last executing test programs: 2m44.240934704s ago: executing program 32 (id=120): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) (async) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x6, r0, 'id1\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x6, r0, 'id1\x00'}) syz_io_uring_setup(0x34ce, &(0x7f0000000540)={0x0, 0xe65d, 0x10100, 0x200003, 0x1f2, 0x0, r2}, &(0x7f00000005c0), &(0x7f0000000080)) (async) r3 = syz_io_uring_setup(0x34ce, &(0x7f0000000540)={0x0, 0xe65d, 0x10100, 0x200003, 0x1f2, 0x0, r2}, &(0x7f00000005c0)=0x0, &(0x7f0000000080)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) (async) close_range(r9, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r10, 0x80045500, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11], 0x0}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00005fc000/0x3000)=nil, 0x3000, 0x3) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r14, 0x1, 0x2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m19.162342745s ago: executing program 1 (id=569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000040)=r2) (async) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async, rerun: 32) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) (async) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r8, 0xc0884123, &(0x7f0000000300)={0x1, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6651cb5e0a3eeda1a7777d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db07", {0x80000002, 0x1ff}}) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_FORWARD(r8, 0x40084149, &(0x7f0000000080)=0x8) (rerun: 64) r9 = inotify_init1(0x0) (async) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) inotify_add_watch(r9, &(0x7f0000000400)='.\x00', 0xa4000021) (async) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x10}}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0xffe0}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "01"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (rerun: 32) 2m18.900739146s ago: executing program 1 (id=571): mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0xfffffffd}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x4}}]}, 0x48}}, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) 2m18.841614804s ago: executing program 1 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000100)={0x0, 0x0}) setresuid(0x0, 0xee00, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r3 = socket(0x2000000015, 0x80005, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r1], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@tcp6=r3}, 0x20) (async) r5 = io_uring_setup(0xaae, &(0x7f0000000580)={0x0, 0xffffeff9, 0x800, 0x7, 0x6}) setrlimit(0x40000000000008, &(0x7f0000000000)) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14) (async) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="19922cbd7000fedbdd250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x60}, 0x1, 0x0, 0x0, 0x40800}, 0x400c0) 2m18.781710065s ago: executing program 1 (id=574): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000180)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000580)={r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xa83, 0x0, 0xc6a}]}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x3700, 0x0) read$FUSE(r5, &(0x7f0000003c40)={0x2020}, 0x2020) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="630400000020776d00"], 0x9) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="614ed22b7700"], 0x8) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000240)=0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300840000000000110002000f116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000400000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r9, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r8, &(0x7f0000000900)='!', 0x1, 0xf}]) syz_fuse_handle_req(r6, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000061c0)="d2efe1598eefc744a7c414a028b85fed27ae4ce82f7c62f4e8dc6743cbe655f38ba738ee2a060cf685d9ecfaf57d82894963b4b105869fbebb619ba11e5a93aee7b99a46443fc74e683f29c11bc1b80dfe0a65a94ebb71d4963c826ee895ca59ff582c8c7487de050f54a483e9af6a177abe006849005e9493772c4635f2750bcbe93ade5cfef5d59f820ba95e53f6cdbfdc42b42083e07c3af4a383b84a3183d8d114414961ba8d91075064149c6543731cd5cba6ec6aaa02f5d35a3711b50dda3d686cbfedcd0fb016eab9ad6458edef489e1d47e4b78d0d401850104cc3921f6eafe928a6966a8c157c8862f08345f41ce363b00ef2e3f553e71d079d24a8042f8e70e431f4dbad8b21ff6c4516787001c1bba9cbf3ddb1694d07558ad4245f4f2d23a685ae9cdd1e26496b24c27966a20be8d82573ffa6892965807523c054ed88098ea5793538cf8d6cafdecade2ee9ab0580aeaf83a968be8a003357953224c3c52e642ecf19d416886e2034befe3256994f5f859f18e906a2847df47f11439d7305043f7e1a9bb3e98b35bd9b251c2c55c42f06e447b4407393fe2db7434f115507f234d0b5e46b7d85aa3e374da76dc1d705748d39918cde8e3517a6cf0ebddf85317056a2ede1f8401ce61d2e96a4b4f4b1e93eb20f2467bd06a4bd637a96f2d7dc9d0ace43f738e2dba5f91849a0f21b722fe1bcec611035fb52fd706e1d17b4a5213e78c8fc4cb6992f75f52a04f4061c7bca6740608912df0b0ad0f1799453edfc8b2461574f6cebfdee0ee6a1baa9e59a719567fa43ea8d025bde2ac5613b4a9e59569d2957a0a6b0895fbf24a5de42ae3ae696e8835a4f059cce0f433af448f35648bd08e7425f217f437e0df341905816ac8117e26fc414c0653620809f5b560a7804e4fc2006073de3c6f4a3faa5c2fae0b53dd1431fe4a555bf6370948b7e6f2371765c354c0b2bc2a8f85f1178c7cb0c3753531250043e8f7934e249b60b83e1de15768ef84d9265d07607e0e4c604cecf3317eab627b207687500b2e98689c0beb982bab3d46399a62eb675b858d7ff71c7b083135f7dca2c8ae953d600c1e80c5176ac9b3fc519463ac3031f5024334c22345d6ca609b35d96c4e2d42b2be152f90dee6acdfb526f0ec0790a7b09cb3cb2679c2f7d1d5dbdcfca604050278612f05d336dd3f678c28e756f2e2d93ad3ebb31f4c54eb4b8ee3009d7d31e5bc6089554c970c7759e8fcaed06e826a4bf96c45e71178480ce70a1b478f02d3634d2ca8306313e7b62711ff8a6135afc94a26a657244c75b2b6bcf834874dafac96d21ecb00efe128f00c4e41f430f27d7e2fc76908ce13e50866d27c43f48e19f23c0c274470e0270e6128342ce55236de88099f482785fd503437c0b1f62e0a081b8bf4ca8514ccf33be392fb9cece3e01314d80e76b17b2abfb36a9aa880ebc6aee4c5bc14bac2538ee62efc864395275ebdfacc4410fd4d725c0f57475f31115456250448ad4a057118a75cc12de3b05b9b71392273075e861e69c1614494dc375944341299666fdafea3c90210d14e8232558866b436595d9421b916ca65ca98a71ca233b43dfbde23625529d859b2692a833d57a986718241dda02734a0517e631496f059267702b4b9a1361c29d2f15b510098d1ca627d25b42446cb19abef90b0b22cd271a5011aec6f6aec190b2f17c3bb5abcc21d33bb92c129a58e5dfc93fd6b10b24bc5d79aeb81c55f462b7052f87880773399067b2de98d9cd2852e5a0a0fbc05b25caa63e21cd194395dd53fbde314da70b32a452c5ae28f13fb45d66998c132dbfab0a0dae707595450fbe019c5fffda255a1a3718fa4c461767ec79d7f956a6df4bde05a4bb7943c2452c301977f6913d1658c374fb55d29cf487746ae7f6c1d6a39ed69ef5ed14ba1474f8a8a2bff3c3f1e703c03c510a1a655ed0c1984b858aa059dd626cb59ff37edee7de702deea17581c40b507e7ed79533801301d0cd0775d89d27550c3f87b87f8261c78d624f363a8b8cea3be8d48d8d4923e3ff05df349d418970d81aef55efedd05ad786154b59e881e45275c92606bbec032b495cecc041a152b65aeeaa3e3b565a32da955e11f29ee5528ac62d3a0c60c50469e558880dc539956d6f92b857e56856ecc7f54defb2fcc8e3b0b7ca030adc44dda7cf16c396d5d600d43b2bedf37aca63b42dd2ce4cf75115b805d13248ab6270c138dd5d056d1eba2e9801e0fc4f592ca923c7ea24079b19c57a0479d86bc3c5c5fb4f877d42c994d3ce41085cd5ffa86cd2da48812703a97fa961d0b9f34fe52cb153d7cc2576a38005440a9502a7205caf614f51d85fc7b538e12e2b6844ce46b200f6901d2fb984914c47133b3146b5685c75b43c9e5a03fc4cc3c38a5df360ff21771badf84fd1f8b3e5cf8e27659bb877b9d3f51634c479c7b9110c9eb643f7827f3b1f69ed9b5ccf3a90679c9261810a9b44159cbc71d4db87ab5bec994ac0aaab0600a7f0badbe24b15ede2aa91b7b3cb5232ea302c689dc47ab38f713cd8a313e661bd5895a23306b9b5a966b0e38843d6312dbbe09e7a019efe9f87c12edb8aeba2ebb4ccbe3558bb4f1f9b0029eabcf5df3b460d1439a2dbbdab7ef65061e9b73e4a31f71976e3ab2612cff8694d1536a53409493135db956f03be5477df89b9f6bd49b83daafe30b9ce743f46e96bd1186b8e0b6c7f1c04eba9866b3bb4050acb1c210ce168faa622fa81e59e7674f2e6f0cbae0b05b72f09fc08ea543ffb6ba151596f78f4f565837e20e44802e2b46cb812b52fc8747d1b13b106f495d92588950ab3a261a6293ffa3f2cc4bc8dd0b99e4182cfdce23b6134a4073a1f31f050542375f1563c4e38be3ccf854c369641e97c7d4724062f15f2c1de2ef93c3b2a4cda851b566e1e5139a4bd96c024f738d6877f9c5e200ae4fe055270242a958d8b1b651edad05cd1d934e5d3207a6f3e2db1e107cb951ebfb904f38936b0f68b4dabd9c56b1e0a32a97273443f14e57f21fbe9c11d80bfef03ba9e0e2de4ea0ca50844741e285560d3b7eb26462c800a0b764f8a6ff3a9922990ad1da3eed9f0d399260c4c7c6c5d1853aa3325d90da6e4e19b115b416669e8bf7c3426f3b7bc7ac49aef14618c2eb269dac49dc0226f4ad002d048aee8b468aad1381fce072a103818f93a5d77253b70616743e7b1844f4a4294d08c0e6e0e41f22dbb4dabff7322d2cf17f01d6da7ea0d63b0d36e8fab5820c1b41ac6ab2c1f3bf1fd67e48f91ba74302df494567b8d7a55e7cc31525f10544dd4687abc087c9b3f16fb44612572e34ed7ee87a67660875c0c683f324afdf040a5852c496a24f5907f277b172ee88dc453e18300694abca75588e2e1bb79147789e5d199a4e64a17572575a3d8b79e1dc7d6366955b39d2752041517c786a6bf76bd27f4e794e6c7b131cf6bbfd83584e32a43c92e2ab997da99ce1436e0ae5faf283917dc0ea40b1cdd1758d7dbfa12f406677838e029ca4a5c99ebc5c3f5cfcaa9d090ec06e0ba4d56b7e0b8030daccf7868b729a8f0baa4f1e772b81ba498163f4921aba7ab156d4eb2cda55c2bab8f76af09eff3e068a2ae339bcb212dd78646f91975913f4c5f1b74bfe81ad015b7199e45cc10673ed3b1d49ca146ea3da5ab0fa80881820f2f0d55c65c12b3b5f3fea875fb354158cce6b5e2a2a842c0301350bc4a7e9ba68efcb99456bfee477df4bdeb853aa941c616686493ab30b2ca82f675c24879b5e390b32fbb41946be5a7370a3d617d0b3c4f5e4c2a5854fc3dd1bb356fa824c252e791a0332da48190d38e0029cd670642216ffd1ca0e0001a02e9fccd21b4ef48d0241bbf10a5197db95ae28a5053e320025c3954c19d1792b4f56b33d7ef57ae34693ff40a3813f8200aa347d82d27e7cd61c356088e7c9f790b9247d6c694a97de1ba0cde28f114829d617555dad1ef7af497af416e86edf6e097c86c28065c596bae60651142381374ac835055dc0d828bbf90eaea19c39fce07ef9e49860ddadce5d4b93f249a1dd04b1869e9c6f7e091a4109fa78342026cb6b7ed62fda578e62804747859b04e80f7a758e24b79fd8c64ec7681a262449fe90ac12ba7a9aba5fa1e08dc5da65fd972033c9d618215e31240108e69d360643f87d9a0930780b083be0da62cebc5783195f605302a9119db9d236e4906bc1cf8251e5de62dbd389de5aa6533e19d03534789c909782bb1e094d4872eff4f52fec9d568ab0995a535f1f2de64eec81d4b1ed0ff415bc44c30c59bcaafd01f15f1382da0df58b638209b8b8c72a7e34239bd006ea02e7792189aba3ed7194e9a7a701961f6ae07d3cc73aa53638c556e1977f2377263f64431725534dbeb09a361b3630aa332c46244c39d97ba912c57f8afe058ed77f44d940079515664e43e7cf2c47f5614a9ae37013c4b37faf10b5caa975604acd913b149324bfe9fa967f689e6a44167eebd747ebd8b38bc00896cfa71ffff587e47464008458208b607e2f3864ccc6ed7db4024f3c581687bd56074c8316d7abd62532c00cdd73f3b82c3b0319c932de4256f9b8c6aeb3dc4a7a133ce5f24fd9622cc49155c30b6d813c69bc13fac9a2b5a6d21293f6cd6375a8f5f46e0a4fa67e2cf8e45ef1c36a9fd8cf343935128ec65805e691c5a825f203ebfa034e200c8b355c17b8ca67491df105b71f0b6705393522840d4bc90733124cbc3fd81f80b40278d10c1e61882c0a2f16749e5a7cc35383caa692cfcf5adeb3ae08af1709388b94c521a37339dbf9ecf7575026b58af5973296a66d80145b3d1cd956ed109415e7970c3382dda88d4c8d29db35d178773175a7484121456eb46dfc2b2c3f3ae4d5f69d64fd88b07780a44f70cda34631c00802de09fd802204bdd4c43ad007cece0cb770783d5328c4ed6c6d6e560e566c7a55a7d25bf33291b927d1691b94812e61c2ecc2fddaeb2625f7609d0a29041d42673028f8f4a17023922c1c17d3e9b7daf9312cc3b76e16800dae824abeba0dc3571dae1aedb9383f873bde342c803a3ccb322179e57455d1d8762a0386699ff26af6e4478e42799247a68e122332726af6fd40be372faf9336e07179d4031196b75b0af36cddf72f0a8a4aaf4fdfbd3065a3a4c11e7e619dabfe3a7a9b32345d8c4c11a76d67c9e3e16a37afe714a14b20084b5727bb6cd33c34375a4d5b508ccd4508e9cf300c6ff4500a9a249f9c94b36608eb575094f5082f577253771ebf723687b2f83b75963326f0127c9649652d691c4dd54f5e4cb3361ed5c377e292c0271f88e31dc23a4db72aff9122f9813a4f9278db6bc0fc0d3e4054e2ec7cf7154eacdb949a823625ece8718e8d14a1aa87bb996713e9d4f0690989dbe628f4231fb8ea29bebaa9a6e54a586fe18a1aa0cb11564718bc4208ca1a208b2638f0eb7f1e7bf408b14bc4284f9c304b0af5c566546573e80e8d8d114943c8f5451651c450b6573d141dad7696ef96dcf770887ab59adc2c1220642d1910f745b65ef61dc996c4fa7864dbdc0ac5bfe749fd17f3952fa8631ed8ef486f60d50998ae86e91f7e697477acab5bc4fb6cb62c6cab3ecd24e3ee4670fe5eccddfdb85a4337832553ca0afe9d941f389ffdf83c3052f57053ace522dce659dc8b1813d8d01b9af930a9126c27939046a2fbab0eeec65304b8163faaec158388a366d298a0c98b60d7d78fc9cd27297d7b49c8d30a5c02d75d53253ed1b6f3803ea34e85177fb4754bbb7bd1bea92b491148a9f2e074ab5d0c02fe9c2707054b58bedc5bdfb283271498d8d1d42371e5aeb1a9880bddbe7cf9571a3ea8ac512268a04d9d6225ee5f5916e40b90b999392d2d80c04e478e9808247dcd21bc2fb145a9a4904e9e3695a344146ba96c425145a1217271912797bf1b2acc40eb05ef812f5fe9b4f3fc4b137221f5667f7d6a929357649f9bc797569e1907ae9d1cd5a90e8e5ce3b7a6222a02eb1d510b490e0cadbae8cff6dc5443d22b98aa9bde99c3c23245c88c749cddbb76d914371e09b39fb95ef8e856e220fc15e5a85bdafa940e4c37dc23cf3cc3f8129faf4c201dbd3303675c16c276b8386c84c1ec7eabd0f258785540d3c5df98c8bb71f8b7160cc4ecb3b2709c025a9b09b884e4c8010c892b3cb31784344029d538e9de31f4dc8ba85d961f54fc027069d4df1263c6d89b2ea0ad5a8a8a0193e950649584c2a0f5b4ef47e9e187c67cf0c90c09c32305035684f35df068b1c6df1764170688213733cf4109af8cdccbf06664737662ec7bda126de0af938bc7cc6690692aa21fdc2a45af1b4861befb70bf8277c8c13387e86dc653fc8dfe83b226b515240c7c75f5fed56e7d410e56150b718e1459f5525409eeddb073194e4a907476969459bb1c2f5dcc21a44540da4fc86ca68eeecd2867d5d207d54b9563b2910420c6674a3aa8d31ae0f420a24e839e0e18fe1b658d569eef3c2630c3370a18e1250ea9c92e98db4ac13772b4cb9591dbc5322e109dbccf4d79dcbb7d07215c253b7afcb79819f3061c4c4a7fc4c14e6d66d56baf24492711803cd3923a26fc088fef00917e390cb021e7ed26d2bb075825c375ff8acc6efc6f3d33325ebf622742d47baf0646f99eab0c7bb062f62e69525f36fd930381c430b425b59dd489d65925149603e5f01c6da8faa5f67512f18b83426d798c6b9d7aa188a30711692ba0e5fec45826a544ec04a27c40e3d2d4d679a61116349d0bf4108512b1ce77b3df6a0b26c4d59b16757f8e441a8b7b8a5627c3a994d1235a073516674630cf35c739124621b803ad795e6354ad025fadd9c9c4e5971e50894d1af70bbf9f8ed70c15abc65e4d4d7b3370086c6bd1a5f78ae8d0dc0ee7255fe7aee2e98ddfdcafd588c1e77f86a5262f9ac8c162bf8d372fcf7938ef743db242d0445d0f740d6e8b14187f16706ff988386540170c137ab460d16919c379e075f170a5e244a3be6e228852a33d4d0b0eb9d84cfad3a43a285f6da6ebb95e8dc2fb2640e94cd4606e2edadf5b2922d6c043348f8a6cf6fdad21b03336a1308aa67f3cd3f65b0aa7c42c88f74cb1765d25412e797c032b2c5ea5f945594b74a5adadcb8193a4fad95cf7a0d9e0574e4c98d0dc85791631fe16cbd5e54932c64aba01375aaaaaf4a62c7603fdff43ec6bcbc6309726c8a898070ab10aa3f81bf02b77d2258b522773ba563fcae47c8cddca4b611c17311da33101680fc03d2b0dee5cbe430ce0484c9be493fd0b5ca346f42cefbd39463c733ec445fa5f5568acfb7b203c83f3c3ae0d8719a3d1c29f2ea6638282e09d72166c967995c5b56f9c2fc90b9c5a3ffd38895e2a0001f50e4b17e8a64c4b741078f09c43261f727ab6e7ba26ef7e4708dfa52516f5b0decf6aca0d6afb0227ba3b45c9ddff28824aa30393d56ea6767576ecadc32e7c4351526293a60f9f0db3206b3a2c03c3bbbdd58a68837d38ee3a7df0ca54ff9c42ea2fb2195e2e87b21e4d3893f533ed621b7ef0ce867a59f2ec9b233b51d9cb495f23e3a4a72dcfcdac70397ed37d8a5ae1671d446947b88ff4497df5df1921593d07f4dde413196e370dfd507745ff718870fe5f5e12da9ee4fd0d3c383cd56b53907d7ca0c8de787aae745f8e38ce2eb6aa7c1a9425edf88c03bc410a77b252f2d1fb6ecfcd4ed3a19d77d26cb0c2324bdc39ad6f32227f748e3c085cc7e31320a31c2835776e003778215a2a28e72744f5e9fac2241c2823e601c283c2bcb4a89a41b07b999f0b8e28af1e5df679fe91024b0e6a6a6f0f96355f5e48e47f887bd2eb78e3fc7ac9f129d7ce16dcf1f623c743e339884432cc1152e39cdf3100c6bc9f52a57e40dd1862cd5e6130b8ead0bd1ae86a377b5c127c7c1373406d1048ebc2254e10e740e089bcd37e988afbc3f5931088ad88ca6570acb266202ef0b806b83bcdd55ae3bc42ff774b2864a60eeaa5c05f77c8044794059e3a57ad3dbe2151dad4d7291c8d0bb8e311716f9ba60d91b4c75b73d32e9724785d8d8cba9a7260bcb1cafe9690831e7d5bbe7fde532e49cd845b2f76575bf3b79d412d4f001617aab986734012a59fa4082d051e211f0fda7b3257b64cc35cc55735859a6e4922c9b7fb7a589b52ba57bcd3181551940571ecff8d52b98bafb8c23fc9091d4775cd914b07e11602cbd8f41e99ef24ab9bf7053e2c68027a7801ce28d1f0313bbffa3f84fc54bbccbda609ac41abc7ae66c63223c559acbd87d454121f78559aca85d36c6f259768465a029bc2a7b34c7f9793f4975cc7cd378001eadbdc5e3689392017bb3bfac0aad8b629ebecd6326f3ba8f6c38551ad0d5466d77b4ed5c10403fed739e6517027fad227c9c8bcbeefe8453eda15a7a0470abcdcbacecf89b248e297192053580607f5d7e86e21b7c6d9f47a4ae2d00e78fd867d07acd657fc3de09db9567444bc6afd8cc2a5cffe6575bd9415683d2fe1c7e0ed8868beae8ba0a359bac264c122eafe15643c44ea63b6ffa5f3f65c47a3b4df7f360ae75cf2d54f2bd33ef0215e1c69946204e556e4d50fb3ba7c7f521b2890e721ca8240c3c16e733e63d023c4a22ab54026f61b36722e4bad104abd8f3168b660fa36095ee25fd12f43725bdbe5dade10a08aa0a924f0427c055ae6b68f3e82244e8aaec553940ece8886af9b5e6cf3d0ffa3a229c2b1645a775d4da447a7e73aa299659504a9f9c3dbf82f0b7e851fc24c0bf0a96e4b6a235c52cd839b4b4f3802a47ee43df92c8fcaaf6483b5a337d88eb452aa4ae66b617e91000a7c2824c89074d9e384bf4f5df735df75b415eb2316878c184ba5b8a1f0ea79e2f6b2aaba80d721c93a4ce6a09263f602f33950792e76405352fc272cd969994970788adffebeb5a72581fe3c84797ab4ff634f4d8929311a87206e922a8ae3d8eb6d96e3721afcf1ae6b72f3dd220ef61345a5f542e9822b4f03c6398b273ce92be7b04fbe6018e4fe7d98a44862f5154c0470dbb28e3b8b4bd1ed23d8cf22049e1593e72de7f07e3a7ff833920826bfaa9dd86158ea1695ca91c066c0f2fea159773ef4023b539c5957bdc916340ae3bde3f992f250f02bc7387f4370897ff36f80a49817e6c6768cdaba8fbab4a92796371de6eb5f2416782280895797e6e485907f1426c54d9bca62a1a75c3f4bd8c0a61401aec2d4059c7b72d4afa43323ec8b9139f8d79b800712df9ef3710274c51e7c63773fb70a1e79270c4842aaf0bfdff41f38b8389935fa055770217f913f4850f8f1a6759fab9fccd11c92f2684b6c7aec23d1156f0b24e9b5066f374ed668304ca3708072bf3270eb30fd03c6d700ce0ea3e16522dea8be989e5c4a27e7414bfc94a8d3dfe494719f009016a9e4bb3a7bb31f8110ca67a51c240a2d4e7e3287a8cc84dcd57dfe3a74a2e4134f5081cfa2f3a9bde7f44dd02446e4c7a0dc0ec755ea2d71d5caa504ce03d3c33c4c7444e3c90bbfe28ba857b2c5cc5555de3d914512c89ffb66df46bfdaa16b2856185b5c719a1487aa86e1090ff723454179717ec7c8ef105d3ecd18f4a9e38370a7d0c6ab0467e8bf864f4eccceafa1b8fc5ddd35e970f9db71363bf1c104adb004467f17e623e4f33af8e1bbbcc660a3f7b872c39b62738f915b73e8702bfbb96410e16ddb9a0a4efafdc416ec18a68e369f8173aff95104c3c6eaaf80523e018122b113d549bacfa5d3134f26f006f02779fc84f444c81f05d588023795caa062114aab4a4ff951d2d0f6187b55061d2408c3a4f43a08313909df9707d308bc0515f9c3c9867b30f0e20796a1da36950687128c75d50cebba775b4b83cde3888c5e75c5f302605363495d3108e90f40cd5007620486fbb468dc2081e7c0f37b7214cf3d0336ca6b6f02d8c8015115c63e89b446882fef196afda20bfea87cbc807d73aa2b6548780af7d35cff9da1676a3ac3179b303f112ed9bfd84cc21f325d8475c3fc600dc485f0f0e09ae89ad4ddfb31ce3c0cac1783b4407992a14bf1131bdf3811372ce62148b7b32458ec91dd65bfb431d12685c1cfad684a0ff5321f6088590f300073e452ca5ba1f5174c8de4a9f0dadf5833e6a22b55fa27bfe6f436b2b4bd8d7ac2245d55a971c8d502f15b12f120d9eb991eb3ed990ad3a07288102c94ba53353d2aee103ede56b970ec41c97a443c45ada1dc2304aa78b13763152b03f1a8a3a59a4315b795bba524c488e31e99c2e704c4f249ed47b2cdca7b390316f31541536974f02aaf364f35f31ae15409d8b4c895d3b5bceb40b1a785e17d5e0470142cf98f3496c3af847b73d657911bf12fed7cd90ba7102bea25bc5e03cec78dbbd768e19f7c3da2a04cd392973e53f7c6dd1b45db924bb34eb3202a6ccbe2c3a723089cc4479cd7e2c56281d3a82731945ba34a3d6196a7c994629400c41c1a80bcc5109c7c17fbb8f18ffc9671da090b71ba10449b504fb51b930d0c8014bfd2932cc85dd81c5acbb79f670a5e17211d1c1d9835d5d57d823923d2c8ee8b3b28d686e2cad9a1b151d7020993dc9e1b67f8f4059d90810c583a939d659eb40efbeb80b52b4a04b168d8b15f9a2f48c9c7b98b12454d4d505c17460f242d6e9314c9e5cb1ac5425dcff1d34eee0740fb567a6d491c080db7e2444bfceeaaea8509b5baad7a679721d5b82e986df323016bdea454dac854b72810d9f9ac4aa38c549336ca1a04902f7ca775c3c00845c33214a39963874d211e1261a2dfaa752e5335dfe41ddcf361898d4ce470f4fbc1dd1210aa98b2f009947332e62bff1d6fa99f5376972cff481f33df25ababf44b3bbf9674e8e93e273e1685f5b092d1d7cd9162ab00df73fb248306d4db489cb0d766577d31f079685bdec37eaf2b9544073e54d54b6a2eb20f5f9ed396facfb1b0eaa6345b14d9a6e361378a62930c9e8f5c5bce514f959858d62f4d9e307e1c32d29dac0b2561c4985d0f741447bcb38bec06d0cbc70612635d7258f055074a2c337dc3641598e2c058020fe3a86a862871687d77fa5eb728ce96056732d72032ab91dda224d0486938cd599c6f9bd6b70621ca0c608409ebfc99bd08361d9a81298580b761b75df9f7e088dab32d9726ab9993c412bd8c57113d42f6e97329e6f91995a1092da5090f6eba3275650feec69155316c62848508599a8747f04d5d16785f2db758e96ddb91d2f47329a022a49125f1268bee7401b92d34048aa8a4e8e74e4d4c92c2ae54bd63a0be0c33e3dff31bc4ded86c3dce609726c65d29afba788246e211f85671e3af97a315507e860b32a073009298735dddfc4cac0800497c9059b19f5ab3fbd32bcda2f040bf6faafb8427702d7c37c419d22b78c9dfa9844ca69144984b87203b478b902010b31638ad05c6fab9c261a5dc71c3c28f2c77060e08f6b6f1cc6bfba42b31d31bb360bd17a6d649111a985778e52953803218770749b0d011220bcdea66c9325466f49045f9bf875fcd36ce802bbe741183e4a59bd1ca9fd0a30e1bfdd16e8cdf919683fd382b035d27a7dcad6586c0ee932b6c2d96138", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x18, 0x0, 0x2, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m16.366300539s ago: executing program 33 (id=414): r0 = socket$kcm(0x10, 0x2, 0x4) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000940)={{r0}, "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"}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x4000810) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000000380)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r3) r4 = gettid() tkill(r4, 0x16) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r6, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, &(0x7f0000000000)=""/172, 0xb3) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="f1e92bbdd9c208711ab78341000008000300", @ANYRES32=r9], 0x30}, 0x1, 0x0, 0x0, 0x24004810}, 0x800) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x84, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3c80d21437235e01fcd3bbf344"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) lseek(0xffffffffffffffff, 0xca, 0x3) listen(r5, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_tcp(&(0x7f0000000080), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xc0403, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000100)=0x14) read(r1, &(0x7f00000019c0)=""/4093, 0xffd) 2m15.731869184s ago: executing program 1 (id=607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) write$FUSE_LSEEK(r3, &(0x7f0000000040)={0x18, 0x9, 0x0, {0x8000}}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = io_uring_setup(0xc90, &(0x7f00000002c0)) r6 = io_uring_setup(0x63d3, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000001580)=[{0x4, 0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}], 0x1) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="44752bbd70995200fbdbdf253e00e2ff0b0099486572df00ff7f0000"], 0x20}, 0x1, 0x0, 0x0, 0x20048804}, 0x84) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x7c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040895}, 0x4004440) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r1, 0x11, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x810) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000480), 0x10080, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000640)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x4, 0xa, 0x5}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r7, 0xc02064a5, &(0x7f0000000740)={r8, 0x4, &(0x7f0000000680)=[0xcab8, 0x9, 0x7, 0x8001], &(0x7f00000006c0)=[0x8000, 0xc258, 0x7f, 0x2, 0x9, 0x9], &(0x7f0000000700)=[0x1, 0x80, 0x6, 0x6, 0x2, 0x491, 0xffff]}) 2m15.302283618s ago: executing program 1 (id=608): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x4}, {0xffff, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c14"], 0x24}}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x159a27ffd8a052c7, &(0x7f0000000340)=""/217, &(0x7f0000000440)=0xd9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_io_uring_setup(0x53f, &(0x7f0000000340)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x8040000, 0x9, 0x8, 0x0, 0x0, [{0x2, 0x7a, 0xa, '\x00', 0x10}, {0x22, 0x8, 0x9, '\x00', 0x2}, {0x2c, 0x8, 0x0, '\x00', 0x1}, {0x1, 0xe0, 0xe, '\x00', 0x2}, {0x1, 0x81, 0x6, '\x00', 0x1}, {0x7f, 0xc9, 0x3, '\x00', 0x3}, {0xf7, 0x7, 0x59, '\x00', 0x6}, {0x9, 0xd0, 0x8, '\x00', 0x9}, {0xdf, 0x7, 0x4, '\x00', 0x5}, {0x9, 0x1, 0x3, '\x00', 0x8}, {0x2, 0x10, 0x60, '\x00', 0x9}, {0x1, 0xf, 0x8, '\x00', 0x4e}, {0x4, 0x7, 0x1, '\x00', 0xca}, {0xca, 0x62, 0xc2, '\x00', 0x2}, {0x4, 0x7, 0x4, '\x00', 0x1}, {0x1, 0x8, 0xea, '\x00', 0x5}, {0x2, 0x5, 0x3, '\x00', 0x15}, {0x10, 0xb, 0x5, '\x00', 0x3d}, {0x23, 0x5, 0x8, '\x00', 0x1}, {0x9, 0x4c, 0x7f}, {0x6, 0x8c, 0x7f, '\x00', 0x9}, {0xda, 0x30, 0x9, '\x00', 0x9}, {0x6, 0x0, 0xfc, '\x00', 0x80}, {0xc2, 0x2, 0x7, '\x00', 0xac}]}}) r8 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4004550d, 0x0) ioctl$CEC_G_MODE(r8, 0x80046108, &(0x7f0000000480)) ioctl(r0, 0x4, &(0x7f0000000040)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r9, @ANYBLOB="080028bd7000ffdbdf255d00000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000040000600000000800a500000000002800a6800a00060009021100000100000a00060008021100e4d300000a00ba00ffffffffffff00003400a6800a00060008021100000000000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff00007000a6800a000600ffffffffffff00000a000600aeaa1100000100010000000000170000000100000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000100060000000d08021100000000000a000600ffffffffffff0000"], 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m15.257316389s ago: executing program 34 (id=608): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x4}, {0xffff, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c14"], 0x24}}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x159a27ffd8a052c7, &(0x7f0000000340)=""/217, &(0x7f0000000440)=0xd9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_io_uring_setup(0x53f, &(0x7f0000000340)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x8040000, 0x9, 0x8, 0x0, 0x0, [{0x2, 0x7a, 0xa, '\x00', 0x10}, {0x22, 0x8, 0x9, '\x00', 0x2}, {0x2c, 0x8, 0x0, '\x00', 0x1}, {0x1, 0xe0, 0xe, '\x00', 0x2}, {0x1, 0x81, 0x6, '\x00', 0x1}, {0x7f, 0xc9, 0x3, '\x00', 0x3}, {0xf7, 0x7, 0x59, '\x00', 0x6}, {0x9, 0xd0, 0x8, '\x00', 0x9}, {0xdf, 0x7, 0x4, '\x00', 0x5}, {0x9, 0x1, 0x3, '\x00', 0x8}, {0x2, 0x10, 0x60, '\x00', 0x9}, {0x1, 0xf, 0x8, '\x00', 0x4e}, {0x4, 0x7, 0x1, '\x00', 0xca}, {0xca, 0x62, 0xc2, '\x00', 0x2}, {0x4, 0x7, 0x4, '\x00', 0x1}, {0x1, 0x8, 0xea, '\x00', 0x5}, {0x2, 0x5, 0x3, '\x00', 0x15}, {0x10, 0xb, 0x5, '\x00', 0x3d}, {0x23, 0x5, 0x8, '\x00', 0x1}, {0x9, 0x4c, 0x7f}, {0x6, 0x8c, 0x7f, '\x00', 0x9}, {0xda, 0x30, 0x9, '\x00', 0x9}, {0x6, 0x0, 0xfc, '\x00', 0x80}, {0xc2, 0x2, 0x7, '\x00', 0xac}]}}) r8 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4004550d, 0x0) ioctl$CEC_G_MODE(r8, 0x80046108, &(0x7f0000000480)) ioctl(r0, 0x4, &(0x7f0000000040)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r9, @ANYBLOB="080028bd7000ffdbdf255d00000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000040000600000000800a500000000002800a6800a00060009021100000100000a00060008021100e4d300000a00ba00ffffffffffff00003400a6800a00060008021100000000000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff00007000a6800a000600ffffffffffff00000a000600aeaa1100000100010000000000170000000100000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000100060000000d08021100000000000a000600ffffffffffff0000"], 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m3.312191995s ago: executing program 6 (id=741): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x3, {0xcfc, 0xa, "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", 0xa2, 0x4, 0x8, 0x13, 0x4, 0xff, 0x9}, r0}}, 0x128) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x0, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x100, 0x3, "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", 0x5, 0x0, 0x2, 0xb, 0x2, 0x3, 0x6, 0x1}, r2}}, 0x120) (async) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x2, {0x0, 0x3, "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", 0x4, 0x81, 0x3c, 0x81, 0xf7, 0x0, 0x80}, r0}}, 0x128) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) r4 = fspick(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x9f1e1c609ec61696) ioctl$FICLONE(r4, 0x40049409, r1) (async) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000740)={0x1, 0x1, 0x1000, 0xfd, &(0x7f00000005c0)="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", 0x76, 0x0, &(0x7f00000006c0)="ce696f0be08d7bd9d6a988a37bbe659e116a76f833bcd61121cba30f7a4de4c2e45fe4be538d1bddad24edb3c868e7ac27345924fb00c410112564eaf93fbc52cc01883fdf8bd3a2e70544dd0d3097375bd1c42956f4fcf8acc6ba9d8b7978a8fc005b0c3b6043c25f160ec4bff39e171dc6a444e3d1"}) (async) r5 = syz_open_dev$sndpcmp(&(0x7f00000007c0), 0xbc11, 0x10100) mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x1010, r5, 0xd000) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000800)={{r5}, "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"}) (async) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000001800), 0x1a000, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000001840)) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000001880)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in6={0xa, 0x4e20, 0xff, @remote, 0xff}}}, 0x90) (async) fadvise64(r1, 0xec, 0x35, 0x0) (async) r7 = syz_open_pts(0xffffffffffffffff, 0x301000) ioctl$KDGETMODE(r7, 0x4b3b, &(0x7f0000001940)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000001980), &(0x7f00000019c0)=0x4) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001a00), 0x408801, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r8, 0x3b70, &(0x7f0000001a40)={0xd0, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85512, &(0x7f0000001b40)={{0x1, 0x2, 0x8000, 0x78618963, '\x00', 0x2}, 0x0, [0x8001, 0x8001, 0x2, 0x1cc, 0x0, 0x5, 0x7fffffff, 0xb, 0x7, 0x8000000000000001, 0x2b, 0x1, 0x6, 0x4, 0xc4c, 0x100000001, 0x8, 0x8, 0xf61, 0x0, 0x8, 0xffffffffffff0001, 0x0, 0x5, 0xffffffffffff4dc1, 0x33c7, 0x8, 0x5, 0x5, 0x3, 0xfff, 0x80, 0x92, 0x3, 0x2, 0x4, 0x5, 0x5, 0x100, 0xfffffffffffffffc, 0x4, 0x4, 0x1, 0x1de, 0x10, 0x6, 0xfffffffffffffffa, 0x8000000000000000, 0x7, 0x9, 0x10000, 0x453e, 0x400, 0x80000000, 0x5, 0x100000001, 0x8001, 0xe, 0x4, 0x3, 0x9, 0x5, 0x1, 0x1, 0x35c, 0x80, 0x4, 0x9, 0x10, 0x5, 0x6, 0x2, 0xe863, 0xc, 0x9, 0x5, 0x4, 0x92, 0x401, 0x7f, 0x2, 0x6, 0x3, 0x2, 0x0, 0x2, 0x25b1, 0x9, 0x0, 0x0, 0x6, 0x7, 0x6, 0xfff, 0x7, 0x0, 0x3, 0x8000000000000000, 0x4, 0x8000000000000000, 0xffffffffffffff04, 0x8, 0x1, 0x80, 0x101, 0x80, 0x61, 0x81, 0x9, 0xf, 0x6, 0x163, 0x8001, 0x2, 0x3, 0x8, 0x9, 0x6, 0x5, 0xc254, 0x7, 0x8001, 0x7ab5, 0x3, 0x8, 0x85, 0xfffffffffffffff8, 0xfffffffffffffff7]}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002040)) r9 = accept4$rose(0xffffffffffffffff, &(0x7f0000002080)=@short={0xb, @remote, @rose, 0x1, @rose}, &(0x7f00000020c0)=0x1c, 0x0) setsockopt$rose(r9, 0x104, 0x7, &(0x7f0000002100)=0x7, 0x4) (async) r10 = accept$inet(r4, 0x0, &(0x7f0000002140)) ioctl$AUTOFS_IOC_SETTIMEOUT(r10, 0x80049367, &(0x7f0000002180)=0x9) (async) timer_create(0x2, &(0x7f0000002380)={0x0, 0x3b, 0x4, @thr={&(0x7f00000021c0)="b9f72785477cba8f9de8104e333bf8c138c0bf2af2cca5dc44442709ef1ff0454d0f90b52c7ff802018b214ddbad1620a355ad62f30637dc0c6f18a354e49fd34cf259721308a4c855ded03f070209dfc91b62fac3ac6773d20d040938358512fa5fa0fcf72ba24d3ac0ea0a98959fa63ec98f6628edfd48324f533f69a85073b67902cb5ad00c08b22d876a73980e7a7050ed04dbd6ed943c5437c530f6d26dddc66fd6c28c01684db05a4a9868f95d174ab27a04ea95a3f849c4616640c6604824f9df7e12ab11b44321685368bc2b31a417921836a35d5a04bd71fc7f3fab1d98e710d869da2b2a1ab1", &(0x7f00000022c0)="d80df080705e3e7fb2dc885240b884321a444fca6c1372a35f9dc3a5314552e165a4d44f1497ac7fa813b0b5ee3eeab55305ea3830248492a33106153b45863a90039b942d05fb6647d14dcf6730b3db6376f53f2c218d1af1e8e623e42dac0c2ee08c031602c6c33d699e914099c15e3b6193b3d9ebad620cadb4fbf82687992ced823bf6dfa1adc27cc7e59d13bee50a23ea14f3ebab3d56683f171d40bdc4a7e6c946e49d7b8b"}}, &(0x7f00000023c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000002440)={0x1, 0x10, 0xfa00, {&(0x7f0000002400), r3}}, 0x18) 2m3.3118779s ago: executing program 6 (id=742): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10, 0x2, 0x4000037b}, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 2m3.25173248s ago: executing program 6 (id=744): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100000000002000000000ff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) 2m3.249730962s ago: executing program 6 (id=745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f060108000000000000000007000005050021000700000006000b0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x40000) r3 = dup3(r0, r0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f00000000c0)=@ethtool_cmd={0x4e, 0x0, 0x7, 0x39, 0xff, 0x9, 0x6, 0x5, 0xa, 0x3, 0x7, 0xffff, 0xa1d1, 0x2, 0x8d, 0x1, [0xcff7, 0x9]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000180)=r5) 2m3.181520715s ago: executing program 6 (id=747): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) (async) setreuid(0xee01, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setresuid(0xee01, 0x0, 0x0) (async) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) 2m2.951042464s ago: executing program 6 (id=749): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001014d9ec29bd7000fcd9df25080003000100000008000100000000004a000100"/48], 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r3, &(0x7f0000000180)="01010101", 0x4) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r4) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 2m2.879528346s ago: executing program 35 (id=749): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001014d9ec29bd7000fcd9df25080003000100000008000100000000004a000100"/48], 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r3, &(0x7f0000000180)="01010101", 0x4) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r4) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 1m23.271786544s ago: executing program 0 (id=1456): mount(&(0x7f0000000b40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x20000a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adeda4}, [@IFLA_IFALIASn={0x4}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x2c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20) r3 = gettid() r4 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x6) fallocate(r4, 0x0, 0x0, 0x400001) fcntl$addseals(r4, 0x409, 0x9) lseek(r4, 0x0, 0x1) syz_open_procfs(r3, &(0x7f0000000040)='timerslack_ns\x00') umount2(&(0x7f00000000c0)='./cgroup\x00', 0x4) syz_open_procfs(r3, &(0x7f0000000000)='children\x00') stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r5}}], [{@euid_eq={'euid', 0x3d, r5}}]}}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000100)=@filename='./cgroup\x00', r5, &(0x7f0000000180)) 1m23.271163846s ago: executing program 0 (id=1457): ioctl$IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, &(0x7f0000000000)={0xac9, 0x6, 0x75}) syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) fsopen(&(0x7f0000000080)='romfs\x00', 0x1) (async) r0 = fsopen(&(0x7f0000000080)='romfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='-\x00', &(0x7f0000000100)="28ee102656e0dba0170c9086088e39142c7ad513ea61f964ab633242b41847e9e241fba20e9fc007108ddaf36ef886161c70ece7e5cb0c97c94e02fc95c2660a49fa3bfb2158620bee6bc67abb2aff7e9bd17b45c5bb0b5e286e85c489519e599789ee679015590fba7fec82d1bbe1a8be1335f757fa9a95cd674faef4", 0x7d) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x8, 0x6, 0x200, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20045080}, 0x4000000) (async) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x8, 0x6, 0x200, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20045080}, 0x4000000) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f00000002c0)={{0x3, @addr=0x40}, 0x8, 0x8000, 0x3}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x86101, 0x0) ioctl$CDROMREADTOCENTRY(r2, 0x5306, &(0x7f0000000340)={0x6, 0x4, 0x5, 0x2, @lba=0xc0, 0x40}) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0xb, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0xa, 0x1, 'romfs\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x8000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r4, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x804) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000640)) pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff}, 0x80) socket$tipc(0x1e, 0x5, 0x0) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f00000006c0)=0x7ae39be0, 0x4) (async) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f00000006c0)=0x7ae39be0, 0x4) read$rfkill(r5, &(0x7f0000000700), 0x8) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x100) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x20048800) (async) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x20048800) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000008c0), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xf0e42049d4c9b438}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040008) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xf0e42049d4c9b438}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040008) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000a40)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa8, r9, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x8000}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xc}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40080}, 0x4) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000bc0)={0xe92, 0x2, @value=0x4}) eventfd(0x7f) syz_genetlink_get_family_id$net_dm(&(0x7f0000000c40), r3) (async) r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000c40), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r11, 0x8, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 1m22.361813334s ago: executing program 0 (id=1478): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}}}, 0x10) shutdown(r0, 0x2) (async) shutdown(r0, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x2) (async) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r2, 0x1) (async) shutdown(r2, 0x1) r3 = epoll_create1(0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x101401) syz_usb_disconnect(r4) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(r4, 0x550c, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000400)={0xf04601c4a2f46e46}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 1m21.611846015s ago: executing program 0 (id=1489): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000140)={0x48}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x418a4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x3c}}, 0x0) 1m21.610647343s ago: executing program 0 (id=1490): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbd61}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000090}, 0x48801) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r3, r2}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r6, &(0x7f0000000300)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m21.548344718s ago: executing program 0 (id=1491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "30315be07b3d1cee0f1a117fbdeec3329037b9b8e6c681dc8eac25da10f27a47", "7efd27414f58889a465d7258bb318f7698a45c6dfcbedac24407b0e48b49b1a7", "787583f170175c961d218c79a6ed60a242369d3d4c9a32231f9a627581f599bb", "68f1b8696afe3855e825259d22f1828f5fec11b7668de8cf91630af3acdf3e7c", "7ed4de2376a9832f59cebfea5caa1742babb9a878cfdf5959438c02642dec8b8", "70efc203420f06debcb4f43b", 0xffff, 0x0, 0x4, 0x200, 0x7}}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x10b85, 0x49060}, [@IFLA_MTU={0x8, 0x4, 0xfffffff9}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0xd}}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000340)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6, @a_listen={0x7, 0x3, 0x3, 0x80, 0x2, 0xf9, 0x4, "", 0x53, 0x5, 0x8, 0x1a, 0x2, "9269"}}, 0x11) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 1m20.582144377s ago: executing program 7 (id=1500): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x1000001, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}}}, 0x24}}, 0x0) 1m20.472125923s ago: executing program 7 (id=1501): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x70780, 0x4e) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000004a80)="69a865e58d2d1e88f3") 1m20.470493225s ago: executing program 7 (id=1502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5615, 0x123c, 0x20, &(0x7f0000000080)={[0x100000001]}, 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x80, 0xff, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aa02ead1303ba05f3c00000008004600002c0000000000069078ac1e0001ac1e00018903d70000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe6, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0x69}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x8, '\x00', 0x3}, {0x1, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x5}]}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000400000014000600fe880000000000000002000000000001080002000700000008000c0002000000140005"], 0x4c}}, 0x20000000) fchdir(r2) 1m20.151641371s ago: executing program 7 (id=1504): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001040)={'veth1_to_bond\x00', {0x2, 0x4e1d, @broadcast}}) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001040)={'veth1_to_bond\x00', {0x2, 0x4e1d, @broadcast}}) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x11, 0x0, &(0x7f0000005280)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000000c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8) (async) r4 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) (async) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) (async) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xb34, 0xc6c4, 0x20, &(0x7f00000002c0)={[0x1ff]}, 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'dummy0\x00', 0x2000}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'dummy0\x00', 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) umount2(0x0, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) getpgid(0x0) (async) r5 = getpgid(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_getfd(r6, r6, 0x0) 1m20.151335558s ago: executing program 7 (id=1505): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xae, 0x66}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153}, 0x94) 1m19.551987766s ago: executing program 7 (id=1510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) getrusage(0x1, &(0x7f0000000340)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000300)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x80) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r4, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}, @NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x80, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xb80, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x345}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}], @NL80211_ATTR_MAC={0xfffffc4e}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x80}, 0x1, 0x0, 0x0, 0x40c0001}, 0x80) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f88f7", 0x12}, {&(0x7f0000000040)="dd7fb78fb52ae97c75f16d067e11415380270996f3f4b616b45322a4415fdf5d003b", 0x22}], 0x2) 1m19.509548262s ago: executing program 36 (id=1510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) getrusage(0x1, &(0x7f0000000340)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000300)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x80) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r4, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}, @NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x80, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xb80, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x345}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}], @NL80211_ATTR_MAC={0xfffffc4e}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x80}, 0x1, 0x0, 0x0, 0x40c0001}, 0x80) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f88f7", 0x12}, {&(0x7f0000000040)="dd7fb78fb52ae97c75f16d067e11415380270996f3f4b616b45322a4415fdf5d003b", 0x22}], 0x2) 1m6.289120243s ago: executing program 37 (id=1491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "30315be07b3d1cee0f1a117fbdeec3329037b9b8e6c681dc8eac25da10f27a47", "7efd27414f58889a465d7258bb318f7698a45c6dfcbedac24407b0e48b49b1a7", "787583f170175c961d218c79a6ed60a242369d3d4c9a32231f9a627581f599bb", "68f1b8696afe3855e825259d22f1828f5fec11b7668de8cf91630af3acdf3e7c", "7ed4de2376a9832f59cebfea5caa1742babb9a878cfdf5959438c02642dec8b8", "70efc203420f06debcb4f43b", 0xffff, 0x0, 0x4, 0x200, 0x7}}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x10b85, 0x49060}, [@IFLA_MTU={0x8, 0x4, 0xfffffff9}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0xd}}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000340)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6, @a_listen={0x7, 0x3, 0x3, 0x80, 0x2, 0xf9, 0x4, "", 0x53, 0x5, 0x8, 0x1a, 0x2, "9269"}}, 0x11) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 1m6.240997405s ago: executing program 5 (id=1590): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, r2, 0xd03, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x2a}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008010) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000002"], 0x190) chdir(&(0x7f0000000000)='./file0\x00') syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x4, '\x00', {0x7, 0x6, 'L@Q', 0x2, 0x33, 0x0, @empty, @mcast1}}}}}}}, 0x0) 1m6.121820316s ago: executing program 5 (id=1591): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) 1m5.931873865s ago: executing program 5 (id=1592): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r1, @ANYBLOB="010000000040000000000c000000180001801400020076657468315f746f5f62617461647600580003805400038050000180040003000400030007000200292d0000040003000b00020068656c70657200000c00020070696d3672656700080001000900000008000200237d5c000800010005000000080001"], 0x84}}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) socket$netlink(0x10, 0x3, 0x0) r7 = accept4$alg(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000040)=0x569f9289, 0x4) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="000101000040000000", 0x9}], 0x1}, 0x4004) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000080)=""/6, 0x6}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m4.977505329s ago: executing program 5 (id=1597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = userfaultfd(0x801) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000994000/0x1000)=nil, &(0x7f0000880000/0x3000)=nil, 0x1000, 0x2}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@local, 0xfffd, 0x1, 0x0, 0x0, 0xa}, {0x2, 0x6, 0x6, 0x0, 0x7, 0x4, 0x1}, {0x4000000005c, 0x7, 0xfffffffffffffff9, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in6=@mcast2, 0xffffffde, 0x0, 0x67a01bcf906970c1, 0x7f, 0x7}}, 0xe8) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0xfffffffffffffffb, r0, 'id0\x00'}) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="af4031acbef7fec74eee8e16187a511b4038ebd7b51752e19a0ecc9331906b8b1d21350e08426422519d27024c5bce64d8c164a922af83915f1a75f5ad6aeaca229a26357bf3cd7483c4b562cf6e91f9ce1421f5f036964a7336", 0x5a}, {&(0x7f0000000340)="4df6a081da15c2832582e333f4970b3b5216766740ba9984f1cb90bcd62b791395ede7532a34a6f0413894d4deba7bb7a3b399223f4a49af78e2045e39c3", 0x3e}], 0x2}, 0x4000801) sendmmsg$inet6(r3, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000140)={0x0, 0x0, "8635b23213b9d59fc13e29dcf58c677a"}) 1m4.561902004s ago: executing program 5 (id=1598): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x410, 0x3) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 1m4.561598894s ago: executing program 5 (id=1599): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x400c405}, 0x40000) 49.392288601s ago: executing program 38 (id=1599): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x400c405}, 0x40000) 36.36998036s ago: executing program 8 (id=1758): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x64, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 36.321590489s ago: executing program 8 (id=1761): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x1000000}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 36.321148995s ago: executing program 8 (id=1765): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 36.261490409s ago: executing program 8 (id=1768): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 36.061286351s ago: executing program 8 (id=1773): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 36.061162838s ago: executing program 8 (id=1774): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 21.011165739s ago: executing program 39 (id=1774): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.398402986s ago: executing program 9 (id=2333): socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1900000014000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000006d6e49200a8dc98c7ebb31a83c09000000aa7645fdfee3ddbb49aae3bee4b31faff149bd2495409665b3bdc5126d019b57bfb1d71cdfb5917b7452e1a1ccabedd51cc64507ccf4fb85bc4a3ae3ef5aacce"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x10, 0xffffffffffffffff, 0x87ebc000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000002c0)={0x800}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',noxattr,cachetag=\x00,posixacl,cache=none,obj_user=\x00,permit_directio,fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c64836e745f6dc31fee6bdc51e370e8e87dea8361737572652c61707a72616973652c00"]) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000440)={0x0, 0xffff1000, 0x5, 0x6, 0x20}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.289662375s ago: executing program 9 (id=2347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000006000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000e76aa138000000000000000000000000effbffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x6) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='cachefiles_vol_coherency\x00', r4}, 0xfffffffffffffcd5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x18) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x6, 0x80800) r9 = userfaultfd(0x801) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r10}, 0x10) ioctl$UFFDIO_MOVE(r9, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000724000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000380)={0x1, r8}) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f00000002c0)={0x2, r8}) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000000)={0x4, r8}) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000080)={0x2, r8, 0x1}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 2.013844923s ago: executing program 9 (id=2355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="15000200000000f4ffff060000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0xfdef) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000000)=""/171, 0xab, 0xb) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') 1.51067991s ago: executing program 3 (id=2358): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$dsp(r0, &(0x7f0000000100)=""/66, 0x42) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8084) 1.018016882s ago: executing program 9 (id=2366): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000140)=0xfffff801) ioctl$USBDEVFS_RESET(r0, 0x5514) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)=0xffff) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000012c0)='./file0\x00', &(0x7f0000000180)='openpromfs\x00', 0x0, &(0x7f00000000c0)='\x00\x7f\x00\xef$\x00\x01\x00\x00') 960.668144ms ago: executing program 3 (id=2367): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xe, 0x1, 0xe}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={r3, 0x100, 0xffffffd1, 0x6, 0x7, 0x9, 0x7, 0x0, {r4, @in={{0x2, 0x4e22, @remote}}, 0x4, 0x7, 0x0, 0xc, 0x3}}, &(0x7f0000000300)=0xb0) 959.330673ms ago: executing program 9 (id=2368): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000001185b0000010000000000000000000000186900000b", @ANYBLOB="0000000000000000b703000000"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5f}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000826bd7000fddbdf250c0000000c000180080008000700000038000280080003000100000006000e004e24000006000f000300000014000100ff02000000000000000000000000000108000500b90b0000"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="043106aaaaaaaa6bd3f6c4ffa6642953ade0132d10139107a3"], 0x9) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 32) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (rerun: 32) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 765.991238ms ago: executing program 9 (id=2369): r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r2, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r6, 0x4b2f, 0x7f) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000080000000d00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000270e6da90f07c2fb7ca28a9d5d4503fcfe3018b0cf548ba5ffb7c864f914748ebc95d8489c6237a464cc8a1439503f9aef82617f7f674e6eba36f25bc97cc1e752ed890e7a6a00e43729b02a62e8ccd19852b1fd402db09ffcdb637581dcc5ae3b7c07d181ac9d3a589558514b9afdc20bc8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r8, 0xc0085666, &(0x7f0000000080)={0x2, 0x4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="00faff0015003ca5e2ffb91283d56df327915132060000f61b2494e655c7bc3084e0e44423677cb187d8033cbd974accf6e8a33ee29b74853781fac3b070162d8269a293d59c9779895cf41782f68d4da57ebf3125658fb4"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40480d0) 658.872883ms ago: executing program 3 (id=2371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r4 = dup(r1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00110001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) write$tun(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="00008808aaaaaaaaaabbaaaaaaaaaabb88a8400081"], 0x1204) socket$kcm(0x29, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) dup(r1) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00110001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) (async) write$tun(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="00008808aaaaaaaaaabbaaaaaaaaaabb88a8400081"], 0x1204) (async) socket$kcm(0x29, 0x5, 0x0) (async) 608.196195ms ago: executing program 2 (id=2372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000080)={0x1, 0x9, 0x2, 0x1}, 0x8) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$xdp(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x850) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000008000002e25d66474000000"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 517.572199ms ago: executing program 2 (id=2375): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x10, 0x0, 0x0, 0xfffffffc, 0x1, 0xffff8001, 0x0, 0x5379be1c}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x18, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x1806, &(0x7f00000002c0)={0x0, 0x3595, 0x200, 0xfff, 0x21e, 0x0, r0}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a010400000000000000000000000008000a40000000000900010073797a4d000000000900020073797a3200000000080005400000001f080003400000001408000c40100000000c000b"], 0x80}}, 0x0) io_uring_enter(r4, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x21, {0x5, 0x1}, 0x9}, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x9) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x5) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x0, {0x0, 0x1, 0x1}}, 0x18) sendmsg$can_j1939(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) syz_io_uring_complete(r5) 460.206658ms ago: executing program 3 (id=2377): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 391.259916ms ago: executing program 3 (id=2379): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x10) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000400)="2ec8425d4ce2ef00", 0x8) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x2000000000000116}}, 0x40) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f00000006c0)={'trans=virtio,', {[{@mmap}, {@cache_fscache}, {@access_uid={'access', 0x3d, 0xee00}}, {@access_uid={'access', 0x3d, r4}}], [{@obj_role={'obj_role', 0x3d, '\xe7'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&+,:'}}, {@obj_role={'obj_role', 0x3d, '-{(-%.}+]'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@euid_eq={'euid', 0x3d, r4}}, {@subj_user={'subj_user', 0x3d, '@\xa5\xc5\x94r\x85~\xea\xc5T\x83I\xddT&\b\x97\xbfI\" \x97S\xf6b\x10bs\x9f,p\xad_\xd69\xc8('}}]}}) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000, r2}, 0x18) 388.640493ms ago: executing program 4 (id=2380): r0 = socket(0x10, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x81) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0xeafd2460ef8857db, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r1, &(0x7f0000002600)=[{&(0x7f0000000300)="d88b2da578720f", 0x7}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x0, 0xc, 0x7, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback={0x0, 0x460c6}, 0x7, 0x700, 0x2000000}}) 388.310643ms ago: executing program 3 (id=2381): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r1, r0}, 0x4) (async) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/172, 0xb3) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 331.099737ms ago: executing program 4 (id=2382): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001780), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="c633e7f8d119e9e527f4a758c040c778d146d1adfcd02f382087c5ca0dbde9a2fd9ab503a30dee3c441f7dad073cdd83e494b37273b5f7dd273427f3dedecf336cee3135913c62f30307e12ffbc628533bdd61b5de3fb48de42c3fbb65f296a86b63b38fdf76c9c6130f3dd8f19b6780db40c87690aa2511331b3a3065893caa63448b52f4ec157e959345f453fe56d90fa37655ddbd02"], 0x14}}, 0x20) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 271.249797ms ago: executing program 4 (id=2383): r0 = socket$kcm(0x2d, 0xb, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r1}) 270.892602ms ago: executing program 2 (id=2384): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f00000005c0)="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", 0x686}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000003980)={0x0, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, @l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, @ethernet={0x306, @remote}, 0x7, 0x0, 0x0, 0x0, 0xb, 0x0, 0x9, 0xfff, 0xff}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x4003}, {0x0, 0x3ff}, 0x0, 0x3}) ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r6, &(0x7f0000000080)=""/237, 0xed, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 270.383229ms ago: executing program 4 (id=2385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000002180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/114, 0x72}], 0x1}, 0x6}], 0x1, 0x40000001, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000380)="5d3a0e", 0x3}], 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="b6f59ad40381441ff857f3f8cc373db0020500030a0000000000000000000000030006006c00000002000000000000000000000000000000020001fe56b92d00000000000000060b000000000300f9ffffff0000"], 0x50}, 0x1, 0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20402, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0xb, 0xa4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) symlink(&(0x7f0000001480)='./bus\x00', &(0x7f0000002480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 141.197707ms ago: executing program 2 (id=2386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x13, 0x7, 0x106c, 0x8, 0x8000000000000, 0x8000000400007f, 0x0, 0x6, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 61.146612ms ago: executing program 4 (id=2387): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000dc0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x3, "95a77f", 0x2b5, 0xa}]}}}, 0x12) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000cc0)={'gre0\x00', &(0x7f0000000c00)={'syztnl0\x00', 0x0, 0x1, 0x7800, 0x5, 0x7, {{0x1c, 0x4, 0x1, 0x6, 0x70, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x7, 0x81, [@multicast2]}, @timestamp={0x44, 0x14, 0x3a, 0x0, 0x3, [0xc5, 0xb9, 0x1, 0x2]}, @ssrr={0x89, 0x7, 0xcf, [@broadcast]}, @ra={0x94, 0x4, 0x7}, @rr={0x7, 0x7, 0xef, [@multicast1]}, @timestamp_addr={0x44, 0x2c, 0x98, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x7ff}, {@broadcast}, {@multicast2, 0xbbfc}, {@empty, 0x9}]}, @noop]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x5, 0xa8, &(0x7f0000000900)=""/168, 0x0, 0x0, '\x00', r3, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r7 = getpgid(0x0) syz_pidfd_open(r7, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000400)=0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000ac0)=0x0) (async) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000b40)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000b80)={0x321008100, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280), {0x2b}, &(0x7f00000002c0)=""/137, 0x89, &(0x7f00000009c0)=""/197, &(0x7f0000000b00)=[r7, r8, r9], 0x3, {r10}}, 0x58) (async) write(r6, &(0x7f0000000040)="2e000000010000", 0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000090000000000000003000000181100007f8429bd061f81ecfc58ada8e35a3f26ea855b1eb16c904306eefe79f0c413677a50ae874dceaedb888d3813fbb80fd7476f4d300d79c4ed0012fd6209a6958171bc9a", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xd5cf, r4, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f0000000540)={r1, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b5e2e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5b25b716a73e48c8c8f8ec21e15e7a5d6743243dfde88d2786c355a2c222145b4ddeb213"}, &(0x7f0000000500)=0x90) 60.957055ms ago: executing program 4 (id=2388): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x1008001, 0x0) ptrace(0x11, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f00000000c0)) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x82000000003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000040)={0x0, 0x56595559, 0x2, @stepwise={0x8, 0x8, 0x7ff, 0x4, 0xaeae, 0x84a}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r5, 0x1, r2, 0x400}) 1.228334ms ago: executing program 2 (id=2389): r0 = socket(0x2, 0x3, 0xff) sendto$inet(r0, 0x0, 0x0, 0x488c0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000b000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001c000000b7030000000000138500000005000000bca9000000000000350901001b0000009500000000000000bf9800000000000008e3e44262125ec57db0ff1a0f56080000ffffffff8500000007000000b70000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 0s ago: executing program 2 (id=2390): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180), 0x10, 0x0, 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r7, &(0x7f0000000040)=""/48, 0x30, 0x200087) r8 = accept$nfc_llcp(r3, &(0x7f0000000340), &(0x7f0000000240)=0x60) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000003c0)={0x80000001}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) write$tun(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004"], 0xfdef) syz_emit_ethernet(0xce, &(0x7f0000000080)={@multicast, @broadcast, @val={@val={0x88a8, 0x2, 0x0, 0x1}}, {@llc_tr={0x11, {@snap={0xab, 0x1, "7614", "c199f7", 0x8864, "7d1afba0d042723263abba4b273fa52fbb0da6c296d0e7a397cba8fac5f07fa2a2d59688941928a29f6bc3ba8e657fb880fa626132e7a4444d463eb2769849847962bb73637bf61758bcaf71ecadebfe4f6d69b87de5bc4645a30ffaecc2d9d41422b4d2832feb023696ac255f4b788cab124d885e5bbb0472cf14e08423396c1c2b72d2600cdbcf5cbf73cb9da687aafac569d3f87329d04e919ecb7e843ae94e9ba86d3f32a3340af573fab81220"}}}}}, 0x0) kernel console output (not intermixed with test programs): roup_t tclass=filesystem permissive=1 [ 146.923558][T11108] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 146.944454][ T40] audit: type=1804 audit(1764763288.137:1069): pid=11112 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1251" name="/newroot/354/file0" dev="tmpfs" ino=1897 res=1 errno=0 [ 146.988794][ T6843] bond4: (slave lo): failed to get link speed/duplex [ 147.025666][T11110] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1254'. [ 147.030030][T11110] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1254'. [ 147.100266][ T1150] bond4: (slave lo): failed to get link speed/duplex [ 147.236496][T11129] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1257'. [ 147.239518][T11129] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1257'. [ 147.300713][T11134] overlayfs: empty lowerdir [ 147.747488][ T40] audit: type=1400 audit(1764763288.937:1070): avc: denied { setopt } for pid=11139 comm="syz.0.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 147.755763][ T40] audit: type=1400 audit(1764763288.947:1071): avc: denied { append } for pid=11145 comm="syz.5.1262" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 147.755883][T11146] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 147.919794][T11173] kAFS: Can only specify source 'none' with -o dyn [ 147.937753][ T40] audit: type=1400 audit(1764763289.127:1072): avc: denied { create } for pid=11172 comm="syz.7.1269" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 147.948780][ T40] audit: type=1400 audit(1764763289.127:1073): avc: denied { remove_name } for pid=11172 comm="syz.7.1269" name="control" dev="9p" ino=71827931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.078948][T11188] netlink: 'syz.3.1275': attribute type 5 has an invalid length. [ 148.101281][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1277'. [ 148.107452][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1277'. [ 148.165910][T11205] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.231006][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1278'. [ 148.326694][T11252] geneve2: entered promiscuous mode [ 148.328414][T11252] geneve2: entered allmulticast mode [ 148.355126][T11264] 9pnet_fd: Insufficient options for proto=fd [ 148.402714][T11266] overlayfs: failed lookup in lower (newroot/346, name='bus', err=-40): overlapping layers [ 148.474726][T11268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1284'. [ 149.175662][T11285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11285 comm=syz.7.1288 [ 149.257877][ T6025] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 149.293160][T11291] binder: BINDER_SET_CONTEXT_MGR already set [ 149.295520][T11291] binder: 11290:11291 ioctl 4018620d 200000000080 returned -16 [ 149.409692][ T6025] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.415323][ T6025] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.425161][ T6025] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 149.430055][ T6025] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.435013][ T6025] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.438456][ T6025] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.442346][ T6025] usb 10-1: config 0 descriptor?? [ 149.848112][ T40] kauditd_printk_skb: 70 callbacks suppressed [ 149.848122][ T40] audit: type=1326 audit(1764763291.047:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.7.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003898f7c9 code=0x7ffc0000 [ 149.869200][ T40] audit: type=1326 audit(1764763291.057:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.7.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f003898f803 code=0x7ffc0000 [ 149.873249][ T6025] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 149.876592][ T40] audit: type=1326 audit(1764763291.057:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.7.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f003898f887 code=0x7ffc0000 [ 149.900944][ T40] audit: type=1326 audit(1764763291.057:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.7.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0038946c3d code=0x7ffc0000 [ 149.909140][T11366] overlayfs: failed to resolve './file0': -2 [ 149.909167][ T40] audit: type=1326 audit(1764763291.057:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.7.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f00389c3f09 code=0x7ffc0000 [ 149.918977][ T40] audit: type=1326 audit(1764763291.057:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.7.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0038946ca7 code=0x7ffc0000 [ 149.926461][ T40] audit: type=1326 audit(1764763291.057:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.7.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f00389463b7 code=0x7ffc0000 [ 149.933960][ T40] audit: type=1326 audit(1764763291.057:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.7.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0038946416 code=0x7ffc0000 [ 149.941534][ T40] audit: type=1326 audit(1764763291.057:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.7.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003898f7c9 code=0x7ffc0000 [ 149.949058][ T40] audit: type=1326 audit(1764763291.067:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.7.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003898f7c9 code=0x7ffc0000 [ 150.274223][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803618e400: rx timeout, send abort [ 150.752532][T11418] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 150.752596][T11418] netlink: 'syz.0.1321': attribute type 2 has an invalid length. [ 150.767819][ T6832] net_ratelimit: 33 callbacks suppressed [ 150.767831][ T6832] bond4: (slave lo): failed to get link speed/duplex [ 150.815039][T11427] nbd: must specify a device to reconfigure [ 150.880267][ T6832] bond4: (slave lo): failed to get link speed/duplex [ 151.008064][ T6843] bond4: (slave lo): failed to get link speed/duplex [ 151.057530][T11479] support for cryptoloop has been removed. Use dm-crypt instead. [ 151.105101][T11482] Invalid logical block size (-3) [ 151.118523][ T6843] bond4: (slave lo): failed to get link speed/duplex [ 151.143670][T11484] netlink: 'syz.7.1331': attribute type 29 has an invalid length. [ 151.249029][ T6832] bond4: (slave lo): failed to get link speed/duplex [ 151.251935][T11496] netlink: 'syz.3.1334': attribute type 1 has an invalid length. [ 151.281540][T11496] 8021q: adding VLAN 0 to HW filter on device bond5 [ 151.296888][T11496] bond5: (slave ip6gretap1): making interface the new active one [ 151.300888][T11496] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 151.313447][T11537] netlink: 'syz.0.1337': attribute type 1 has an invalid length. [ 151.357823][ T6843] bond4: (slave lo): failed to get link speed/duplex [ 151.369505][T11542] overlay: filesystem on ./bus not supported as upperdir [ 151.374382][T11542] evm: overlay not supported [ 151.412455][T11546] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 151.448154][T11555] fuse: Unknown parameter 'Jd' [ 151.467716][ T6832] bond4: (slave lo): failed to get link speed/duplex [ 151.521841][T11564] fuse: Bad value for 'fd' [ 151.527862][T11568] MTD: Couldn't look up '/dev/sg0': -15 [ 151.529790][T11568] /dev/sg0: Can't lookup blockdev [ 151.561772][T11573] (syz.0.1349,11573,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 151.598998][ T6832] bond4: (slave lo): failed to get link speed/duplex [ 151.650420][T11576] program syz.7.1350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.655600][T11577] __nla_validate_parse: 12 callbacks suppressed [ 151.655655][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1350'. [ 151.655693][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1350'. [ 151.685754][T11592] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1354'. [ 151.698244][T11592] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1354'. [ 151.707744][ T8122] bond4: (slave lo): failed to get link speed/duplex [ 151.817730][ T6831] bond4: (slave lo): failed to get link speed/duplex [ 151.835553][T11596] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1355'. [ 151.880944][T11600] fuse: Bad value for 'fd' [ 151.980234][T11606] cgroup: Unknown subsys name 'fsuuid' [ 152.047351][ T6028] usb 10-1: USB disconnect, device number 2 [ 152.090410][T11626] netlink: 'syz.5.1362': attribute type 10 has an invalid length. [ 152.093071][T11626] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1362'. [ 152.096425][T11626] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 152.100288][T11626] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 152.115411][T11632] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1361'. [ 152.119981][T11632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11632 comm=syz.7.1361 [ 152.125331][T11632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11632 comm=syz.7.1361 [ 152.130376][T11632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=11632 comm=syz.7.1361 [ 152.135637][T11632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=11632 comm=syz.7.1361 [ 152.308914][T11655] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1366'. [ 152.362738][T11673] xt_hashlimit: size too large, truncated to 1048576 [ 153.013982][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'. [ 153.019776][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1377'. [ 153.475948][T11750] siw: device registration error -23 [ 153.476224][T11751] lo speed is unknown, defaulting to 1000 [ 153.476269][T11751] lo speed is unknown, defaulting to 1000 [ 153.486206][T11751] lo speed is unknown, defaulting to 1000 [ 153.490499][T11751] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 153.498608][T11751] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 153.514635][T11751] lo speed is unknown, defaulting to 1000 [ 153.519702][T11751] lo speed is unknown, defaulting to 1000 [ 153.522799][T11751] lo speed is unknown, defaulting to 1000 [ 153.524899][T11757] xt_recent: Unsupported userspace flags (000000b2) [ 153.528750][T11757] nftables ruleset with unbound chain [ 153.528897][T11751] lo speed is unknown, defaulting to 1000 [ 153.533703][T11751] lo speed is unknown, defaulting to 1000 [ 153.562372][T11757] lo speed is unknown, defaulting to 1000 [ 153.621363][T11789] netlink: 'syz.0.1391': attribute type 3 has an invalid length. [ 153.623999][T11789] netlink: 'syz.0.1391': attribute type 3 has an invalid length. [ 153.626631][T11789] netlink: 'syz.0.1391': attribute type 3 has an invalid length. [ 153.636654][T11789] netlink: 'syz.0.1391': attribute type 3 has an invalid length. [ 153.652974][T11789] overlay: Unknown parameter 'smackfsroot' [ 153.687225][T11774] smc: net device bond0 erased user defined pnetid SYZ0 [ 153.732431][T11822] program syz.7.1394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.741162][T11800] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.789724][T11800] bond4: (slave veth3): Enslaving as an active interface with a down link [ 153.892328][T11909] lo speed is unknown, defaulting to 1000 [ 154.049788][T11944] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.464852][T11997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.469351][T12004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.506884][T12010] all: renamed from lo (while UP) [ 154.519105][T12010] binder: 12009:12010 ioctl c0306201 200000000300 returned -22 [ 154.608106][T12030] x_tables: duplicate underflow at hook 2 [ 154.757989][T12051] binder: BINDER_SET_CONTEXT_MGR already set [ 154.760136][T12051] binder: 12050:12051 ioctl 4018620d 2000000000c0 returned -16 [ 154.764381][T12051] binder: BINDER_SET_CONTEXT_MGR already set [ 154.766867][T12051] binder: 12050:12051 ioctl 4018620d 200000000040 returned -16 [ 154.780654][T12053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12053 comm=syz.0.1419 [ 154.850852][ T69] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 154.966643][T12066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.998453][ T69] usb 12-1: Using ep0 maxpacket: 32 [ 155.002622][ T69] usb 12-1: config 4 interface 0 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 155.006495][ T69] usb 12-1: config 4 interface 0 altsetting 8 endpoint 0x6 has an invalid bInterval 64, changing to 7 [ 155.010299][ T69] usb 12-1: config 4 interface 0 altsetting 8 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 155.016050][ T69] usb 12-1: config 4 interface 0 altsetting 8 endpoint 0x83 has an invalid bInterval 62, changing to 9 [ 155.019860][ T69] usb 12-1: config 4 interface 0 altsetting 8 endpoint 0x83 has invalid maxpacket 32794, setting to 1024 [ 155.023591][ T69] usb 12-1: config 4 interface 0 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 155.027154][ T69] usb 12-1: config 4 interface 0 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 155.030751][ T69] usb 12-1: config 4 interface 0 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 155.034264][ T69] usb 12-1: config 4 interface 0 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 155.038379][ T69] usb 12-1: config 4 interface 0 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 155.041971][ T69] usb 12-1: config 4 interface 0 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 155.045712][ T69] usb 12-1: config 4 interface 0 altsetting 8 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 155.050638][ T69] usb 12-1: config 4 interface 0 has no altsetting 0 [ 155.055378][ T69] usb 12-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=61.10 [ 155.058669][ T69] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.061946][ T69] usb 12-1: Product: syz [ 155.063998][ T69] usb 12-1: Manufacturer: 쟤㟙똨 [ 155.066570][ T69] usb 12-1: SerialNumber: syz [ 155.077561][T12031] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 155.081343][T12031] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 155.154414][T12078] : entered promiscuous mode [ 155.293676][ T69] usb 12-1: USB disconnect, device number 3 [ 155.311218][ T40] kauditd_printk_skb: 85 callbacks suppressed [ 155.311234][ T40] audit: type=1400 audit(1764763296.507:1239): avc: denied { write } for pid=12102 comm="syz.3.1426" name="usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.537151][ T40] audit: type=1400 audit(1764763296.727:1240): avc: denied { append } for pid=12114 comm="syz.5.1429" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 155.575055][ T40] audit: type=1400 audit(1764763296.767:1241): avc: denied { setattr } for pid=12116 comm="syz.5.1430" name="" dev="pipefs" ino=21469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 155.658340][ T34] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 155.807730][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 155.816394][ T34] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 155.820412][ T34] usb 8-1: config 0 has no interface number 0 [ 155.823135][ T34] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 155.837744][ T34] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 155.848074][ T34] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 155.851968][ T34] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 155.854973][ T34] usb 8-1: Product: syz [ 155.856574][ T34] usb 8-1: SerialNumber: syz [ 155.871216][ T34] usb 8-1: config 0 descriptor?? [ 155.875844][ T34] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 155.878202][ T783] net_ratelimit: 36 callbacks suppressed [ 155.878212][ T783] bond4: (slave lo): failed to get link speed/duplex [ 155.883672][ T34] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input22 [ 155.890877][ T40] audit: type=1400 audit(1764763297.087:1242): avc: denied { ioctl } for pid=5329 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3198 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.942187][T12175] IPVS: set_ctl: invalid protocol: 50 172.30.1.8:20003 [ 155.988306][ T1150] bond4: (slave lo): failed to get link speed/duplex [ 156.087396][T12108] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 156.092003][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 156.092041][ T69] usb 8-1: USB disconnect, device number 25 [ 156.094813][ C3] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 156.105847][ T69] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 156.117751][ T6843] bond4: (slave lo): failed to get link speed/duplex [ 156.227774][ T783] bond4: (slave lo): failed to get link speed/duplex [ 156.337995][ T1150] bond4: (slave lo): failed to get link speed/duplex [ 156.447805][ T6831] bond4: (slave lo): failed to get link speed/duplex [ 156.470192][T12200] validate_nla: 3 callbacks suppressed [ 156.470203][T12200] netlink: 'syz.0.1437': attribute type 4 has an invalid length. [ 156.557908][ T6843] bond4: (slave lo): failed to get link speed/duplex [ 156.667702][ T8122] bond4: (slave lo): failed to get link speed/duplex [ 156.777699][ T1150] bond4: (slave lo): failed to get link speed/duplex [ 156.860240][ T40] audit: type=1400 audit(1764763298.057:1243): avc: denied { mount } for pid=12224 comm="syz.0.1445" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 156.908469][T12241] __nla_validate_parse: 7 callbacks suppressed [ 156.908479][T12241] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1447'. [ 156.913746][T12242] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1447'. [ 157.171524][T12304] nft_compat: unsupported protocol 0 [ 157.187246][ T40] audit: type=1400 audit(1764763298.377:1244): avc: denied { getopt } for pid=12306 comm="syz.5.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 157.192607][T12307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1458'. [ 157.196094][ T40] audit: type=1400 audit(1764763298.377:1245): avc: denied { setopt } for pid=12306 comm="syz.5.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 157.225464][ T40] audit: type=1400 audit(1764763298.417:1246): avc: denied { setopt } for pid=12308 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.283345][T12318] bridge4: entered allmulticast mode [ 157.294196][ T40] audit: type=1400 audit(1764763298.487:1247): avc: denied { read } for pid=12308 comm="syz.3.1459" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 157.308045][ T40] audit: type=1400 audit(1764763298.487:1248): avc: denied { open } for pid=12308 comm="syz.3.1459" path="/399/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 157.339150][T12311] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 157.342479][T12311] block device autoloading is deprecated and will be removed. [ 157.597749][ T6019] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 157.677172][T12359] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 157.682656][T12359] binder: 12358:12359 ioctl 4008f510 200000000100 returned -22 [ 157.685614][T12359] binder: 12358:12359 ioctl c018937a 200000000040 returned -22 [ 157.688251][T12359] binder: 12358:12359 ioctl c010f508 200000000140 returned -22 [ 157.747799][ T6019] usb 10-1: Using ep0 maxpacket: 16 [ 157.750957][ T6019] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.754571][ T6019] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.758133][ T6019] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 157.762488][ T6019] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 157.765515][ T6019] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.771096][ T6019] usb 10-1: config 0 descriptor?? [ 157.780596][T12367] binder: BINDER_SET_CONTEXT_MGR already set [ 157.782666][T12367] binder: 12364:12367 ioctl 4018620d 200000000100 returned -16 [ 157.786685][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.789711][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.792292][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.794921][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.797843][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.800463][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.803103][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.805772][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.808736][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.811336][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.814391][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.817073][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.819690][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.822280][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.824833][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.828217][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.830819][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.833377][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.835964][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.838826][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.841437][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.842237][T12368] binder: BINDER_SET_CONTEXT_MGR already set [ 157.843963][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.846048][T12368] binder: 12364:12368 ioctl 4018620d 2000000000c0 returned -16 [ 157.849077][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.853741][T12367] binder: 12364:12367 ioctl 4020ae46 7f0039900be0 returned -22 [ 157.853774][T12368] binder: 12364:12368 ioctl 4188aea7 200000000800 returned -22 [ 157.856420][T12367] binder: 12364:12367 ioctl 4020ae46 7f00399008e0 returned -22 [ 157.860545][T12368] binder: BINDER_SET_CONTEXT_MGR already set [ 157.863889][T12368] binder: 12364:12368 ioctl 4018620d 2000000002c0 returned -16 [ 158.068247][T12385] exFAT-fs (nullb0): invalid boot record signature [ 158.071036][T12385] exFAT-fs (nullb0): failed to read boot sector [ 158.073402][T12385] exFAT-fs (nullb0): failed to recognize exfat type [ 158.116873][T12390] overlay: filesystem on ./file0 not supported as upperdir [ 158.181179][T12333] bridge0: port 4(veth0_to_bridge) entered blocking state [ 158.183690][T12333] bridge0: port 4(veth0_to_bridge) entered disabled state [ 158.186187][T12333] veth0_to_bridge: entered allmulticast mode [ 158.189825][T12333] veth0_to_bridge: entered promiscuous mode [ 158.191937][T12333] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.196684][T12333] bridge0: port 4(veth0_to_bridge) entered blocking state [ 158.199112][T12333] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 158.209727][ T6019] hid_parser_main: 68 callbacks suppressed [ 158.209738][ T6019] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 158.214187][ T6019] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 158.220282][ T6019] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 158.224231][ T6019] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 158.226437][ T6019] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 158.230543][ T6019] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 158.257148][ T6019] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 158.261305][ T6019] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 158.266167][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1482'. [ 158.405313][T12333] netlink: 'syz.5.1462': attribute type 2 has an invalid length. [ 158.409345][T12333] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1462'. [ 158.426789][ T6019] usb 10-1: USB disconnect, device number 3 [ 158.429787][ T24] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 158.437802][ T24] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 158.441096][ T24] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 158.444394][ T24] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 158.616338][T12450] netlink: 536 bytes leftover after parsing attributes in process `syz.7.1486'. [ 158.620532][T12450] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1486'. [ 158.624293][T12450] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1486'. [ 159.028058][T12463] vlan0: entered promiscuous mode [ 159.029902][T12463] vlan0: entered allmulticast mode [ 159.611475][T12480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1497'. [ 159.615390][T12480] netem: invalid attributes len -22 [ 159.617261][T12480] netem: change failed [ 159.659871][T12477] cdrom: dropping to single frame dma [ 159.771269][T12486] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1499'. [ 159.778277][T12486] gretap0: entered promiscuous mode [ 160.404736][T12514] overlayfs: conflicting lowerdir path [ 160.471477][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 160.471593][ T40] audit: type=1400 audit(1764763301.667:1255): avc: denied { connect } for pid=12517 comm="syz.3.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.929079][ T8122] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.947735][ T6836] net_ratelimit: 36 callbacks suppressed [ 160.947748][ T6836] bond4: (slave lo): failed to get link speed/duplex [ 161.002921][ T8122] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.057799][ T1150] bond4: (slave lo): failed to get link speed/duplex [ 161.059835][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.064227][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.070259][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.073458][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.078063][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.105303][ T8122] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.123557][T12527] lo speed is unknown, defaulting to 1000 [ 161.167753][ T1150] bond4: (slave lo): failed to get link speed/duplex [ 161.235092][ T8122] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.268325][T12527] chnl_net:caif_netlink_parms(): no params data found [ 161.347813][T12527] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.350241][T12527] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.352935][T12527] bridge_slave_0: entered allmulticast mode [ 161.356062][T12527] bridge_slave_0: entered promiscuous mode [ 161.360829][T12527] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.363416][T12527] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.365953][T12527] bridge_slave_1: entered allmulticast mode [ 161.369092][T12527] bridge_slave_1: entered promiscuous mode [ 161.409368][T12527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.415915][T12527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.450561][ T8122] team0: left allmulticast mode [ 161.452344][ T8122] team_slave_0: left allmulticast mode [ 161.454260][ T8122] team_slave_1: left allmulticast mode [ 161.456305][ T8122] bridge0: port 3(team0) entered disabled state [ 161.465113][ T8122] bridge_slave_1: left allmulticast mode [ 161.467786][ T8122] bridge_slave_1: left promiscuous mode [ 161.470415][ T8122] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.475931][ T8122] bridge_slave_0: left allmulticast mode [ 161.478708][ T8122] bridge_slave_0: left promiscuous mode [ 161.481387][ T8122] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.490654][ T8122] batman_adv: batadv0: Interface deactivated: gretap1 [ 161.681757][ T8122] batman_adv: batadv0: Removing interface: gretap1 [ 161.947210][ T8122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.954418][ T8122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.962279][ T8122] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 161.974575][ T8122] bond0 (unregistering): Released all slaves [ 162.049061][ T8122] bond1 (unregistering): Released all slaves [ 162.121191][ T8122] bond2 (unregistering): Released all slaves [ 162.129249][ T8122] bond3 (unregistering): Released all slaves [ 162.137999][T12527] team0: Port device team_slave_0 added [ 162.146624][T12527] team0: Port device team_slave_1 added [ 162.207731][ T6841] bond4: (slave lo): failed to get link speed/duplex [ 162.216536][T12527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.220360][T12527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.242004][T12527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.246709][ T8122] tipc: Disabling bearer [ 162.250360][ T8122] tipc: Left network mode [ 162.250845][T12527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.255050][T12527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.264141][T12527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.295322][T12527] hsr_slave_0: entered promiscuous mode [ 162.298370][T12527] hsr_slave_1: entered promiscuous mode [ 162.301422][T12527] debugfs: 'hsr0' already exists in 'hsr' [ 162.303587][T12527] Cannot create hsr debugfs directory [ 162.378279][ T1150] bond4: (slave lo): failed to get link speed/duplex [ 162.386745][T12739] 9pnet: Could not find request transport: virtio [ 162.489329][ T6832] bond4: (slave lo): failed to get link speed/duplex [ 162.511200][ T8122] hsr_slave_0: left promiscuous mode [ 162.514387][ T8122] hsr_slave_1: left promiscuous mode [ 162.517320][ T8122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.522109][ T8122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.525323][ T8122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.530380][ T8122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.542120][ T8122] veth1_macvtap: left promiscuous mode [ 162.544031][ T8122] veth0_macvtap: left promiscuous mode [ 162.546069][ T8122] veth1_vlan: left promiscuous mode [ 162.548048][ T8122] veth0_vlan: left promiscuous mode [ 162.884037][ T8122] team_slave_1 (unregistering): left promiscuous mode [ 162.887032][ T8122] team0 (unregistering): Port device team_slave_1 removed [ 162.912111][ T8122] team_slave_0 (unregistering): left promiscuous mode [ 162.915019][ T8122] team0 (unregistering): Port device team_slave_0 removed [ 163.119599][ T5949] Bluetooth: hci1: command tx timeout [ 163.146195][T12812] lo speed is unknown, defaulting to 1000 [ 163.170539][T12812] lo speed is unknown, defaulting to 1000 [ 163.182933][T12812] lo speed is unknown, defaulting to 1000 [ 163.213206][T12527] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 163.230267][T12527] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 163.239584][T12527] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 163.250970][T12527] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 163.311949][ T8745] lo speed is unknown, defaulting to 1000 [ 163.313305][T12527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.314117][T12812] infiniband syz1: set active [ 163.318242][T12812] infiniband syz1: added lo [ 163.322301][T12812] syz1: rxe_create_cq: returned err = -12 [ 163.324469][T12812] infiniband syz1: Couldn't create ib_mad CQ [ 163.326527][T12812] infiniband syz1: Couldn't open port 1 [ 163.332744][T12527] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.351995][T12812] RDS/IB: syz1: added [ 163.352309][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.354969][T12812] smc: adding ib device syz1 with port count 1 [ 163.356764][ T6832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.359550][T12812] smc: ib device syz1 port 1 has no pnetid [ 163.366323][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.369594][ T6832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.391346][ T8745] lo speed is unknown, defaulting to 1000 [ 163.397098][T12812] lo speed is unknown, defaulting to 1000 [ 163.407746][ T6835] bond4: (slave lo): failed to get link speed/duplex [ 163.518132][ T6832] bond4: (slave lo): failed to get link speed/duplex [ 163.541923][T12527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.545478][T12812] lo speed is unknown, defaulting to 1000 [ 163.638005][ T6843] bond4: (slave lo): failed to get link speed/duplex [ 163.654211][ T40] audit: type=1400 audit(1764763304.847:1256): avc: denied { create } for pid=12851 comm="syz.3.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.664573][T12852] netlink: 'syz.3.1517': attribute type 1 has an invalid length. [ 163.665153][ T40] audit: type=1400 audit(1764763304.867:1257): avc: denied { shutdown } for pid=12851 comm="syz.3.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.675350][T12812] lo speed is unknown, defaulting to 1000 [ 163.721427][T12527] veth0_vlan: entered promiscuous mode [ 163.726579][T12527] veth1_vlan: entered promiscuous mode [ 163.741046][T12527] veth0_macvtap: entered promiscuous mode [ 163.747138][T12527] veth1_macvtap: entered promiscuous mode [ 163.770081][T12527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.778381][ T6835] bond4: (slave lo): failed to get link speed/duplex [ 163.783206][T12527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.789438][ T6841] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.792494][ T6841] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.797243][T12812] lo speed is unknown, defaulting to 1000 [ 163.804156][ T6841] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.807394][ T6841] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.881799][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.884617][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.910625][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.918544][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.924810][T12812] lo speed is unknown, defaulting to 1000 [ 164.132599][T12901] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1526'. [ 164.137798][T12901] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1526'. [ 164.316829][ T40] audit: type=1400 audit(1764763305.507:1258): avc: denied { accept } for pid=12921 comm="syz.3.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.558824][ T8745] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 164.719240][ T8745] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.722810][ T8745] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 164.726706][ T8745] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 164.730779][ T8745] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 164.734065][ T8745] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.740589][ T8745] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 164.743624][ T8745] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.746303][ T8745] usb 10-1: Product: syz [ 164.748269][ T8745] usb 10-1: Manufacturer: syz [ 164.749857][ T8745] usb 10-1: SerialNumber: syz [ 164.753341][ T8745] usb 10-1: config 0 descriptor?? [ 164.758230][ T9] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 164.759757][ T8745] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input24 [ 164.914666][T12938] affs: No valid root block on device nullb0 [ 165.046182][ T8745] usb 10-1: USB disconnect, device number 4 [ 165.126036][T12938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.135825][T12938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.150120][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1538'. [ 165.214718][ T5949] Bluetooth: hci1: command tx timeout [ 165.542508][ T9] usb 13-1: unable to get BOS descriptor or descriptor too short [ 165.545722][ T9] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 165.548628][ T9] usb 13-1: can't read configurations, error -71 [ 165.649448][T12988] veth1_macvtap: left promiscuous mode [ 165.651491][T12988] macsec0: entered promiscuous mode [ 165.653385][T12988] macsec0: entered allmulticast mode [ 165.661623][T12991] veth1_macvtap: entered promiscuous mode [ 165.664446][T12991] veth1_macvtap: entered allmulticast mode [ 165.667513][T12991] macsec0: left promiscuous mode [ 165.669546][T12991] macsec0: left allmulticast mode [ 165.671540][T12991] veth1_macvtap: left allmulticast mode [ 165.798345][ T40] audit: type=1400 audit(1764763306.997:1259): avc: denied { watch watch_reads } for pid=12998 comm="syz.5.1543" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 165.957653][ C2] net_ratelimit: 13393 callbacks suppressed [ 165.957665][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.957812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 165.959989][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.963760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 165.967761][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.971569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 165.976328][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.980015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 165.985472][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.989111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 166.133758][ T40] audit: type=1400 audit(1764763307.327:1260): avc: denied { write } for pid=13005 comm="syz.8.1545" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 166.154957][ T40] audit: type=1400 audit(1764763307.347:1261): avc: denied { ioctl } for pid=13005 comm="syz.8.1545" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 166.177688][ T40] audit: type=1400 audit(1764763307.367:1262): avc: denied { setopt } for pid=13005 comm="syz.8.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 166.552624][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1548'. [ 166.705302][T13021] fuse: Unknown parameter 'r' [ 166.815229][ T40] audit: type=1400 audit(1764763308.007:1263): avc: denied { unmount } for pid=8256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 166.953309][T13036] netlink: 344 bytes leftover after parsing attributes in process `syz.5.1552'. [ 166.968650][ T40] audit: type=1400 audit(1764763308.167:1264): avc: denied { watch } for pid=13031 comm="syz.5.1552" path="/219/file0" dev="tmpfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 167.218033][ T34] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 167.285149][ T5949] Bluetooth: hci1: command tx timeout [ 167.367823][ T34] usb 13-1: Using ep0 maxpacket: 32 [ 167.371259][ T34] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 167.376328][ T34] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 167.387719][ T34] usb 13-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 167.390564][ T34] usb 13-1: Product: syz [ 167.392036][ T34] usb 13-1: Manufacturer: syz [ 167.393675][ T34] usb 13-1: SerialNumber: syz [ 167.408167][ T34] usb 13-1: config 0 descriptor?? [ 167.412928][T13039] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 167.721539][ T9] usb 13-1: USB disconnect, device number 4 [ 168.936109][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1558'. [ 169.367924][ T5949] Bluetooth: hci1: command tx timeout [ 169.500796][T13088] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 169.706228][T13094] netlink: 'syz.8.1565': attribute type 1 has an invalid length. [ 170.535046][ T40] audit: type=1400 audit(1764763311.727:1265): avc: denied { accept } for pid=13115 comm="syz.3.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 170.721727][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1575'. [ 170.967763][ C0] net_ratelimit: 39502 callbacks suppressed [ 170.967776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.967829][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.967887][ T98] bond4: (slave lo): failed to get link speed/duplex [ 170.968848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 170.970116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 170.970375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.970607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.971299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.971523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.972148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.161513][T13136] bond1 (unregistering): Released all slaves [ 171.439716][T13172] veth11: entered promiscuous mode [ 171.453249][T13171] lo speed is unknown, defaulting to 1000 [ 171.460767][T13171] lo speed is unknown, defaulting to 1000 [ 171.542812][ T40] audit: type=1400 audit(1764763312.737:1266): avc: denied { setattr } for pid=13270 comm="syz.8.1580" name="L2TP/IP" dev="sockfs" ino=53547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.858008][T13297] comedi: No check for data length of config insn id -2 is implemented [ 171.861693][T13297] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 171.871156][T13297] comedi: Assuming n=58 is correct [ 172.207894][ T40] audit: type=1400 audit(1764763313.407:1267): avc: denied { bind } for pid=13301 comm="syz.5.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.222532][ T40] audit: type=1400 audit(1764763313.407:1268): avc: denied { getopt } for pid=13301 comm="syz.5.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.233743][T13302] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 172.250130][ T40] audit: type=1400 audit(1764763313.437:1269): avc: denied { bind } for pid=13301 comm="syz.5.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 173.006079][ T40] audit: type=1400 audit(1764763314.197:1270): avc: denied { mounton } for pid=13308 comm="syz.8.1586" path="/18/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 174.037842][T13319] fuse: Bad value for 'group_id' [ 174.039871][T13319] fuse: Bad value for 'group_id' [ 174.204241][T13323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1590'. [ 174.219623][T13324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1589'. [ 174.425515][ T5946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.431317][T13330] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1591'. [ 174.431914][T13330] tmpfs: Bad value for 'mpol' [ 174.471586][ T40] audit: type=1400 audit(1764763315.667:1271): avc: denied { accept } for pid=13331 comm="syz.5.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 174.481876][ T5946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.486524][ T5946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.490716][ T5946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.493476][ T5946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.975290][T13326] lo speed is unknown, defaulting to 1000 [ 174.996017][T13326] lo speed is unknown, defaulting to 1000 [ 175.245502][ T40] audit: type=1400 audit(1764763316.437:1272): avc: denied { listen } for pid=13346 comm="syz.3.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 175.554002][T13354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13354 comm=syz.8.1596 [ 175.977851][ C1] net_ratelimit: 24361 callbacks suppressed [ 175.977862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 175.977875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.978153][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.978838][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.979516][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.980170][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.980679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 175.981495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 175.982249][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 175.982995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 176.557694][ T5946] Bluetooth: hci5: command tx timeout [ 178.638529][ T5946] Bluetooth: hci5: command tx timeout [ 178.889345][ T40] audit: type=1400 audit(1764763320.077:1273): avc: denied { ioctl } for pid=13369 comm="syz.8.1600" path="socket:[53864]" dev="sockfs" ino=53864 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 178.946733][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1600'. [ 179.025030][T13370] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.764710][ T47] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.775731][ T47] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.794105][ T40] audit: type=1400 audit(1764763320.987:1274): avc: denied { map } for pid=13375 comm="syz.3.1601" path="/dev/ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.819658][ T40] audit: type=1400 audit(1764763321.007:1275): avc: denied { execute } for pid=13375 comm="syz.3.1601" path="/dev/ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.226042][T13326] chnl_net:caif_netlink_parms(): no params data found [ 180.241627][T13432] lo speed is unknown, defaulting to 1000 [ 180.531254][ T47] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.534710][ T47] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.580563][T13432] lo speed is unknown, defaulting to 1000 [ 180.737689][ T5946] Bluetooth: hci5: command tx timeout [ 180.799274][ T47] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.802658][ T47] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.987770][ C0] net_ratelimit: 24592 callbacks suppressed [ 180.987782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.987840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 180.988291][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.989006][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.989686][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.989993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.990355][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.991011][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.991743][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.992425][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.191258][T13326] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.201879][T13326] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.207971][T13326] bridge_slave_0: entered allmulticast mode [ 181.213237][T13326] bridge_slave_0: entered promiscuous mode [ 181.731126][ T47] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.741518][ T47] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.762820][T13326] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.768909][T13326] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.774038][T13326] bridge_slave_1: entered allmulticast mode [ 181.779492][T13326] bridge_slave_1: entered promiscuous mode [ 181.913641][T13326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.932345][T13326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.961531][T13548] misc userio: The device must be registered before sending interrupts [ 182.206986][T13326] team0: Port device team_slave_0 added [ 182.237063][T13326] team0: Port device team_slave_1 added [ 182.291064][T13586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14608 sclass=netlink_route_socket pid=13586 comm=syz.3.1607 [ 182.376473][T13326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.385168][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.418127][T13326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.426640][T13326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.431787][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.451992][T13326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.455809][ T47] bridge_slave_1: left allmulticast mode [ 182.462104][ T47] bridge_slave_1: left promiscuous mode [ 182.467528][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.583187][ T47] bridge_slave_0: left allmulticast mode [ 182.585330][ T47] bridge_slave_0: left promiscuous mode [ 182.589543][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.666990][T13605] netlink: 'syz.3.1608': attribute type 6 has an invalid length. [ 182.798131][ T5946] Bluetooth: hci5: command tx timeout [ 183.245683][ T47] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 185.149197][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.214519][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.270226][ T47] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 185.365826][ T47] bond0 (unregistering): Released all slaves [ 185.665996][ T47] bond1 (unregistering): Released all slaves [ 185.970313][ T47] bond2 (unregistering): Released all slaves [ 185.997851][ C0] net_ratelimit: 25359 callbacks suppressed [ 185.997865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.998193][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.998207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 185.998856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 185.999500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 186.000163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 186.000836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 186.001450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.001914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.003160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.366265][ T47] bond3 (unregistering): (slave veth3): Releasing active interface [ 186.390243][ T47] bond3 (unregistering): Released all slaves [ 186.396698][ T47] bond4 (unregistering): Released all slaves [ 186.670286][ T47] bond5 (unregistering): Released all slaves [ 186.778867][T13326] hsr_slave_0: entered promiscuous mode [ 186.781229][T13326] hsr_slave_1: entered promiscuous mode [ 186.783392][T13326] debugfs: 'hsr0' already exists in 'hsr' [ 186.785280][T13326] Cannot create hsr debugfs directory [ 186.968892][ T47] tipc: Left network mode [ 187.134653][ T40] audit: type=1400 audit(1764763328.327:1276): avc: denied { shutdown } for pid=13704 comm="syz.8.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.172668][ T40] audit: type=1400 audit(1764763328.347:1277): avc: denied { accept } for pid=13704 comm="syz.8.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.311543][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1611'. [ 187.345287][T13709] hsr_slave_0: left promiscuous mode [ 187.352300][T13709] hsr_slave_1: left promiscuous mode [ 187.530735][T13326] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 187.547387][T13326] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 187.576802][T13326] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 187.613020][T13326] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 188.010525][ T47] hsr_slave_0: left promiscuous mode [ 188.024250][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.058105][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.126130][T13746] netlink: 'syz.3.1614': attribute type 6 has an invalid length. [ 188.155898][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.176235][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.188148][ T47] batman_adv: batadv0: Removing interface: vlan2 [ 188.203494][ T47] batman_adv: batadv0: Interface deactivated: dummy0 [ 188.206893][ T47] batman_adv: batadv0: Removing interface: dummy0 [ 188.235331][ T47] veth0_macvtap: left allmulticast mode [ 188.239463][ T47] veth0_macvtap: left promiscuous mode [ 188.246183][ T47] veth1_vlan: left promiscuous mode [ 188.251407][ T47] veth0_vlan: left promiscuous mode [ 188.516632][ T47] pim6reg (unregistering): left allmulticast mode [ 188.675998][T13748] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 188.689559][T13748] CIFS: Unable to determine destination address [ 188.981001][T13751] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1616'. [ 189.035133][T13752] netlink: 'syz.8.1616': attribute type 1 has an invalid length. [ 191.008212][ C0] net_ratelimit: 25451 callbacks suppressed [ 191.008229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.008263][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.008269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 191.009653][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.010454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.011054][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.012460][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.013862][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.014757][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 191.015328][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.979720][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.986639][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.005739][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.042129][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.066788][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.330432][T13760] lo speed is unknown, defaulting to 1000 [ 193.348996][T13760] lo speed is unknown, defaulting to 1000 [ 193.548485][ T61] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 193.697941][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 193.707545][ T61] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.712435][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.716103][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.720282][ T61] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.724890][ T61] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 193.728481][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.839091][T13787] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1619'. [ 193.862157][T13326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.946191][ T61] usb 8-1: GET_CAPABILITIES returned 0 [ 193.954521][ T61] usbtmc 8-1:16.0: can't read capabilities [ 194.006539][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.011866][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.018107][T13326] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.037343][ T6841] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.040921][ T6841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.071089][ T6841] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.074679][ T6841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.156318][ T5938] usb 8-1: USB disconnect, device number 26 [ 194.159463][ T5949] Bluetooth: hci0: command tx timeout [ 194.273020][T13760] chnl_net:caif_netlink_parms(): no params data found [ 194.574459][T13760] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.582903][T13760] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.586357][T13760] bridge_slave_0: entered allmulticast mode [ 194.599243][T13760] bridge_slave_0: entered promiscuous mode [ 194.615032][T13760] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.618669][T13760] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.622197][T13760] bridge_slave_1: entered allmulticast mode [ 194.646993][T13760] bridge_slave_1: entered promiscuous mode [ 194.706758][T13760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.721026][T13760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.736076][T13326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.818955][T13760] team0: Port device team_slave_0 added [ 194.841416][T13760] team0: Port device team_slave_1 added [ 194.895633][T13760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.901769][T13760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.923960][T13760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.935883][T13760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.944244][T13760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.010301][T13760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.085942][T13970] netlink: 'syz.8.1620': attribute type 4 has an invalid length. [ 195.151349][T13760] hsr_slave_0: entered promiscuous mode [ 195.154692][T13760] hsr_slave_1: entered promiscuous mode [ 195.331187][T14061] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1621'. [ 195.395380][ T40] audit: type=1400 audit(1764763336.587:1278): avc: denied { read } for pid=14060 comm="syz.8.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 195.519090][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'. [ 195.812391][ T47] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.911404][T14082] Bluetooth: Invalid esc byte 0x89 [ 196.017643][ C1] net_ratelimit: 22892 callbacks suppressed [ 196.017655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 196.018201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.018249][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.019672][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.020287][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 196.020841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 196.021569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 196.022137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 196.022701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 196.023246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ee:03:78:e7:4b, vlan:0) [ 196.168830][ T47] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.223567][T13326] veth0_vlan: entered promiscuous mode [ 196.239561][ T5949] Bluetooth: hci0: command tx timeout [ 196.243332][T13326] veth1_vlan: entered promiscuous mode [ 196.259976][T13326] veth0_macvtap: entered promiscuous mode [ 196.267161][T13326] veth1_macvtap: entered promiscuous mode [ 196.276201][T13326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.282351][T13326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.432734][T14102] netlink: 'syz.3.1628': attribute type 4 has an invalid length. [ 196.435315][T14102] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1628'. [ 196.625308][T14102] .`: renamed from bond0 (while UP) [ 196.651948][ T98] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.763662][ T47] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.783462][ T98] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.020972][ T98] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.116952][ T47] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.134081][ T98] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.935294][ T6835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.947258][ T6835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.004073][ T6833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.008857][ T6833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.015905][T13760] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.126198][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1633'. [ 198.317777][ T5949] Bluetooth: hci0: command tx timeout [ 198.400823][T14172] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 198.606144][T13760] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.697394][T13760] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.788895][T13760] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.948250][ T47] veth0_to_bridge: left allmulticast mode [ 198.950843][ T47] veth0_to_bridge: left promiscuous mode [ 198.953518][ T47] bridge0: port 4(veth0_to_bridge) entered disabled state [ 198.992279][ T47] team0: left allmulticast mode [ 198.994009][ T47] team_slave_0: left allmulticast mode [ 198.995907][ T47] team_slave_1: left allmulticast mode [ 199.008025][ T47] bridge0: port 3(team0) entered disabled state [ 199.015969][ T47] bridge_slave_1: left allmulticast mode [ 199.020483][T14210] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 199.028815][ T47] bridge_slave_1: left promiscuous mode [ 199.037779][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.050672][ T47] bridge_slave_0: left allmulticast mode [ 199.053251][ T47] bridge_slave_0: left promiscuous mode [ 199.055752][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.232808][T14236] ref_ctr increment failed for inode: 0xea offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888031e8c980 [ 199.675558][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.681471][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.686396][ T47] bond0 (unregistering): (slave bond2): Releasing backup interface [ 199.690347][ T47] bond0 (unregistering): Released all slaves [ 199.697183][ T47] bond1 (unregistering): Released all slaves [ 199.782565][ T47] bond2 (unregistering): Released all slaves [ 199.855167][ T47] bond3 (unregistering): Released all slaves [ 199.930371][ T47] bond4 (unregistering): (slave veth3): Releasing active interface [ 199.935096][ T47] bond4 (unregistering): Released all slaves [ 200.013395][ T47] bond5 (unregistering): Released all slaves [ 200.021217][ T47] bond6 (unregistering): Released all slaves [ 200.089588][T13760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.104200][T13760] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.110782][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.113959][ T1233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.151448][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.154648][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.185318][T14265] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1638'. [ 200.240211][T13760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.397817][ T5949] Bluetooth: hci0: command tx timeout [ 200.462747][T14310] netlink: 'syz.9.1644': attribute type 29 has an invalid length. [ 200.470528][T13760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.500618][T13760] veth0_vlan: entered promiscuous mode [ 200.507448][T13760] veth1_vlan: entered promiscuous mode [ 200.541996][T13760] veth0_macvtap: entered promiscuous mode [ 200.546165][T13760] veth1_macvtap: entered promiscuous mode [ 200.557271][T13760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.565098][T13760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.571287][ T6853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.574291][ T6853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.579801][ T6853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.588062][ T6853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.659851][ T47] hsr_slave_0: left promiscuous mode [ 200.674442][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.676938][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.680799][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.683722][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.706125][ T47] veth1_macvtap: left promiscuous mode [ 200.709663][ T47] veth0_macvtap: left promiscuous mode [ 200.712201][ T47] veth1_vlan: left promiscuous mode [ 200.714443][ T47] veth0_vlan: left promiscuous mode [ 202.061019][ T47] team_slave_1 (unregistering): left promiscuous mode [ 202.064216][ T47] team0 (unregistering): Port device team_slave_1 removed [ 202.102285][ T47] team_slave_0 (unregistering): left promiscuous mode [ 202.106364][ T47] team0 (unregistering): Port device team_slave_0 removed [ 203.242489][ T1233] smc: removing ib device syz1 [ 203.251833][ T6838] net_ratelimit: 14808 callbacks suppressed [ 203.251850][ T6838] bond4: (slave lo): failed to get link speed/duplex [ 203.251878][ T9] lo speed is unknown, defaulting to 1000 [ 203.255540][T14365] : renamed from vlan0 [ 203.261456][ T6831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.263128][ T9] syz1: Port: 1 Link DOWN [ 203.264964][ T6831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.313039][ T6843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.316433][ T6843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.360869][ T6851] bond4: (slave lo): failed to get link speed/duplex [ 203.470445][ T6852] bond4: (slave lo): failed to get link speed/duplex [ 203.599137][ T6851] bond4: (slave lo): failed to get link speed/duplex [ 203.712311][ T6851] bond4: (slave lo): failed to get link speed/duplex [ 203.828811][ T6850] bond4: (slave lo): failed to get link speed/duplex [ 203.938317][ T6851] bond4: (slave lo): failed to get link speed/duplex [ 204.048531][ T1233] bond4: (slave lo): failed to get link speed/duplex [ 204.141718][T14581] syzkaller0: entered allmulticast mode [ 204.180818][T14581] syzkaller0 (unregistering): left allmulticast mode [ 204.307716][ T47] bond4: (slave lo): failed to get link speed/duplex [ 204.346894][ T40] audit: type=1400 audit(1764763345.537:1279): avc: denied { setattr } for pid=12527 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.379644][ T40] audit: type=1400 audit(1764763345.577:1280): avc: denied { accept } for pid=14604 comm="syz.9.1775" lport=60071 faddr=::ffff:172.20.255.187 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.389159][ T40] audit: type=1400 audit(1764763345.597:1281): avc: denied { write } for pid=14604 comm="syz.9.1775" lport=60071 faddr=::ffff:172.20.255.187 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 204.398269][ T40] audit: type=1400 audit(1764763345.597:1282): avc: denied { setopt } for pid=14604 comm="syz.9.1775" lport=60071 faddr=::ffff:172.20.255.187 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 204.427837][ T6850] bond4: (slave lo): failed to get link speed/duplex [ 204.872575][T14635] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.875311][T14635] IPv6: NLM_F_CREATE should be set when creating new route [ 205.322139][ T40] audit: type=1326 audit(1764763346.517:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.9.1803" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc98d8f7c9 code=0x7ffc0000 [ 205.335789][ T40] audit: type=1326 audit(1764763346.517:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.9.1803" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc98d8f7c9 code=0x7ffc0000 [ 205.346220][ T40] audit: type=1326 audit(1764763346.517:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.9.1803" exe="/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fcc98d8f7c9 code=0x7ffc0000 [ 205.354052][ T40] audit: type=1326 audit(1764763346.517:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.9.1803" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc98d8f7c9 code=0x7ffc0000 [ 205.362280][ T40] audit: type=1326 audit(1764763346.517:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.9.1803" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc98d8f7c9 code=0x7ffc0000 [ 205.370129][ T40] audit: type=1326 audit(1764763346.517:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.9.1803" exe="/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fcc98d8f7c9 code=0x7ffc0000 [ 205.800870][T14702] program syz.9.1809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.157341][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1825'. [ 207.162048][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1825'. [ 208.277758][ T6850] net_ratelimit: 33 callbacks suppressed [ 208.277771][ T6850] bond4: (slave lo): failed to get link speed/duplex [ 208.388768][ T1233] bond4: (slave lo): failed to get link speed/duplex [ 208.389434][T14799] kvm: kvm [14798]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 208.396136][T14799] kvm: kvm [14798]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 208.465830][T14812] lo speed is unknown, defaulting to 1000 [ 208.509655][ T6843] bond4: (slave lo): failed to get link speed/duplex [ 208.619524][ T6853] bond4: (slave lo): failed to get link speed/duplex [ 208.728013][ T6853] bond4: (slave lo): failed to get link speed/duplex [ 208.837871][ T6843] bond4: (slave lo): failed to get link speed/duplex [ 208.957788][ T6838] bond4: (slave lo): failed to get link speed/duplex [ 209.077735][ T1233] bond4: (slave lo): failed to get link speed/duplex [ 209.188861][ T6838] bond4: (slave lo): failed to get link speed/duplex [ 209.297876][ T47] bond4: (slave lo): failed to get link speed/duplex [ 209.343311][T14890] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 210.646028][T14927] lo speed is unknown, defaulting to 1000 [ 210.953642][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 210.953653][ T40] audit: type=1400 audit(1764763352.147:1292): avc: denied { associate } for pid=14955 comm="syz.9.1882" name="blkio.bfq.io_wait_time_recursive" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 211.030698][T14960] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1884'. [ 211.442883][ T5946] Bluetooth: hci4: command 0x0406 tx timeout [ 211.895304][T14982] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1889'. [ 213.919866][T15024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.923225][T15024] batadv_slave_0: entered promiscuous mode [ 213.937845][ T1233] net_ratelimit: 26 callbacks suppressed [ 213.937862][ T1233] bond4: (slave lo): failed to get link speed/duplex [ 214.047793][ T1146] bond4: (slave lo): failed to get link speed/duplex [ 214.159899][ T1233] bond4: (slave lo): failed to get link speed/duplex [ 214.281365][ T6852] bond4: (slave lo): failed to get link speed/duplex [ 214.370186][T15088] ip6gre1: entered promiscuous mode [ 214.372117][T15088] ip6gre1: entered allmulticast mode [ 214.387983][ T6852] bond4: (slave lo): failed to get link speed/duplex [ 214.499163][ T6851] bond4: (slave lo): failed to get link speed/duplex [ 214.611235][ T6852] bond4: (slave lo): failed to get link speed/duplex [ 214.718248][ T6844] bond4: (slave lo): failed to get link speed/duplex [ 214.758061][T15104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.829098][ T6844] bond4: (slave lo): failed to get link speed/duplex [ 215.009296][ T40] audit: type=1804 audit(1764763356.207:1293): pid=15115 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1932" name="/newroot/45/file0" dev="fuse" ino=0 res=1 errno=0 [ 215.481569][T15137] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1940'. [ 215.712180][ T40] audit: type=1800 audit(1764763356.907:1294): pid=15115 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1932" name="/" dev="fuse" ino=0 res=0 errno=0 [ 216.228147][T15156] gretap0: entered promiscuous mode [ 216.230352][T15156] vlan0: entered promiscuous mode [ 217.129170][ T40] audit: type=1400 audit(1764763358.327:1295): avc: denied { mounton } for pid=15194 comm="syz.9.1957" path="/proc/279/task" dev="proc" ino=58822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 218.507178][T15265] syzkaller0: entered promiscuous mode [ 218.509582][T15265] syzkaller0: entered allmulticast mode [ 219.097017][ T6028] kernel write not supported for file bpf-prog (pid: 6028 comm: kworker/1:4) [ 219.470164][T15286] netlink: 'syz.2.1986': attribute type 6 has an invalid length. [ 219.477702][T15286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1986'. [ 219.540554][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.552903][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.556918][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.561230][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.587850][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.857683][ T6851] net_ratelimit: 32 callbacks suppressed [ 219.857694][ T6851] bond4: (slave lo): failed to get link speed/duplex [ 219.874911][T15291] lo speed is unknown, defaulting to 1000 [ 219.944173][ T40] audit: type=1400 audit(1764763361.137:1296): avc: denied { audit_write } for pid=15331 comm="syz.2.1989" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 220.007797][ T1233] bond4: (slave lo): failed to get link speed/duplex [ 220.018643][T15291] chnl_net:caif_netlink_parms(): no params data found [ 220.135820][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.164190][T15291] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.169056][T15291] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.171530][T15291] bridge_slave_0: entered allmulticast mode [ 220.180263][T15291] bridge_slave_0: entered promiscuous mode [ 220.190569][T15291] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.192847][T15291] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.195155][T15291] bridge_slave_1: entered allmulticast mode [ 220.198065][T15291] bridge_slave_1: entered promiscuous mode [ 220.216333][T15291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.251766][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.265627][T15291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.305510][T15291] team0: Port device team_slave_0 added [ 220.328223][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.337203][T15291] team0: Port device team_slave_1 added [ 220.371798][T15291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.374296][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.385083][T15291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.390171][T15291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.392500][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.402652][T15291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.420194][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.465779][T15291] hsr_slave_0: entered promiscuous mode [ 220.468756][T15291] hsr_slave_1: entered promiscuous mode [ 220.471058][T15291] debugfs: 'hsr0' already exists in 'hsr' [ 220.473006][T15291] Cannot create hsr debugfs directory [ 220.613604][T15291] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.635281][ T12] bridge_slave_1: left allmulticast mode [ 220.638532][ T12] bridge_slave_1: left promiscuous mode [ 220.641341][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.647318][ T12] bridge_slave_0: left allmulticast mode [ 220.650236][ T12] bridge_slave_0: left promiscuous mode [ 220.652989][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.002617][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.007238][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.011296][ T12] bond0 (unregistering): Released all slaves [ 221.038043][T15291] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.082720][ T6839] bond4: (slave lo): failed to get link speed/duplex [ 221.131546][T15291] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.206258][T15291] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.218660][ T1146] bond4: (slave lo): failed to get link speed/duplex [ 221.328859][ T6838] bond4: (slave lo): failed to get link speed/duplex [ 221.384601][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.389719][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.395594][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.403847][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.432115][ T12] veth1_macvtap: left promiscuous mode [ 221.434087][ T12] veth0_macvtap: left promiscuous mode [ 221.436152][ T12] veth1_vlan: left promiscuous mode [ 221.438249][ T12] veth0_vlan: left promiscuous mode [ 221.677763][ T5946] Bluetooth: hci1: command tx timeout [ 221.826762][ T12] team0 (unregistering): Port device team_slave_1 removed [ 221.857914][ T12] team0 (unregistering): Port device team_slave_0 removed [ 222.165357][T15291] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.171944][T15291] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.176782][T15291] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.183321][T15291] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.188007][ T6850] bond4: (slave lo): failed to get link speed/duplex [ 222.254188][T15291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.262475][T15291] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.268492][ T6851] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.270902][ T6851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.277429][ T8122] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.280160][ T8122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.313325][T15291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.348485][ T6850] bond4: (slave lo): failed to get link speed/duplex [ 222.457717][ T8122] bond4: (slave lo): failed to get link speed/duplex [ 222.491147][T15291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.567820][ T8122] bond4: (slave lo): failed to get link speed/duplex [ 222.740827][T15291] veth0_vlan: entered promiscuous mode [ 222.765875][T15291] veth1_vlan: entered promiscuous mode [ 222.819418][T15291] veth0_macvtap: entered promiscuous mode [ 222.825635][T15291] veth1_macvtap: entered promiscuous mode [ 222.836171][T15291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.849024][T15291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.860083][ T6839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.863058][ T6839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.866398][ T6839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.873875][ T6839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.878439][ T8122] bond4: (slave lo): failed to get link speed/duplex [ 222.952499][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.956035][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.985011][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.988683][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.757845][ T5946] Bluetooth: hci1: command tx timeout [ 223.938163][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.949358][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.955662][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.959115][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.970201][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.023725][T15851] lo speed is unknown, defaulting to 1000 [ 224.166029][T15851] chnl_net:caif_netlink_parms(): no params data found [ 224.254431][T15851] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.257080][T15851] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.259971][T15851] bridge_slave_0: entered allmulticast mode [ 224.263008][T15851] bridge_slave_0: entered promiscuous mode [ 224.268054][T15851] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.272025][T15981] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 224.272909][T15851] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.278488][T15851] bridge_slave_1: entered allmulticast mode [ 224.281559][T15851] bridge_slave_1: entered promiscuous mode [ 224.296271][T15851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.302399][T15851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.317317][T15851] team0: Port device team_slave_0 added [ 224.321830][T15851] team0: Port device team_slave_1 added [ 224.336181][T15851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.339382][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.347986][T15851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.352442][T15851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.354742][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.363232][T15851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.386550][T15851] hsr_slave_0: entered promiscuous mode [ 224.389125][T15851] hsr_slave_1: entered promiscuous mode [ 224.391317][T15851] debugfs: 'hsr0' already exists in 'hsr' [ 224.393277][T15851] Cannot create hsr debugfs directory [ 224.496177][T15851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.586544][T15851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.681561][T15851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.761165][T15851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.909378][T15851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.916832][T15851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.932531][T15851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.938181][T15851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.971709][T15851] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.974702][T15851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.977956][T15851] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.980969][T15851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.987778][ T1146] net_ratelimit: 16 callbacks suppressed [ 224.987794][ T1146] bond4: (slave lo): failed to get link speed/duplex [ 225.033711][T15851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.037009][T16194] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 225.061002][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.065148][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.086155][T15851] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.103165][ T6851] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.106390][ T6851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.122164][ T6841] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.125473][ T6841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.160639][ T6853] bond4: (slave lo): failed to get link speed/duplex [ 225.227042][ T40] audit: type=1326 audit(1764763366.417:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.4.2094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e45d8f7c9 code=0x7ffc0000 [ 225.237502][ T40] audit: type=1326 audit(1764763366.417:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.4.2094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e45d8f7c9 code=0x7ffc0000 [ 225.251200][ T40] audit: type=1326 audit(1764763366.417:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.4.2094" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e45d8f7c9 code=0x7ffc0000 [ 225.262434][ T40] audit: type=1326 audit(1764763366.417:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.4.2094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e45d8f7c9 code=0x7ffc0000 [ 225.272615][ T40] audit: type=1326 audit(1764763366.417:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.4.2094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e45d8f7c9 code=0x7ffc0000 [ 225.277767][ T6841] bond4: (slave lo): failed to get link speed/duplex [ 225.321826][T15851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.357037][T15851] veth0_vlan: entered promiscuous mode [ 225.366668][T15851] veth1_vlan: entered promiscuous mode [ 225.368020][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.388897][ T6831] bond4: (slave lo): failed to get link speed/duplex [ 225.393124][T15851] veth0_macvtap: entered promiscuous mode [ 225.399219][T15851] veth1_macvtap: entered promiscuous mode [ 225.412984][T15851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.421758][T15851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.430572][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.434475][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.439542][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.443524][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.500411][ T6853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.505300][ T6853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.518471][ T6853] bond4: (slave lo): failed to get link speed/duplex [ 225.537265][ T6851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.541325][ T6851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.581503][T16247] macvlan2: entered promiscuous mode [ 225.583923][T16247] macvlan2: entered allmulticast mode [ 225.629215][ T6851] bond4: (slave lo): failed to get link speed/duplex [ 225.737764][ T6853] bond4: (slave lo): failed to get link speed/duplex [ 225.837685][ T5946] Bluetooth: hci1: command tx timeout [ 225.847806][ T6831] bond4: (slave lo): failed to get link speed/duplex [ 225.958334][ T6831] bond4: (slave lo): failed to get link speed/duplex [ 225.999569][ T5946] Bluetooth: hci2: command tx timeout [ 226.064918][ T40] audit: type=1400 audit(1764763367.257:1302): avc: denied { mounton } for pid=16282 comm="syz.9.2113" path="/170/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 226.079244][ T6841] bond4: (slave lo): failed to get link speed/duplex [ 226.355618][T16302] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.430633][T16323] serio: Serial port ptm0 [ 226.595978][T16323] serio: Serial port ptm0 [ 226.941542][T16362] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 227.017051][ T40] audit: type=1400 audit(1764763624.208:1303): avc: denied { create } for pid=16365 comm="syz.3.2141" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 227.027568][ T40] audit: type=1400 audit(1764763624.228:1304): avc: denied { mounton } for pid=16365 comm="syz.3.2141" path="/20/file0" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 227.917783][ T5946] Bluetooth: hci1: command tx timeout [ 228.088034][ T5946] Bluetooth: hci2: command tx timeout [ 228.975739][T16431] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2161'. [ 230.027501][ T6851] net_ratelimit: 30 callbacks suppressed [ 230.027517][ T6851] bond4: (slave lo): failed to get link speed/duplex [ 230.147968][ T98] bond4: (slave lo): failed to get link speed/duplex [ 230.157922][ T5946] Bluetooth: hci2: command tx timeout [ 230.258194][ T1146] bond4: (slave lo): failed to get link speed/duplex [ 230.367732][ T6831] bond4: (slave lo): failed to get link speed/duplex [ 230.488597][ T1146] bond4: (slave lo): failed to get link speed/duplex [ 230.597866][ T8122] bond4: (slave lo): failed to get link speed/duplex [ 230.619409][ T40] audit: type=1400 audit(1764763627.818:1305): avc: denied { watch watch_reads } for pid=16527 comm="syz.4.2194" path="/proc/72/net/sctp" dev="proc" ino=4026533412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 230.708175][ T8122] bond4: (slave lo): failed to get link speed/duplex [ 230.762264][ T40] audit: type=1326 audit(1764763627.958:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz.4.2198" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e45d8f7c9 code=0x7ffc0000 [ 230.777654][T16540] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 230.780260][ T40] audit: type=1326 audit(1764763627.958:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz.4.2198" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e45d8f7c9 code=0x7ffc0000 [ 230.781880][T16540] TCP: tcp_parse_options: Illegal window scaling value 64 > 14 received [ 230.802291][ T40] audit: type=1326 audit(1764763627.958:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz.4.2198" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e45d8f7c9 code=0x7ffc0000 [ 230.815369][ T40] audit: type=1326 audit(1764763627.958:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz.4.2198" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e45d8f7c9 code=0x7ffc0000 [ 230.827409][ T40] audit: type=1326 audit(1764763627.958:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz.4.2198" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e45d8f7c9 code=0x7ffc0000 [ 230.837278][ T6850] bond4: (slave lo): failed to get link speed/duplex [ 230.842146][ T40] audit: type=1326 audit(1764763627.968:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz.4.2198" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5e45d8f7c9 code=0x7ffc0000 [ 230.853601][ T40] audit: type=1326 audit(1764763627.968:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz.4.2198" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e45d8f7c9 code=0x7ffc0000 [ 230.863685][ T40] audit: type=1326 audit(1764763627.968:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz.4.2198" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e45d8f7c9 code=0x7ffc0000 [ 230.885183][ T40] audit: type=1326 audit(1764763627.968:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz.4.2198" exe="/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f5e45d8f7c9 code=0x7ffc0000 [ 231.059064][T16562] QAT: failed to copy from user cfg_data. [ 231.123970][T16568] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2208'. [ 231.150784][T16574] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2209'. [ 231.277240][T16588] /dev/sg0: Can't lookup blockdev [ 231.288064][T16588] tmpfs: Bad value for 'mpol' [ 231.296463][T16588] ipvlan2: entered allmulticast mode [ 231.298370][T16588] team0: entered allmulticast mode [ 231.300107][T16588] team_slave_0: entered allmulticast mode [ 231.302899][T16588] team_slave_1: entered allmulticast mode [ 231.305688][T16588] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 231.356529][T16581] delete_channel: no stack [ 231.396136][T16593] lo speed is unknown, defaulting to 1000 [ 231.419316][T16610] overlayfs: regular lower layers cannot follow data lower layers [ 231.422228][T16608] overlayfs: regular lower layers cannot follow data lower layers [ 231.432575][T16617] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 231.440912][T16617] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 231.445469][T16617] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 231.453566][T16617] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 231.459920][T16617] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 231.464275][T16617] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 231.468393][T16617] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 231.472393][T16617] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 231.476373][T16617] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 231.481746][T16617] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 231.700557][ T6030] hid-generic 0101:07FF:0000.000B: reserved main item tag 0xd [ 231.708264][ T6030] hid-generic 0101:07FF:0000.000B: item fetching failed at offset 8/96 [ 231.713584][ T6030] hid-generic 0101:07FF:0000.000B: probe with driver hid-generic failed with error -22 [ 231.794263][T16664] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 231.796486][T16664] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 231.810725][T16664] vhci_hcd vhci_hcd.0: Device attached [ 231.967904][ T5083] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 232.059872][ T8745] usb 55-1: new high-speed USB device number 2 using vhci_hcd [ 232.065120][ T6018] usb 14-1: new low-speed USB device number 2 using dummy_hcd [ 232.125699][ T5083] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 16 [ 232.131042][ T5083] usb 7-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 232.136098][ T5083] usb 7-1: config 1 interface 0 has no altsetting 0 [ 232.140887][ T5083] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.144741][ T5083] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.159386][ T5083] usb 7-1: Product: syz [ 232.161447][ T5083] usb 7-1: Manufacturer: и [ 232.163496][ T5083] usb 7-1: SerialNumber: syz [ 232.169202][T16653] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 232.172550][T16653] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 232.220222][ T6018] usb 14-1: config 0 has no interfaces? [ 232.222713][ T6018] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.226142][ T6018] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.234661][ T6018] usb 14-1: config 0 descriptor?? [ 232.248049][ T5949] Bluetooth: hci2: command tx timeout [ 232.267907][T16707] nbd0: detected capacity change from 0 to 127 [ 232.337112][ T5946] block nbd0: Receive control failed (result -32) [ 232.368957][T16723] Sensor A: ================= START STATUS ================= [ 232.371526][T16723] Sensor A: Test Pattern: 75% Colorbar [ 232.374918][T16723] Sensor A: Show Information: All [ 232.376713][T16723] Sensor A: Vertical Flip: false [ 232.378762][T16723] Sensor A: Horizontal Flip: false [ 232.380945][T16723] Sensor A: Brightness: 128 [ 232.382731][T16723] Sensor A: Contrast: 128 [ 232.384735][T16723] Sensor A: Hue: 0 [ 232.386520][T16723] Sensor A: Saturation: 128 [ 232.392614][ T5083] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 232.405883][T16723] Sensor A: ================== END STATUS ================== [ 232.413371][ T5083] usb 7-1: USB disconnect, device number 3 [ 232.438307][T16666] usb 55-1: recv xbuf, 0 [ 232.440533][ T98] vhci_hcd: stop threads [ 232.442672][ T98] vhci_hcd: release socket [ 232.444858][ T98] vhci_hcd: disconnect device [ 232.447871][T16664] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 232.451093][T16664] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 232.455934][ T6018] usb 14-1: USB disconnect, device number 2 [ 232.494770][T16741] cgroup: No subsys list or none specified [ 232.518088][ T8745] vhci_hcd: vhci_device speed not set [ 232.596211][T16750] hugetlbfs: Bad value for 'uid' [ 232.600041][T16750] hugetlbfs: Bad value for 'uid' [ 232.624517][T16750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2240'. [ 232.811134][T16771] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 233.002190][T16787] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 233.004884][T16784] lo speed is unknown, defaulting to 1000 [ 233.231333][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'. [ 233.234630][T16836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.268205][T16836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.332544][T16855] syz.3.2263 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 233.373721][T16860] netlink: 'syz.3.2265': attribute type 1 has an invalid length. [ 233.397035][T16860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.431936][T16896] overlayfs: missing 'lowerdir' [ 233.623755][T16922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16922 comm=syz.9.2272 [ 233.635235][T16922] netlink: 'syz.9.2272': attribute type 1 has an invalid length. [ 233.718814][T16972] program syz.9.2276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.861767][T16991] netlink: 'syz.3.2279': attribute type 1 has an invalid length. [ 233.864450][T16991] netlink: 'syz.3.2279': attribute type 3 has an invalid length. [ 233.867026][T16991] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2279'. [ 234.228633][T17012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=17012 comm=syz.9.2287 [ 234.234315][T17012] netlink: 'syz.9.2287': attribute type 1 has an invalid length. [ 234.257650][T17012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.287223][T17012] bond2: (slave veth3): Enslaving as an active interface with a down link [ 234.298803][T17012] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 234.302162][T17012] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 234.359910][T17110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17110 comm=syz.9.2287 [ 234.501509][T17118] tmpfs: Unknown parameter 'qsrquota_inode_hardlimit' [ 234.599485][T17127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2292'. [ 234.649540][T17132] netlink: 'syz.4.2294': attribute type 1 has an invalid length. [ 234.689630][T17132] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 234.693736][T17132] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 234.745065][T17178] gretap1: entered promiscuous mode [ 234.750245][T17178] bond1: (slave gretap1): making interface the new active one [ 234.754059][T17178] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 234.805005][T17190] sctp: [Deprecated]: syz.3.2298 (pid 17190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.805005][T17190] Use struct sctp_sack_info instead [ 234.814163][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2298'. [ 234.847100][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2297'. [ 234.861142][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2300'. [ 234.864246][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'. [ 234.867902][T17195] netlink: 'syz.3.2300': attribute type 6 has an invalid length. [ 235.106777][T17215] overlay: filesystem on ./bus is read-only [ 235.176634][T17217] afs: Unknown parameter 'dyn>N&#z8Z}5trnCogBRFcBڕݝ"juXv czA^F:~J ec2i4zqctE6bJ5W]`4D )Q]Ot'tDF(Dg>5#aT' [ 236.225196][T17228] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_0, syncid = 0, id = 0 [ 236.226274][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 236.234308][T17220] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.238339][ T1233] net_ratelimit: 33 callbacks suppressed [ 236.238349][ T1233] bond4: (slave lo): failed to get link speed/duplex [ 236.248549][T17223] netlink: 'syz.9.2310': attribute type 1 has an invalid length. [ 236.251492][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2310'. [ 236.281955][ T40] kauditd_printk_skb: 172 callbacks suppressed [ 236.281966][ T40] audit: type=1400 audit(1764763633.478:1487): avc: denied { mount } for pid=17230 comm="syz.3.2311" name="/" dev="9p" ino=71827827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 236.293251][ T6838] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.293324][T17223] netlink: 'syz.9.2310': attribute type 1 has an invalid length. [ 236.298201][ T40] audit: type=1400 audit(1764763633.498:1488): avc: denied { add_name } for pid=17230 comm="syz.3.2311" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.298994][ T6838] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.299291][ T6838] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.299322][ T6838] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.307872][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2310'. [ 236.308305][ T40] audit: type=1400 audit(1764763633.498:1489): avc: denied { create } for pid=17230 comm="syz.3.2311" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 236.327129][T17237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=17237 comm=syz.4.2312 [ 236.328449][ T40] audit: type=1400 audit(1764763633.498:1490): avc: denied { associate } for pid=17230 comm="syz.3.2311" name="cpuacct.usage_percpu" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 236.339180][T17237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=17237 comm=syz.4.2312 [ 236.339450][T17237] netlink: 4104 bytes leftover after parsing attributes in process `syz.4.2312'. [ 236.345178][ T40] audit: type=1400 audit(1764763633.498:1491): avc: denied { read append open } for pid=17230 comm="syz.3.2311" path="/71/file0/cpuacct.usage_percpu" dev="9p" ino=71827919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.347936][T17237] tc_dump_action: action bad kind [ 236.356513][ T40] audit: type=1400 audit(1764763633.508:1492): avc: denied { map } for pid=17230 comm="syz.3.2311" path="/71/file0/cpuacct.usage_percpu" dev="9p" ino=71827919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.365096][ T40] audit: type=1400 audit(1764763633.508:1493): avc: denied { write execute } for pid=17230 comm="syz.3.2311" path="/71/file0/cpuacct.usage_percpu" dev="9p" ino=71827919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.367696][ T8122] bond4: (slave lo): failed to get link speed/duplex [ 236.373247][ T40] audit: type=1400 audit(1764763633.508:1494): avc: denied { execmem } for pid=17234 comm="syz.2.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 236.393712][ T40] audit: type=1400 audit(1764763633.518:1495): avc: denied { create } for pid=17236 comm="syz.4.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 236.400746][T17244] tty tty1: ldisc open failed (-12), clearing slot 0 [ 236.402115][ T40] audit: type=1400 audit(1764763633.598:1496): avc: denied { write } for pid=17241 comm="syz.4.2315" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 236.480533][ T6853] bond4: (slave lo): failed to get link speed/duplex [ 236.587689][ T6851] bond4: (slave lo): failed to get link speed/duplex [ 236.664640][T17264] bridge: RTM_NEWNEIGH with invalid ether address [ 236.667120][T17264] bridge: RTM_NEWNEIGH with invalid ether address [ 236.707732][ T98] bond4: (slave lo): failed to get link speed/duplex [ 236.748273][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'. [ 236.803201][T17291] netlink: 'syz.2.2326': attribute type 1 has an invalid length. [ 236.836370][T17291] bond1: entered promiscuous mode [ 236.843300][T17291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.846593][T17292] bond1: entered allmulticast mode [ 236.857752][ T1233] bond4: (slave lo): failed to get link speed/duplex [ 236.873835][T17331] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 236.987896][ T98] bond4: (slave lo): failed to get link speed/duplex [ 237.097854][ T1146] bond4: (slave lo): failed to get link speed/duplex [ 237.237793][ T1233] bond4: (slave lo): failed to get link speed/duplex [ 237.264585][T17419] 9pnet_fd: Insufficient options for proto=fd [ 237.354138][T17407] dvmrp8: entered allmulticast mode [ 237.367816][ T6839] bond4: (slave lo): failed to get link speed/duplex [ 237.757773][ T5946] Bluetooth: hci2: command 0x0406 tx timeout [ 237.983955][T17456] lo speed is unknown, defaulting to 1000 [ 238.092307][T17456] lo speed is unknown, defaulting to 1000 [ 238.311319][T17530] input: syz0 as /devices/virtual/input/input26 [ 238.458108][T17548] validate_nla: 1 callbacks suppressed [ 238.458124][T17548] netlink: 'syz.9.2355': attribute type 4 has an invalid length. [ 238.481468][T17548] syzkaller1: entered promiscuous mode [ 238.483906][T17548] syzkaller1: entered allmulticast mode [ 238.694858][T17559] lo speed is unknown, defaulting to 1000 [ 238.783133][T17583] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 238.785623][T17583] UDF-fs: Scanning with blocksize 2048 failed [ 238.788678][T17583] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 238.791104][T17583] UDF-fs: Scanning with blocksize 4096 failed [ 239.193119][T17608] IPVS: set_ctl: invalid protocol: 25647 47.115.110.100:12131 [ 239.326328][T17617] xt_ecn: cannot match TCP bits for non-tcp packets [ 239.331721][T17618] 9pnet_rdma: rdma_create_trans (17618): problem binding to privport: 13 [ 239.421142][T17632] usb usb8: usbfs: interface 0 claimed by hub while 'syz.9.2366' resets device [ 239.437891][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.449455][T17640] netlink: 'syz.3.2367': attribute type 27 has an invalid length. [ 239.491500][T17640] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.494102][T17640] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.542876][T17640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.549683][T17640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.615893][T17640] ipvlan2: left allmulticast mode [ 239.617726][T17640] team0: left allmulticast mode [ 239.619477][T17640] team_slave_0: left allmulticast mode [ 239.621382][T17640] team_slave_1: left allmulticast mode [ 239.679486][T17645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.683777][T17645] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.695266][ T6851] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.703932][ T6851] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.709721][ T6851] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.712647][ T6851] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.770385][T17663] netlink: 'syz.3.2371': attribute type 17 has an invalid length. [ 239.774091][T17663] __nla_validate_parse: 7 callbacks suppressed [ 239.774103][T17663] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2371'. [ 239.782855][T17663] macvtap0: entered allmulticast mode [ 239.785295][T17663] veth0_macvtap: entered allmulticast mode [ 239.786070][T17664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2370'. [ 239.815966][T17676] netlink: 'syz.2.2372': attribute type 1 has an invalid length. [ 239.827862][T17676] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2372'. [ 239.830748][T17676] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2372'. [ 239.833560][T17676] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2372'. [ 239.845440][T17680] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 239.885545][T17686] input: syz0 as /devices/virtual/input/input27 [ 239.943038][ T5987] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 239.963310][T17698] kvm: pic: single mode not supported [ 239.967411][T17698] kvm: pic: single mode not supported [ 240.023565][T17698] vxcan1: tx address claim with dlc 0 [ 240.088034][ T5987] usb 14-1: Using ep0 maxpacket: 16 [ 240.094329][ T5987] usb 14-1: config 0 has an invalid interface number: 8 but max is 0 [ 240.101115][ T5987] usb 14-1: config 0 has no interface number 0 [ 240.103874][ T5987] usb 14-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 240.110552][ T5987] usb 14-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 240.114874][ T5987] usb 14-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 240.118994][ T5987] usb 14-1: Product: syz [ 240.121039][ T5987] usb 14-1: SerialNumber: syz [ 240.125132][ T5987] usb 14-1: config 0 descriptor?? [ 240.130876][ T5987] cm109 14-1:0.8: invalid payload size 24, expected 4 [ 240.134766][ T5987] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.8/input/input28 [ 240.300204][ T6028] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 240.308791][T17752] kvm: pic: non byte read [ 240.335128][T17759] Bluetooth: MGMT ver 1.23 [ 240.372827][T17761] NILFS (nullb0): couldn't find nilfs on the device [ 240.432431][T17766] CIFS: Unable to determine destination address [ 240.453377][ T6028] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.456256][ T6028] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 240.463191][ T6028] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.466163][ T6028] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 240.470176][ T6028] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 240.475128][ T6028] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.479170][ T6028] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.481834][ T6028] usb 8-1: Product: syz [ 240.483273][ T6028] usb 8-1: Manufacturer: syz [ 240.488145][ T6028] cdc_wdm 8-1:1.0: skipping garbage [ 240.490031][ T6028] cdc_wdm 8-1:1.0: skipping garbage [ 240.493780][ T6028] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 240.495850][ T6028] cdc_wdm 8-1:1.0: Unknown control protocol [ 240.538662][ T6097] usb 14-1: USB disconnect, device number 3 [ 240.538702][ C2] cm109 14-1:0.8: cm109_urb_irq_callback: urb status -71 [ 240.543006][ C2] ------------[ cut here ]------------ [ 240.544797][ C2] URB ffff888055729d00 submitted while active [ 240.546782][ C2] WARNING: drivers/usb/core/urb.c:380 at 0x0, CPU#2: swapper/2/0 [ 240.549295][ C2] Modules linked in: [ 240.550841][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 240.553758][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.557237][ C2] RIP: 0010:usb_submit_urb+0x15a3/0x1920 [ 240.559106][ C2] Code: 7c 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 37 e7 b6 fa 48 8d 3d 90 51 8a 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 19 e7 b6 fa 0f 1f [ 240.565359][ C2] RSP: 0018:ffffc90000648a90 EFLAGS: 00010046 [ 240.567352][ C2] RAX: 0000000000000000 RBX: ffff888055729d00 RCX: ffffffff878f7484 [ 240.569936][ C2] RDX: ffff88801dad4980 RSI: ffff888055729d00 RDI: ffffffff90913850 [ 240.572532][ C2] RBP: ffff8880555f3858 R08: 0000000000000001 R09: 0000000000000000 [ 240.575113][ C2] R10: 0000000000000001 R11: 00000000ffffffff R12: 0000000000000001 [ 240.577692][ C2] R13: ffff8880555f3857 R14: ffff888053495de0 R15: 000000000000000f [ 240.580285][ C2] FS: 0000000000000000(0000) GS:ffff8880d6b9e000(0000) knlGS:0000000000000000 [ 240.583201][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.585343][ C2] CR2: 0000000000000000 CR3: 0000000024cf8000 CR4: 0000000000352ef0 [ 240.587943][ C2] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 240.590513][ C2] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 240.593122][ C2] Call Trace: [ 240.594230][ C2] [ 240.595201][ C2] ? find_held_lock+0x2b/0x80 [ 240.596768][ C2] ? __pfx____ratelimit+0x10/0x10 [ 240.598762][ C2] cm109_urb_irq_callback+0x2ed/0xb80 [ 240.601112][ C2] ? do_raw_spin_lock+0x12c/0x2b0 [ 240.603245][ C2] __usb_hcd_giveback_urb+0x38b/0x610 [ 240.605502][ C2] usb_hcd_giveback_urb+0x39b/0x450 [ 240.607684][ C2] dummy_timer+0x1809/0x3a00 [ 240.609283][ C2] ? do_raw_spin_lock+0x12c/0x2b0 [ 240.610975][ C2] ? debug_object_deactivate+0x1ec/0x3a0 [ 240.612906][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 240.614847][ C2] ? debug_object_deactivate+0x1ec/0x3a0 [ 240.616735][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 240.618724][ C2] ? __lock_acquire+0x433/0x22f0 [ 240.620470][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 240.622131][ C2] ? rcu_is_watching+0x12/0xc0 [ 240.623772][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 240.625738][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 240.627382][ C2] __hrtimer_run_queues+0x202/0xc40 [ 240.629119][ C2] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 240.631008][ C2] ? read_tsc+0x9/0x20 [ 240.632438][ C2] hrtimer_run_softirq+0x17d/0x350 [ 240.634151][ C2] handle_softirqs+0x219/0x8b0 [ 240.635804][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 240.637549][ C2] __irq_exit_rcu+0x109/0x170 [ 240.639120][ C2] irq_exit_rcu+0x9/0x30 [ 240.640559][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 240.642442][ C2] [ 240.643440][ C2] [ 240.644438][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.646419][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 240.648374][ C2] Code: 96 76 02 e9 d3 2f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 03 2c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 240.654782][ C2] RSP: 0018:ffffc90000187de8 EFLAGS: 00000282 [ 240.656803][ C2] RAX: 00000000001c91c3 RBX: 0000000000000002 RCX: ffffffff8b5e56f9 [ 240.659436][ C2] RDX: 0000000000000000 RSI: ffffffff8daa2b04 RDI: ffffffff8bf1cd20 [ 240.662030][ C2] RBP: ffffed1003b5a930 R08: 0000000000000001 R09: ffffed100d4c672d [ 240.664666][ C2] R10: ffff88806a63396b R11: 00000000ffffffff R12: 0000000000000002 [ 240.667237][ C2] R13: ffff88801dad4980 R14: ffffffff9085b9d0 R15: 0000000000000000 [ 240.670004][ C2] ? ct_kernel_exit+0x139/0x190 [ 240.671623][ C2] default_idle+0x13/0x20 [ 240.673082][ C2] default_idle_call+0x6c/0xb0 [ 240.674668][ C2] do_idle+0x38d/0x500 [ 240.676034][ C2] ? __pfx_do_idle+0x10/0x10 [ 240.677578][ C2] cpu_startup_entry+0x4f/0x60 [ 240.679232][ C2] start_secondary+0x21d/0x2b0 [ 240.680842][ C2] ? __pfx_start_secondary+0x10/0x10 [ 240.682567][ C2] common_startup_64+0x13e/0x148 [ 240.684256][ C2] [ 240.685299][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 240.687689][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 240.690660][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.694176][ C2] Call Trace: [ 240.695290][ C2] [ 240.696273][ C2] dump_stack_lvl+0x3d/0x1f0 [ 240.697835][ C2] vpanic+0x640/0x6f0 [ 240.699205][ C2] panic+0xca/0xd0 [ 240.700482][ C2] ? __pfx_panic+0x10/0x10 [ 240.701966][ C2] ? check_panic_on_warn+0x1f/0xb0 [ 240.703692][ C2] check_panic_on_warn+0xab/0xb0 [ 240.705339][ C2] __warn+0x108/0x3c0 [ 240.706678][ C2] __report_bug+0x2a0/0x520 [ 240.708244][ C2] ? __pfx___report_bug+0x10/0x10 [ 240.709936][ C2] ? __pfx_dev_printk_emit+0x10/0x10 [ 240.711675][ C2] ? cm109_urb_irq_callback+0x1f4/0xb80 [ 240.713529][ C2] report_bug_entry+0xb2/0x220 [ 240.715114][ C2] ? usb_submit_urb+0x15a3/0x1920 [ 240.716780][ C2] handle_bug+0x18a/0x260 [ 240.718319][ C2] exc_invalid_op+0x17/0x50 [ 240.719870][ C2] asm_exc_invalid_op+0x1a/0x20 [ 240.721481][ C2] RIP: 0010:usb_submit_urb+0x15a3/0x1920 [ 240.723352][ C2] Code: 7c 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 37 e7 b6 fa 48 8d 3d 90 51 8a 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 19 e7 b6 fa 0f 1f [ 240.729616][ C2] RSP: 0018:ffffc90000648a90 EFLAGS: 00010046 [ 240.731596][ C2] RAX: 0000000000000000 RBX: ffff888055729d00 RCX: ffffffff878f7484 [ 240.734202][ C2] RDX: ffff88801dad4980 RSI: ffff888055729d00 RDI: ffffffff90913850 [ 240.736780][ C2] RBP: ffff8880555f3858 R08: 0000000000000001 R09: 0000000000000000 [ 240.739368][ C2] R10: 0000000000000001 R11: 00000000ffffffff R12: 0000000000000001 [ 240.741993][ C2] R13: ffff8880555f3857 R14: ffff888053495de0 R15: 000000000000000f [ 240.744596][ C2] ? cm109_urb_irq_callback+0x1f4/0xb80 [ 240.746421][ C2] ? find_held_lock+0x2b/0x80 [ 240.748027][ C2] ? __pfx____ratelimit+0x10/0x10 [ 240.749726][ C2] cm109_urb_irq_callback+0x2ed/0xb80 [ 240.751483][ C2] ? do_raw_spin_lock+0x12c/0x2b0 [ 240.753168][ C2] __usb_hcd_giveback_urb+0x38b/0x610 [ 240.754936][ C2] usb_hcd_giveback_urb+0x39b/0x450 [ 240.756787][ C2] dummy_timer+0x1809/0x3a00 [ 240.758352][ C2] ? do_raw_spin_lock+0x12c/0x2b0 [ 240.760074][ C2] ? debug_object_deactivate+0x1ec/0x3a0 [ 240.761994][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 240.763956][ C2] ? debug_object_deactivate+0x1ec/0x3a0 [ 240.765800][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 240.767831][ C2] ? __lock_acquire+0x433/0x22f0 [ 240.769471][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 240.771143][ C2] ? rcu_is_watching+0x12/0xc0 [ 240.772756][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 240.774676][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 240.776320][ C2] __hrtimer_run_queues+0x202/0xc40 [ 240.778049][ C2] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 240.779955][ C2] ? read_tsc+0x9/0x20 [ 240.781475][ C2] hrtimer_run_softirq+0x17d/0x350 [ 240.783190][ C2] handle_softirqs+0x219/0x8b0 [ 240.784807][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 240.786574][ C2] __irq_exit_rcu+0x109/0x170 [ 240.788197][ C2] irq_exit_rcu+0x9/0x30 [ 240.789608][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 240.791463][ C2] [ 240.792495][ C2] [ 240.793491][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.795472][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 240.797344][ C2] Code: 96 76 02 e9 d3 2f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 03 2c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 240.803657][ C2] RSP: 0018:ffffc90000187de8 EFLAGS: 00000282 [ 240.805672][ C2] RAX: 00000000001c91c3 RBX: 0000000000000002 RCX: ffffffff8b5e56f9 [ 240.808289][ C2] RDX: 0000000000000000 RSI: ffffffff8daa2b04 RDI: ffffffff8bf1cd20 [ 240.810891][ C2] RBP: ffffed1003b5a930 R08: 0000000000000001 R09: ffffed100d4c672d [ 240.813506][ C2] R10: ffff88806a63396b R11: 00000000ffffffff R12: 0000000000000002 [ 240.816097][ C2] R13: ffff88801dad4980 R14: ffffffff9085b9d0 R15: 0000000000000000 [ 240.818721][ C2] ? ct_kernel_exit+0x139/0x190 [ 240.820372][ C2] default_idle+0x13/0x20 [ 240.821840][ C2] default_idle_call+0x6c/0xb0 [ 240.823433][ C2] do_idle+0x38d/0x500 [ 240.824818][ C2] ? __pfx_do_idle+0x10/0x10 [ 240.826365][ C2] cpu_startup_entry+0x4f/0x60 [ 240.828011][ C2] start_secondary+0x21d/0x2b0 [ 240.829603][ C2] ? __pfx_start_secondary+0x10/0x10 [ 240.831376][ C2] common_startup_64+0x13e/0x148 [ 240.833061][ C2] [ 240.834803][ C2] Kernel Offset: disabled [ 240.836258][ C2] Rebooting in 86400 seconds..