="syz.2.73" path="socket:[7103]" dev="sockfs" ino=7103 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 57.667935][ T40] audit: type=1400 audit(1766274735.480:244): avc: denied { create } for pid=6235 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 57.674573][ T40] audit: type=1400 audit(1766274735.480:245): avc: denied { read write } for pid=6235 comm="syz.3.75" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.687148][ T40] audit: type=1400 audit(1766274735.480:246): avc: denied { open } for pid=6235 comm="syz.3.75" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.711531][ T40] audit: type=1400 audit(1766274735.490:247): avc: denied { bind } for pid=6235 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 57.718040][ T40] audit: type=1400 audit(1766274735.490:248): avc: denied { write } for pid=6235 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 57.724219][ T6244] program syz.1.74 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.728681][ T6244] ata1.00: invalid transfer count 0 [ 57.765984][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 57.796447][ T6254] netlink: 'syz.3.81': attribute type 10 has an invalid length. [ 57.801021][ T6254] netlink: 228 bytes leftover after parsing attributes in process `syz.3.81'. [ 57.801239][ T6255] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.805211][ T6252] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.809990][ T6252] block device autoloading is deprecated and will be removed. [ 57.897474][ T6246] nbd0: detected capacity change from 0 to 549764202496 [ 57.903146][ T5940] block nbd0: Receive control failed (result -104) [ 58.024317][ T6262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 58.027320][ T6262] IPv6: NLM_F_CREATE should be set when creating new route [ 58.097840][ T6026] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.144187][ T6275] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 58.147022][ T6275] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 58.184487][ T6277] netlink: 48 bytes leftover after parsing attributes in process `syz.1.89'. [ 58.251987][ T6026] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 58.255616][ T6026] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 58.259599][ T6026] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 58.260063][ T6284] Bluetooth: MGMT ver 1.23 [ 58.263108][ T6026] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 58.269887][ T6026] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 58.275347][ T6026] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 58.278993][ T6026] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 58.282183][ T6026] usb 8-1: Product: syz [ 58.283846][ T6026] usb 8-1: Manufacturer: syz [ 58.298764][ T6288] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 58.309372][ T6288] Bluetooth: hci4: Frame reassembly failed (-84) [ 58.313511][ T1243] Bluetooth: hci4: Frame reassembly failed (-84) [ 58.316495][ T6026] cdc_wdm 8-1:1.0: skipping garbage [ 58.319641][ T6026] cdc_wdm 8-1:1.0: skipping garbage [ 58.323706][ T6026] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 58.325911][ T6026] cdc_wdm 8-1:1.0: Unknown control protocol [ 58.521547][ T9] usb 8-1: USB disconnect, device number 2 [ 58.537305][ T6003] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.637620][ T6313] autofs: Bad value for 'fd' [ 58.697167][ T6003] usb 5-1: Using ep0 maxpacket: 32 [ 58.700446][ T6003] usb 5-1: config 0 has no interfaces? [ 58.704877][ T6003] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 58.708374][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.711205][ T6003] usb 5-1: Product: syz [ 58.712702][ T6003] usb 5-1: Manufacturer: syz [ 58.714385][ T6003] usb 5-1: SerialNumber: syz [ 58.718270][ T6003] usb 5-1: config 0 descriptor?? [ 58.923634][ T6003] usb 5-1: USB disconnect, device number 2 [ 58.977221][ T64] Bluetooth: hci1: command tx timeout [ 58.977950][ T5945] Bluetooth: hci0: command tx timeout [ 58.987161][ T5945] Bluetooth: hci3: command tx timeout [ 58.989056][ T64] Bluetooth: hci2: command tx timeout [ 59.558768][ T6343] TCP: TCP_TX_DELAY enabled [ 59.666162][ T6356] kAFS: unable to lookup cell '/,c¾ûL' [ 59.707026][ T6360] fuse: Bad value for 'fd' [ 59.844161][ T6369] program syz.2.106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.080157][ T6387] fuse: Bad value for 'fd' [ 60.158170][ T1117] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 60.160885][ T1117] ata1: failed to read log page 10h (errno=-5) [ 60.163432][ T1117] ata1.00: exception Emask 0x1 SAct 0x8 SErr 0x0 action 0x0 [ 60.166370][ T1117] ata1.00: irq_stat 0x40000000 [ 60.168447][ T1117] ata1.00: failed command: WRITE FPDMA QUEUED [ 60.170861][ T1117] ata1.00: cmd 61/68:18:f6:04:10/00:00:00:00:00/40 tag 3 ncq dma 53248 out [ 60.170861][ T1117] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 60.178711][ T1117] ata1.00: status: { DRDY } [ 60.184170][ T1117] ata1.00: configured for UDMA/100 [ 60.186742][ T1117] ata1: EH complete [ 60.204169][ T6395] netlink: 'syz.3.116': attribute type 1 has an invalid length. [ 60.207650][ T6395] netlink: 'syz.3.116': attribute type 1 has an invalid length. [ 60.210608][ T6395] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.116'. [ 60.213992][ T6394] netlink: 'syz.3.116': attribute type 1 has an invalid length. [ 60.217049][ T6394] netlink: 'syz.3.116': attribute type 1 has an invalid length. [ 60.220217][ T6394] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.116'. [ 60.273294][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 60.347211][ T5940] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 60.349202][ T5945] Bluetooth: hci4: command 0xfc11 tx timeout [ 60.611525][ T6414] fuse: Unknown parameter '0x0000000000000003' [ 60.738619][ T6117] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.749943][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.126'. [ 60.752915][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.126'. [ 60.867255][ T6117] usb 6-1: device descriptor read/64, error -71 [ 60.936665][ T6003] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.942361][ T6003] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.945532][ T6003] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.948756][ T6003] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.951819][ T6003] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.954869][ T6003] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.958741][ T6003] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.961780][ T6003] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.964803][ T6003] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.967952][ T6003] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.974740][ T6003] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [sy] on syz0 [ 61.002861][ T6439] fido_id[6439]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.057857][ T5940] Bluetooth: hci2: command tx timeout [ 61.057882][ T5945] Bluetooth: hci1: command tx timeout [ 61.067196][ T5945] Bluetooth: hci3: command tx timeout [ 61.067213][ T5940] Bluetooth: hci0: command tx timeout [ 61.078786][ T6441] Cache volume key already in use (9p,syz,) [ 61.127415][ T6117] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.244163][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 61.248278][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 61.251432][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 61.254780][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 61.255488][ T6452] hfsplus: unable to find HFS+ superblock [ 61.257948][ T6117] usb 6-1: device descriptor read/64, error -71 [ 61.262541][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 61.265170][ T6452] hfsplus: unable to find HFS+ superblock [ 61.265697][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 61.271665][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 61.273406][ T6452] hfsplus: unable to find HFS+ superblock [ 61.274696][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 61.281500][ T6452] hfsplus: unable to find HFS+ superblock [ 61.289809][ T6452] hfsplus: unable to find HFS+ superblock [ 61.296841][ T6452] hfsplus: unable to find HFS+ superblock [ 61.305053][ T6452] hfsplus: unable to find HFS+ superblock [ 61.377791][ T6117] usb usb6-port1: attempt power cycle [ 61.547177][ T1026] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 61.699779][ T1026] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 61.704423][ T1026] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 61.710652][ T1026] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 61.714411][ T1026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.721627][ T6456] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 61.724796][ T6456] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 61.728167][ T6117] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.732766][ T1026] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 61.748208][ T6117] usb 6-1: device descriptor read/8, error -71 [ 61.997168][ T6117] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 61.997914][ T9] usb 5-1: USB disconnect, device number 3 [ 62.017683][ T6117] usb 6-1: device descriptor read/8, error -71 [ 62.127562][ T6117] usb usb6-port1: unable to enumerate USB device [ 62.315300][ T6490] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.358031][ T6492] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 62.360523][ T6492] netlink: 'syz.3.149': attribute type 7 has an invalid length. [ 62.362994][ T6492] netlink: 'syz.3.149': attribute type 8 has an invalid length. [ 62.635994][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 62.636008][ T40] audit: type=1400 audit(1766274740.440:346): avc: denied { write } for pid=6508 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.716015][ T6520] netlink: 'syz.0.158': attribute type 2 has an invalid length. [ 62.720149][ T6519] netlink: 'syz.0.158': attribute type 2 has an invalid length. [ 62.965911][ T6529] netlink: 'syz.0.161': attribute type 4 has an invalid length. [ 62.996986][ T40] audit: type=1400 audit(1766274740.800:347): avc: denied { read } for pid=6530 comm="syz.2.162" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.004926][ T40] audit: type=1400 audit(1766274740.800:348): avc: denied { open } for pid=6530 comm="syz.2.162" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.014212][ T40] audit: type=1400 audit(1766274740.800:349): avc: denied { ioctl } for pid=6530 comm="syz.2.162" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.025413][ T40] audit: type=1400 audit(1766274740.800:350): avc: denied { set_context_mgr } for pid=6530 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 63.097788][ T6017] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 63.103615][ T6533] macvlan2: entered promiscuous mode [ 63.105985][ T6533] macvlan2: entered allmulticast mode [ 63.108966][ T6533] bond1: (slave macvlan2): Opening slave failed [ 63.118629][ T6531] nilfs2: Unknown parameter 'norecovery<Œÿÿ' [ 63.119467][ T40] audit: type=1400 audit(1766274740.930:351): avc: denied { mounton } for pid=6530 comm="syz.2.162" path="/40/file0" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.154257][ T6536] fuse: Unknown parameter '0x0000000000000003' [ 63.197177][ T40] audit: type=1400 audit(1766274741.000:352): avc: denied { ioctl } for pid=6539 comm="syz.2.165" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.326325][ T40] audit: type=1400 audit(1766274741.130:353): avc: denied { create } for pid=6554 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.336063][ T6555] netlink: 'syz.2.168': attribute type 12 has an invalid length. [ 63.342196][ T40] audit: type=1400 audit(1766274741.150:354): avc: denied { unlink } for pid=6554 comm="syz.0.169" name="#7" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 63.371000][ T40] audit: type=1400 audit(1766274741.180:355): avc: denied { connect } for pid=6554 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.104278][ T6566] fuse: Unknown parameter '0x0000000000000003' [ 64.235749][ T6579] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 64.238907][ T6579] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.243730][ T6579] vhci_hcd vhci_hcd.0: Device attached [ 64.246416][ T6575] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 64.249304][ T6575] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.253209][ T6575] vhci_hcd vhci_hcd.0: Device attached [ 64.255986][ T6582] vhci_hcd: connection closed [ 64.256123][ T6581] vhci_hcd: connection closed [ 64.257573][ T1154] vhci_hcd vhci_hcd.3: stop threads [ 64.262490][ T1154] vhci_hcd vhci_hcd.3: release socket [ 64.264396][ T1154] vhci_hcd vhci_hcd.3: disconnect device [ 64.266843][ T1154] vhci_hcd vhci_hcd.3: stop threads [ 64.269579][ T1154] vhci_hcd vhci_hcd.3: release socket [ 64.271729][ T1154] vhci_hcd vhci_hcd.3: disconnect device [ 64.365820][ T6588] fuse: Bad value for 'rootmode' [ 64.607292][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.610598][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.611738][ T6609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6609 comm=syz.3.183 [ 64.632637][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.635775][ T6609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.639431][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.642403][ T6609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.649636][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.652019][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.764289][ T6634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.772781][ T6634] veth1_to_team: entered promiscuous mode [ 64.819103][ T6636] ip6gre1: entered promiscuous mode [ 64.820905][ T6636] ip6gre1: entered allmulticast mode [ 64.875092][ T6638] binder: 6637:6638 ioctl c0306201 200000000540 returned -22 [ 65.085203][ T6651] loop6: detected capacity change from 0 to 2640 [ 65.089144][ T6653] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 65.094122][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.097384][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.100072][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.103757][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.111218][ T6650] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.115639][ T6319] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.119247][ T1028] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 65.124620][ T6650] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.127881][ T6650] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.131239][ T6319] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.134638][ T6651] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.257256][ T1028] usb 8-1: device descriptor read/64, error -71 [ 65.372094][ T6675] warning: `syz.1.205' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.376919][ T6675] random: crng reseeded on system resumption [ 65.499221][ T6682] Unrecognized hibernate image header format! [ 65.501868][ T6682] PM: hibernation: Image mismatch: architecture specific data [ 65.504429][ T6684] MTD: Couldn't look up './bus': -15 [ 65.507323][ T1028] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 65.647267][ T1028] usb 8-1: device descriptor read/64, error -71 [ 65.733587][ T6688] ceph: No mds server is up or the cluster is laggy [ 65.759717][ T1028] usb usb8-port1: attempt power cycle [ 65.966079][ T6697] geneve2: entered promiscuous mode [ 65.967960][ T6697] geneve2: entered allmulticast mode [ 66.107269][ T1028] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 66.127717][ T1028] usb 8-1: device descriptor read/8, error -71 [ 66.387265][ T1028] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 66.408980][ T1028] usb 8-1: device descriptor read/8, error -71 [ 66.425162][ T6714] binder: 6713:6714 ioctl c0306201 200000003900 returned -14 [ 66.528010][ T1028] usb usb8-port1: unable to enumerate USB device [ 66.550999][ T6724] __nla_validate_parse: 75 callbacks suppressed [ 66.551010][ T6724] netlink: 144 bytes leftover after parsing attributes in process `syz.2.220'. [ 66.556094][ T6723] netlink: 144 bytes leftover after parsing attributes in process `syz.2.220'. [ 67.090950][ T3249] cfg80211: failed to load regulatory.db [ 67.200924][ T6754] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 67.203017][ T6754] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 67.206262][ T6754] vhci_hcd vhci_hcd.0: Device attached [ 67.209718][ T6755] vhci_hcd: unknown pdu 2 [ 67.211251][ T4508] vhci_hcd vhci_hcd.1: stop threads [ 67.212952][ T4508] vhci_hcd vhci_hcd.1: release socket [ 67.214638][ T4508] vhci_hcd vhci_hcd.1: disconnect device [ 67.297194][ T60] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.459067][ T60] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 67.462493][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.468654][ T60] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 67.472375][ T60] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 67.475645][ T60] usb 5-1: Manufacturer: syz [ 67.479845][ T60] usb 5-1: config 0 descriptor?? [ 67.537216][ T60] rc_core: IR keymap rc-hauppauge not found [ 67.539855][ T60] Registered IR keymap rc-empty [ 67.544618][ T60] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 67.551946][ T60] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 67.688150][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 67.688164][ T40] audit: type=1400 audit(1766274745.500:386): avc: denied { append } for pid=6747 comm="syz.0.226" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.718547][ T60] usb 5-1: USB disconnect, device number 4 [ 67.787767][ T6769] block device autoloading is deprecated and will be removed. [ 67.804748][ T6769] netlink: 'syz.1.232': attribute type 10 has an invalid length. [ 67.807737][ T6769] syz_tun: entered promiscuous mode [ 67.813338][ T6769] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 67.957393][ T40] audit: type=1400 audit(1766274745.770:387): avc: denied { ioctl } for pid=6783 comm="syz.3.236" path="socket:[15350]" dev="sockfs" ino=15350 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 68.087209][ T60] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 68.238398][ T60] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 68.241245][ T60] usb 6-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 68.244541][ T60] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 68.249715][ T60] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 68.253060][ T60] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 68.255851][ T40] audit: type=1400 audit(1766274746.060:388): avc: denied { append } for pid=6789 comm="syz.0.239" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.256279][ T60] usb 6-1: Product: syz [ 68.264871][ T60] usb 6-1: Manufacturer: syz [ 68.279812][ T40] audit: type=1400 audit(1766274746.090:389): avc: denied { write } for pid=6793 comm="syz.3.238" name="anycast6" dev="proc" ino=4026533385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 68.288626][ T40] audit: type=1400 audit(1766274746.090:390): avc: denied { bind } for pid=6793 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.321709][ T40] audit: type=1400 audit(1766274746.130:391): avc: denied { create } for pid=6797 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.323894][ T6796] capability: warning: `syz.0.240' uses deprecated v2 capabilities in a way that may be insecure [ 68.333060][ T40] audit: type=1400 audit(1766274746.140:392): avc: denied { bind } for pid=6797 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.345791][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.241'. [ 68.362596][ T40] audit: type=1400 audit(1766274746.170:393): avc: denied { execute } for pid=6797 comm="syz.3.241" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 68.485788][ T40] audit: type=1400 audit(1766274746.290:394): avc: denied { shutdown } for pid=6810 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.538697][ T6815] tmpfs: Too few inodes for current use [ 68.543100][ T6117] usb 6-1: USB disconnect, device number 6 [ 68.941058][ T6821] netlink: 'syz.2.247': attribute type 10 has an invalid length. [ 68.941173][ T6820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.247'. [ 68.952652][ T6821] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 69.001134][ T40] audit: type=1400 audit(1766274746.810:395): avc: denied { write } for pid=6823 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.149162][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 69.414945][ T6849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=6849 comm=syz.0.254 [ 69.585066][ T6855] md: could not open device unknown-block(0,0). [ 69.587569][ T6855] md: md_import_device returned -6 [ 69.622868][ T6857] nbd1: detected capacity change from 0 to 63 [ 69.628587][ T5940] block nbd1: Receive control failed (result -104) [ 69.663220][ T6868] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 69.666721][ T6868] overlayfs: missing 'lowerdir' [ 70.038220][ T6889] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 70.041912][ T6889] block device autoloading is deprecated and will be removed. [ 70.070312][ T6891] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.268'. [ 70.131704][ T6886] md: could not open device unknown-block(0,0). [ 70.133813][ T6886] md: md_import_device returned -6 [ 70.175118][ T6898] syz.2.270 uses obsolete (PF_INET,SOCK_PACKET) [ 70.194729][ T6898] Bluetooth: MGMT ver 1.23 [ 70.196882][ T6898] Bluetooth: hci0: service_discovery: too big uuid_count value 33022 [ 70.481666][ T6928] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 70.484865][ T6928] block device autoloading is deprecated and will be removed. [ 70.587173][ T60] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 70.597471][ T3249] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 70.600206][ T6926] md: could not open device unknown-block(0,0). [ 70.614197][ T6926] md: md_import_device returned -6 [ 70.737201][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 70.743122][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.748906][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.752138][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 70.756274][ T60] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 70.759750][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.761198][ T3249] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 70.764438][ T60] usb 8-1: config 0 descriptor?? [ 70.768244][ T3249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 70.776622][ T3249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 70.782861][ T3249] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.807298][ T3249] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.811493][ T3249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.816879][ T3249] usb 5-1: config 0 descriptor?? [ 70.819469][ T6912] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 71.192162][ T60] hid_parser_main: 22 callbacks suppressed [ 71.192174][ T60] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 71.204329][ T60] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 71.206621][ T60] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 71.214471][ T60] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 71.219505][ T60] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 71.230306][ T3249] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 71.232137][ T60] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 71.243491][ T3249] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 71.271214][ T60] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 71.274091][ T60] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 71.388035][ T6921] random: crng reseeded on system resumption [ 71.401658][ T6017] usb 8-1: USB disconnect, device number 7 [ 71.401938][ T24] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 71.407303][ T6017] ------------[ cut here ]------------ [ 71.409051][ T6017] workqueue: work disable count underflowed [ 71.410274][ T24] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 71.410928][ T6017] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#1: kworker/1:4/6017 [ 71.414328][ T24] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 71.417307][ T6017] Modules linked in: [ 71.417328][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 71.417341][ T6017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.417348][ T6017] Workqueue: usb_hub_wq hub_event [ 71.422971][ T24] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 71.425069][ T6017] [ 71.425076][ T6017] RIP: 0010:enable_work+0x2ca/0x310 [ 71.436228][ T6017] Code: ff e8 fa 0d 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 ec 0d 3a 00 e8 17 29 f3 09 e9 49 ff ff ff e8 dd 0d 3a 00 48 8d 3d 36 cd 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 c4 e7 a3 00 e9 f7 fd ff [ 71.442126][ T6017] RSP: 0018:ffffc90003c17348 EFLAGS: 00010093 [ 71.444136][ T6017] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8184d6e3 [ 71.446932][ T6017] RDX: ffff88802a82a4c0 RSI: ffffffff8184d8b3 RDI: ffffffff908ba5f0 [ 71.449417][ T6017] RBP: ffff88802b489738 R08: 0000000000000005 R09: 0000000000000000 [ 71.451890][ T6017] R10: 0000000000000000 R11: ffff88802a82aff0 R12: 1ffff92000782e6a [ 71.454364][ T6017] R13: ffffffff8fc4e77f R14: ffff88802b489698 R15: ffff88802b489730 [ 71.456851][ T6017] FS: 0000000000000000(0000) GS:ffff8880d69f5000(0000) knlGS:0000000000000000 [ 71.459624][ T6017] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.461709][ T6017] CR2: 0000001b2fb0eff8 CR3: 00000000357e0000 CR4: 0000000000352ef0 [ 71.464192][ T6017] Call Trace: [ 71.465272][ T6017] [ 71.466218][ T6017] ? __pfx_enable_work+0x10/0x10 [ 71.467792][ T6017] cancel_delayed_work_sync+0x96/0xf0 [ 71.469495][ T6017] thermal_zone_device_unregister+0x28e/0x4d0 [ 71.471349][ T6017] ? __pfx_shield_remove+0x10/0x10 [ 71.472948][ T6017] power_supply_unregister+0x10a/0x150 [ 71.474666][ T6017] shield_remove+0x75/0x130 [ 71.476127][ T6017] ? __pfx_shield_remove+0x10/0x10 [ 71.477745][ T6017] hid_device_remove+0xd1/0x260 [ 71.479286][ T6017] ? __pfx_hid_device_remove+0x10/0x10 [ 71.481006][ T6017] device_remove+0xcb/0x170 [ 71.482461][ T6017] device_release_driver_internal+0x44b/0x620 [ 71.484372][ T6017] bus_remove_device+0x22f/0x450 [ 71.485963][ T6017] device_del+0x396/0x9f0 [ 71.487344][ T6017] ? __pfx_device_del+0x10/0x10 [ 71.488908][ T6017] ? do_raw_spin_lock+0x12c/0x2b0 [ 71.490499][ T6017] hid_destroy_device+0x19c/0x240 [ 71.492091][ T6017] usbhid_disconnect+0xa0/0xe0 [ 71.493608][ T6017] usb_unbind_interface+0x1dd/0x9e0 [ 71.495219][ T6017] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 71.496994][ T6017] ? __pfx_usb_unbind_interface+0x10/0x10 [ 71.498771][ T6017] device_remove+0x125/0x170 [ 71.500235][ T6017] device_release_driver_internal+0x44b/0x620 [ 71.502159][ T6017] bus_remove_device+0x22f/0x450 [ 71.503761][ T6017] device_del+0x396/0x9f0 [ 71.505150][ T6017] ? __pfx_device_del+0x10/0x10 [ 71.506731][ T6017] ? kobject_put+0x218/0x6f0 [ 71.508209][ T6017] usb_disable_device+0x355/0x820 [ 71.509821][ T6017] usb_disconnect+0x2e1/0x9e0 [ 71.511308][ T6017] hub_event+0x1d84/0x52f0 [ 71.512741][ T6017] ? __lock_acquire+0x436/0x2890 [ 71.514310][ T6017] ? do_raw_spin_unlock+0x172/0x230 [ 71.515950][ T6017] ? __pfx_hub_event+0x10/0x10 [ 71.517487][ T6017] ? debug_objects_fill_pool+0xc0/0x660 [ 71.519226][ T6017] ? finish_task_switch.isra.0+0x202/0xbd0 [ 71.521083][ T6017] ? rcu_is_watching+0x12/0xc0 [ 71.522597][ T6017] process_one_work+0x9ba/0x1b20 [ 71.524159][ T6017] ? __pfx_process_one_work+0x10/0x10 [ 71.525804][ T6017] ? assign_work+0x1a0/0x250 [ 71.527218][ T6017] worker_thread+0x6c8/0xf10 [ 71.528698][ T6017] ? __pfx_worker_thread+0x10/0x10 [ 71.530307][ T6017] kthread+0x3c5/0x780 [ 71.531597][ T6017] ? __pfx_kthread+0x10/0x10 [ 71.533075][ T6017] ? rcu_is_watching+0x12/0xc0 [ 71.534589][ T6017] ? __pfx_kthread+0x10/0x10 [ 71.536051][ T6017] ret_from_fork+0x983/0xb10 [ 71.537519][ T6017] ? __pfx_ret_from_fork+0x10/0x10 [ 71.539130][ T6017] ? __switch_to+0x7af/0x10d0 [ 71.540651][ T6017] ? __pfx_kthread+0x10/0x10 [ 71.542084][ T6017] ret_from_fork_asm+0x1a/0x30 [ 71.543599][ T6017] [ 71.544616][ T6017] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 71.546898][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 71.549811][ T6017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.553153][ T6017] Workqueue: usb_hub_wq hub_event [ 71.554760][ T6017] Call Trace: [ 71.555839][ T6017] [ 71.556784][ T6017] dump_stack_lvl+0x3d/0x1f0 [ 71.558234][ T6017] vpanic+0x640/0x6f0 [ 71.559504][ T6017] ? enable_work+0x2ca/0x310 [ 71.560966][ T6017] panic+0xca/0xd0 [ 71.562360][ T6017] ? __pfx_panic+0x10/0x10 [ 71.563778][ T6017] ? check_panic_on_warn+0x1f/0xb0 [ 71.565417][ T6017] check_panic_on_warn+0xab/0xb0 [ 71.566984][ T6017] __warn+0x108/0x3c0 [ 71.568374][ T6017] __report_bug+0x2a0/0x520 [ 71.569868][ T6017] ? enable_work+0x2ca/0x310 [ 71.571332][ T6017] ? __pfx___report_bug+0x10/0x10 [ 71.572952][ T6017] ? __wait_for_common+0x1e0/0x4e0 [ 71.574577][ T6017] ? enable_work+0x2c3/0x310 [ 71.576054][ T6017] ? enable_work+0xf3/0x310 [ 71.577508][ T6017] ? find_held_lock+0x2b/0x80 [ 71.579009][ T6017] report_bug_entry+0xe1/0x290 [ 71.580535][ T6017] ? enable_work+0x2ca/0x310 [ 71.582007][ T6017] handle_bug+0x18a/0x260 [ 71.583384][ T6017] exc_invalid_op+0x17/0x50 [ 71.584873][ T6017] asm_exc_invalid_op+0x1a/0x20 [ 71.586736][ T6017] RIP: 0010:enable_work+0x2ca/0x310 [ 71.588452][ T6017] Code: ff e8 fa 0d 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 ec 0d 3a 00 e8 17 29 f3 09 e9 49 ff ff ff e8 dd 0d 3a 00 48 8d 3d 36 cd 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 c4 e7 a3 00 e9 f7 fd ff [ 71.594487][ T6017] RSP: 0018:ffffc90003c17348 EFLAGS: 00010093 [ 71.596420][ T6017] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8184d6e3 [ 71.598895][ T6017] RDX: ffff88802a82a4c0 RSI: ffffffff8184d8b3 RDI: ffffffff908ba5f0 [ 71.601359][ T6017] RBP: ffff88802b489738 R08: 0000000000000005 R09: 0000000000000000 [ 71.603823][ T6017] R10: 0000000000000000 R11: ffff88802a82aff0 R12: 1ffff92000782e6a [ 71.606332][ T6017] R13: ffffffff8fc4e77f R14: ffff88802b489698 R15: ffff88802b489730 [ 71.608823][ T6017] ? enable_work+0xf3/0x310 [ 71.610262][ T6017] ? enable_work+0x2c3/0x310 [ 71.611725][ T6017] ? enable_work+0x2c3/0x310 [ 71.613198][ T6017] ? __pfx_enable_work+0x10/0x10 [ 71.614777][ T6017] cancel_delayed_work_sync+0x96/0xf0 [ 71.616503][ T6017] thermal_zone_device_unregister+0x28e/0x4d0 [ 71.618414][ T6017] ? __pfx_shield_remove+0x10/0x10 [ 71.620023][ T6017] power_supply_unregister+0x10a/0x150 [ 71.621952][ T6017] shield_remove+0x75/0x130 [ 71.623388][ T6017] ? __pfx_shield_remove+0x10/0x10 [ 71.625012][ T6017] hid_device_remove+0xd1/0x260 [ 71.626580][ T6017] ? __pfx_hid_device_remove+0x10/0x10 [ 71.628393][ T6017] device_remove+0xcb/0x170 [ 71.629858][ T6017] device_release_driver_internal+0x44b/0x620 [ 71.631768][ T6017] bus_remove_device+0x22f/0x450 [ 71.633357][ T6017] device_del+0x396/0x9f0 [ 71.634738][ T6017] ? __pfx_device_del+0x10/0x10 [ 71.636330][ T6017] ? do_raw_spin_lock+0x12c/0x2b0 [ 71.638117][ T6017] hid_destroy_device+0x19c/0x240 [ 71.639679][ T6017] usbhid_disconnect+0xa0/0xe0 [ 71.641195][ T6017] usb_unbind_interface+0x1dd/0x9e0 [ 71.642793][ T6017] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 71.644467][ T6017] ? __pfx_usb_unbind_interface+0x10/0x10 [ 71.646215][ T6017] device_remove+0x125/0x170 [ 71.647667][ T6017] device_release_driver_internal+0x44b/0x620 [ 71.649593][ T6017] bus_remove_device+0x22f/0x450 [ 71.651127][ T6017] device_del+0x396/0x9f0 [ 71.652440][ T6017] ? __pfx_device_del+0x10/0x10 [ 71.653972][ T6017] ? kobject_put+0x218/0x6f0 [ 71.655431][ T6017] usb_disable_device+0x355/0x820 [ 71.657037][ T6017] usb_disconnect+0x2e1/0x9e0 [ 71.658539][ T6017] hub_event+0x1d84/0x52f0 [ 71.659970][ T6017] ? __lock_acquire+0x436/0x2890 [ 71.661563][ T6017] ? do_raw_spin_unlock+0x172/0x230 [ 71.663236][ T6017] ? __pfx_hub_event+0x10/0x10 [ 71.664710][ T6017] ? debug_objects_fill_pool+0xc0/0x660 [ 71.666361][ T6017] ? finish_task_switch.isra.0+0x202/0xbd0 [ 71.668105][ T6017] ? rcu_is_watching+0x12/0xc0 [ 71.669606][ T6017] process_one_work+0x9ba/0x1b20 [ 71.671171][ T6017] ? __pfx_process_one_work+0x10/0x10 [ 71.672873][ T6017] ? assign_work+0x1a0/0x250 [ 71.674340][ T6017] worker_thread+0x6c8/0xf10 [ 71.675839][ T6017] ? __pfx_worker_thread+0x10/0x10 [ 71.677461][ T6017] kthread+0x3c5/0x780 [ 71.678762][ T6017] ? __pfx_kthread+0x10/0x10 [ 71.680233][ T6017] ? rcu_is_watching+0x12/0xc0 [ 71.681754][ T6017] ? __pfx_kthread+0x10/0x10 [ 71.683233][ T6017] ret_from_fork+0x983/0xb10 [ 71.684711][ T6017] ? __pfx_ret_from_fork+0x10/0x10 [ 71.686330][ T6017] ? __switch_to+0x7af/0x10d0 [ 71.687852][ T6017] ? __pfx_kthread+0x10/0x10 [ 71.689335][ T6017] ret_from_fork_asm+0x1a/0x30 [ 71.690864][ T6017] [ 71.692517][ T6017] Kernel Offset: disabled [ 71.693927][ T6017] Rebooting in 86400 seconds..