last executing test programs: 2m48.834988053s ago: executing program 1 (id=29): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000ac0d3c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010328bd70e3ffffffff33"], 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00010002ad39d51fcb82ff3d02e78cc3dc99c6710921dc87fc2cc567480c1b000000"], 0x8) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000020) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x12100) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x2a9, 0x0, 0x10}]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080), 0x3d) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2m48.443756757s ago: executing program 1 (id=33): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x0, 0xffffffff, 0x8001, {{0xe, 0x4, 0x2, 0x3a, 0x38, 0x66, 0x0, 0x42, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @timestamp={0x44, 0x20, 0xf2, 0x0, 0xc, [0xf, 0xfffffe00, 0x0, 0x4, 0xb523, 0xe, 0x9]}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f, r1}) r2 = accept(r0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000180)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', r1, 0x29, 0x1, 0x7, 0x8001, 0x28, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x8000, 0xffff, 0x81}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@ptr={0x10, 0x0, 0x0, 0x2, 0x4}, @enum64={0x7, 0x2, 0x0, 0x13, 0x1, 0x0, [{0xc, 0x8, 0x5}, {0xb, 0x1, 0x800}]}]}, {0x0, [0x61, 0x61, 0x61, 0x61, 0x0, 0x2e, 0x0, 0x30]}}, &(0x7f0000000440)=""/124, 0x52, 0x7c, 0x0, 0x6}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000580)=""/84, 0x54, 0x0, &(0x7f0000000600)=""/42, 0x2a}}, 0x10) r6 = openat2(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x340, 0x40, 0xe}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x90, 0x7, 0x100, 0xb9c8, 0xffffffffffffffff, 0x5, '\x00', r1, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x3}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0xe, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x10, 0x3, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x1, 0x4, 0x5, 0x5, 0xfffffffffffffff8, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000200)='syzkaller\x00', 0xffff, 0xa5, &(0x7f0000000240)=""/165, 0x41100, 0xa, '\x00', r3, @fallback=0x30, r4, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x8, 0x4}, 0x10, r5, r6, 0xa, &(0x7f00000008c0)=[0x1, r7, r8, r9], &(0x7f0000000900)=[{0x3, 0x5, 0xf, 0x9}, {0x2, 0x1, 0x1}, {0x0, 0x5, 0x9, 0x1}, {0x2, 0x4, 0xe}, {0x3, 0x3, 0x6}, {0x0, 0x5, 0x9, 0x3}, {0x3, 0x4, 0x5}, {0x3, 0x1, 0x1, 0x7}, {0x1, 0x1, 0x7, 0x7}, {0x0, 0x3, 0x6, 0x4}], 0x10, 0x76}, 0x94) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000044}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x118, r10, 0x326, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']-%}!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':]%+&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}{]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.\\\x8a\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':\x1b%@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb95}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+:-\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r10, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1) r11 = getegid() lchown(&(0x7f0000000dc0)='./file0\x00', 0xee00, r11) r12 = getpid() syz_open_procfs(r12, &(0x7f0000000e00)='net/ip6_flowlabel\x00') r13 = creat(&(0x7f0000000e40)='./file0\x00', 0x80) bind$802154_raw(r13, &(0x7f0000000e80)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000ec0)) r14 = syz_open_dev$sndpcmc(&(0x7f0000000f00), 0x4, 0x482) preadv(r14, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/25, 0x19}, {&(0x7f0000000f80)=""/14, 0xe}, {&(0x7f0000000fc0)=""/15, 0xf}], 0x3, 0x6, 0x9) sendmsg$ETHTOOL_MSG_COALESCE_SET(r13, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r10, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xbf4b}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r15 = syz_open_dev$media(&(0x7f0000001140), 0x48, 0x40) ioctl$LOOP_SET_FD(r6, 0x4c00, r15) write$selinux_user(r13, &(0x7f0000001180)={'system_u:object_r:dpkg_exec_t:s0', 0x20, 'system_u\x00'}, 0x2a) ioctl$TIOCSIG(r13, 0x40045436, 0xb) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000001200)={0x2, &(0x7f00000011c0)=[{0x0, 0xc, 0x8, 0x3}, {0x1000, 0x0, 0x9, 0x9}]}) 2m48.375899386s ago: executing program 1 (id=34): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x515}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x40) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x0, 0xfffffffffffffffe, 0x10, 0xfc, @scatter={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000040)="8f7d0a01007d79710600060000000000", 0x0, 0x10, 0x1001a, 0x0, 0x0}) 2m48.37549976s ago: executing program 1 (id=35): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x100006, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r0, 0xc0186443, &(0x7f0000000200)={0x0, 0x0, {0x30, 0x0, 0x0}}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r1, 0x3b88, &(0x7f0000000140)={0xc}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@ipv4_delrule={0x28, 0x21, 0xb12becd5a2b54ddf, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}]}, 0x28}}, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) clock_settime(0x0, &(0x7f0000009ac0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500040000001800168014000300f0689a4bd21e04917e7a4313f48100000000000000000000ffffe0000002"], 0x3c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) setsockopt$inet6_buf(r5, 0x29, 0x31, &(0x7f0000000280)="b74560dcd2d46861", 0x8) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) stat(&(0x7f0000000540)='./file0/../file0/file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_FUTEX_WAIT={0x33, 0x48, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x1020008, &(0x7f0000000600)={[{@xino_off}, {@uuid_on}, {@redirect_dir_follow}], [{@measure}, {@fowner_lt={'fowner<', r6}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/fuse\x00'}}, {@uid_eq={'uid', 0x3d, r7}}]}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) clock_gettime(0x2, &(0x7f0000000680)) 2m48.244375187s ago: executing program 1 (id=36): r0 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000002e40)={@local, @dev, @void, {@canfd={0xd, {{0x2, 0x1, 0x1}, 0x4, 0xb3dc488b6b063309, 0x0, 0x0, "53645f34c69264893bac7231513d0a36e9b8c168098fe565f515d0d46c39bc4b9aac34f7ec5b35ff7e0aedfd7ea25f83b7c73333c88b70c43344ec0abe28519d"}}}}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000100)=0x4000fff9, 0x4) (async) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x2000000000000291, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) (async) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000580)="ac8cc63ea0995065d02d0926d5a271a992e582a7d6cc377e13c14bff666918b8b24812e6ea030b46c18e78140b83b697acbeaf005ec34af96655d36b2a88ae9e8b5ae6cd65c9f61c0beddf1b099b657d63f79d64009c886482fd2ba580ae08e5b36f6862e023e8016f8fe81f", 0x6c}, {&(0x7f0000000600)="a47678cc656905d0e74d75a806801ab168ba73ed62e71b516171ebdb31bc615cd928bf4a667beb0c172b4e70d256372cb1e1b68089593230ded3c55a87c42b5f3439ebf6e3b33e2d9d3075d656fc931e2b52e378d5afda4cec510aacf65b63bb38cafb94353a6dd5a0510984fc3ed0128321338ceddab642a5c83384c28a3b82401c4505a0ef3a12b8df53dfaa0220886a2a9e1c643df69cb0f9346fd7fd65c55c0eb3ce50b63d6ecd914d1e234d6da621105493bacaf1010c1a02", 0xbb}], 0x2) r2 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x80800) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x0, 0xd, 0x57, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x8000, 0x7, 0xe2b2, 0x2}}) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r5 = dup(r4) sync_file_range(r5, 0x10006, 0x4, 0x2) (async) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000001c0)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x10) 2m47.336158469s ago: executing program 1 (id=41): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) (async) r4 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r4, 0x0, 0x0, 0x2004c080, 0x0, 0x0) (async) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0xc4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00') preadv(r6, &(0x7f0000003fc0)=[{&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f0000000ac0)=""/78, 0x4e}], 0x2, 0x9, 0x7ffffffe) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff}}}, 0x90) (async, rerun: 32) r7 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) (async, rerun: 32) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0x40, 0x8000) (async, rerun: 32) syz_usb_disconnect(r8) (async, rerun: 32) close(0x4) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1c00128009000100626f6e64000000000c04e9a7cb00140000000000cce46d291c0d22ac20f7f59cc72c35da1789468c35fc646b128c25542870ccd8af70198e4f23e38446e78dfd3e2f5b1e4b3a53bd75fe2ac9d181d3ca12b18525a5ecfac197b91366a63cf734390516c2f42917e25b6fc3a1460b12aa577749163f4c5930d9621bbac3c56778272549d90e3d3d8fbbbb911e629675c59051006e39197de5cacbe6e57eadfe3475b602be1e1ded78a899c93c2cccf71f9e3e4aae135cd49679176d9413251e15a547939d494f4010056baf23cb5515d3bc1220eb7205"], 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) ioctl$BLKRRPART(r7, 0x125f, 0x0) 2m47.313495518s ago: executing program 32 (id=41): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) (async) r4 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r4, 0x0, 0x0, 0x2004c080, 0x0, 0x0) (async) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0xc4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00') preadv(r6, &(0x7f0000003fc0)=[{&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f0000000ac0)=""/78, 0x4e}], 0x2, 0x9, 0x7ffffffe) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff}}}, 0x90) (async, rerun: 32) r7 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) (async, rerun: 32) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0x40, 0x8000) (async, rerun: 32) syz_usb_disconnect(r8) (async, rerun: 32) close(0x4) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1c00128009000100626f6e64000000000c04e9a7cb00140000000000cce46d291c0d22ac20f7f59cc72c35da1789468c35fc646b128c25542870ccd8af70198e4f23e38446e78dfd3e2f5b1e4b3a53bd75fe2ac9d181d3ca12b18525a5ecfac197b91366a63cf734390516c2f42917e25b6fc3a1460b12aa577749163f4c5930d9621bbac3c56778272549d90e3d3d8fbbbb911e629675c59051006e39197de5cacbe6e57eadfe3475b602be1e1ded78a899c93c2cccf71f9e3e4aae135cd49679176d9413251e15a547939d494f4010056baf23cb5515d3bc1220eb7205"], 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) ioctl$BLKRRPART(r7, 0x125f, 0x0) 47.288827917s ago: executing program 3 (id=1446): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) close(0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000010665ab590cf447b760000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000008900010073797a30000000000900030073797a320000000014000005000001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01010000000000000000020002000900020073797a32000000000900010073797a30000000000c00034000000000000000021400000011e5000000000000000000000000000a"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000300000040000180150004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a5188aee427740e32"], 0x54}}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xfffdfffffffffffc, 0x0) r7 = socket$kcm(0x10, 0xa, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d80000001400810d4e81f782db44b9040a11080211000000040000a118000280fec9201114000e1208000f0100810401a80016ea1f000640c9201114c92011148ed08734843cb12b00000803600cfab9c14dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146bffa07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adb", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40804) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f0000000000)={0x7, 0x400000000000305, 0x0, 0x0, &(0x7f0000000480)}) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0xd, 0x12, r8, 0xe1c4d000) r9 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000600)={0x2, @pix_mp={0x3, 0xfffff549, 0x59455247, 0x0, 0x5, [{0x6, 0xfffffffa}, {0x3, 0x2}, {0x7, 0x2}, {0x2, 0xeb}, {0x0, 0x4}, {0x8, 0xb}, {0x8}, {0x1a3b, 0x18f674ba}], 0x1, 0xb, 0x6, 0x2, 0x7}}) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000140)=0x2) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000300)={&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x80, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0x42, 0x4, 0x428, 0xffffffff, 0x2e0, 0x210, 0x2e0, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'pimreg0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xba7d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x9, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x2, 0x1, 0x4, 0x4], 0x1, 0x3}, {0x4, [0x1, 0x0, 0x6, 0x2, 0x7, 0x1], 0x0, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'ip6tnl0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x1c, "f30053790051bf3ffd3f72b279e4368029840d3facd44179be46d350310b"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46020207d50122000000000000060000ffffff190300003800000700ff7f00000000000003000000030000007c000000010000000a00000008000000080000007f0000000000a6ad0e5463c0a4bc72dc26093c2f032651901dfa1f3a2192c6a792e3fc77733eee2af3b0f8e70da128255cbaee4eef6355933587a221488b5ef1d5afa4b200ff110685c5a1e6aab65158f4aa7d79d7e525f55a55771a2b199e198d6d943e24df9b7cf5ee177c8527b4d235cdc6a217f044615d90665e31a1cdb75df6f027f18cb5407c"], 0x58) close(r10) 47.174473904s ago: executing program 3 (id=1448): syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c76133", 0xc5}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="dc2c511f4020ab26a8ff66faa12e7fe2b2febdf51c41ab6370204c3d30776a8b963414242847140852ea5844c4bc2ad5b63d060fd8ead0abdcb28bb7e5c6bdc4fafd811821739c5094", 0x49}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}, {0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)="4a66c06f3ddf2a1584afe8053eab17e382e1ddd2a3a6b516a4e4f87a4394a488b7b22037250c852fa79edcdc0815897d14573995f5261cd6a68125566da7b1784c18aa78ec3732fa82ed35dec8388eb85146a4a6e4ff72d682a16f99c0fbc61493eb91c9d3d3a1f5d75bc360f13b3e2566268e8f885ce4730f37d51cd0ca53ea27859efccff82fdd2c9233eabe66abda39b5f4134b1fc2f5561f11a581b8bd6185947269c4824309c256af5022d57405ff371764916bf632bc912f8c213871103bc7af8845152c63c4b380a56b33f9fb1823f5cc16d837b4", 0xd8}, {&(0x7f0000000940)="1400e2c540d76a71093e9eb401bbcc20ac271bf9d99fb9a4e574ceebeea128770a7ba6cf522d54f206e07c680b8d9ce2645a3877bef8c0a0755d6b4e110f762530d602fc873bb485b0df94b1dc16043ea6bb65e72428389c00f565433f080703a3d745ea481c0f9f6e870909a126082c1695c4633601818ed00a7f44425dda83495f471b7946a0a2f6466395f6e76c18c058c88c000f6d15c3d4cb3fb6605823413e9ee31e76", 0xa6}], 0x2, &(0x7f0000000a40)=[@assoc={0x18, 0x117, 0x4, 0x97}], 0x18, 0x7349bcab2b7785a2}], 0x2, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 46.95323821s ago: executing program 3 (id=1449): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 46.952258759s ago: executing program 3 (id=1450): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000070300800c0001"], 0x314}], 0x1}, 0x800) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {}, {0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000780)={r5, 0xfd, 0x6}) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000780)={r5, 0xfd, 0x6}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000b80)={0x10, 0x6, {0x4, @struct={0x3, 0xe}, 0x0, 0x0, 0x0, 0x586c, 0x1, 0x3b, 0x483, @usage, 0x7, 0xfff, [0x4, 0xffff, 0x9, 0x1, 0x0, 0xff]}, {0x0, @struct={0x6, 0x9b}, r4, 0x3, 0x9, 0xc4ea, 0x7, 0x8, 0x3, @struct={0x8001, 0x7}, 0x2, 0x4, [0xfc0, 0x7fffffffffffffff, 0x6, 0x0, 0xffffffff, 0x5]}, {0x4, @struct={0x9, 0x40}, r6, 0xffffffff, 0xff38, 0x31, 0x4, 0xded3, 0x4e, @struct={0x5, 0x2}, 0x2, 0x3ff, [0x5, 0x1, 0x1, 0xfb, 0x40, 0x5]}, {0x6, 0x9, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f00001bc000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000000)="660f388151ed67642e0f01c46766c7442400050000006766c7442402a5fa7a836766c744240600000000670f0114240f21340f08660f5f18baf80c66b8ea22d28d66efbafc0ced36650f092664f30fc77400640f01c9", 0x56}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r2, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x28}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xfb}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0xc0) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r2, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x28}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xfb}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0xc0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x34a0}, 0xc, &(0x7f0000000100)={&(0x7f0000001000)={0x58, 0x1, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xd7ea}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fff}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000810}, 0x40080) (async) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x34a0}, 0xc, &(0x7f0000000100)={&(0x7f0000001000)={0x58, 0x1, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xd7ea}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fff}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000810}, 0x40080) socket(0x3, 0x1, 0xe54) 46.693150367s ago: executing program 3 (id=1453): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060108000000000000000002000003080007800500150008000000050005000a0000000900020073797a31000000000500040000000000050001000700000011000300686173683a6e65742c6e657400000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 46.394300016s ago: executing program 3 (id=1455): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000100)={0x9e0901, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900), 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f00000001c0)={r4, r4, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000001c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000340)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f0000000440)={&(0x7f0000000400)=[r4, r5, 0x0, r6, r7, r8, r9, r10, r11, r12], 0x101, 0xa, 0x4}) (async) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x6, 0x9, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8) (async) sendto$inet6(r2, &(0x7f0000000140)="9f", 0x1, 0x44005, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) (async, rerun: 64) r13 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x4}}, 0x101, 0x5, 0x9, 0x3, 0x42, 0x9, 0xb1}, 0x0) (rerun: 32) sendto$packet(r13, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) 46.328489993s ago: executing program 33 (id=1455): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000100)={0x9e0901, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900), 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f00000001c0)={r4, r4, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000001c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000340)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f0000000440)={&(0x7f0000000400)=[r4, r5, 0x0, r6, r7, r8, r9, r10, r11, r12], 0x101, 0xa, 0x4}) (async) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x6, 0x9, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8) (async) sendto$inet6(r2, &(0x7f0000000140)="9f", 0x1, 0x44005, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) (async, rerun: 64) r13 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x4}}, 0x101, 0x5, 0x9, 0x3, 0x42, 0x9, 0xb1}, 0x0) (rerun: 32) sendto$packet(r13, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.843803616s ago: executing program 4 (id=1785): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000040)={0x8, 'nicvf0\x00', {'bond0\x00'}, 0x7ff}) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000080)={0x8, 0x5, 0xffffffff, 0xe, 0xfffffc00}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f00000000c0)={0x7, 0x3, 0x1, @local, 'nicvf0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x3, 'netpci0\x00', {0x7fff}, 0x6}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7, 0x10, 0x2000000, 0x40, {{0x16, 0x4, 0x1, 0x27, 0x58, 0x65, 0x0, 0xc3, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @cipso={0x86, 0x40, 0xffffffffffffffff, [{0x0, 0xb, "3aa7b3f08bbd6d71e1"}, {0x5, 0xb, "3b0cff1c213237db9a"}, {0x1, 0xe, "44b2cd0f9682ad2790b4c850"}, {0x7, 0x3, "87"}, {0x7, 0x6, "42f94dcf"}, {0x5, 0xd, "854bdb7e8ebc03f85dc609"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x7, 0x3, {{0x2f, 0x4, 0x3, 0x20, 0xbc, 0x65, 0x0, 0x3, 0x4, 0x0, @remote, @broadcast, {[@end, @cipso={0x86, 0x35, 0x3, [{0x1, 0x12, "bbddb08a51f564fc2b37e883e5983704"}, {0x5, 0x8, "94aaa02b3364"}, {0x1, 0xa, "a1228477224eca7c"}, {0x1, 0xb, "746359b5611eaa550b"}]}, @end, @lsrr={0x83, 0x17, 0x39, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @remote, @broadcast]}, @lsrr={0x83, 0x27, 0x50, [@remote, @empty, @multicast2, @empty, @multicast2, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @rr={0x7, 0x23, 0x28, [@broadcast, @rand_addr=0x64010101, @multicast1, @rand_addr=0x64010102, @broadcast, @broadcast, @broadcast, @multicast2]}, @rr={0x7, 0xb, 0x60, [@rand_addr=0x64010101, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, r1, 0x400, 0x7, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x80, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crypt_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000c0}, 0x48814) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000680)={0x80, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}]}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, 0x10, 0xa, 0x201, 0x70bd2d, 0x25dfdbff, {0x2}, [@typed={0x14, 0x27, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="39bc5b", @nested={0x34, 0x14c, 0x0, 0x1, [@typed={0xc, 0x13, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x12f}, @typed={0x8, 0x99, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0xa1}, @typed={0xa, 0x156, 0x0, 0x0, @str='bond0\x00'}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r4) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x404c) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, r8, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x68}, 0x1, 0x0, 0x0, 0x44095}, 0x8000) write$cgroup_int(r0, &(0x7f0000000b40)=0x7, 0x12) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x12c, r10, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc2900}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r11 = syz_open_dev$vcsu(&(0x7f0000000dc0), 0xffff, 0xc000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r11) sendmsg$NL80211_CMD_SET_WIPHY(r11, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x3c, r12, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8001}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xffffffff}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x6e8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x7fffffff}]}, 0x3c}}, 0x8805) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000f40)={0x9, {0x27, 0x6, 0xac2, 0x6, 0xf}}) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r12, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x401, 0x36}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x60000084) sendmsg$ETHTOOL_MSG_PAUSE_SET(r11, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20008c0a}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 3.666313788s ago: executing program 4 (id=1791): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4242}}, './file0\x00'}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) ioctl$TIOCSIG(r0, 0x40045436, 0x30) ioctl$KVM_CAP_XEN_HVM(r0, 0x4068aea3, &(0x7f0000000040)) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000100)={0x2, 0x0, @ioapic={0xeeee0000, 0x49, 0x5, 0x5, 0x0, [{0x5, 0x7, 0x9, '\x00', 0x5}, {0x5, 0xe, 0x2, '\x00', 0xfe}, {0x2, 0x7f, 0x5, '\x00', 0x7}, {0xd, 0x83, 0xfc, '\x00', 0xc0}, {0x58, 0x8, 0xf5}, {0x5, 0x8, 0x81, '\x00', 0x4}, {0xfb, 0x0, 0x4, '\x00', 0x80}, {0x7, 0x8, 0xde, '\x00', 0x40}, {0x4, 0x7, 0x1, '\x00', 0x3}, {0xff, 0x6, 0x1, '\x00', 0xc}, {0x8, 0x2, 0x3, '\x00', 0x6}, {0x6, 0xe6, 0xc, '\x00', 0x5}, {0x7, 0x8b, 0x80, '\x00', 0x5}, {0x4, 0x2, 0x4, '\x00', 0x1}, {0xe, 0x6, 0x7, '\x00', 0x49}, {0x5, 0xac, 0x4, '\x00', 0xf9}, {0xf9, 0x0, 0x6d, '\x00', 0x61}, {0x7, 0x12, 0x9, '\x00', 0x8}, {0x1, 0x85, 0xfc, '\x00', 0xd}, {0xfb, 0x3, 0x8, '\x00', 0x5}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x10, 0x0, 0x40, '\x00', 0x2}, {0x3, 0x8, 0xc0, '\x00', 0x4}, {0x0, 0x40, 0xf, '\x00', 0x4}]}}) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000380)={0xf, 0x0, 'client1\x00', 0x4, "457178adc5537aa3", "71c02cd2dfea636f06ead076ebd157ebef14e865c6b0d3bbc99d14f65469040c", 0x9, 0x7}) (async, rerun: 64) ioctl$KDENABIO(r0, 0x4b36) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x2f4c, @remote, 0xb}}, 0x8, 0x7, 0xff3, 0xb, 0x4}, &(0x7f0000000500)=0x98) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000540)=@assoc_value={r2, 0xb2}, 0x8) (async) ioctl$MEMERASE(r0, 0x40084d02, &(0x7f0000000580)={0x80000000, 0xffffff81}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000005c0)={0x3, 0x3, 0xda, 0x7ff, 0x9, 0x3}) (async, rerun: 32) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f0000000700)=0xe8) (rerun: 32) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r3, &(0x7f0000000740)) (async) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000780)={0x7f, 0x58b6}) (async) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0x80000000, 0x2000000, 0x12, r0, 0x0) munmap$IORING_OFF_SQ_RING(r4, 0xfffffffffffffe01) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000b80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x1b8, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x74, 0x6, "62e05c6c687085ba3b1c79ccfb7085a8f9b2ea57d01153a2e32cbf6342bbb076b2f3d82b2fd2e5c97a842f2274165898389186abb3ac3bf8fc55ef0a0e3f95353e42bc5e80013188320272b9ccbfaa7bbf2fef4aee696d17afa69c2a86285670750154ac27f027b7d80d3ed405396108"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xfa, 0x6, "f756f03c337b16ba3627fc102214d44a7bb48b2c0d5a36a7dc435c511573eef3441e66a79898ea457deb3429022162198e14c8f815abc22eeeb7c6e2299d80d4517a4cb2827914322f263ec8099ac40bf781b9bc856196d800522302e687e6c431867c880bee4edfe96b23ea8d08323a589e43e92d7b8a0892d536125005df36612a44f9aaf6ba827bce231beb1100f553c0d27491ed6e48b00c46f5ac8b5169ecc91060cbe4669a892f7cbf67a347f55ba9dc7e5303277b359295d1d490ccc684733f54bce2b9a82cf700dfd1199a27f676d25fd810c1504f73bbf471830e7e64faac0bc9b22e511955b309c05020f54633ad174753"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x12c, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x26, 0x6, "01f613d367454569f70a1de671d0cebcc47602de0310f739709f575af8e09c76c9f8"}, @NFTA_TABLE_USERDATA={0xdb, 0x6, "8785874514ccdc32fc6a3081726f6d96d19212b8d68f2b1faa7402bcbf6db030c10e0dee51f311902a0d75ccb317b04d570b136948a0d37e35d6b2f69edb46f3bf2ec469a945a5eedc343c319ac5456bf439409aedfab0ae77e8da8114e817ca9fb719a74c32c30f71afbc622e3e6812e33c7a591d0bb9893e0cdf780344d72c4d81429e2d8ce6482fc31cc7e47394c53a7b0a39253247fb56f7c11b74274842b176069067fb8d9bf48a8e4cc0f864ee236d664f754e4eeff6719194d50629bbb4284b2518187691cb8368f8c9008d8ce0ad8f4baa8d89"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x30c}}, 0x20000000) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000bc0)={0x3ff, 0x6, 0x7, 0xae, 0x1a, "eb970b37d5d9338968a913c2a63664ab2ab8cf"}) (async) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000c00)={r2, 0x8, 0x2, 0x8, 0x8, 0x668, 0x5, 0x6, {r2, @in={{0x2, 0x4e24, @private=0xa010100}}, 0x1f, 0x4, 0x488f, 0x0, 0x1}}, &(0x7f0000000cc0)=0xb0) (async) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000d00)=0x8) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000d40)={0x0, "db8d7a093d3a9a92b5a4ef408c5a305f"}) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001d40)={r5, 0x6, 0x2, [0x4, 0x7]}, &(0x7f0000001d80)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001dc0)={r6, 0x6}, 0x8) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001e00)={0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x9, 'sed\x00', 0x13, 0xf, 0x4e}, 0x2c) (async) ioctl$RTC_VL_CLR(r0, 0x7014) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001e40), 0x400000, 0x0) ioctl$PPPIOCSMRU1(r7, 0x40047452, &(0x7f0000001e80)=0xfffffff5) 3.521158178s ago: executing program 4 (id=1792): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 2) 3.432245205s ago: executing program 4 (id=1794): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x150, 0x0, 0x3, [{{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x7, 0x9, 0x3, 0x6, 0x7, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r3, r4, 0x1, 0x1}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}, {{0x4, 0x3, 0x7fffffff, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0x46a1, 0x6, 0x0, 0x6, 0x1, 0xa, 0xa000, 0xde, 0x0, r4, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}]}, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@sr0, r3, &(0x7f0000000280)={0xe90, 0x1, 0x4, 0x7, 0x80000001, 0xfffffffffffffbff, 0x7, 0xffffffffffffffff, 0x6}) ftruncate(r0, 0x4a8e) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x40048000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 3.333077462s ago: executing program 5 (id=1796): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 3.092397889s ago: executing program 4 (id=1798): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) unshare(0x4020000) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000040000014000000140000007b73000000000000020000000b00000004000000000000000000"], 0x0, 0x2e, 0x0, 0x1}, 0x28) (async) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) (async) r4 = open(&(0x7f0000000000)='.\x00', 0x8000, 0x2a4) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) (async) move_mount(r3, 0x0, r4, &(0x7f00000000c0)='./file0\x00', 0x14) (async) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x8, 0x0, 0x27f}) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f00000001c0)={0x1d, r8}, 0x10) (async) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0x0}) (async) r10 = socket$igmp(0x2, 0x3, 0x2) (async) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) (async, rerun: 64) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 64) sendmsg$inet(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000100)=@bridge_dellink={0xc0, 0x11, 0x2, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r12, 0x4000, 0x10001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GRE_LOCAL={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_IFALIASn={0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7b45}, @IFLA_NET_NS_PID={0x8, 0x13, r9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_hsr\x00'}, {0x14, 0x35, 'ip6gre0\x00'}, {0x14, 0x35, 'ip6tnl0\x00'}]}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_GROUP={0x8, 0x1b, 0x3}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x48000) 3.022910404s ago: executing program 4 (id=1799): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0xb, 0xf, 0x4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, 0x0) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000080), 0x42200, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000022c0), r2) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000002380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x24, r5, 0x400, 0x3ff, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x242}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$FUSE_INIT(r2, &(0x7f0000002240)={0x50, 0x0, r3, {0x7, 0x2d, 0x6, 0x1000000, 0x6, 0x8b70, 0x3, 0x247a, 0x0, 0x0, 0x10, 0x8000}}, 0x50) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x5) 2.95336271s ago: executing program 5 (id=1800): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xfc, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x30000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xca90}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x22}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe37}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000080)={0xd, 0x40080, 0x1, 'queue1\x00', 0xb}) syz_emit_ethernet(0x16, &(0x7f0000000180)={@local, @link_local, @void, {@llc={0x4, {@snap={0xaa, 0x0, "13", "7ddc03"}}}}}, 0x0) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000000180)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0x11, 0xd, r8, 0x1, 0xb, 0x6, @multicast}, 0x14) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r10 = memfd_secret(0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r10, 0x40086424, &(0x7f00000002c0)={0x0, 0x1}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r10, 0x7, 0x0, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000010ffffffffffffd5cf54bba91a86dd6917007e00982cfffc020000000000000000000000000006ff0200000000000000000000000000013b12000100"], 0xd2) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r7, 0xacf5e67dd0b58d31, 0xffffffff, 0x0, {{0x5}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}}, 0x4c044) 2.201485982s ago: executing program 2 (id=1805): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002100)={0xc, {"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", 0x1000}}, 0x1006) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x7}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000161411"], 0x20}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0xa1}, 0x0) r8 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x80, 0x40, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0xbd0, 0x8, 0x1, {0x22, 0x417}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf2, 0x5, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x7, 0xf3, 0x9}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x4, 0x81, 0x6, 0x8, 0x1}, 0xf5, &(0x7f0000000440)={0x5, 0xf, 0xf5, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "f68ef352d41821c72ae5419d9cef1b07"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xb4, 0x4, 0x8, 0xcc, 0xb4}, @generic={0x96, 0x10, 0x7b5609b25ff37ebc, "8724969a04343935da254a29cc852d2553a0e3cabe573c8b90f286540fb981e321321e7ab500932a573434d22f6e74a6bd86957790935dca82379926497f987fd535c5319d973ed2caf94fe13c04c868c342d515c9406e7c95899f962dee420a31dbdf676c3bf53b220ccaffdcc38d9ca1c7f52ddd8e9079d868ed17bfdf30be0527738e99df961c6dbc27d7443e97436225c3"}, @ssp_cap={0x20, 0x10, 0xa, 0x93, 0x5, 0x7fffffa, 0xf000, 0x2, [0xff3fc0, 0xf, 0x3f00, 0xff3f3f, 0xff3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x9, 0x37}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "4e787ae3bc725e8d5b672d7b3014657f"}]}, 0x5, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x439}}, {0xb5, &(0x7f0000000640)=@string={0xb5, 0x3, "27cd0850fe62977272dbf63c1ffaa80b9404041153a7514cf6118048e3e3aa3a3df90fe85447a717e7fc8369c078b8782bdb8cfa88de6c48979f109b719a41485c8ccc82f9f04830ffbc3bfc66c7c92154dc58c3c05bb8042b2c9fe0245109b559d5d953485d500f2a4f426934de9c3094be97b5a3b7504d0096369f6556cef6f5cd2e73f64ae8e36e1529fa245e1195c51eeee630ff66f8f4f4670bafecabd36e1b383c26fb082c7311669b038ed880db2658"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x843}}, {0xf5, &(0x7f0000000780)=@string={0xf5, 0x3, "1a3fd5e1ee68d6e19c6a0a01669b2434f89f89d36dc7329ab86c46a99aea843dd1c55a4cb151b818f4894af0c6c7c1e43f83fa2a69a5d2feb376c814c20152f521cd052c8746afc0221a3aa41b32709e03d596f8d0585ee8d3c0c2e575f99bdfed25315c45202863086785e68f98bcfad6aa7fa9d1709bee16f9a6d1475d292a0170a7420f0302e29bd449d04cc08b712911faa74c902cfabd137787f6b950756395d9a6e28ed67ee12c320a7b863e8889434df905e3e586bae29f33b6163557dd3e2f3479ed157e9d2d75722f4f1dd732d1f6dbb98dbdf938569776bae8b12bf30c30f162db456061305c46d2f876d34bdfc6"}}]}) syz_usb_control_io$hid(r8, &(0x7f0000000ac0)={0x24, &(0x7f0000000900)={0x40, 0x31, 0xcf, {0xcf, 0x6, "1afbdeb8c92355d5c9faa64e58d61843142cc8ec972b6af484c07be7a5d8a8b5477d5b5adf9ee49158c40460cf9ffd8e95e82fc56363bd2712f820efea44cd931780643864d009bd31b12c2be9ade86d6e5fc6d34b6e96b9b8c9d11e5498a10c06685ba62f831f2c7ecd1199bf7bf96410f599658a2bb0ecaaee9260a35050f749eb7faa8857342dae8ba45b15d626c7eae4807f50d474bd88e8597a79105c3fbf0307f1fa337230014e547a75e981f82e85e8ff2a0f16b5b6c33897719795a01dcae20a23a317ec2f4111e4d7"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f0000000580)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0xa, "5e84222e"}, @main=@item_012={0x0, 0x0, 0xc}, @global=@item_4={0x3, 0x1, 0x685b83b73fa2c67e, "06720041"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0xffffffffffffff43, 0x21, 0x0, 0x3, 0x1, {0x22, 0xb5a}}}}, &(0x7f0000000d00)={0x2c, &(0x7f0000000b00)={0x40, 0x11, 0xda, "1a9115582e7923cbbec7d4c14e2101278341f2e7bb8a7c8a4ade6aced6d70fad3c71c2658e8a8f65c7e03d9df69b06ba09f9956066f296a8ed1f79ab7b3655e3366af170cbdddb8b3bcb6b01cb9c514350fb31dd4cd531deecc270a72706693ea120c7edd81e09b0bb9ed6f30c2d4a1c28ea22b07af178ae8f2d155bcebaf6c9489ff5739c1a357fa3ad7160415e6d76aa069bbaf4efa62d27eb2f1172e0b59da7d6c8b4dfa96bcbe13b7aacd12fa120918d5084119fae71b19ae3171b69063c0ce0dbb0f5ea75155942828c1ad611a4a3208ad80aebd03fe9d5"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000c40)={0x0, 0x8, 0x1}, &(0x7f0000000c80)={0x20, 0x1, 0xf, "235e5eaf1a80e5e79e324cd0348e0f"}, &(0x7f0000000cc0)={0x20, 0x3, 0x1, 0x2}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x11}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x40014) 1.801218504s ago: executing program 5 (id=1806): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000480)={0x6, 0x0, @ioapic={0xf000, 0x9fc, 0x0, 0x0, 0x0, [{0x4, 0x8, 0x87, '\x00', 0x81}, {0x4, 0x3, 0x0, '\x00', 0xc}, {0xff, 0x5, 0xff, '\x00', 0x2}, {0x2, 0x10, 0x1, '\x00', 0x1f}, {0xf, 0xff, 0x2, '\x00', 0x3}, {0x0, 0x41, 0x7, '\x00', 0x78}, {0xb, 0x7, 0x7, '\x00', 0x4e}, {0x3, 0x7, 0x6, '\x00', 0x1}, {0x2, 0x8, 0x3d, '\x00', 0x6}, {0xd, 0x2, 0x1, '\x00', 0x2}, {0x7f, 0x9, 0xff, '\x00', 0x9d}, {0x6, 0x1, 0x22, '\x00', 0x7b}, {0x5, 0x6, 0x3b, '\x00', 0x2}, {0x3, 0xf, 0x33, '\x00', 0x9}, {0x8a, 0xb, 0x30, '\x00', 0x7}, {0xe, 0x5, 0x4}, {0x0, 0x4, 0x7, '\x00', 0xc}, {0x4, 0x0, 0x2, '\x00', 0x42}, {0xf2, 0x6, 0x8d, '\x00', 0x80}, {0x81, 0x0, 0x12, '\x00', 0xb}, {0x12, 0x8, 0xd, '\x00', 0x83}, {0x16, 0x46, 0x93, '\x00', 0x4}, {0x7f, 0x23, 0x7d, '\x00', 0xd3}, {0x0, 0x8, 0x0, '\x00', 0xf}]}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) 1.672866439s ago: executing program 5 (id=1807): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@getqdisc={0x30, 0x26, 0x8, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffe0}, {0x1, 0xd}, {0xd, 0x3}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x4000010) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x80, {0x0, 0x0, 0x0, 0x0, 0x91646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000b"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.563414607s ago: executing program 5 (id=1808): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%+9llu \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x3, 0xe, 0x8, @empty, @private1, 0x7, 0x1, 0x65, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7, 0xefb1, 0x5, 0x4160, r1, 0x3, '\x00', r2, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x1}, 0x50) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) prctl$PR_SET_FPEXC(0xc, 0x100000) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000900)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGRDESC(r5, 0x4008c002, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0xfd03, 0x0, 0x0, 0x5, 0x4}) 1.183555737s ago: executing program 0 (id=1811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000280)={0xf, 0x7, 0x7, 0x8, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) write$P9_RREADLINK(r4, &(0x7f0000000140)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) ioctl$TIOCGPTPEER(r4, 0x5441, 0x7) 1.031100716s ago: executing program 0 (id=1812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xc, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@p, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe02}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/3, 0x3}], 0x3, 0x4, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) accept4(r0, &(0x7f0000000280)=@can, &(0x7f0000000300)=0x80, 0x80000) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400"], 0x48) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (async) writev(r0, &(0x7f0000000040), 0x2) 1.030556254s ago: executing program 0 (id=1813): request_key(&(0x7f0000000480)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x15be) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="a24858ca13d10180c20002010800461d0028006800000c21907864010100ac1434aa940400004e21"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="bc0000002b0001000000000000000000aa0000800c000000000000000000000014000100fe8000000000000000000000000000aa50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc089029d1608a487f26fbe816b89f7cb81bff81a9c9482565856555ee923c65973deb0a99b962b"], 0xbc}], 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x88c0}, 0x24048854) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 693.33883ms ago: executing program 2 (id=1814): syz_emit_ethernet(0x8e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700582c0020010000000000000000000000000001ff0200000000000000000000000000013a00000000000000020090780000000468cd85b50007840020010000000002fe8000000000000000000000000000bbaad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356c"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x380, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000105, 0x0, 0x46}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000012c0)="8ee8c9b8ee088ed8660f38be01b2d63535d9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0x31}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x100000000007, 0x42) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0xfffffffd, 0xb77, 0x3014, 0x0, 0xa, 0x9, 0x3, 0xa4de36948e08189d}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1, 0x8000000, 0x0) writev(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000000440)="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", 0xdcb}], 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000040)=@n={0x1, 0xff, @SEQ_NOTEON=@special, 0xfe}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000080)={@private1, 0x56}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) open_tree(0xffffffffffffff9c, &(0x7f0000002c40)='./file0\x00', 0x80000) lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0x0) umount2(&(0x7f0000001240)='./file0\x00', 0x1) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x3, 0x4, 0x7}) utime(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) 453.099968ms ago: executing program 0 (id=1815): r0 = syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440), &(0x7f0000000080), &(0x7f0000000000)) r1 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './bus'}, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f01c, 0x2}) recvmmsg(r3, &(0x7f0000009cc0)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/49, 0x31}, {&(0x7f0000002800)=""/20, 0x14}], 0x5}, 0x9}, {{&(0x7f00000028c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002940)=""/92, 0x5c}, {&(0x7f00000029c0)=""/58, 0x3a}, {&(0x7f0000002a00)=""/138, 0x8a}, {&(0x7f0000002ac0)=""/62, 0x3e}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/123, 0x7b}], 0x6, &(0x7f0000003c00)=""/80, 0x50}, 0x4}, {{&(0x7f0000003c80)=@caif=@rfm, 0x80, &(0x7f0000005380)=[{&(0x7f0000003d00)=""/218, 0xda}, {&(0x7f0000003e00)=""/44, 0x2c}, {&(0x7f0000003e40)=""/46, 0x2e}, {&(0x7f0000003e80)=""/201, 0xc9}, {&(0x7f0000003f80)=""/246, 0xf6}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/171, 0xab}, {&(0x7f0000005140)=""/147, 0x93}, {&(0x7f0000005200)=""/131, 0x83}, {&(0x7f00000052c0)=""/152, 0x98}], 0xa, &(0x7f0000005440)=""/165, 0xa5}, 0x1000}, {{&(0x7f0000005500)=@tipc=@id, 0x80, &(0x7f0000005640)=[{&(0x7f0000005580)=""/157, 0x9d}], 0x1}, 0x7fffffff}, {{&(0x7f0000005680)=@caif, 0x80, &(0x7f0000005880)=[{&(0x7f0000005700)=""/235, 0xeb}, {&(0x7f0000005800)=""/81, 0x51}], 0x2, &(0x7f00000058c0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f00000068c0)=""/81, 0x51}, {&(0x7f0000006940)=""/191, 0xbf}, {&(0x7f0000006a00)=""/50, 0x32}, {&(0x7f0000006a40)=""/252, 0xfc}, {&(0x7f0000006b40)=""/11, 0xb}, {&(0x7f0000006b80)=""/122, 0x7a}, {&(0x7f0000006c00)=""/49, 0x31}], 0x7, &(0x7f0000006cc0)=""/85, 0x55}, 0x7}, {{0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f0000006d40)=""/244, 0xf4}], 0x1, &(0x7f0000006e80)=""/229, 0xe5}, 0x4}, {{&(0x7f0000006f80)=@can, 0x80, &(0x7f0000008080)=[{&(0x7f0000007000)=""/4096, 0x1000}, {&(0x7f0000008000)=""/96, 0x60}], 0x2, &(0x7f00000080c0)=""/6, 0x6}, 0x80000001}, {{0x0, 0x0, &(0x7f00000095c0)=[{&(0x7f0000008100)=""/234, 0xea}, {&(0x7f0000008200)=""/244, 0xf4}, {&(0x7f0000008300)=""/168, 0xa8}, {&(0x7f00000083c0)=""/8, 0x8}, {&(0x7f0000008400)=""/142, 0x8e}, {&(0x7f00000084c0)=""/33, 0x21}, {&(0x7f0000008500)=""/4096, 0x1000}, {&(0x7f0000009500)=""/140, 0x8c}], 0x8}, 0xfffffff0}, {{&(0x7f0000009640)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000009b40)=[{&(0x7f00000096c0)}, {&(0x7f0000009700)=""/224, 0xe0}, {&(0x7f0000009800)=""/30, 0x1e}, {&(0x7f0000009840)=""/160, 0xa0}, {&(0x7f0000009900)=""/175, 0xaf}, {&(0x7f00000099c0)=""/117, 0x75}, {&(0x7f0000009a40)=""/225, 0xe1}], 0x7, &(0x7f0000009bc0)=""/221, 0xdd}, 0x105}], 0xa, 0x2041, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x20040841}, 0x8000) unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000000c0)="6600344e5e6d66060d1855234d875b2a335b70f54989f195b0344db3f640dda8370d4bc59dfa1a808f302e15683bf99e5ee136ea5c6b830254ee53db05d504fe3ba110b30d2222dea690560a6e884fa7479a87f21e906431c0634aad21"}, 0x20) 363.11385ms ago: executing program 2 (id=1816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x34c000) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600010000000000000080000700000040"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 362.891615ms ago: executing program 0 (id=1817): syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) r0 = syz_open_dev$media(&(0x7f0000000000), 0x8, 0x101000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000640)={0x0, 0x2, 0x0, &(0x7f00000001c0)=[{}, {}], 0x4, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000440), 0x5, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x10800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x27211}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'pimreg0\x00'}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c011}, 0x40408f0) 213.98403ms ago: executing program 2 (id=1818): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 5) 213.630293ms ago: executing program 0 (id=1819): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x40048000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (fail_nth: 4) 113.753763ms ago: executing program 2 (id=1820): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = dup3(r1, r2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='/dev/dvb/adapter#/frontend#\x00', 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000180)=[{0x18, '\x00', @st={0x4, [{0x0, @svalue=0x9}, {0x3, @svalue=0x7}, {0x0, @uvalue=0x44}, {0x0, @svalue=0xe}]}, 0xffffffff}]}) 259.538µs ago: executing program 2 (id=1821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="11012dbd7000060000001900000008000300", @ANYRES32=r6, @ANYBLOB="05001c"], 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x4010) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fddbdf25810000000a00060008021108000000000a000600080211000001000006006600f5000000040067000a000600080211000000ddff030067000a0006000804113d3700000200000a000600080211000000"], 0x60}}, 0x0) 0s ago: executing program 5 (id=1822): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffe1a, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x8000000, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x4004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x3e, &(0x7f0000000000)={@empty, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, {[@routing={0x84}]}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffe1a, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x8000000, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x4004) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@empty, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, {[@routing={0x84}]}}}}}, 0x0) (async) kernel console output (not intermixed with test programs): misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.721773][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 144.721792][ T42] audit: type=1326 audit(1784706063.120:25226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9073 comm="syz.2.898" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffacff9de99 code=0x0 [ 145.517036][ T9081] overlayfs: failed lookup in lower (newroot/203, name='file0', err=-40): overlapping layers [ 145.522847][ T9082] overlayfs: failed lookup in lower (newroot/203, name='file2', err=-40): overlapping layers [ 145.528358][ T9083] overlayfs: failed lookup in lower (newroot/203, name='file0', err=-40): overlapping layers [ 145.828232][ T9089] fuse: Unknown parameter '0x0000000000000008' [ 145.874104][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.353875][ T5749] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 146.353932][ T5753] Bluetooth: hci4: command 0x1003 tx timeout [ 146.970738][ T9104] netlink: 68 bytes leftover after parsing attributes in process `syz.0.908'. [ 146.974834][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'. [ 147.152417][ T9112] netlink: 'syz.2.912': attribute type 32 has an invalid length. [ 147.173730][ T9112] bond6: Setting coupled_control to off (0) [ 147.177576][ T9112] bond6: entered promiscuous mode [ 147.184028][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.912'. [ 147.187732][ T9112] netlink: 'syz.2.912': attribute type 11 has an invalid length. [ 147.241983][ T9115] netlink: 44 bytes leftover after parsing attributes in process `syz.2.912'. [ 147.245652][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.913'. [ 147.245678][ T9116] netlink: 32 bytes leftover after parsing attributes in process `syz.4.913'. [ 147.245694][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.913'. [ 147.296945][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 147.299920][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'. [ 147.318642][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 147.410488][ T9126] fuse: Invalid rootmode [ 147.410593][ T9127] fuse: Invalid rootmode [ 147.625182][ T9136] netlink: 'syz.4.921': attribute type 10 has an invalid length. [ 147.626299][ T42] audit: type=1400 audit(1784706066.030:25227): avc: denied { ioctl } for pid=9135 comm="syz.4.921" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 147.629737][ T9136] veth0_to_bond: entered allmulticast mode [ 147.641222][ T9136] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 147.650998][ T42] audit: type=1400 audit(1784706066.050:25228): avc: denied { mounton } for pid=9135 comm="syz.4.921" path="/214/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 147.769498][ T9140] netlink: 'syz.2.922': attribute type 13 has an invalid length. [ 147.837999][ T42] audit: type=1400 audit(1784706066.240:25229): avc: denied { write } for pid=9141 comm="syz.0.923" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 147.905831][ T9148] geneve3: entered promiscuous mode [ 147.907844][ T9148] geneve3: entered allmulticast mode [ 147.941203][ T42] audit: type=1400 audit(1784706066.340:25230): avc: denied { bind } for pid=9151 comm="syz.2.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 147.951012][ T9154] fuse: Bad value for 'fd' [ 148.145825][ T42] audit: type=1326 audit(1784706066.550:25231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.2.929" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffacff9de99 code=0x0 [ 148.266589][ T9173] bridge_slave_1: left allmulticast mode [ 148.268735][ T9173] bridge_slave_1: left promiscuous mode [ 148.272111][ T9173] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.283366][ T9173] bridge_slave_0: left allmulticast mode [ 148.289249][ T9173] bridge_slave_0: left promiscuous mode [ 148.292276][ T9173] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.459914][ T9137] overlayfs: statfs failed on './file0' [ 148.485730][ T42] audit: type=1400 audit(1784706066.890:25232): avc: denied { unmount } for pid=6046 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 148.605817][ T42] audit: type=1326 audit(1784706067.010:25233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9195 comm="syz.3.938" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58b579de99 code=0x0 [ 148.760085][ T42] audit: type=1400 audit(1784706067.160:25234): avc: denied { read } for pid=9205 comm="syz.0.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 148.852736][ T9209] /dev/sg0: Can't lookup blockdev [ 149.038743][ T42] audit: type=1400 audit(1784706067.440:25235): avc: denied { read } for pid=9210 comm="syz.2.942" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.114794][ T1046] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 149.263878][ T1046] usb 5-1: Using ep0 maxpacket: 16 [ 149.268192][ T1046] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.272540][ T1046] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.279625][ T1046] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 149.283575][ T1046] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 149.287438][ T1046] usb 5-1: Manufacturer: syz [ 149.297346][ T1046] usb 5-1: config 0 descriptor?? [ 149.352909][ T9224] netlink: 'syz.2.945': attribute type 2 has an invalid length. [ 149.363284][ T9224] net_ratelimit: 11 callbacks suppressed [ 149.363303][ T9224] openvswitch: netlink: IP tunnel dst address not specified [ 149.370758][ T9224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.376970][ T9224] netlink: 'syz.2.945': attribute type 2 has an invalid length. [ 149.499262][ T9231] SELinux: ebitmap start bit (202309632) is beyond the end of the bitmap (1472) [ 149.502995][ T9231] SELinux: invalid class [ 149.507692][ T9231] SELinux: failed to load policy [ 149.511040][ T5825] usb 5-1: USB disconnect, device number 12 [ 149.532567][ T9236] binder: 9235:9236 unknown command 0 [ 149.535695][ T9236] binder: 9235:9236 ioctl c0306201 2000000003c0 returned -22 [ 149.917485][ T9253] i2c i2c-1: dtv_property_process_set: SET cmd 0x01ffff00 undefined [ 150.194492][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 150.194511][ T42] audit: type=1804 audit(1784706068.590:25240): pid=9270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.960" name="bus" dev="ramfs" ino=45257 res=1 errno=0 [ 150.253903][ T42] audit: type=1400 audit(1784706068.650:25241): avc: denied { append } for pid=9274 comm="syz.0.963" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.259873][ T9279] input: syz0 as /devices/virtual/input/input14 [ 150.290635][ T42] audit: type=1400 audit(1784706068.690:25242): avc: denied { name_bind } for pid=9280 comm="syz.2.964" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 150.293700][ T9279] bridge1: entered allmulticast mode [ 150.546365][ T42] audit: type=1400 audit(1784706068.950:25243): avc: denied { link } for pid=9307 comm="syz.0.972" name="#1f" dev="tmpfs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.576195][ T42] audit: type=1400 audit(1784706068.980:25244): avc: denied { rename } for pid=9307 comm="syz.0.972" name="#20" dev="tmpfs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.621160][ T9308] tipc: Started in network mode [ 150.625407][ T9308] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 150.630532][ T9308] tipc: Enabling of bearer rejected, failed to enable media [ 150.664310][ T9311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.682180][ T9311] bpf: Bad value for 'gid' [ 150.704004][ T42] audit: type=1400 audit(1784706069.100:25245): avc: denied { getopt } for pid=9317 comm="syz.0.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.877963][ T9337] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 150.934011][ T9346] netlink: 'syz.0.982': attribute type 11 has an invalid length. [ 150.981446][ T9350] netlink: 'syz.0.983': attribute type 5 has an invalid length. [ 150.987625][ T9350] ip6erspan0: entered promiscuous mode [ 151.076539][ T9355] input: syz1 as /devices/virtual/input/input15 [ 151.148814][ T9364] tmpfs: Unknown parameter 'grKd Equota_block_hardlsK[s'cPА `SpɝYHt;7<|kEd|L_E֣J)O7(R˻G?L/ttL~ˎ?{2+`Q-hO1f8agJk?YzF' [ 151.169641][ T9367] ufs: You didn't specify the type of your ufs filesystem [ 151.169641][ T9367] [ 151.169641][ T9367] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 151.169641][ T9367] [ 151.169641][ T9367] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 151.184019][ T9367] ufs: failed to set blocksize [ 151.224367][ T9361] kvm: Disabled LAPIC found during irq injection [ 151.450153][ T9398] fuse: Bad value for 'group_id' [ 151.451862][ T9398] fuse: Bad value for 'group_id' [ 151.539080][ T9407] input: syz0 as /devices/virtual/input/input16 [ 151.840618][ T9416] team0: entered allmulticast mode [ 151.842398][ T9416] team_slave_0: entered allmulticast mode [ 151.844369][ T9416] team_slave_1: entered allmulticast mode [ 152.086226][ T42] audit: type=1400 audit(1784706070.490:25246): avc: denied { ioctl } for pid=9423 comm="syz.2.1009" path="socket:[46269]" dev="sockfs" ino=46269 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 152.161373][ T9439] __nla_validate_parse: 12 callbacks suppressed [ 152.161388][ T9439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1012'. [ 152.275301][ T9452] gfs2: not a GFS2 filesystem [ 152.348468][ T42] audit: type=1400 audit(1784706070.750:25247): avc: denied { create } for pid=9457 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.355003][ T42] audit: type=1400 audit(1784706070.750:25248): avc: denied { setopt } for pid=9457 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.372777][ T9458] gadgetfs: Unknown parameter 'rdma' [ 152.379469][ T9460] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 152.388634][ T9460] romfs: unable to set blocksize [ 152.388634][ T9460] [ 152.445037][ T6381] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 152.653837][ T6381] usb 7-1: Using ep0 maxpacket: 8 [ 152.658150][ T6381] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 152.661466][ T6381] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 152.664925][ T6381] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 152.667992][ T6381] usb 7-1: config 250 has no interface number 0 [ 152.670083][ T6381] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 152.674736][ T6381] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 152.678777][ T6381] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 152.682867][ T6381] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 152.686436][ T6381] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 152.691006][ T6381] usb 7-1: config 250 interface 228 has no altsetting 0 [ 152.695404][ T6381] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 152.698858][ T6381] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 152.702075][ T6381] usb 7-1: Product: syz [ 152.704326][ T6381] usb 7-1: SerialNumber: syz [ 152.712822][ T6381] hub 7-1:250.228: bad descriptor, ignoring hub [ 152.715327][ T6381] hub 7-1:250.228: probe with driver hub failed with error -5 [ 152.867917][ T42] audit: type=1400 audit(1784706071.270:25249): avc: denied { connect } for pid=9466 comm="syz.0.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 152.925038][ T6381] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 152.993417][ T9469] wireguard0: entered promiscuous mode [ 153.095089][ T9475] netlink: 'syz.0.1022': attribute type 2 has an invalid length. [ 153.099647][ T9469] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 153.235484][ T9481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1023'. [ 153.565173][ T9444] usb 7-1: reset high-speed USB device number 9 using dummy_hcd [ 153.944493][ C1] usblp0: nonzero read bulk status received: -71 [ 154.020946][ T9518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1034'. [ 154.026235][ T9519] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 154.153380][ T9524] netlink: 'syz.0.1036': attribute type 8 has an invalid length. [ 154.157114][ T9524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 154.170303][ T1046] usb 7-1: USB disconnect, device number 9 [ 154.178395][ T1046] usblp0: removed [ 154.666517][ T9542] overlayfs: empty lowerdir [ 154.675496][ T9542] Invalid logical block size (8196) [ 154.690721][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 154.694368][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 154.728103][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 154.731785][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 155.142068][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1052'. [ 155.146872][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 155.240722][ T9588] program syz.3.1054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.257913][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 155.257925][ T42] audit: type=1400 audit(1784706073.660:25255): avc: denied { getopt } for pid=9587 comm="syz.3.1054" lport=54222 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 155.450648][ T9605] openvswitch: netlink: IP tunnel dst address not specified [ 155.487446][ T9601] xt_hashlimit: size too large, truncated to 1048576 [ 155.617379][ T42] audit: type=1400 audit(1784706074.020:25256): avc: denied { accept } for pid=9620 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.651905][ T42] audit: type=1400 audit(1784706074.050:25257): avc: denied { setattr } for pid=9622 comm="syz.0.1066" path="socket:[44968]" dev="sockfs" ino=44968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.762003][ T42] audit: type=1326 audit(1784706074.160:25258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.2.1070" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacff9de99 code=0x7ffc0000 [ 155.771478][ T42] audit: type=1326 audit(1784706074.160:25259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.2.1070" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacff9de99 code=0x7ffc0000 [ 155.782981][ T42] audit: type=1326 audit(1784706074.160:25260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.2.1070" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacff9de99 code=0x7ffc0000 [ 155.792539][ T42] audit: type=1326 audit(1784706074.160:25261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.2.1070" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacff9de99 code=0x7ffc0000 [ 155.800399][ T42] audit: type=1326 audit(1784706074.160:25262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.2.1070" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ffacff9de99 code=0x7ffc0000 [ 155.809564][ T42] audit: type=1326 audit(1784706074.180:25263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.2.1070" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacff9de99 code=0x7ffc0000 [ 155.819251][ T42] audit: type=1326 audit(1784706074.190:25264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.2.1070" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacff9de99 code=0x7ffc0000 [ 156.373916][ T34] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 156.543907][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 156.548413][ T34] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 156.551681][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.555013][ T9695] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 156.555927][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.562237][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.569390][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.575973][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.579884][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.789599][ T34] usb 7-1: usb_control_msg returned -32 [ 156.791431][ T34] usbtmc 7-1:16.0: can't read capabilities [ 157.169467][ T9724] __nla_validate_parse: 17 callbacks suppressed [ 157.169489][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 157.185460][ T9727] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1094'. [ 157.190166][ T1046] hid (null): global environment stack underflow [ 157.208273][ T1046] hid-generic 616F:20C2607D:F72986D9.0004: global environment stack underflow [ 157.212070][ T1046] hid-generic 616F:20C2607D:F72986D9.0004: item 0 1 1 11 parsing failed [ 157.216178][ T1046] hid-generic 616F:20C2607D:F72986D9.0004: probe with driver hid-generic failed with error -22 [ 158.583880][ T9759] syz_tun: entered allmulticast mode [ 158.594725][ T9759] dvmrp8: entered allmulticast mode [ 158.621410][ T9757] syz_tun: left allmulticast mode [ 158.692159][ T9767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1106'. [ 158.724799][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'. [ 158.732466][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1107'. [ 158.764827][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'. [ 158.767738][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1107'. [ 158.782629][ T9776] tipc: Cannot configure node identity twice [ 158.838710][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1111'. [ 159.125782][ T34] usb 7-1: USB disconnect, device number 10 [ 159.293945][ T1046] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 159.443988][ T1046] usb 5-1: Invalid ep0 maxpacket: 16 [ 159.447505][ T9825] syzkaller0: entered promiscuous mode [ 159.449960][ T9825] syzkaller0: entered allmulticast mode [ 159.523179][ T9844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=9844 comm=syz.4.1129 [ 159.532740][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'. [ 159.541514][ T9844] netlink: del zone limit has 8 unknown bytes [ 159.583998][ T1046] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 159.598764][ T9846] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1130'. [ 159.601056][ T9848] tmpfs: Unknown parameter 'usruota_inode_hardli}it' [ 159.733937][ T1046] usb 5-1: Invalid ep0 maxpacket: 16 [ 159.738080][ T1046] usb usb5-port1: attempt power cycle [ 160.084199][ T1046] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 160.104387][ T1046] usb 5-1: Invalid ep0 maxpacket: 16 [ 160.221195][ T9879] overlayfs: unescaped trailing colons in lowerdir mount option. [ 160.244038][ T1046] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 160.264718][ T1046] usb 5-1: Invalid ep0 maxpacket: 16 [ 160.274207][ T1046] usb usb5-port1: unable to enumerate USB device [ 161.147508][ T9892] fuse: Bad value for 'fd' [ 161.234079][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.307084][ T9912] rdma_op ffff8880565f89f0 conn xmit_rdma 0000000000000000 [ 161.684340][ T9929] netlink: 'syz.4.1155': attribute type 178 has an invalid length. [ 161.753975][ T5825] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 161.773454][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 161.773467][ T42] audit: type=1326 audit(1784706080.170:25275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.4.1156" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2db599de99 code=0x0 [ 161.913881][ T5825] usb 7-1: Using ep0 maxpacket: 8 [ 161.917808][ T5825] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 161.922016][ T5825] usb 7-1: config 0 has no interface number 0 [ 161.924961][ T5825] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.929598][ T5825] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.933706][ T5825] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 161.938759][ T5825] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 161.943661][ T5825] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.952543][ T5825] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 161.956842][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.960101][ T5825] usb 7-1: Product: syz [ 161.961875][ T5825] usb 7-1: Manufacturer: syz [ 161.964250][ T5825] usb 7-1: SerialNumber: syz [ 161.976035][ T5825] usb 7-1: config 0 descriptor?? [ 162.182638][ T5825] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 162.240511][ T9960] No control pipe specified [ 162.242126][ T42] audit: type=1400 audit(1784706080.640:25276): avc: denied { bind } for pid=9956 comm="syz.4.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 162.326001][ T9968] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 162.377258][ T9975] __nla_validate_parse: 10 callbacks suppressed [ 162.377277][ T9975] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1169'. [ 162.401475][ T42] audit: type=1400 audit(1784706080.800:25277): avc: denied { accept } for pid=9920 comm="syz.2.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 162.623810][ T42] audit: type=1400 audit(1784706081.020:25278): avc: denied { mounton } for pid=10000 comm="syz.0.1177" path="/331/file0" dev="tmpfs" ino=1797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 162.734824][T10001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=10001 comm=syz.0.1177 [ 163.039261][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 163.042211][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 163.082913][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 163.087291][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 163.176725][T10019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1180'. [ 163.209365][T10019] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 163.213323][T10019] netlink: 'syz.4.1180': attribute type 21 has an invalid length. [ 163.217037][T10019] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1180'. [ 163.329796][ T42] audit: type=1400 audit(1784706081.730:25279): avc: denied { read write } for pid=10020 comm="syz.4.1181" name="file0" dev="9p" ino=81526883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 163.337300][T10023] misc userio: No port type given on /dev/userio [ 163.339241][ T42] audit: type=1400 audit(1784706081.730:25280): avc: denied { open } for pid=10020 comm="syz.4.1181" path="/271/file0/file0" dev="9p" ino=81526883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 163.395110][ T42] audit: type=1400 audit(1784706081.800:25281): avc: granted { setsecparam } for pid=10022 comm="syz.3.1182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 163.396991][T10025] misc userio: The device must be registered before sending interrupts [ 163.406191][ T42] audit: type=1400 audit(1784706081.810:25282): avc: denied { map } for pid=10022 comm="syz.3.1182" path="/dev/video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 163.567198][T10033] bond5: (slave batadv0): Device is not bonding slave [ 163.569489][T10033] bond5: option active_slave: invalid value (batadv0) [ 163.572708][T10033] bond5 (unregistering): Released all slaves [ 163.585512][T10031] netlink: 'syz.0.1185': attribute type 15 has an invalid length. [ 163.588376][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'. [ 163.605337][ T5850] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 163.608812][ T5850] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 163.612037][T10031] netlink: 'syz.0.1185': attribute type 15 has an invalid length. [ 163.613228][ T5850] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 163.618496][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'. [ 163.624359][ T5850] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 163.718467][T10038] xt_l2tp: missing protocol rule (udp|l2tpip) [ 163.743148][ T42] audit: type=1400 audit(1784706082.140:25283): avc: denied { read } for pid=10035 comm="syz.0.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.778991][T10041] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 163.782057][T10041] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 163.790466][T10041] vhci_hcd vhci_hcd.0: Device attached [ 163.817855][T10043] vhci_hcd: connection closed [ 163.823710][ T13] vhci_hcd vhci_hcd.4: stop threads [ 163.830515][ T13] vhci_hcd vhci_hcd.4: release socket [ 163.833137][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 163.865660][ T42] audit: type=1400 audit(1784706082.270:25284): avc: denied { bind } for pid=10046 comm="syz.0.1190" lport=52476 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 164.219569][T10053] program syz.3.1192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.252765][T10055] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 164.258322][T10055] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 164.262306][T10055] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 164.265533][T10055] UDF-fs: Scanning with blocksize 512 failed [ 164.269696][T10055] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 164.275507][T10055] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 164.279562][T10055] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 164.282809][T10055] UDF-fs: Scanning with blocksize 1024 failed [ 164.286235][T10055] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 164.290225][T10055] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 164.294327][T10055] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 164.303485][T10055] UDF-fs: Scanning with blocksize 2048 failed [ 164.307578][T10055] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 164.311735][T10055] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 164.315743][T10055] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 164.319455][T10055] UDF-fs: Scanning with blocksize 4096 failed [ 164.322293][T10055] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 164.344621][T10055] netlink: 'syz.3.1193': attribute type 2 has an invalid length. [ 164.347210][T10055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1193'. [ 164.519267][ T5845] usb 7-1: USB disconnect, device number 11 [ 164.573352][T10073] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 164.671775][T10078] bond7: entered promiscuous mode [ 164.676194][T10078] 8021q: adding VLAN 0 to HW filter on device bond7 [ 164.871373][T10101] netlink: 'syz.3.1206': attribute type 10 has an invalid length. [ 164.879392][T10101] veth0_to_bond: entered allmulticast mode [ 164.883215][T10101] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 164.901211][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.905887][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.909271][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.912533][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.340432][T10124] kvm: requested 196114 ns i8254 timer period limited to 200000 ns [ 165.363134][T10124] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 165.378129][T10124] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 165.380206][T10132] i2c i2c-1: dtv_property_process_set: SET cmd 0x0b080008 undefined [ 165.474649][ T5825] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 165.624166][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 165.627190][ T5825] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 165.630419][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.643203][ T5825] pvrusb2: Hardware description: Terratec Grabster AV400 [ 165.645996][ T5825] pvrusb2: ********** [ 165.647302][ T5825] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 165.650530][ T5825] pvrusb2: Important functionality might not be entirely working. [ 165.653106][ T5825] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 165.657132][ T5825] pvrusb2: ********** [ 165.841922][ T2524] pvrusb2: Invalid write control endpoint [ 165.902778][ T2524] pvrusb2: Invalid write control endpoint [ 165.908427][ T2524] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 165.915786][ T2524] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 165.922950][ T2524] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 165.933940][ T2524] pvrusb2: Device being rendered inoperable [ 165.935875][ T2524] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 165.939564][ T2524] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 165.952027][ T2524] pvrusb2: Attached sub-driver cx25840 [ 165.954022][ T2524] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 165.958171][ T2524] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 166.045664][T10122] pvrusb2: Attempted to execute control transfer when device not ok [ 166.346600][ T1049] usb 5-1: USB disconnect, device number 17 [ 166.357491][T10198] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 166.380627][T10200] kAFS: unable to lookup cell '(,c' [ 166.409519][T10202] bridge0: entered promiscuous mode [ 166.411915][T10202] bridge0: entered allmulticast mode [ 166.420615][T10202] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 166.425809][T10202] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 166.474033][ T5845] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 166.625542][ T5845] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.629360][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 166.632763][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 166.638232][ T5845] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 166.641140][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.643611][ T5845] usb 7-1: Product: syz [ 166.645063][ T5845] usb 7-1: Manufacturer: syz [ 166.646341][ T5845] usb 7-1: SerialNumber: syz [ 166.649499][ T5845] usb 7-1: config 0 descriptor?? [ 166.654506][T10189] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 166.713957][ T5845] rc_core: IR keymap rc-streamzap not found [ 166.716456][ T5845] Registered IR keymap rc-empty [ 166.721705][ T5845] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 166.728807][ T5845] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input18 [ 166.860928][ T42] kauditd_printk_skb: 180 callbacks suppressed [ 166.860944][ T42] audit: type=1400 audit(1784706085.260:25465): avc: denied { prog_load } for pid=10188 comm="syz.2.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 166.869949][ T42] audit: type=1400 audit(1784706085.260:25466): avc: denied { bpf } for pid=10188 comm="syz.2.1233" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.876921][ T42] audit: type=1400 audit(1784706085.260:25467): avc: denied { perfmon } for pid=10188 comm="syz.2.1233" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.883894][ T42] audit: type=1400 audit(1784706085.260:25468): avc: denied { read write } for pid=5738 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.892041][ T42] audit: type=1400 audit(1784706085.260:25469): avc: denied { open } for pid=5738 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.900276][ T42] audit: type=1400 audit(1784706085.260:25470): avc: denied { ioctl } for pid=5738 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.908333][ T42] audit: type=1400 audit(1784706085.290:25471): avc: denied { create } for pid=10214 comm="syz.0.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.915958][ T42] audit: type=1400 audit(1784706085.290:25472): avc: denied { write } for pid=10214 comm="syz.0.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.923226][ T42] audit: type=1400 audit(1784706085.290:25473): avc: denied { nlmsg_write } for pid=10214 comm="syz.0.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.934135][ T42] audit: type=1400 audit(1784706085.290:25474): avc: denied { checkpoint_restore } for pid=10214 comm="syz.0.1242" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.949756][T10220] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 166.953592][T10220] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 166.957195][T10220] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 166.960232][T10220] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 166.990015][ T5825] usb 7-1: USB disconnect, device number 12 [ 167.368885][T10247] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 167.383884][T10247] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.386812][T10247] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 167.390441][T10247] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 167.393288][T10247] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 167.397510][T10247] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 167.400865][T10247] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 167.404057][T10247] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 167.406749][T10247] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 167.409521][T10247] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 167.412366][T10247] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 167.617523][T10272] __nla_validate_parse: 12 callbacks suppressed [ 167.617543][T10272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1256'. [ 167.652383][T10270] bridge1: entered promiscuous mode [ 167.656675][T10270] bond5: (slave bridge1): making interface the new active one [ 167.659505][T10270] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 167.764556][T10281] kAFS: unparsable volume name [ 168.518454][T10304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1267'. [ 168.724048][ T5825] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 168.822957][ T24] IPVS: starting estimator thread 0... [ 168.873901][ T5825] usb 7-1: Using ep0 maxpacket: 8 [ 168.878825][ T5825] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 168.882489][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.896460][ T5825] pvrusb2: Hardware description: Terratec Grabster AV400 [ 168.898728][ T5825] pvrusb2: ********** [ 168.899990][ T5825] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 168.903084][ T5825] pvrusb2: Important functionality might not be entirely working. [ 168.905788][ T5825] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 168.909294][ T5825] pvrusb2: ********** [ 168.924183][T10316] IPVS: using max 45 ests per chain, 108000 per kthread [ 169.096397][ T2524] pvrusb2: Invalid write control endpoint [ 169.141988][ T2524] pvrusb2: Invalid write control endpoint [ 169.144550][ T2524] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 169.148416][ T2524] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 169.151611][ T2524] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 169.156744][ T2524] pvrusb2: Device being rendered inoperable [ 169.160858][ T2524] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 169.163510][ T2524] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 169.168948][ T2524] pvrusb2: Attached sub-driver cx25840 [ 169.170843][ T2524] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 169.174048][ T2524] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 169.300237][T10302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.308594][T10302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.311644][T10302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.380895][T10330] bond4: entered promiscuous mode [ 169.382764][T10330] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.403425][T10330] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.407154][T10330] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 169.410346][T10330] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 169.415495][T10330] bond4: (slave ip6gre1): making interface the new active one [ 169.417862][T10330] ip6gre1: entered promiscuous mode [ 169.420449][T10330] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 169.518407][T10302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.521750][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1275'. [ 169.522348][T10302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.526244][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1275'. [ 169.582288][T10336] bond0: (slave bond_slave_0): Releasing backup interface [ 169.585710][T10336] bond_slave_0: left allmulticast mode [ 169.657074][T10336] bond_slave_0: entered promiscuous mode [ 169.659414][T10336] bond_slave_0: entered allmulticast mode [ 169.720064][T10342] Cannot find del_set index 14804 as target [ 169.895307][T10358] netlink: 'syz.3.1281': attribute type 11 has an invalid length. [ 170.096579][T10375] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 170.354700][T10379] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 170.540215][T10400] binder: 10399:10400 ioctl c0306201 200000000080 returned -14 [ 170.547189][T10400] binder: 10399:10400 ioctl c0306201 2000000003c0 returned -14 [ 170.553016][T10400] binder: BINDER_SET_CONTEXT_MGR already set [ 170.557465][T10400] binder: 10399:10400 ioctl 4018620d 200000003280 returned -16 [ 170.561207][T10400] binder: 10399:10400 ioctl c0306201 200000000080 returned -14 [ 170.599527][T10400] bond5: ARP target 9.0.0.0 is already present [ 170.602340][T10400] bond5: option arp_ip_target: invalid value (9) [ 170.609062][T10400] bond5 (unregistering): Released all slaves [ 170.669140][T10405] binder: 10404:10405 ioctl c0306201 0 returned -14 [ 170.765634][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'. [ 170.796375][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 170.857872][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 170.861646][T10419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1297'. [ 170.866133][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 170.869646][T10419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1297'. [ 170.912054][T10421] nvme_fabrics: missing parameter 'transport=%s' [ 170.919134][T10421] nvme_fabrics: missing parameter 'nqn=%s' [ 170.951719][T10431] binder: 10430:10431 ioctl c0306201 2000000003c0 returned -14 [ 171.071634][T10444] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.078096][T10444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=10444 comm=syz.0.1303 [ 171.142414][T10449] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 171.204712][T10460] program syz.4.1308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.239027][T10464] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 171.239158][T10465] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 171.243593][T10464] Error validating options; rc = [-22] [ 171.248755][T10465] Error validating options; rc = [-22] [ 171.254353][ T1138] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 171.257497][ T1138] ata1.00: irq_stat 0x40000000 [ 171.259492][ T1138] ata1.00: failed command: ZAC MANAGEMENT OUT [ 171.261512][ T1138] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 6 [ 171.261512][ T1138] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 171.267727][ T1138] ata1.00: status: { DRDY ERR } [ 171.269775][ T1138] ata1.00: error: { ABRT } [ 171.271803][ T1138] ata1.00: device reported invalid CHS sector 0 [ 171.455970][T10485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10485 comm=syz.3.1315 [ 171.480929][ T1046] usb 7-1: USB disconnect, device number 13 [ 171.877885][ T42] kauditd_printk_skb: 371 callbacks suppressed [ 171.877899][ T42] audit: type=1400 audit(1784706090.280:25846): avc: denied { ioctl } for pid=10505 comm="syz.2.1320" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=52764 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 171.981786][ T42] audit: type=1400 audit(1784706090.380:25847): avc: denied { read } for pid=10507 comm="syz.2.1322" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 171.990108][ T42] audit: type=1400 audit(1784706090.380:25848): avc: denied { open } for pid=10507 comm="syz.2.1322" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 172.038462][ T42] audit: type=1400 audit(1784706090.440:25849): avc: denied { read } for pid=10507 comm="syz.2.1322" dev="nsfs" ino=4026532942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 172.045830][ T42] audit: type=1400 audit(1784706090.440:25850): avc: denied { open } for pid=10507 comm="syz.2.1322" path="net:[4026532942]" dev="nsfs" ino=4026532942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 172.053111][ T42] audit: type=1400 audit(1784706090.440:25851): avc: denied { create } for pid=10507 comm="syz.2.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.060173][ T42] audit: type=1400 audit(1784706090.440:25852): avc: denied { connect } for pid=10507 comm="syz.2.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.067468][ T42] audit: type=1400 audit(1784706090.440:25853): avc: denied { read write } for pid=10507 comm="syz.2.1322" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.076543][ T42] audit: type=1400 audit(1784706090.440:25854): avc: denied { open } for pid=10507 comm="syz.2.1322" path="/dev/raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.084482][ T42] audit: type=1400 audit(1784706090.440:25855): avc: denied { ioctl } for pid=10507 comm="syz.2.1322" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.294270][ T5845] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 172.447244][ T5845] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.451895][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 172.456325][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 172.463250][ T5845] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 172.466920][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.470000][ T5845] usb 7-1: Product: syz [ 172.471653][ T5845] usb 7-1: Manufacturer: syz [ 172.473496][ T5845] usb 7-1: SerialNumber: syz [ 172.480299][ T5845] usb 7-1: config 0 descriptor?? [ 172.486621][T10509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 172.544006][ T5845] rc_core: IR keymap rc-streamzap not found [ 172.546371][ T5845] Registered IR keymap rc-empty [ 172.549039][ T5845] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 172.555125][ T5845] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input19 [ 172.754816][T10508] __nla_validate_parse: 4 callbacks suppressed [ 172.754828][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 172.759496][T10508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1322'. [ 172.762577][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 172.765687][T10508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1322'. [ 172.770205][ T24] usb 7-1: USB disconnect, device number 14 [ 173.950348][T10535] validate_nla: 61 callbacks suppressed [ 173.950367][T10535] netlink: 'syz.3.1329': attribute type 8 has an invalid length. [ 173.956092][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1329'. [ 173.989128][T10537] vivid-000: ================= START STATUS ================= [ 173.993043][T10537] vivid-000: Test Pattern: 75% Colorbar [ 173.996715][T10537] vivid-000: Fill Percentage of Frame: 100 [ 173.998570][T10537] vivid-000: Horizontal Movement: Move Left [ 174.001135][T10537] vivid-000: Vertical Movement: No Movement [ 174.002980][T10537] vivid-000: OSD Text Mode: All [ 174.004832][T10537] vivid-000: Show Border: false [ 174.006457][T10537] vivid-000: Show Square: false [ 174.007937][T10537] vivid-000: Sensor Flipped Horizontally: false [ 174.009881][T10537] vivid-000: Sensor Flipped Vertically: false [ 174.011864][T10537] vivid-000: Insert SAV Code in Image: false [ 174.013833][T10537] vivid-000: Insert EAV Code in Image: false [ 174.015732][T10537] vivid-000: Insert Video Guard Band: false [ 174.017578][T10537] vivid-000: Reduced Framerate: false [ 174.019245][T10537] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 174.021621][T10537] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 174.024371][T10537] vivid-000: Enable Capture Cropping: true [ 174.026216][T10537] vivid-000: Enable Capture Composing: true [ 174.028094][T10537] vivid-000: Enable Capture Scaler: true [ 174.029855][T10537] vivid-000: Timestamp Source: End of Frame [ 174.031699][T10537] vivid-000: Colorspace: sRGB [ 174.033163][T10537] vivid-000: Transfer Function: Default [ 174.036719][T10537] vivid-000: Y'CbCr Encoding: BT.2020 Constant Luminance [ 174.038957][T10537] vivid-000: HSV Encoding: Hue 0-179 [ 174.040611][T10537] vivid-000: Quantization: Default [ 174.042256][T10537] vivid-000: Apply Alpha To Red Only: false [ 174.044176][T10537] vivid-000: Standard Aspect Ratio: 4x3 [ 174.045962][T10537] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 174.048264][T10537] vivid-000: DV Timings: 640x480p59 inactive [ 174.050165][T10537] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 174.052470][T10537] vivid-000: Maximum EDID Blocks: 2 [ 174.054216][T10537] vivid-000: Limited RGB Range (16-235): false [ 174.056142][T10537] vivid-000: Rx RGB Quantization Range: Automatic [ 174.058141][T10537] vivid-000: Power Present: 0x00000001 [ 174.059859][T10537] tpg source WxH: 320x180 (Y'CbCr) [ 174.061527][T10537] tpg field: 1 [ 174.062606][T10537] tpg crop: (0,0)/320x180 [ 174.064021][T10537] tpg compose: (0,0)/320x180 [ 174.065488][T10537] tpg colorspace: 8 [ 174.066688][T10537] tpg transfer function: 0/0 [ 174.068129][T10537] tpg Y'CbCr encoding: 7/0 [ 174.069529][T10537] tpg quantization: 0/0 [ 174.070837][T10537] tpg RGB range: 0/2 [ 174.072064][T10537] vivid-000: ================== END STATUS ================== [ 174.135701][T10540] qnx6: unable to read the first superblock [ 174.137752][T10540] qnx6: unable to read the first superblock [ 174.139639][T10540] qnx6: unable to read the first superblock [ 174.193875][ T5753] Bluetooth: hci4: command 0x1003 tx timeout [ 174.194320][ T5749] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 174.265253][T10552] fuse: Unknown parameter 'gid' [ 174.271474][T10550] syzkaller0: entered promiscuous mode [ 174.273266][T10550] syzkaller0: entered allmulticast mode [ 174.292431][T10550] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=10550 comm=syz.2.1335 [ 174.366928][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1338'. [ 174.544327][ T5825] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 174.621871][T10579] SET target dimension over the limit! [ 174.682579][T10583] ata1.00: invalid multi_count 128 ignored [ 174.697098][ T5825] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 174.701531][ T5825] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 174.705975][ T5825] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 247, setting to 64 [ 174.709360][ T5825] usb 7-1: config 0 interface 0 has no altsetting 0 [ 174.713466][ T5825] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 174.717608][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.721036][ T5825] usb 7-1: Product: syz [ 174.722845][ T5825] usb 7-1: Manufacturer: syz [ 174.725497][ T5825] usb 7-1: SerialNumber: syz [ 174.740135][ T5825] usb 7-1: config 0 descriptor?? [ 174.742999][T10550] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 174.960062][T10550] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 174.966706][ T5825] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input20 [ 174.994584][T10602] CIFS mount error: No usable UNC path provided in device string! [ 174.994584][T10602] [ 174.998067][T10602] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 175.237897][ T5825] usb 7-1: USB disconnect, device number 15 [ 175.775252][T10624] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1356'. [ 175.868054][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1359'. [ 175.898408][T10635] 8021q: adding VLAN 0 to HW filter on device bond8 [ 175.909634][T10635] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 175.917099][T10629] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.1357'. [ 176.091692][T10652] FAT-fs (nullb0): bogus number of reserved sectors [ 176.094442][T10652] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 176.326062][T10675] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 176.328232][T10675] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 176.331869][T10675] vhci_hcd vhci_hcd.0: Device attached [ 176.339463][T10678] vhci_hcd: connection closed [ 176.342395][ T5850] vhci_hcd vhci_hcd.2: stop threads [ 176.349072][ T5850] vhci_hcd vhci_hcd.2: release socket [ 176.351361][ T5850] vhci_hcd vhci_hcd.2: disconnect device [ 176.385648][T10683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10683 comm=syz.4.1373 [ 176.394195][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1373'. [ 176.401913][ T6125] Bluetooth: hci4: Frame reassembly failed (-84) [ 176.492951][T10689] xt_CT: No such helper "netbios-ns" [ 176.905938][ T42] kauditd_printk_skb: 273 callbacks suppressed [ 176.905958][ T42] audit: type=1400 audit(1784706095.310:26129): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57824 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 176.935032][ T42] audit: type=1400 audit(1784706095.340:26130): avc: denied { bpf } for pid=10707 comm="syz.3.1382" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.943909][ T42] audit: type=1400 audit(1784706095.340:26131): avc: denied { perfmon } for pid=10707 comm="syz.3.1382" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.984386][ T42] audit: type=1400 audit(1784706095.380:26132): avc: denied { create } for pid=10710 comm="syz.3.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 176.995897][ T42] audit: type=1400 audit(1784706095.400:26133): avc: denied { read write } for pid=10710 comm="syz.3.1383" name="system" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.002960][ T42] audit: type=1400 audit(1784706095.400:26134): avc: denied { ioctl open } for pid=10710 comm="syz.3.1383" path="/dev/dma_heap/system" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.004425][T10713] netlink: 'syz.0.1384': attribute type 8 has an invalid length. [ 177.012530][ T42] audit: type=1400 audit(1784706095.400:26135): avc: denied { read write } for pid=10710 comm="syz.3.1383" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 177.020576][ T42] audit: type=1400 audit(1784706095.400:26136): avc: denied { open } for pid=10710 comm="syz.3.1383" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 177.028234][ T42] audit: type=1400 audit(1784706095.400:26137): avc: denied { mounton } for pid=10710 comm="syz.3.1383" path="/305/file0" dev="tmpfs" ino=1669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 177.035982][ T42] audit: type=1400 audit(1784706095.410:26138): avc: denied { mount } for pid=10710 comm="syz.3.1383" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 177.118517][T10721] netlink: 'syz.2.1386': attribute type 1 has an invalid length. [ 177.131900][T10721] 8021q: adding VLAN 0 to HW filter on device bond9 [ 177.156917][T10723] bond9: (slave ip6erspan0): making interface the new active one [ 177.162994][T10723] bond9: (slave ip6erspan0): Enslaving as an active interface with an up link [ 177.188430][T10732] kvm: user requested TSC rate below hardware speed [ 177.513669][T10748] bridge_slave_0: left allmulticast mode [ 177.516460][T10748] bridge_slave_0: left promiscuous mode [ 177.519231][T10748] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.528470][T10748] bridge_slave_1: left allmulticast mode [ 177.530704][T10748] bridge_slave_1: left promiscuous mode [ 177.533169][T10748] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.542848][T10748] bond0: (slave veth0_to_bond): Releasing backup interface [ 177.547006][T10748] veth0_to_bond: left allmulticast mode [ 177.557307][T10748] bond0: (slave bond_slave_0): Releasing backup interface [ 177.561384][T10748] bond_slave_0: left allmulticast mode [ 177.598976][T10748] bond0: (slave bond_slave_1): Releasing backup interface [ 177.606072][T10748] bond_slave_1: left allmulticast mode [ 177.612033][T10748] team0: Port device team_slave_0 removed [ 177.622672][T10748] team0: Port device team_slave_1 removed [ 177.627090][T10748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.630797][T10753] binder: 10752:10753 unknown command 0 [ 177.633314][T10753] binder: 10752:10753 ioctl c0306201 2000000001c0 returned -22 [ 177.644630][T10748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.648356][T10748] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 177.658340][T10754] tipc: Started in network mode [ 177.660446][T10754] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 177.666122][T10754] tipc: Enabled bearer , priority 0 [ 177.720346][T10758] gfs2: path_lookup on c::: returned error -2 [ 178.103217][T10780] Cannot find add_set index 65532 as target [ 178.113453][T10780] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 178.197948][T10788] __nla_validate_parse: 1 callbacks suppressed [ 178.197966][T10788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1407'. [ 178.436076][ T5753] Bluetooth: hci4: command 0x1003 tx timeout [ 178.436766][ T5749] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 178.471132][T10812] kvm: kvm [10811]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 178.475530][T10812] kvm: kvm [10811]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 178.524158][T10824] Device name cannot be null; rc = [-22] [ 178.527727][T10824] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 178.537126][T10824] overlayfs: overlapping lowerdir path [ 178.552054][T10827] Trying to write to read-only block-device nullb0 [ 178.580474][T10830] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1421'. [ 178.597980][T10830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1421'. [ 178.710434][T10838] kernel profiling enabled (shift: 63) [ 178.713209][T10838] profiling shift: 63 too large [ 178.717183][T10838] CUSE: info not properly terminated [ 178.764115][T10841] program syz.3.1425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.787009][ T1049] tipc: Node number set to 11578026 [ 179.178435][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1430'. [ 179.259470][T10859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1431'. [ 179.429469][T10873] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 179.460390][T10870] program syz.2.1435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.498069][T10876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1436'. [ 179.619585][T10891] netlink: 'syz.3.1442': attribute type 10 has an invalid length. [ 179.633417][T10891] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.640810][T10891] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 179.643538][T10891] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 179.650594][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1443'. [ 179.654756][T10891] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1442'. [ 179.658268][T10893] netlink: 'syz.2.1443': attribute type 10 has an invalid length. [ 179.661323][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1443'. [ 179.667359][T10891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.671202][T10891] bond_slave_1: left allmulticast mode [ 179.675356][T10891] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 179.679336][T10891] veth0_to_bond: left allmulticast mode [ 179.684012][T10891] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 179.687792][T10891] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 179.698584][T10891] bond0 (unregistering): Released all slaves [ 179.854195][T10904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1446'. [ 179.864352][ T1354] IPVS: starting estimator thread 0... [ 179.864406][ T1046] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 179.870500][T10904] IPVS: sh: FWM 3 0x00000003 - no destination available [ 179.873187][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 179.879148][T10904] Cannot find del_set index 4 as target [ 179.897367][T10909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=10909 comm=syz.2.1447 [ 179.954015][T10907] IPVS: using max 45 ests per chain, 108000 per kthread [ 180.013923][ T1046] usb 5-1: Using ep0 maxpacket: 32 [ 180.019619][ T1046] usb 5-1: unable to get BOS descriptor or descriptor too short [ 180.023328][ T1046] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 54688, setting to 64 [ 180.029427][ T1046] usb 5-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 180.032541][ T1046] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.036990][ T1046] usb 5-1: Product: syz [ 180.038370][ T1046] usb 5-1: Manufacturer: syz [ 180.039849][ T1046] usb 5-1: SerialNumber: syz [ 180.111648][T10924] netlink: 'syz.3.1450': attribute type 1 has an invalid length. [ 180.267363][ T1046] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.306070][ T1046] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 180.310774][ T1046] usb 5-1: USB disconnect, device number 18 [ 180.324076][ T8476] udevd[8476]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.854260][ T5753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.866054][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.871074][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.876523][ T5753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.876948][T10951] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 180.882691][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.905635][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.918136][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.921219][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.931253][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.936189][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.940526][T10963] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 180.984225][T10963] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 181.264862][T10991] netlink: 'syz.0.1470': attribute type 1 has an invalid length. [ 181.376632][ T6095] Bluetooth: hci5: Frame reassembly failed (-84) [ 181.382142][ T6095] Bluetooth: hci5: Frame reassembly failed (-84) [ 181.630773][T10946] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.634968][T10946] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.639584][T10946] bridge_slave_0: entered allmulticast mode [ 181.642683][T10946] bridge_slave_0: entered promiscuous mode [ 181.651918][T10946] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.655027][T10946] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.657758][T10946] bridge_slave_1: entered allmulticast mode [ 181.660623][T10946] bridge_slave_1: entered promiscuous mode [ 181.688459][T10946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.695369][T10946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.719995][T10946] team0: Port device team_slave_0 added [ 181.724180][T10946] team0: Port device team_slave_1 added [ 181.745347][T10946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.748118][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.760515][T10946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.765928][T11021] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 181.766564][T10946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.771475][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.781701][T10946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.829539][T10946] hsr_slave_0: entered promiscuous mode [ 181.834381][T10946] hsr_slave_1: entered promiscuous mode [ 181.837107][T10946] debugfs: 'hsr0' already exists in 'hsr' [ 181.839382][T10946] Cannot create hsr debugfs directory [ 181.943129][ T42] kauditd_printk_skb: 424 callbacks suppressed [ 181.943156][ T42] audit: type=1400 audit(1784706100.350:26563): avc: denied { unmount } for pid=6046 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 181.988355][ T42] audit: type=1400 audit(1784706100.390:26564): avc: denied { read } for pid=11026 comm="syz.4.1478" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 181.991143][T11027] binder: 11026:11027 ioctl c0306201 200000000480 returned -14 [ 181.998279][ T42] audit: type=1400 audit(1784706100.390:26565): avc: denied { open } for pid=11026 comm="syz.4.1478" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 182.010420][ T42] audit: type=1400 audit(1784706100.390:26566): avc: denied { ioctl } for pid=11026 comm="syz.4.1478" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 182.021320][ T42] audit: type=1400 audit(1784706100.390:26567): avc: denied { set_context_mgr } for pid=11026 comm="syz.4.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 182.032855][ T42] audit: type=1400 audit(1784706100.430:26568): avc: denied { create } for pid=11023 comm="syz.2.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.045753][ T42] audit: type=1400 audit(1784706100.430:26569): avc: denied { write } for pid=11023 comm="syz.2.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.055007][ T42] audit: type=1400 audit(1784706100.440:26570): avc: denied { prog_load } for pid=11028 comm="syz.4.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 182.077804][T10946] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.083831][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.084412][ T42] audit: type=1400 audit(1784706100.490:26571): avc: denied { shutdown } for pid=11023 comm="syz.2.1477" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.087158][T10946] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.099331][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.102757][T10946] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.111045][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.115226][T10946] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.120285][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.185363][ T42] audit: type=1400 audit(1784706100.590:26572): avc: denied { module_request } for pid=11028 comm="syz.4.1479" kmod="tcp-ulp-tlst" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 182.994929][ T5753] Bluetooth: hci1: command tx timeout [ 183.393931][ T5749] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 183.394334][ T5753] Bluetooth: hci5: command 0x1003 tx timeout [ 183.727805][T11046] /dev/sg0: Can't lookup blockdev [ 183.741057][T10946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.750183][T10946] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.759745][ T7615] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.762724][ T7615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.772463][ T7615] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.774851][ T7615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.795127][T11062] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 183.797657][T11062] __nla_validate_parse: 8 callbacks suppressed [ 183.797667][T11062] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1484'. [ 183.824327][T10946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.042987][T11090] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 184.056647][T11092] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 184.072155][T11096] openvswitch: netlink: Unknown key attributes 20 [ 184.077571][T11098] openvswitch: netlink: Unknown key attributes 20 [ 184.139146][T11102] syzkaller0: entered promiscuous mode [ 184.141719][T11102] syzkaller0: entered allmulticast mode [ 184.150747][T10946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.084106][ T5749] Bluetooth: hci1: command tx timeout [ 185.676643][T10946] veth0_vlan: entered promiscuous mode [ 185.683265][T10946] veth1_vlan: entered promiscuous mode [ 185.698493][T11122] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 185.720276][T10946] veth0_macvtap: entered promiscuous mode [ 185.732737][T10946] veth1_macvtap: entered promiscuous mode [ 185.744397][T10946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.772015][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1501'. [ 185.786056][T10946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.795729][ T5817] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.799431][ T5817] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.816614][ T5817] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.847580][ T5817] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.875087][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 185.973352][ T6095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.978980][ T6095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.007088][ T6095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.014132][ T24] usb 7-1: device descriptor read/64, error -71 [ 186.015967][ T6095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.063334][T11150] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 186.111608][T11155] pimreg3: entered allmulticast mode [ 186.254021][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 186.335058][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1511'. [ 186.338051][T11175] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1511'. [ 186.384458][ T24] usb 7-1: device descriptor read/64, error -71 [ 186.494399][ T24] usb usb7-port1: attempt power cycle [ 186.834053][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 186.854862][ T24] usb 7-1: device descriptor read/8, error -71 [ 186.960959][T11180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=11180 comm=syz.5.1513 [ 187.001850][ T42] kauditd_printk_skb: 156 callbacks suppressed [ 187.001884][ T42] audit: type=1400 audit(1784706105.400:26729): avc: denied { create } for pid=11179 comm="syz.5.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.014770][ T42] audit: type=1400 audit(1784706105.400:26730): avc: denied { connect } for pid=11179 comm="syz.5.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.022998][ T42] audit: type=1400 audit(1784706105.400:26731): avc: denied { create } for pid=11179 comm="syz.5.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.033853][ T42] audit: type=1400 audit(1784706105.400:26732): avc: denied { write } for pid=11179 comm="syz.5.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.040269][ T42] audit: type=1400 audit(1784706105.400:26733): avc: denied { read } for pid=11179 comm="syz.5.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.048167][ T42] audit: type=1400 audit(1784706105.410:26734): avc: denied { shutdown } for pid=11179 comm="syz.5.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.055073][ T42] audit: type=1400 audit(1784706105.410:26735): avc: denied { getopt } for pid=11179 comm="syz.5.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.093875][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 187.096129][ T42] audit: type=1400 audit(1784706105.500:26736): avc: denied { unmount } for pid=6046 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 187.114825][ T24] usb 7-1: device descriptor read/8, error -71 [ 187.143617][ T42] audit: type=1400 audit(1784706105.540:26737): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 187.164229][ T5749] Bluetooth: hci1: command tx timeout [ 187.177304][ T42] audit: type=1400 audit(1784706105.580:26738): avc: denied { create } for pid=11186 comm="syz.4.1514" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 187.226134][ T24] usb usb7-port1: unable to enumerate USB device [ 187.497544][T11192] SELinux: ebitmap: truncated map [ 187.499261][T11192] SELinux: invalid class [ 187.500758][T11208] openvswitch: netlink: Tunnel attr 77 out of range max 16 [ 187.526214][T11192] SELinux: failed to load policy [ 187.565355][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1523'. [ 187.670466][T11215] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 187.879211][T11223] netlink: 872 bytes leftover after parsing attributes in process `syz.4.1526'. [ 187.892237][T11223] netlink: 872 bytes leftover after parsing attributes in process `syz.4.1526'. [ 188.040542][T11233] netlink: 'syz.0.1527': attribute type 4 has an invalid length. [ 188.371468][T11238] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.375183][T11238] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 188.385310][T11238] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 188.436800][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1531'. [ 188.526835][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1533'. [ 188.550966][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1533'. [ 188.904233][T11268] gfs2: not a GFS2 filesystem [ 188.940624][T11265] netlink: 'syz.4.1538': attribute type 1 has an invalid length. [ 188.992770][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 189.027998][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 189.077357][T11282] macsec1: entered promiscuous mode [ 189.079090][T11282] macsec1: entered allmulticast mode [ 189.093914][ T24] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 189.165107][T11284] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1545'. [ 189.168062][T11284] veth0_to_bond: default FDB implementation only supports local addresses [ 189.224354][ T24] usb 7-1: device descriptor read/64, error -71 [ 189.309304][T11294] IPv6: sit2: Disabled Multicast RS [ 189.311822][T11294] sit2: entered allmulticast mode [ 189.484005][ T24] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 189.614664][ T24] usb 7-1: device descriptor read/64, error -71 [ 189.734333][ T24] usb usb7-port1: attempt power cycle [ 189.833912][ T6381] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 190.003864][ T6381] usb 5-1: Using ep0 maxpacket: 32 [ 190.010455][ T6381] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 190.016602][ T6381] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 190.022605][ T6381] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 190.028468][ T6381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.032642][ T6381] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 190.037132][ T6381] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 190.042644][ T6381] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 190.046831][ T6381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.054169][ T6381] usb 5-1: config 0 descriptor?? [ 190.083922][ T24] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 190.115352][ T24] usb 7-1: device descriptor read/8, error -71 [ 190.257380][T11350] netlink: 272 bytes leftover after parsing attributes in process `syz.5.1564'. [ 190.264588][ T6381] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 190.265814][T11350] qrtr: Invalid version 0 [ 190.296373][T11352] tmpfs: Unknown parameter 'audit' [ 190.354169][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.364074][ T24] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 190.379526][T11357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11357 comm=syz.5.1567 [ 190.397498][ T24] usb 7-1: device descriptor read/8, error -71 [ 190.470913][ C2] usblp0: nonzero read bulk status received: -71 [ 190.480818][ T849] usb 5-1: USB disconnect, device number 19 [ 190.505877][ T24] usb usb7-port1: unable to enumerate USB device [ 190.673986][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.685188][T11319] usblp0: removed [ 191.255846][ T8476] udevd[8476]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 191.535110][T11426] netlink: 'syz.0.1578': attribute type 2 has an invalid length. [ 191.573061][T11429] netlink: 'syz.0.1579': attribute type 4 has an invalid length. [ 191.575676][T11429] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1579'. [ 191.586385][T11429] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 191.738704][T11444] binder_alloc: 11441: pid 11441 spamming oneway? 1 buffers allocated for a total size of 4096 [ 191.775904][T11450] netlink: 'syz.2.1582': attribute type 8 has an invalid length. [ 191.778799][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 192.031766][ T42] kauditd_printk_skb: 291 callbacks suppressed [ 192.031778][ T42] audit: type=1400 audit(1784706110.430:27030): avc: denied { create } for pid=11468 comm="syz.5.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.041830][ T42] audit: type=1400 audit(1784706110.440:27031): avc: denied { write } for pid=11468 comm="syz.5.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.092484][ T42] audit: type=1400 audit(1784706110.490:27032): avc: denied { create } for pid=11470 comm="syz.5.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.099280][ T42] audit: type=1400 audit(1784706110.490:27033): avc: denied { recv } for pid=5710 comm="sshd-session" saddr=10.0.2.2 src=35174 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 192.109648][ T42] audit: type=1400 audit(1784706110.490:27034): avc: denied { write } for pid=11470 comm="syz.5.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.117169][ T42] audit: type=1400 audit(1784706110.490:27035): avc: denied { read } for pid=11470 comm="syz.5.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.123486][ T42] audit: type=1400 audit(1784706110.490:27036): avc: denied { ioctl } for pid=11470 comm="syz.5.1588" path="socket:[58543]" dev="sockfs" ino=58543 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.133282][ T42] audit: type=1400 audit(1784706110.490:27037): avc: denied { create } for pid=11470 comm="syz.5.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.139687][ T42] audit: type=1400 audit(1784706110.490:27038): avc: denied { connect } for pid=11470 comm="syz.5.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.160511][ T42] audit: type=1400 audit(1784706110.560:27039): avc: denied { read write } for pid=11474 comm="syz.2.1591" name="sg1" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 192.168659][T11475] sg_read: process 1234 (syz.2.1591) changed security contexts after opening file descriptor, this is not allowed. [ 192.206723][T11482] netlink: 'syz.2.1592': attribute type 5 has an invalid length. [ 192.407803][T11496] CIFS: bad ip= option (.RHe'ˠ/1C~1WexEAeSb{~R) [ 192.435701][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.618055][T11507] Bluetooth: hci5: Frame reassembly failed (-90) [ 192.625082][ T7613] Bluetooth: hci5: Frame reassembly failed (-84) [ 192.627628][ T7613] Bluetooth: hci5: Frame reassembly failed (-84) [ 192.734268][T11511] hub 4-0:1.0: USB hub found [ 192.735968][T11511] hub 4-0:1.0: 2 ports detected [ 192.983930][ T7368] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 193.080292][T11530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1605'. [ 193.165749][ T7368] usb 5-1: config 0 has an invalid interface number: 95 but max is 1 [ 193.173847][ T7368] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.177075][ T7368] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 193.179802][ T7368] usb 5-1: config 0 has no interface number 0 [ 193.181752][ T7368] usb 5-1: too many endpoints for config 0 interface 95 altsetting 215: 162, using maximum allowed: 30 [ 193.185610][ T7368] usb 5-1: config 0 interface 95 altsetting 215 has 0 endpoint descriptors, different from the interface descriptor's value: 162 [ 193.190368][ T7368] usb 5-1: config 0 interface 95 has no altsetting 0 [ 193.192515][ T7368] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 193.195629][ T7368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.200635][ T7368] usb 5-1: config 0 descriptor?? [ 194.515339][ T5753] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.527602][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.673890][ T5749] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 194.674281][ T5753] Bluetooth: hci5: command 0x1003 tx timeout [ 195.594643][ T7368] usb 5-1: string descriptor 0 read error: -71 [ 195.606611][ T7368] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 195.609499][ T7368] dvb-usb: bulk message failed: -22 (3/0) [ 195.636028][ T7368] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 195.639963][ T7368] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 195.642902][ T7368] usb 5-1: media controller created [ 195.648111][ T7368] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.661803][ T7368] dvb-usb: bulk message failed: -22 (6/0) [ 195.665493][ T7368] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 195.672910][ T7368] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input22 [ 195.680123][ T7368] dvb-usb: schedule remote query interval to 150 msecs. [ 195.682364][ T7368] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 195.692363][ T7368] usb 5-1: USB disconnect, device number 20 [ 195.716099][ T7368] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 197.716492][ T42] kauditd_printk_skb: 57 callbacks suppressed [ 197.716511][ T42] audit: type=1400 audit(1784706116.120:27097): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 197.726732][ T42] audit: type=1400 audit(1784706116.120:27098): avc: denied { sendto } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 211.764761][T11533] tmpfs: Unknown parameter 's|ze' [ 211.767118][ T42] audit: type=1400 audit(1784706130.170:27099): avc: denied { mounton } for pid=11532 comm="syz.0.1606" path="/syzcgroup/unified/syz0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 211.777097][ T42] audit: type=1400 audit(1784706130.170:27100): avc: denied { create } for pid=11532 comm="syz.0.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 211.786312][T11536] xfs: Unknown parameter 'usrquota_heap/system' [ 211.786348][ T42] audit: type=1400 audit(1784706130.170:27101): avc: denied { bind } for pid=11532 comm="syz.0.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 211.789144][ T42] audit: type=1400 audit(1784706130.170:27102): avc: denied { setopt } for pid=11532 comm="syz.0.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 211.789537][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1607'. [ 211.809075][ T42] audit: type=1400 audit(1784706130.170:27103): avc: denied { accept } for pid=11532 comm="syz.0.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 211.817234][ T42] audit: type=1400 audit(1784706130.170:27104): avc: denied { watch } for pid=11535 comm="syz.2.1608" path="/414" dev="tmpfs" ino=2207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 211.840784][ T42] audit: type=1400 audit(1784706130.180:27105): avc: denied { read } for pid=11532 comm="syz.0.1606" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 211.858331][ T42] audit: type=1400 audit(1784706130.180:27106): avc: denied { open } for pid=11532 comm="syz.0.1606" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 211.869026][ T42] audit: type=1400 audit(1784706130.190:27107): avc: denied { ioctl } for pid=11532 comm="syz.0.1606" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 211.879262][ T42] audit: type=1400 audit(1784706130.190:27108): avc: denied { create } for pid=11534 comm="syz.5.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.888288][T11554] f2fs: Unknown parameter 'norhcovery' [ 211.969859][T11570] input: syz1 as /devices/virtual/input/input23 [ 212.035639][T11561] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1615'. [ 212.072004][T11581] netlink: 'syz.2.1620': attribute type 39 has an invalid length. [ 212.214121][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 212.364064][ T9] usb 10-1: device descriptor read/64, error -71 [ 212.604191][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 212.717669][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1627'. [ 212.721796][T11608] hsr_slave_0: left promiscuous mode [ 212.729371][T11608] hsr_slave_1: left promiscuous mode [ 212.734190][ T9] usb 10-1: device descriptor read/64, error -71 [ 212.844583][ T9] usb usb10-port1: attempt power cycle [ 213.186534][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 213.205049][ T9] usb 10-1: device descriptor read/8, error -71 [ 213.313307][T11631] tipc: New replicast peer: 255.255.255.255 [ 213.332132][T11631] tipc: Enabled bearer , priority 31 [ 213.443892][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 213.464684][ T9] usb 10-1: device descriptor read/8, error -71 [ 213.574349][ T9] usb usb10-port1: unable to enumerate USB device [ 213.658513][T11649] xt_hashlimit: max too large, truncated to 1048576 [ 213.660855][T11652] xt_hashlimit: max too large, truncated to 1048576 [ 213.661276][T11649] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 213.663471][T11652] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 214.082621][T11657] netlink: 'syz.2.1639': attribute type 1 has an invalid length. [ 214.086203][T11657] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1639'. [ 214.259701][T11662] kthread_run failed with err -4 [ 214.326521][T11663] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.343995][ T849] tipc: Node number set to 4278255617 [ 214.450765][T11673] overlayfs: failed to resolve './file0': -2 [ 214.659710][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1651'. [ 214.670270][T11698] bond0: entered promiscuous mode [ 214.672517][T11698] bond_slave_0: entered promiscuous mode [ 214.680065][T11698] bond_slave_1: entered promiscuous mode [ 214.685015][T11698] gretap0: entered promiscuous mode [ 214.689096][T11698] debugfs: 'hsr1' already exists in 'hsr' [ 214.691582][T11698] Cannot create hsr debugfs directory [ 214.694557][T11698] hsr1: entered promiscuous mode [ 214.836666][ T6095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.839992][ T6095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.201930][T11736] bridge_slave_1: left allmulticast mode [ 215.204303][T11736] bridge_slave_1: left promiscuous mode [ 215.207020][T11736] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.216533][T11736] bridge_slave_0: left allmulticast mode [ 215.218968][T11736] bridge_slave_0: left promiscuous mode [ 215.221543][T11736] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.328058][T11740] tc_dump_action: action bad kind [ 215.403521][T11743] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1664'. [ 215.417914][T11743] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1664'. [ 215.428207][T11746] syzkaller1: entered promiscuous mode [ 215.430684][T11746] syzkaller1: entered allmulticast mode [ 215.491751][T11763] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 215.497835][T11763] Error validating options; rc = [-22] [ 215.539284][T11767] uprobe: syz.5.1670:11767 failed to unregister, leaking uprobe [ 215.687725][T11789] xt_hashlimit: max too large, truncated to 1048576 [ 215.950007][T11818] IPVS: stopping backup sync thread 8007 ... [ 216.099983][T11818] futex_wake_op: syz.2.1681 tries to shift op by -1; fix this program [ 216.202440][T11831] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 216.245429][ T5817] bond0: (slave bond_slave_0): interface is now down [ 216.262291][ T5817] bond0: (slave bond_slave_1): interface is now down [ 216.293953][ T5817] bond0: now running without any active interface! [ 216.353996][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 216.455481][T11868] netlink: 'syz.5.1696': attribute type 1 has an invalid length. [ 216.471254][T11868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.546323][T11877] macvlan2: entered promiscuous mode [ 216.548603][T11877] macvlan2: entered allmulticast mode [ 216.551853][T11877] bond1: entered promiscuous mode [ 216.552331][T11868] SELinux: failed to load policy [ 216.558566][T11877] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.565835][T11877] bond1: left promiscuous mode [ 216.779673][ T42] kauditd_printk_skb: 351 callbacks suppressed [ 216.779694][ T42] audit: type=1400 audit(1784706135.180:27460): avc: denied { getopt } for pid=11893 comm="syz.0.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.792751][ T42] audit: type=1400 audit(1784706135.190:27461): avc: denied { write } for pid=11893 comm="syz.0.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 216.808336][ T42] audit: type=1400 audit(1784706135.210:27462): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=57824 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 216.818895][ T42] audit: type=1400 audit(1784706135.220:27463): avc: denied { create } for pid=11898 comm="syz.5.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.829300][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1704'. [ 216.829650][ T42] audit: type=1400 audit(1784706135.220:27464): avc: denied { shutdown } for pid=11898 comm="syz.5.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.837462][T11902] program syz.4.1706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.841366][ T42] audit: type=1400 audit(1784706135.220:27465): avc: denied { getopt } for pid=11898 comm="syz.5.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.849097][T11902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1706'. [ 216.852246][ T42] audit: type=1400 audit(1784706135.220:27466): avc: denied { connect } for pid=11898 comm="syz.5.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.863564][ T42] audit: type=1400 audit(1784706135.220:27467): avc: denied { name_connect } for pid=11898 comm="syz.5.1707" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 216.871001][ T42] audit: type=1400 audit(1784706135.220:27468): avc: denied { setopt } for pid=11898 comm="syz.5.1707" lport=39111 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 216.879051][ T42] audit: type=1400 audit(1784706135.230:27469): avc: denied { create } for pid=11899 comm="syz.4.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.914246][T11926] kvm: user requested TSC rate below hardware speed [ 217.954729][T11926] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 217.962651][T11926] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 218.156090][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1717'. [ 218.734207][ T5846] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 218.895896][ T5846] usb 7-1: Using ep0 maxpacket: 32 [ 218.900467][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1726'. [ 218.918115][ T5846] usb 7-1: config 2 has an invalid interface number: 194 but max is 0 [ 218.920720][ T5846] usb 7-1: config 2 has no interface number 0 [ 218.922496][ T5846] usb 7-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 218.937936][ T5846] usb 7-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 218.947210][ T5846] usb 7-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid maxpacket 12544, setting to 64 [ 218.956481][ T5846] usb 7-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 218.962294][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.971485][T11954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 218.974669][T11964] overlayfs: failed to resolve './bus': -2 [ 218.976123][T11954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 219.194979][ T5846] usb 7-1: string descriptor 0 read error: -71 [ 219.208229][ T5846] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.340375][ T5846] usb 7-1: USB disconnect, device number 24 [ 220.004039][ T849] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 220.096043][T12034] binder: 12032:12034 ioctl c0306201 0 returned -14 [ 220.164468][ T849] usb 7-1: Using ep0 maxpacket: 32 [ 220.168288][ T849] usb 7-1: unable to get BOS descriptor or descriptor too short [ 220.175118][ T849] usb 7-1: string descriptor 0 read error: -22 [ 220.177592][ T849] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 220.183910][ T849] usb 7-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 220.197082][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1748'. [ 220.200550][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1748'. [ 220.208211][ T849] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 220.212240][T12034] tipc: Enabling of bearer rejected, failed to enable media [ 220.215686][ T849] dw2102: su3000_power_ctrl: 1, initialized 0 [ 220.218630][ T849] dvb-usb: bulk message failed: -22 (2/0) [ 220.231418][ T849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.238382][ T849] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 220.243519][ T849] usb 7-1: media controller created [ 220.245693][ T849] dvb-usb: bulk message failed: -22 (6/0) [ 220.255550][ T849] dw2102: i2c transfer failed. [ 220.265743][ T849] dvb-usb: bulk message failed: -22 (6/0) [ 220.269733][ T849] dw2102: i2c transfer failed. [ 220.271428][ T849] dvb-usb: bulk message failed: -22 (6/0) [ 220.274596][ T849] dw2102: i2c transfer failed. [ 220.276117][ T849] dvb-usb: bulk message failed: -22 (6/0) [ 220.280018][ T849] dw2102: i2c transfer failed. [ 220.281953][ T849] dvb-usb: bulk message failed: -22 (6/0) [ 220.284723][ T849] dw2102: i2c transfer failed. [ 220.286703][ T849] dvb-usb: bulk message failed: -22 (6/0) [ 220.290507][ T849] dw2102: i2c transfer failed. [ 220.292344][ T849] dvb-usb: MAC address: 02:02:02:02:02:02 [ 220.315407][ T849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.333972][ T849] dvb-usb: bulk message failed: -22 (3/0) [ 220.340438][ T849] dw2102: command 0x0e transfer failed. [ 220.349781][ T849] dvb-usb: bulk message failed: -22 (3/0) [ 220.351740][ T849] dw2102: command 0x0e transfer failed. [ 220.663925][ T849] dvb-usb: bulk message failed: -22 (3/0) [ 220.665840][ T849] dw2102: command 0x0e transfer failed. [ 220.672329][ T849] dvb-usb: bulk message failed: -22 (3/0) [ 220.674359][ T849] dw2102: command 0x0e transfer failed. [ 220.677428][ T849] dvb-usb: bulk message failed: -22 (1/0) [ 220.679847][ T849] dw2102: command 0x51 transfer failed. [ 220.701791][ T849] DVB: Unable to find symbol ds3000_attach() [ 220.705435][ T849] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 220.785017][ T849] rc_core: IR keymap rc-su3000 not found [ 220.786928][ T849] Registered IR keymap rc-empty [ 220.805348][ T849] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 220.812151][ T849] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input26 [ 220.821675][ T849] dvb-usb: schedule remote query interval to 150 msecs. [ 220.828194][ T849] dw2102: su3000_power_ctrl: 0, initialized 1 [ 220.830321][ T849] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 220.839970][ T849] usb 7-1: USB disconnect, device number 25 [ 220.902932][ T849] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 221.434949][T12086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.553085][T12102] PM: Enabling pm_trace changes system date and time during resume. [ 221.553085][T12102] PM: Correct system time has to be restored manually after resume. [ 221.645311][T12109] netlink: 'syz.2.1765': attribute type 10 has an invalid length. [ 221.661991][T12109] veth0: entered promiscuous mode [ 221.664479][T12109] veth0: entered allmulticast mode [ 221.669884][T12109] team0: Port device veth0 added [ 221.673132][T12109] bond0: option ad_select: unable to set because the bond device is up [ 221.821863][ T42] kauditd_printk_skb: 672 callbacks suppressed [ 221.821883][ T42] audit: type=1400 audit(1784706140.220:28142): avc: denied { write } for pid=12114 comm="syz.2.1766" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 222.024095][ T42] audit: type=1400 audit(1784706140.430:28143): avc: denied { read } for pid=12118 comm="syz.4.1767" dev="nsfs" ino=4026532864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 222.047304][ T42] audit: type=1400 audit(1784706140.430:28144): avc: denied { open } for pid=12118 comm="syz.4.1767" path="pid:[4026532864]" dev="nsfs" ino=4026532864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 222.121703][ T42] audit: type=1400 audit(1784706140.520:28145): avc: denied { read write } for pid=12118 comm="syz.4.1767" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 222.134431][ T42] audit: type=1400 audit(1784706140.520:28146): avc: denied { open } for pid=12118 comm="syz.4.1767" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 222.151564][ T42] audit: type=1400 audit(1784706140.540:28147): avc: denied { mounton } for pid=12118 comm="syz.4.1767" path="/422/file0" dev="tmpfs" ino=2293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 222.160931][ T42] audit: type=1400 audit(1784706140.550:28148): avc: denied { mount } for pid=12118 comm="syz.4.1767" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 222.177100][ T42] audit: type=1400 audit(1784706140.580:28149): avc: denied { create } for pid=12127 comm="syz.2.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.188648][ T42] audit: type=1400 audit(1784706140.590:28151): avc: denied { perfmon } for pid=12126 comm="syz.5.1770" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 222.200504][ T42] audit: type=1400 audit(1784706140.590:28150): avc: denied { perfmon } for pid=12126 comm="syz.5.1770" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 222.220954][T12128] dlm: no locking on control device [ 222.225966][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1770'. [ 222.355915][T12140] tmpfs: Bad value for 'mpol' [ 222.801137][T12158] 9pnet: Found fid 0 not clunked [ 222.861426][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1780'. [ 222.865694][T12160] netlink: 'syz.5.1780': attribute type 8 has an invalid length. [ 222.868946][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1780'. [ 222.888102][ T5850] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.891286][ T5850] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.894417][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1780'. [ 222.898013][ T5850] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.901288][ T5850] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.904613][T12160] netlink: 'syz.5.1780': attribute type 8 has an invalid length. [ 222.907779][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1780'. [ 222.912459][T12160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=12160 comm=syz.5.1780 [ 222.972678][T12165] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1781'. [ 223.441783][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1790'. [ 223.454013][T12198] netlink: 'syz.0.1790': attribute type 8 has an invalid length. [ 223.459513][T12198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'. [ 223.471768][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1790'. [ 223.482780][T12198] netlink: 'syz.0.1790': attribute type 8 has an invalid length. [ 223.490726][T12198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'. [ 223.646464][T12205] xt_TCPMSS: Only works on TCP SYN packets [ 223.648189][T12207] 9pnet_virtio: no channels available for device syz [ 224.187725][T12229] erspan1: entered promiscuous mode [ 224.219220][T12229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12229 comm=syz.5.1800 [ 224.813582][T12256] netlink: 'syz.2.1804': attribute type 16 has an invalid length. [ 225.103996][ T5824] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 225.209867][T12227] syz.5.1800 (12227): drop_caches: 2 [ 225.266147][ T5824] usb 7-1: not running at top speed; connect to a high speed hub [ 225.271120][ T5824] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 225.278074][ T5824] usb 7-1: config 1 interface 0 has no altsetting 0 [ 225.283310][ T5824] usb 7-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 225.287381][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.290953][ T5824] usb 7-1: Product: ࠠ [ 225.292660][ T5824] usb 7-1: Manufacturer: 촧倈拾犗㳶﨟நҔᄄꝓ䱑ᇶ䢀㪪綠䝔ឧﳧ榃磀碸戴䡬龗鬐驱䡁豜苌え볿ﰻ읦⇉썘寀ҸⰫ儤딉학叙嵈ཐ伪楂゜뺔떗랣䵐阀鼶噥췵献䫶ᕮ﨩帤锑ễＰ୧펫᭮㰸ﬦⰈᅳ魦踃胘⛛ [ 225.303709][ T5824] usb 7-1: SerialNumber: ࡃ [ 225.316111][T12258] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 225.386738][T12262] netlink: 'syz.5.1807': attribute type 1 has an invalid length. [ 225.403141][T12262] bond3: entered promiscuous mode [ 225.405193][T12262] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.421097][T12262] ipvlan2: entered allmulticast mode [ 225.422962][T12262] bond3: entered allmulticast mode [ 225.436384][T12262] bond3: (slave bridge0): making interface the new active one [ 225.438756][T12262] bridge0: entered promiscuous mode [ 225.440570][T12262] bridge0: entered allmulticast mode [ 225.443599][T12262] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 225.449129][T12262] openvswitch: netlink: Actions may not be safe on all matching packets [ 225.636780][ T5749] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 225.700669][T12267] FAULT_INJECTION: forcing a failure. [ 225.700669][T12267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.706554][T12267] CPU: 3 UID: 0 PID: 12267 Comm: syz.0.1809 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.706582][T12267] Tainted: [L]=SOFTLOCKUP [ 225.706588][T12267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.706598][T12267] Call Trace: [ 225.706638][T12267] [ 225.706644][T12267] dump_stack_lvl+0x100/0x190 [ 225.706924][T12267] should_fail_ex.cold+0x5/0xa [ 225.707021][T12267] _copy_from_iter+0x1f4/0x1690 [ 225.707197][T12267] ? __asan_memset+0x23/0x50 [ 225.707324][T12267] ? __pfx__copy_from_iter+0x10/0x10 [ 225.707367][T12267] ? __pfx___alloc_skb+0x10/0x10 [ 225.707505][T12267] netlink_sendmsg+0x808/0xda0 [ 225.707561][T12267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.707587][T12267] ? selinux_socket_sendmsg+0x198/0x2f0 [ 225.707640][T12267] ____sys_sendmsg+0xa4d/0xbe0 [ 225.707662][T12267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.707687][T12267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.707713][T12267] ? __pfx__kstrtoull+0x10/0x10 [ 225.707743][T12267] ___sys_sendmsg+0x190/0x1e0 [ 225.707767][T12267] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.707801][T12267] ? find_held_lock+0x2b/0x80 [ 225.707894][T12267] __sys_sendmmsg+0x20c/0x440 [ 225.707915][T12267] ? __pfx___sys_sendmmsg+0x10/0x10 [ 225.707932][T12267] ? ksys_write+0x190/0x250 [ 225.707998][T12267] ? fput+0x79/0x100 [ 225.708032][T12267] ? ksys_write+0x1ac/0x250 [ 225.708055][T12267] ? __pfx_ksys_write+0x10/0x10 [ 225.708082][T12267] __x64_sys_sendmmsg+0x9c/0x100 [ 225.708099][T12267] ? lockdep_hardirqs_on+0x78/0x100 [ 225.708270][T12267] do_syscall_64+0x115/0x870 [ 225.708285][T12267] ? clear_bhb_loop+0x40/0x90 [ 225.708306][T12267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.708322][T12267] RIP: 0033:0x7f7c0699de99 [ 225.708347][T12267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.708361][T12267] RSP: 002b:00007f7c077ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 225.708380][T12267] RAX: ffffffffffffffda RBX: 00007f7c06c25fa0 RCX: 00007f7c0699de99 [ 225.708390][T12267] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 225.708400][T12267] RBP: 00007f7c077ce090 R08: 0000000000000000 R09: 0000000000000000 [ 225.708410][T12267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.708419][T12267] R13: 00007f7c06c26038 R14: 00007f7c06c25fa0 R15: 00007fffd12ff8a8 [ 225.708441][T12267] [ 225.732368][ T5824] usbhid 7-1:1.0: can't add hid device: -71 [ 225.734471][ T1482] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 225.737101][ T5824] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 225.822986][ T5824] usb 7-1: USB disconnect, device number 26 [ 225.935277][ T1482] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.937943][ T1482] usb 10-1: config 0 has no interface number 0 [ 225.939910][ T1482] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 225.943496][ T1482] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 225.946703][ T1482] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.950940][ T1482] usb 10-1: config 0 descriptor?? [ 225.959074][ T1482] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 226.245060][T12280] syzkaller1: entered promiscuous mode [ 226.247370][T12280] syzkaller1: entered allmulticast mode [ 226.397068][T12284] 9p: Bad value for 'version' [ 226.518471][T12265] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 226.526697][ T1482] usb 10-1: USB disconnect, device number 6 [ 226.626138][T12288] 9pnet_virtio: no channels available for device syz [ 226.690664][T12290] bond11: option xmit_hash_policy: invalid value (6) [ 226.695843][T12290] bond11 (unregistering): Released all slaves [ 226.827723][T12294] FAULT_INJECTION: forcing a failure. [ 226.827723][T12294] name failslab, interval 1, probability 0, space 0, times 0 [ 226.832826][T12294] CPU: 2 UID: 0 PID: 12294 Comm: syz.2.1818 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.832855][T12294] Tainted: [L]=SOFTLOCKUP [ 226.832862][T12294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.832871][T12294] Call Trace: [ 226.832879][T12294] [ 226.832888][T12294] dump_stack_lvl+0x100/0x190 [ 226.832918][T12294] should_fail_ex.cold+0x5/0xa [ 226.832939][T12294] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 226.832994][T12294] should_failslab+0xc2/0x120 [ 226.833020][T12294] kmem_cache_alloc_noprof+0x91/0x6a0 [ 226.833094][T12294] ? skb_clone+0x190/0x400 [ 226.833121][T12294] skb_clone+0x190/0x400 [ 226.833142][T12294] netlink_deliver_tap+0xaed/0xcc0 [ 226.833176][T12294] netlink_unicast+0x62b/0x850 [ 226.833207][T12294] ? __pfx_netlink_unicast+0x10/0x10 [ 226.833241][T12294] netlink_sendmsg+0x8b0/0xda0 [ 226.833272][T12294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.833303][T12294] ? selinux_socket_sendmsg+0x198/0x2f0 [ 226.833332][T12294] ____sys_sendmsg+0xa4d/0xbe0 [ 226.833356][T12294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.833391][T12294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.833419][T12294] ? __pfx__kstrtoull+0x10/0x10 [ 226.833454][T12294] ___sys_sendmsg+0x190/0x1e0 [ 226.833483][T12294] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.833522][T12294] ? find_held_lock+0x2b/0x80 [ 226.833566][T12294] __sys_sendmmsg+0x20c/0x440 [ 226.833592][T12294] ? __pfx___sys_sendmmsg+0x10/0x10 [ 226.833612][T12294] ? ksys_write+0x190/0x250 [ 226.833659][T12294] ? fput+0x79/0x100 [ 226.833679][T12294] ? ksys_write+0x1ac/0x250 [ 226.833704][T12294] ? __pfx_ksys_write+0x10/0x10 [ 226.833732][T12294] __x64_sys_sendmmsg+0x9c/0x100 [ 226.833770][T12294] ? lockdep_hardirqs_on+0x78/0x100 [ 226.833803][T12294] do_syscall_64+0x115/0x870 [ 226.833821][T12294] ? clear_bhb_loop+0x40/0x90 [ 226.833844][T12294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.833863][T12294] RIP: 0033:0x7ffacff9de99 [ 226.833879][T12294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.833897][T12294] RSP: 002b:00007ffad0dfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 226.833916][T12294] RAX: ffffffffffffffda RBX: 00007ffad0225fa0 RCX: 00007ffacff9de99 [ 226.833927][T12294] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 226.833940][T12294] RBP: 00007ffad0dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 226.833951][T12294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.833961][T12294] R13: 00007ffad0226038 R14: 00007ffad0225fa0 R15: 00007ffdbdc61bd8 [ 226.833986][T12294] [ 226.848396][ T42] kauditd_printk_skb: 238 callbacks suppressed [ 226.848407][ T42] audit: type=1400 audit(1784706145.240:28390): avc: denied { append } for pid=12295 comm="syz.0.1817" name="media2" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.850289][T12294] netlink: 'syz.2.1818': attribute type 8 has an invalid length. [ 226.900836][ T42] audit: type=1400 audit(1784706145.300:28391): avc: denied { write } for pid=12297 comm="syz.0.1819" name="/" dev="9p" ino=81526823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.903191][T12294] netlink: 'syz.2.1818': attribute type 8 has an invalid length. [ 226.904977][ T42] audit: type=1400 audit(1784706145.300:28392): avc: denied { append } for pid=12297 comm="syz.0.1819" name="blkio.throttle.io_service_bytes" dev="9p" ino=81526881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 226.915524][T12298] FAULT_INJECTION: forcing a failure. [ 226.915524][T12298] name failslab, interval 1, probability 0, space 0, times 0 [ 226.915632][T12298] CPU: 3 UID: 0 PID: 12298 Comm: syz.0.1819 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.915648][T12298] Tainted: [L]=SOFTLOCKUP [ 226.915652][T12298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.915658][T12298] Call Trace: [ 226.915662][T12298] [ 226.915666][T12298] dump_stack_lvl+0x100/0x190 [ 226.915684][T12298] should_fail_ex.cold+0x5/0xa [ 226.915699][T12298] should_failslab+0xc2/0x120 [ 226.915712][T12298] __kmalloc_cache_noprof+0x91/0x6c0 [ 226.915728][T12298] ? netfs_alloc_request+0x8cc/0xcb0 [ 226.915773][T12298] ? netfs_folioq_alloc+0x9e/0x3b0 [ 226.915785][T12298] netfs_folioq_alloc+0x9e/0x3b0 [ 226.915796][T12298] rolling_buffer_init+0x26/0xb0 [ 226.915811][T12298] netfs_create_write_req+0x110/0x780 [ 226.915824][T12298] netfs_writepages+0x1a6/0xa10 [ 226.915836][T12298] ? __pfx_netfs_writepages+0x10/0x10 [ 226.915851][T12298] ? __pfx_netfs_writepages+0x10/0x10 [ 226.915863][T12298] do_writepages+0x278/0x600 [ 226.915901][T12298] ? __pfx_do_writepages+0x10/0x10 [ 226.915912][T12298] ? do_raw_spin_unlock+0x145/0x1e0 [ 226.915928][T12298] ? _raw_spin_unlock+0x28/0x50 [ 226.915945][T12298] filemap_writeback+0x22d/0x2e0 [ 226.915959][T12298] ? __pfx_filemap_writeback+0x10/0x10 [ 226.915987][T12298] ? mas_walk+0x6ef/0x9b0 [ 226.915999][T12298] v9fs_mmap_vm_close+0x137/0x1e0 [ 226.916101][T12298] __mmap_region+0x890/0x2db0 [ 226.916118][T12298] ? __pfx_v9fs_mmap_vm_close+0x10/0x10 [ 226.916130][T12298] ? __pfx___mmap_region+0x10/0x10 [ 226.916145][T12298] ? __pfx___might_resched+0x10/0x10 [ 226.916230][T12298] ? down_write+0x146/0x1f0 [ 226.916256][T12298] ? process_measurement+0x1f4/0x2350 [ 226.916319][T12298] ? find_held_lock+0x2b/0x80 [ 226.916353][T12298] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 226.916371][T12298] ? __lock_acquire+0x49f/0x1a40 [ 226.916390][T12298] ? find_held_lock+0x2b/0x80 [ 226.916405][T12298] ? is_bpf_text_address+0x8a/0x1a0 [ 226.916465][T12298] mmap_region+0x35d/0x620 [ 226.916478][T12298] ? __pfx_mmap_region+0x10/0x10 [ 226.916487][T12298] ? shmem_get_unmapped_area+0x141/0x960 [ 226.916542][T12298] ? selinux_mmap_addr+0x2b/0x110 [ 226.916555][T12298] ? bpf_lsm_mmap_addr+0x9/0x30 [ 226.916594][T12298] ? security_mmap_addr+0x71/0x1e0 [ 226.916638][T12298] ? __get_unmapped_area+0x255/0x3e0 [ 226.916654][T12298] do_mmap+0xc63/0x12f0 [ 226.916669][T12298] ? __pfx_do_mmap+0x10/0x10 [ 226.916682][T12298] ? __pfx_down_write_killable+0x10/0x10 [ 226.916696][T12298] vm_mmap_pgoff+0x29e/0x470 [ 226.916712][T12298] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 226.916731][T12298] ? __mutex_unlock_slowpath+0x35d/0x930 [ 226.916753][T12298] ksys_mmap_pgoff+0xe4/0x610 [ 226.916777][T12298] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 226.916797][T12298] ? fput+0x79/0x100 [ 226.916821][T12298] ? ksys_write+0x1ac/0x250 [ 226.916842][T12298] ? __pfx_ksys_write+0x10/0x10 [ 226.916868][T12298] __x64_sys_mmap+0x125/0x190 [ 226.916915][T12298] do_syscall_64+0x115/0x870 [ 226.916925][T12298] ? clear_bhb_loop+0x40/0x90 [ 226.916939][T12298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.916951][T12298] RIP: 0033:0x7f7c0699de99 [ 226.916961][T12298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.916971][T12298] RSP: 002b:00007f7c077ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 226.916982][T12298] RAX: ffffffffffffffda RBX: 00007f7c06c25fa0 RCX: 00007f7c0699de99 [ 226.916989][T12298] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 226.916995][T12298] RBP: 00007f7c077ce090 R08: ffffffffffffffff R09: 0000000028f43000 [ 226.917001][T12298] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 226.917007][T12298] R13: 00007f7c06c26038 R14: 00007f7c06c25fa0 R15: 00007fffd12ff8a8 [ 226.917021][T12298] [ 226.917488][T12298] ------------[ cut here ]------------ [ 226.920804][ T42] audit: type=1400 audit(1784706145.310:28393): avc: denied { map } for pid=12297 comm="syz.0.1819" path="/484/file0/blkio.throttle.io_service_bytes" dev="9p" ino=81526881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 226.921822][T12298] folio != NULL [ 226.924391][ T42] audit: type=1400 audit(1784706145.310:28394): avc: denied { create } for pid=12297 comm="syz.0.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 226.926921][T12298] WARNING: fs/netfs/write_issue.c:603 at netfs_writepages+0x883/0xa10, CPU#3: syz.0.1819/12298 [ 226.935847][ T42] audit: type=1400 audit(1784706145.340:28395): avc: denied { create } for pid=12299 comm="syz.2.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.936207][T12298] Modules linked in: [ 226.944277][ T42] audit: type=1400 audit(1784706145.340:28396): avc: denied { bind } for pid=12299 comm="syz.2.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.946392][T12298] [ 226.954025][ T42] audit: type=1400 audit(1784706145.350:28397): avc: denied { setopt } for pid=12299 comm="syz.2.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.957220][T12298] CPU: 3 UID: 0 PID: 12298 Comm: syz.0.1819 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.965036][ T42] audit: type=1400 audit(1784706145.350:28398): avc: denied { create } for pid=12299 comm="syz.2.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.969951][T12298] Tainted: [L]=SOFTLOCKUP [ 226.973101][ T42] audit: type=1400 audit(1784706145.350:28399): avc: denied { write } for pid=12299 comm="syz.2.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.975039][T12298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.975053][T12298] RIP: 0010:netfs_writepages+0x883/0xa10 [ 226.975081][T12298] Code: 48 89 df e8 ff 7a 7b ff 48 8b 4c 24 08 48 89 da 4c 89 e6 4c 89 f7 e8 ac 24 7f ff 48 85 c0 0f 84 c1 fe ff ff e8 1e b1 3d ff 90 <0f> 0b 90 e9 b3 fe ff ff e8 10 b1 3d ff 48 b8 00 00 00 00 00 fc ff [ 227.008140][T12300] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 227.009266][T12298] RSP: 0018:ffffc900033f7178 EFLAGS: 00010293 [ 227.068140][T12304] tipc: Started in network mode [ 227.068900][T12298] [ 227.068907][T12298] RAX: 0000000000000000 RBX: ffffea00010f1a00 RCX: ffffffff824b5d8a [ 227.073702][T12304] tipc: Node identity ac14140f, cluster identity 4711 [ 227.075731][T12298] RDX: ffff888033230000 RSI: ffffffff82cc2b82 RDI: ffff888033230000 [ 227.075743][T12298] RBP: fffffffffffffff4 R08: 0000000000000001 R09: 0000000000000000 [ 227.075750][T12298] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900033f7348 [ 227.075757][T12298] R13: ffff88803ce4e9c0 R14: ffff88803ce4ebd8 R15: dffffc0000000000 [ 227.075765][T12298] FS: 00007f7c077ce6c0(0000) GS:ffff8880d60e6000(0000) knlGS:0000000000000000 [ 227.075788][T12298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.075798][T12298] CR2: 00007ffacffeb580 CR3: 00000000602da000 CR4: 0000000000352ef0 [ 227.075805][T12298] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000000d3 [ 227.075813][T12298] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 227.075820][T12298] Call Trace: [ 227.075825][T12298] [ 227.075833][T12298] ? __pfx_netfs_writepages+0x10/0x10 [ 227.075855][T12298] ? __pfx_netfs_writepages+0x10/0x10 [ 227.075869][T12298] do_writepages+0x278/0x600 [ 227.075885][T12298] ? __pfx_do_writepages+0x10/0x10 [ 227.075896][T12298] ? do_raw_spin_unlock+0x145/0x1e0 [ 227.080863][T12304] tipc: New replicast peer: 172.30.0.3 [ 227.083667][T12298] ? _raw_spin_unlock+0x28/0x50 [ 227.083695][T12298] filemap_writeback+0x22d/0x2e0 [ 227.083713][T12298] ? __pfx_filemap_writeback+0x10/0x10 [ 227.083742][T12298] ? mas_walk+0x6ef/0x9b0 [ 227.086769][T12304] tipc: Enabled bearer , priority 31 [ 227.089068][T12298] v9fs_mmap_vm_close+0x137/0x1e0 [ 227.089090][T12298] __mmap_region+0x890/0x2db0 [ 227.150815][T12307] bridge0: port 1(syz_tun) entered blocking state [ 227.151941][T12298] ? __pfx_v9fs_mmap_vm_close+0x10/0x10 [ 227.151982][T12298] ? __pfx___mmap_region+0x10/0x10 [ 227.155593][T12307] bridge0: port 1(syz_tun) entered disabled state [ 227.160382][T12298] ? __pfx___might_resched+0x10/0x10 [ 227.160407][T12298] ? down_write+0x146/0x1f0 [ 227.160424][T12298] ? process_measurement+0x1f4/0x2350 [ 227.165601][T12307] syz_tun: entered allmulticast mode [ 227.166515][T12298] ? find_held_lock+0x2b/0x80 [ 227.166537][T12298] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 227.166556][T12298] ? __lock_acquire+0x49f/0x1a40 [ 227.178882][T12307] syz_tun: entered promiscuous mode [ 227.179296][T12298] ? find_held_lock+0x2b/0x80 [ 227.183331][T12307] bridge0: port 1(syz_tun) entered blocking state [ 227.184957][T12298] ? is_bpf_text_address+0x8a/0x1a0 [ 227.185000][T12298] mmap_region+0x35d/0x620 [ 227.185015][T12298] ? __pfx_mmap_region+0x10/0x10 [ 227.185026][T12298] ? shmem_get_unmapped_area+0x141/0x960 [ 227.185051][T12298] ? selinux_mmap_addr+0x2b/0x110 [ 227.185075][T12298] ? bpf_lsm_mmap_addr+0x9/0x30 [ 227.185102][T12298] ? security_mmap_addr+0x71/0x1e0 [ 227.185131][T12298] ? __get_unmapped_area+0x255/0x3e0 [ 227.185149][T12298] do_mmap+0xc63/0x12f0 [ 227.185166][T12298] ? __pfx_do_mmap+0x10/0x10 [ 227.185179][T12298] ? __pfx_down_write_killable+0x10/0x10 [ 227.185196][T12298] vm_mmap_pgoff+0x29e/0x470 [ 227.185212][T12298] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 227.185226][T12298] ? __mutex_unlock_slowpath+0x35d/0x930 [ 227.185241][T12298] ksys_mmap_pgoff+0xe4/0x610 [ 227.185256][T12298] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 227.185268][T12298] ? fput+0x79/0x100 [ 227.185281][T12298] ? ksys_write+0x1ac/0x250 [ 227.185297][T12298] ? __pfx_ksys_write+0x10/0x10 [ 227.185314][T12298] __x64_sys_mmap+0x125/0x190 [ 227.185332][T12298] do_syscall_64+0x115/0x870 [ 227.185342][T12298] ? clear_bhb_loop+0x40/0x90 [ 227.185357][T12298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.185369][T12298] RIP: 0033:0x7f7c0699de99 [ 227.185380][T12298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.185391][T12298] RSP: 002b:00007f7c077ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 227.185404][T12298] RAX: ffffffffffffffda RBX: 00007f7c06c25fa0 RCX: 00007f7c0699de99 [ 227.185411][T12298] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 227.185419][T12298] RBP: 00007f7c077ce090 R08: ffffffffffffffff R09: 0000000028f43000 [ 227.185426][T12298] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 227.185433][T12298] R13: 00007f7c06c26038 R14: 00007f7c06c25fa0 R15: 00007fffd12ff8a8 [ 227.185446][T12298] [ 227.185453][T12298] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 227.185466][T12298] CPU: 3 UID: 0 PID: 12298 Comm: syz.0.1819 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.185482][T12298] Tainted: [L]=SOFTLOCKUP [ 227.185486][T12298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.185492][T12298] Call Trace: [ 227.185496][T12298] [ 227.185500][T12298] dump_stack_lvl+0x100/0x190 [ 227.185515][T12298] vpanic+0x552/0x970 [ 227.185526][T12298] ? __pfx_vpanic+0x10/0x10 [ 227.185545][T12298] panic+0xd1/0xe0 [ 227.185560][T12298] ? __pfx_panic+0x10/0x10 [ 227.185585][T12298] ? check_panic_on_warn+0x1f/0x90 [ 227.185648][T12298] check_panic_on_warn.cold+0x19/0x34 [ 227.185660][T12298] ? netfs_writepages+0x883/0xa10 [ 227.185672][T12298] __warn.cold+0x191/0x318 [ 227.185684][T12298] __report_bug+0x30f/0x440 [ 227.185695][T12298] ? netfs_writepages+0x883/0xa10 [ 227.185707][T12298] ? __pfx___report_bug+0x10/0x10 [ 227.185719][T12298] ? rcu_is_watching+0x12/0xc0 [ 227.185761][T12298] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 227.185773][T12298] ? find_held_lock+0x2b/0x80 [ 227.185789][T12298] ? rcu_read_unlock+0x17/0x60 [ 227.185805][T12298] ? netfs_writepages+0x883/0xa10 [ 227.185817][T12298] report_bug+0xb2/0x220 [ 227.185826][T12298] ? netfs_writepages+0x883/0xa10 [ 227.185838][T12298] handle_bug+0x16a/0x2a0 [ 227.185850][T12298] exc_invalid_op+0x17/0x50 [ 227.185866][T12298] asm_exc_invalid_op+0x1a/0x20 [ 227.185877][T12298] RIP: 0010:netfs_writepages+0x883/0xa10 [ 227.185889][T12298] Code: 48 89 df e8 ff 7a 7b ff 48 8b 4c 24 08 48 89 da 4c 89 e6 4c 89 f7 e8 ac 24 7f ff 48 85 c0 0f 84 c1 fe ff ff e8 1e b1 3d ff 90 <0f> 0b 90 e9 b3 fe ff ff e8 10 b1 3d ff 48 b8 00 00 00 00 00 fc ff [ 227.185899][T12298] RSP: 0018:ffffc900033f7178 EFLAGS: 00010293 [ 227.185908][T12298] RAX: 0000000000000000 RBX: ffffea00010f1a00 RCX: ffffffff824b5d8a [ 227.185915][T12298] RDX: ffff888033230000 RSI: ffffffff82cc2b82 RDI: ffff888033230000 [ 227.185922][T12298] RBP: fffffffffffffff4 R08: 0000000000000001 R09: 0000000000000000 [ 227.185929][T12298] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900033f7348 [ 227.185935][T12298] R13: ffff88803ce4e9c0 R14: ffff88803ce4ebd8 R15: dffffc0000000000 [ 227.185945][T12298] ? writeback_iter+0xd6a/0x1360 [ 227.185956][T12298] ? netfs_writepages+0x882/0xa10 [ 227.185973][T12298] ? netfs_writepages+0x882/0xa10 [ 227.185986][T12298] ? __pfx_netfs_writepages+0x10/0x10 [ 227.186001][T12298] ? __pfx_netfs_writepages+0x10/0x10 [ 227.186013][T12298] do_writepages+0x278/0x600 [ 227.186027][T12298] ? __pfx_do_writepages+0x10/0x10 [ 227.186038][T12298] ? do_raw_spin_unlock+0x145/0x1e0 [ 227.186053][T12298] ? _raw_spin_unlock+0x28/0x50 [ 227.186069][T12298] filemap_writeback+0x22d/0x2e0 [ 227.186083][T12298] ? __pfx_filemap_writeback+0x10/0x10 [ 227.186110][T12298] ? mas_walk+0x6ef/0x9b0 [ 227.186122][T12298] v9fs_mmap_vm_close+0x137/0x1e0 [ 227.186136][T12298] __mmap_region+0x890/0x2db0 [ 227.186154][T12298] ? __pfx_v9fs_mmap_vm_close+0x10/0x10 [ 227.186174][T12298] ? __pfx___mmap_region+0x10/0x10 [ 227.186199][T12298] ? __pfx___might_resched+0x10/0x10 [ 227.186224][T12298] ? down_write+0x146/0x1f0 [ 227.186250][T12298] ? process_measurement+0x1f4/0x2350 [ 227.186273][T12298] ? find_held_lock+0x2b/0x80 [ 227.186288][T12298] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 227.186305][T12298] ? __lock_acquire+0x49f/0x1a40 [ 227.186323][T12298] ? find_held_lock+0x2b/0x80 [ 227.186338][T12298] ? is_bpf_text_address+0x8a/0x1a0 [ 227.186370][T12298] mmap_region+0x35d/0x620 [ 227.186381][T12298] ? __pfx_mmap_region+0x10/0x10 [ 227.186391][T12298] ? shmem_get_unmapped_area+0x141/0x960 [ 227.186407][T12298] ? selinux_mmap_addr+0x2b/0x110 [ 227.186420][T12298] ? bpf_lsm_mmap_addr+0x9/0x30 [ 227.186435][T12298] ? security_mmap_addr+0x71/0x1e0 [ 227.186451][T12298] ? __get_unmapped_area+0x255/0x3e0 [ 227.186468][T12298] do_mmap+0xc63/0x12f0 [ 227.186483][T12298] ? __pfx_do_mmap+0x10/0x10 [ 227.186497][T12298] ? __pfx_down_write_killable+0x10/0x10 [ 227.186511][T12298] vm_mmap_pgoff+0x29e/0x470 [ 227.186526][T12298] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 227.186540][T12298] ? __mutex_unlock_slowpath+0x35d/0x930 [ 227.186554][T12298] ksys_mmap_pgoff+0xe4/0x610 [ 227.186569][T12298] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 227.186581][T12298] ? fput+0x79/0x100 [ 227.186592][T12298] ? ksys_write+0x1ac/0x250 [ 227.186607][T12298] ? __pfx_ksys_write+0x10/0x10 [ 227.186623][T12298] __x64_sys_mmap+0x125/0x190 [ 227.186640][T12298] do_syscall_64+0x115/0x870 [ 227.186650][T12298] ? clear_bhb_loop+0x40/0x90 [ 227.186670][T12298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.186688][T12298] RIP: 0033:0x7f7c0699de99 [ 227.186704][T12298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.186719][T12298] RSP: 002b:00007f7c077ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 227.186737][T12298] RAX: ffffffffffffffda RBX: 00007f7c06c25fa0 RCX: 00007f7c0699de99 [ 227.186747][T12298] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 227.186754][T12298] RBP: 00007f7c077ce090 R08: ffffffffffffffff R09: 0000000028f43000 [ 227.186761][T12298] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 227.186767][T12298] R13: 00007f7c06c26038 R14: 00007f7c06c25fa0 R15: 00007fffd12ff8a8 [ 227.186780][T12298] [ 227.189302][T12298] Kernel Offset: disabled